mimikatz | 0175869e82458bfce0239e1ce1ee561a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0175869e82458bfce0239e1ce1ee561a_JaffaCakes118
Size

18.4MB
MD5

0175869e82458bfce0239e1ce1ee561a
SHA1

3da6296e8a6be21e67357b0f072c23542db167e5
SHA256

9e7dd7d767208b92d37bf5dd87be7cd1b1705d8c311852d0717f213250231529
SHA512

480a827a2c0f0dcc1a4080e77bbb3f2ff8587a6d0a9e313e8f5f81fbfb94b6f61d833909aed60adf5e84bb2b2e46a6aa41f79d482e92c1c8674ab534114abf53
SSDEEP

393216:c1JJNsQItuTNGH5msaebLZQxazNjhfhJVgCD32uQAXB3ncFmi4e7VUoCpBVRyp61:c9NyFMsjQWNdhJVgCDmuQAR3n8HnZC28

Score

10^/10

mimikatz

Malware Config

Signatures

Mimikatz family
mimikatz

mimikatz is an open source tool to dump credentials on Windows 2 IoCs

resource	yara_rule
static1/unpack001/Covenant-master/Covenant/Data/EmbeddedResources/SharpSploit.Resources.powerkatz_x64.dll	mimikatz
static1/unpack001/Covenant-master/Covenant/Data/EmbeddedResources/SharpSploit.Resources.powerkatz_x86.dll	mimikatz

Unsigned PE 38 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Configuration.Install.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Data.DataSetExtensions.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Data.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.DirectoryServices.AccountManagement.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.DirectoryServices.Protocols.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.DirectoryServices.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Drawing.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.IdentityModel.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Management.Automation.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Management.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Security.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.ServiceProcess.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Web.Extensions.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Windows.Forms.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net35/System.XML.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Configuration.Install.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Data.DataSetExtensions.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.DirectoryServices.Protocols.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.DirectoryServices.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Drawing.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.IdentityModel.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Management.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Security.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.ServiceProcess.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Web.Extensions.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Windows.Forms.dll
unpack001/Covenant-master/Covenant/Data/AssemblyReferences/net40/System.XML.dll
unpack001/Covenant-master/Covenant/Data/EmbeddedResources/SharpSploit.Resources.powerkatz_x64.dll
unpack001/Covenant-master/Covenant/Data/EmbeddedResources/SharpSploit.Resources.powerkatz_x86.dll
unpack001/Covenant-master/Covenant/refs/Confuser.Core.dll
unpack001/Covenant-master/Covenant/refs/Confuser.DynCipher.dll
unpack001/Covenant-master/Covenant/refs/Confuser.MSBuild.Tasks.dll
unpack001/Covenant-master/Covenant/refs/Confuser.Protections.dll
unpack001/Covenant-master/Covenant/refs/Confuser.Renamer.dll
unpack001/Covenant-master/Covenant/refs/Confuser.Runtime.dll
unpack001/Covenant-master/Covenant/refs/Donut.dll
unpack001/Covenant-master/Covenant/refs/PeNet.dll
unpack001/Covenant-master/Covenant/refs/dnlib.dll

Files

0175869e82458bfce0239e1ce1ee561a_JaffaCakes118
.zip
Covenant-master/.gitattributes
Covenant-master/.github/ISSUE_TEMPLATE/issue-template.md
Covenant-master/.gitignore
Covenant-master/.gitmodules
Covenant-master/CHANGELOG.md
Covenant-master/Covenant.sln
Covenant-master/Covenant/.dockerignore
Covenant-master/Covenant/API/CovenantAPI.cs
.js
Covenant-master/Covenant/API/CovenantAPIExtensions.cs
Covenant-master/Covenant/API/ICovenantAPI.cs
Covenant-master/Covenant/API/Models/BinaryLauncher.cs
Covenant-master/Covenant/API/Models/BridgeListener.cs
Covenant-master/Covenant/API/Models/CapturedCredential.cs
Covenant-master/Covenant/API/Models/CapturedHashCredential.cs
Covenant-master/Covenant/API/Models/CapturedPasswordCredential.cs
Covenant-master/Covenant/API/Models/CapturedTicketCredential.cs
Covenant-master/Covenant/API/Models/CodeMirrorTheme.cs
Covenant-master/Covenant/API/Models/CommandOutput.cs
Covenant-master/Covenant/API/Models/CommunicationType.cs
Covenant-master/Covenant/API/Models/CovenantUser.cs
Covenant-master/Covenant/API/Models/CovenantUserLogin.cs
Covenant-master/Covenant/API/Models/CovenantUserLoginResult.cs
Covenant-master/Covenant/API/Models/CovenantUserRegister.cs
Covenant-master/Covenant/API/Models/CredentialType.cs
Covenant-master/Covenant/API/Models/CscriptLauncher.cs
Covenant-master/Covenant/API/Models/DotNetVersion.cs
Covenant-master/Covenant/API/Models/DownloadEvent.cs
Covenant-master/Covenant/API/Models/DownloadProgress.cs
Covenant-master/Covenant/API/Models/EmbeddedResource.cs
Covenant-master/Covenant/API/Models/EventLevel.cs
Covenant-master/Covenant/API/Models/EventModel.cs
Covenant-master/Covenant/API/Models/EventType.cs
Covenant-master/Covenant/API/Models/FileIndicator.cs
Covenant-master/Covenant/API/Models/Grunt.cs
Covenant-master/Covenant/API/Models/GruntCommand.cs
Covenant-master/Covenant/API/Models/GruntStatus.cs
Covenant-master/Covenant/API/Models/GruntTask.cs
Covenant-master/Covenant/API/Models/GruntTaskAuthor.cs
Covenant-master/Covenant/API/Models/GruntTaskOption.cs
Covenant-master/Covenant/API/Models/GruntTasking.cs
Covenant-master/Covenant/API/Models/GruntTaskingStatus.cs
Covenant-master/Covenant/API/Models/GruntTaskingType.cs
Covenant-master/Covenant/API/Models/HTTPListener.cs
Covenant-master/Covenant/API/Models/HashType.cs
Covenant-master/Covenant/API/Models/HostedFile.cs
Covenant-master/Covenant/API/Models/HttpProfile.cs
Covenant-master/Covenant/API/Models/HttpProfileHeader.cs
Covenant-master/Covenant/API/Models/IdentityRole.cs
Covenant-master/Covenant/API/Models/ImplantDirection.cs
Covenant-master/Covenant/API/Models/ImplantLanguage.cs
Covenant-master/Covenant/API/Models/ImplantTemplate.cs
Covenant-master/Covenant/API/Models/Indicator.cs
Covenant-master/Covenant/API/Models/IndicatorType.cs
Covenant-master/Covenant/API/Models/InstallUtilLauncher.cs
Covenant-master/Covenant/API/Models/IntegrityLevel.cs
Covenant-master/Covenant/API/Models/Launcher.cs
Covenant-master/Covenant/API/Models/LauncherType.cs
Covenant-master/Covenant/API/Models/Listener.cs
Covenant-master/Covenant/API/Models/ListenerStatus.cs
Covenant-master/Covenant/API/Models/ListenerType.cs
Covenant-master/Covenant/API/Models/MSBuildLauncher.cs
Covenant-master/Covenant/API/Models/MshtaLauncher.cs
Covenant-master/Covenant/API/Models/NetworkIndicator.cs
Covenant-master/Covenant/API/Models/OutputKind.cs
Covenant-master/Covenant/API/Models/PowerShellLauncher.cs
Covenant-master/Covenant/API/Models/Profile.cs
Covenant-master/Covenant/API/Models/ProfileType.cs
Covenant-master/Covenant/API/Models/ReferenceAssembly.cs
Covenant-master/Covenant/API/Models/ReferenceSourceLibrary.cs
Covenant-master/Covenant/API/Models/Regsvr32Launcher.cs
Covenant-master/Covenant/API/Models/RuntimeIdentifier.cs
Covenant-master/Covenant/API/Models/ScriptingLanguage.cs
Covenant-master/Covenant/API/Models/ShellCodeLauncher.cs
Covenant-master/Covenant/API/Models/StringIdentityUserRole.cs
Covenant-master/Covenant/API/Models/TargetIndicator.cs
Covenant-master/Covenant/API/Models/Theme.cs
Covenant-master/Covenant/API/Models/TicketType.cs
Covenant-master/Covenant/API/Models/WmicLauncher.cs
Covenant-master/Covenant/API/Models/WscriptLauncher.cs
Covenant-master/Covenant/API/openapi.json
Covenant-master/Covenant/Components/App.razor
Covenant-master/Covenant/Components/CovenantUsers/CovenantUserIndex.razor
Covenant-master/Covenant/Components/CovenantUsers/CovenantUserRegisterForm.razor
Covenant-master/Covenant/Components/CovenantUsers/CovenantUserTable.razor
.js
Covenant-master/Covenant/Components/CovenantUsers/CreateCovenantUser.razor
.js
Covenant-master/Covenant/Components/CovenantUsers/EditCovenantUser.razor
.js
Covenant-master/Covenant/Components/CovenantUsers/EditCovenantUserRolesForm.razor
.js
Covenant-master/Covenant/Components/CovenantUsers/Logout.razor
Covenant-master/Covenant/Components/CovenantUsers/RedirectToLogin.razor
.js
Covenant-master/Covenant/Components/Credentials/CreateCredential.razor
Covenant-master/Covenant/Components/Credentials/CredentialForm.razor
Covenant-master/Covenant/Components/Credentials/CredentialTables.razor
Covenant-master/Covenant/Components/Credentials/HashCredentialTable.razor
Covenant-master/Covenant/Components/Credentials/PasswordCredentialTable.razor
Covenant-master/Covenant/Components/Credentials/TicketCredentialTable.razor
Covenant-master/Covenant/Components/Data/DataIndex.razor
Covenant-master/Covenant/Components/EmbeddedResources/CreateEmbeddedResource.razor
.js
Covenant-master/Covenant/Components/EmbeddedResources/EditEmbeddedResource.razor
.js
Covenant-master/Covenant/Components/EmbeddedResources/EmbeddedResourceForm.razor
Covenant-master/Covenant/Components/EmbeddedResources/EmbeddedResourceTable.razor
Covenant-master/Covenant/Components/Events/DownloadEventTable.razor
.ps1
Covenant-master/Covenant/Components/Events/EventNotification.razor
Covenant-master/Covenant/Components/Events/EventNotifier.razor
Covenant-master/Covenant/Components/Events/ScreenshotEventTable.razor
.ps1
Covenant-master/Covenant/Components/Graph/GraphBox.razor
Covenant-master/Covenant/Components/Graph/GraphIndex.razor
Covenant-master/Covenant/Components/GruntTaskings/EditGruntTasking.razor
Covenant-master/Covenant/Components/GruntTaskings/GruntTaskingForm.razor
Covenant-master/Covenant/Components/GruntTaskings/GruntTaskingIndex.razor
Covenant-master/Covenant/Components/GruntTaskings/GruntTaskingTable.razor
Covenant-master/Covenant/Components/GruntTasks/CreateGruntTask.razor
.js
Covenant-master/Covenant/Components/GruntTasks/EditGruntTask.razor
.js
Covenant-master/Covenant/Components/GruntTasks/GruntTaskForm.razor
.vbs
Covenant-master/Covenant/Components/GruntTasks/GruntTaskIndex.razor
.js
Covenant-master/Covenant/Components/GruntTasks/GruntTaskTable.razor
Covenant-master/Covenant/Components/Grunts/GruntCommandCard.razor
Covenant-master/Covenant/Components/Grunts/GruntForm.razor
Covenant-master/Covenant/Components/Grunts/GruntIndex.razor
Covenant-master/Covenant/Components/Grunts/GruntInteract.razor
.js
Covenant-master/Covenant/Components/Grunts/GruntInteractTerminal.razor
.js
Covenant-master/Covenant/Components/Grunts/GruntTable.razor
Covenant-master/Covenant/Components/Grunts/GruntTaskAssignForm.razor
.js
Covenant-master/Covenant/Components/Grunts/GruntTaskOptionsModal.razor
.js
Covenant-master/Covenant/Components/Grunts/TabbedTerminals.razor
Covenant-master/Covenant/Components/Home/Dashboard.razor
Covenant-master/Covenant/Components/HostedFiles/CreateHostedFile.razor
Covenant-master/Covenant/Components/HostedFiles/EditHostedFile.razor
Covenant-master/Covenant/Components/HostedFiles/HostedFileForm.razor
Covenant-master/Covenant/Components/HostedFiles/HostedFileIndex.razor
Covenant-master/Covenant/Components/HostedFiles/HostedFileTable.razor
.ps1
Covenant-master/Covenant/Components/Indicators/CreateIndicator.razor
Covenant-master/Covenant/Components/Indicators/FileIndicatorTable.razor
Covenant-master/Covenant/Components/Indicators/IndicatorForm.razor
Covenant-master/Covenant/Components/Indicators/IndicatorTables.razor
Covenant-master/Covenant/Components/Indicators/NetworkIndicatorTable.razor
Covenant-master/Covenant/Components/Indicators/TargetIndicatorTable.razor
Covenant-master/Covenant/Components/Launchers/CreateLauncher.razor
.js
Covenant-master/Covenant/Components/Launchers/LauncherForm.razor
.ps1
Covenant-master/Covenant/Components/Launchers/LauncherHost.razor
Covenant-master/Covenant/Components/Launchers/LauncherIndex.razor
Covenant-master/Covenant/Components/Launchers/LauncherTable.razor
Covenant-master/Covenant/Components/Launchers/MSBuildLauncherFormPartial.razor
Covenant-master/Covenant/Components/Launchers/PowerShellLauncherFormPartial.razor
Covenant-master/Covenant/Components/Launchers/Regsvr32LauncherFormPartial.razor
Covenant-master/Covenant/Components/Launchers/ScriptletLauncherFormPartial.razor
Covenant-master/Covenant/Components/Listeners/BridgeListenerForm.razor
Covenant-master/Covenant/Components/Listeners/CreateListener.razor
.js
Covenant-master/Covenant/Components/Listeners/EditListener.razor
.js
Covenant-master/Covenant/Components/Listeners/HttpListenerForm.razor
Covenant-master/Covenant/Components/Listeners/ListenerIndex.razor
Covenant-master/Covenant/Components/Listeners/ListenerTable.razor
Covenant-master/Covenant/Components/Profiles/BridgeProfileForm.razor
Covenant-master/Covenant/Components/Profiles/CreateProfile.razor
.js
Covenant-master/Covenant/Components/Profiles/EditHttpProfileHeaderList.razor
Covenant-master/Covenant/Components/Profiles/EditProfile.razor
.js
Covenant-master/Covenant/Components/Profiles/HttpProfileForm.razor
Covenant-master/Covenant/Components/Profiles/ProfileTable.razor
Covenant-master/Covenant/Components/ReferenceAssemblies/CreateReferenceAssembly.razor
.js
Covenant-master/Covenant/Components/ReferenceAssemblies/EditReferenceAssembly.razor
.js
Covenant-master/Covenant/Components/ReferenceAssemblies/ReferenceAssemblyForm.razor
Covenant-master/Covenant/Components/ReferenceAssemblies/ReferenceAssemblyTable.razor
Covenant-master/Covenant/Components/ReferenceSourceLibraries/CreateReferenceSourceLibrary.razor
.js
Covenant-master/Covenant/Components/ReferenceSourceLibraries/EditReferenceSourceLibrary.razor
.js
Covenant-master/Covenant/Components/ReferenceSourceLibraries/ReferenceSourceLibraryForm.razor
.vbs
Covenant-master/Covenant/Components/ReferenceSourceLibraries/ReferenceSourceLibraryTable.razor
Covenant-master/Covenant/Components/Shared/ButtonActivatedModal.razor
Covenant-master/Covenant/Components/Shared/CovenantTable.razor
.js
Covenant-master/Covenant/Components/Shared/CovenantTable.razor.cs
Covenant-master/Covenant/Components/Shared/EditFormList.razor
Covenant-master/Covenant/Components/Shared/EnumSelect.razor
Covenant-master/Covenant/Components/Shared/Layout.razor
Covenant-master/Covenant/Components/Shared/SortableTableHeader.razor
Covenant-master/Covenant/Components/Shared/SortableTableHeader.razor.cs
Covenant-master/Covenant/Components/Templates/CreateImplantTemplate.razor
.js
Covenant-master/Covenant/Components/Templates/EditImplantTemplate.razor
.js
Covenant-master/Covenant/Components/Templates/ImplantTemplateForm.razor
.vbs
Covenant-master/Covenant/Components/Templates/ImplantTemplateIndex.razor
Covenant-master/Covenant/Components/Templates/ImplantTemplateTable.razor
Covenant-master/Covenant/Components/Themes/CreateTheme.razor
.js
Covenant-master/Covenant/Components/Themes/DisplayTheme.razor
Covenant-master/Covenant/Components/Themes/EditTheme.razor
.js
Covenant-master/Covenant/Components/Themes/ThemeForm.razor
Covenant-master/Covenant/Components/Themes/ThemeTable.razor
Covenant-master/Covenant/Components/_Imports.razor
Covenant-master/Covenant/Controllers/ApiControllers/CommandOutputApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/CovenantUserApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/CredentialApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/EmbeddedResourceApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/EventApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/GruntApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/GruntCommandApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/GruntTaskApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/GruntTaskingApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/ImplantTemplateApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/IndicatorApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/LauncherApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/ListenerApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/ProfileApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/ReferenceAssemblyApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/ReferenceSourceLibraryApiController.cs
.js
Covenant-master/Covenant/Controllers/ApiControllers/ThemeApiController.cs
.js
Covenant-master/Covenant/Controllers/ListenerControllers/HttpListenerController.cs
.js
Covenant-master/Covenant/Core/Common.cs
Covenant-master/Covenant/Core/Compiler.cs
.js
Covenant-master/Covenant/Core/ConsoleWriter.cs
Covenant-master/Covenant/Core/CovenantAPIService.cs
Covenant-master/Covenant/Core/CovenantException.cs
Covenant-master/Covenant/Core/CovenantHubService.cs
.js
Covenant-master/Covenant/Core/CovenantService.cs
.js
Covenant-master/Covenant/Core/DbInitializer.cs
.js
Covenant-master/Covenant/Core/Encryption.cs
Covenant-master/Covenant/Core/NotificationService.cs
Covenant-master/Covenant/Core/Utilities.cs
.js
Covenant-master/Covenant/Covenant.cs
.js
Covenant-master/Covenant/Covenant.csproj
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Configuration.Install.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Configuration.Install.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fb:b1:41:21:bd:dd:6a:f5:f6:ad:06:64:40:70:c3:7c:0c:1b:8a:c3
Signer

Actual PE Digest

fb:b1:41:21:bd:dd:6a:f5:f6:ad:06:64:40:70:c3:7c:0c:1b:8a:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Data.DataSetExtensions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Data.DataSetExtensions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Data.dll
.dll windows:5 windows x64 arch:x64

060912f4522489ca999f0db104d1af54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Data.pdb

Imports

msvcr80

_cexit
__FrameUnwindFilter
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
malloc
_callnewh
strtok_s
srand
_time64
strstr
memcmp
strcat_s
sprintf_s
strtoul
calloc
strcpy_s
memmove
wcsncmp
strncpy_s
wcsncpy_s
_vsnwprintf_s
memmove_s
_atoi_l
free
_dupenv_s
_stricmp
atoi
_wcsnicmp
strncmp
_stricmp_l
strchr
_strnicmp_l
_purecall
_vsnprintf_s
memset
__C_specific_handler
memcpy
??3@YAXPEAX@Z

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

mscoree

CorBindToRuntimeEx
_CorDllMain

kernel32

TerminateProcess
GetCurrentProcessId
QueryPerformanceCounter
DisableThreadLibraryCalls
GlobalAlloc
ExpandEnvironmentStringsA
SetHandleInformation
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
CreateEventA
CloseHandle
PostQueuedCompletionStatus
Sleep
SetLastError
GetLastError
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpynW
ExpandEnvironmentStringsW
GetDriveTypeW
GetFullPathNameW
SearchPathW
lstrlenW
OutputDebugStringW
GetModuleFileNameW
GetSystemInfo
HeapSize
HeapAlloc
GetProcessHeap
HeapFree
CreateSemaphoreA
ReleaseSemaphore
GetCurrentThreadId
SetEvent
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryA
GetCurrentProcess
DisconnectNamedPipe
SetNamedPipeHandleState
WaitNamedPipeA
CreateFileA
GetTickCount
GetOverlappedResult
WaitForSingleObject
WriteFile
ReadFile
PeekNamedPipe
GetVersionExA
CompareStringA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
WaitForMultipleObjects
GetSystemTimeAsFileTime
CreateIoCompletionPort
LCMapStringW
CreateThread
GetComputerNameA
GetSystemDirectoryA
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
FormatMessageW
GetQueuedCompletionStatus

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyA
RegEnumKeyExA
CryptDestroyKey
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA
RevertToSelf
ImpersonateNamedPipeClient
RegQueryValueExW

ws2_32

recv
__WSAFDIsSet
select
WSACleanup
WSAStartup
WSAIoctl
shutdown
bind
connect
ntohs
WSAStringToAddressA
WSARecv
ioctlsocket
getpeername
getservbyport
gethostbyaddr
htons
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
socket
setsockopt
closesocket
sendto
WSASend
WSASetLastError
getsockname
getservbyname

crypt32

CertGetNameStringW
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertFreeCertificateContext

user32

CharNextExA

ole32

CoCreateInstance

Exports

Exports

DllBidAssert
DllBidCtlProc
DllBidEnabledW
DllBidEntryPoint
DllBidFinalize
DllBidIndent
DllBidInitialize
DllBidPutStrW
DllBidScopeEnterCW
DllBidScopeLeave
DllBidSnap
DllBidTouch
DllBidTraceCW

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdbid
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.DirectoryServices.AccountManagement.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.DirectoryServices.AccountManagement.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.DirectoryServices.Protocols.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.DirectoryServices.Protocols.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.DirectoryServices.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.DirectoryServices.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 380KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Drawing.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Drawing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 544KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.IdentityModel.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.IdentityModel.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 384KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Management.Automation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Management.Automation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.6MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 320KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Management.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Management.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Security.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Security.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.ServiceProcess.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.ServiceProcess.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Web.Extensions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Web.Extensions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.Windows.Forms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Windows.Forms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.XML.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Xml.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/System.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

99:2c:db:d4:d2:9b:17:33:d2:21:a3:54:a5:b5:f6:74:89:82:a8:66
Signer

Actual PE Digest

99:2c:db:d4:d2:9b:17:33:d2:21:a3:54:a5:b5:f6:74:89:82:a8:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 744KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net35/mscorlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b9:8f:55:eb:35:38:e0:f4:0f:5b:30:ff:43:e9:04:8a:24:06:58:37
Signer

Actual PE Digest

b9:8f:55:eb:35:38:e0:f4:0f:5b:30:ff:43:e9:04:8a:24:06:58:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Configuration.Install.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Configuration.Install.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cd:fa:d4:23:37:23:dc:ed:cd:42:9e:4a:30:b6:aa:d5:4e:07:7f:9c
Signer

Actual PE Digest

cd:fa:d4:23:37:23:dc:ed:cd:42:9e:4a:30:b6:aa:d5:4e:07:7f:9c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Data.DataSetExtensions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Data.DataSetExtensions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Data.dll
.dll windows:6 windows x64 arch:x64

9fe0ed33d42cda291ae72f170de4d48f

Code Sign

33:00:00:01:31:8d:e1:be:a7:9f:0a:35:e0:00:00:00:00:01:31
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-09-2019 20:40

Not After

04-12-2020 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:37

Not After

02-05-2020 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:97:e9:b0:51:fd:8e:3e:31:ce:62:92:d0:a8:f4:ef:27:4c:1c:2d:3a:4a:ac:f7:f6:f3:9a:61:16:24:f6:ae
Signer

Actual PE Digest

b4:97:e9:b0:51:fd:8e:3e:31:ce:62:92:d0:a8:f4:ef:27:4c:1c:2d:3a:4a:ac:f7:f6:f3:9a:61:16:24:f6:ae

Digest Algorithm

sha256

PE Digest Matches

true

a2:cb:0a:b4:3d:ac:bd:fb:ac:25:f2:91:f8:97:ea:ee:aa:01:66:cb
Signer

Actual PE Digest

a2:cb:0a:b4:3d:ac:bd:fb:ac:25:f2:91:f8:97:ea:ee:aa:01:66:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Data.pdb

Imports

advapi32

IsTokenRestricted
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
CryptDestroyKey
CryptReleaseContext
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RevertToSelf
RegQueryValueExW
ImpersonateNamedPipeClient

kernel32

TerminateProcess
ExpandEnvironmentStringsW
SearchPathW
GetDriveTypeW
GetFullPathNameW
OutputDebugStringW
VirtualQuery
GetModuleFileNameW
lstrcpynW
lstrlenW
LoadLibraryW
SystemTimeToFileTime
GlobalAlloc
Sleep
DeleteCriticalSection
CloseHandle
InitializeCriticalSection
CreateSemaphoreA
GetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
SetLastError
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
VerSetConditionMask
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
CreateEventW
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
CreateThread
GetTickCount
GetSystemDirectoryA
GetVersionExW
WaitForMultipleObjects
LoadLibraryA
GetComputerNameW
VerifyVersionInfoW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CompareStringW
CompareStringA
LCMapStringW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FormatMessageW
WideCharToMultiByte
FreeLibrary
GetProcAddress
MultiByteToWideChar
CreateFileW
ReadFile
WriteFile
DisconnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
WaitNamedPipeW
GetOverlappedResult
GetCurrentProcess
SetFileCompletionNotificationModes
SetHandleInformation
CreateSemaphoreW
LCMapStringA
LCMapStringEx
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GetSystemTimeAsFileTime

vcruntime140_clr0400

memcpy
__C_specific_handler
__std_type_info_destroy_list
memcmp
__FrameUnwindFilter
__std_terminate
memmove
wcschr
strchr
_purecall
__CxxFrameHandler3
memset

ucrtbase_clr0400

__stdio_common_vsprintf
_atoi_l
_wcsnicmp_l
atoi
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_wdupenv_s
strncmp
_stricmp
_wcsicmp
_wtoi
_wcsnicmp
wcsncmp
_configure_narrow_argv
_seh_filter_dll
free
_initterm_e
_initterm
malloc
_callnewh
wcsncpy_s
wcscmp
wmemmove_s
__stdio_common_vswprintf
_wcsicmp_l
_errno
abort
_invalid_parameter_noinfo
srand
wcsspn
_time64
_wtoi_l

ws2_32

GetNameInfoW
__WSAFDIsSet
closesocket
htonl
htons
recv
select
sendto
setsockopt
socket
WSAStartup
WSACleanup
WSAGetLastError
WSAStringToAddressA
GetAddrInfoW
FreeAddrInfoW
bind
connect
getpeername
getsockname
ntohs
shutdown
WSAEnumProtocolsW
WSAIoctl
WSARecv
WSASend
WSAStringToAddressW
WSAPoll

crypt32

CertGetNameStringW
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateContext

user32

CharNextA
CharNextW
CharNextExA

rpcrt4

UuidCreate

ole32

CoUninitialize
CoInitializeEx

mscoree

_CorDllMain

Exports

Exports

DllBidAssert
DllBidCtlProc
DllBidEnabledW
DllBidEntryPoint
DllBidFinalize
DllBidIndent
DllBidInitialize
DllBidPutStrW
DllBidScopeEnterCW
DllBidScopeLeave
DllBidSnap
DllBidTouch
DllBidTraceCW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdbid
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.DirectoryServices.AccountManagement.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:20

Not After

11-08-2018 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:62:cb:c6:84:ef:6d:2c:47:90:8b:16:5a:16:68:01:24:dd:ca:d4:54:b8:31:0f:b3:d3:37:e5:af:07:f4:c3
Signer

Actual PE Digest

7d:62:cb:c6:84:ef:6d:2c:47:90:8b:16:5a:16:68:01:24:dd:ca:d4:54:b8:31:0f:b3:d3:37:e5:af:07:f4:c3

Digest Algorithm

sha256

PE Digest Matches

true

c0:2c:9b:e4:38:9c:e6:e0:9d:62:00:dd:c2:8d:1a:f6:75:13:5d:ae
Signer

Actual PE Digest

c0:2c:9b:e4:38:9c:e6:e0:9d:62:00:dd:c2:8d:1a:f6:75:13:5d:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.DirectoryServices.AccountManagement.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.DirectoryServices.Protocols.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.DirectoryServices.Protocols.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.DirectoryServices.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.DirectoryServices.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Drawing.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Drawing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 549KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.IdentityModel.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.IdentityModel.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Management.Automation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 21:59

Not After

17-02-2018 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:f7:fc:9c:f9:45:71:a1:b2:e3:3a:9e:aa:74:4a:c6:09:ad:b8:20:4f:19:f9:15:46:44:98:5e:bd:ba:06:d5
Signer

Actual PE Digest

69:f7:fc:9c:f9:45:71:a1:b2:e3:3a:9e:aa:74:4a:c6:09:ad:b8:20:4f:19:f9:15:46:44:98:5e:bd:ba:06:d5

Digest Algorithm

sha256

PE Digest Matches

true

f4:c4:fa:9d:45:8e:71:3e:df:7d:97:d8:2c:5d:51:c4:a3:f5:4d:0f
Signer

Actual PE Digest

f4:c4:fa:9d:45:8e:71:3e:df:7d:97:d8:2c:5d:51:c4:a3:f5:4d:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Management.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Management.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Security.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Security.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.ServiceProcess.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.ServiceProcess.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Web.Extensions.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Web.Extensions.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.Windows.Forms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Windows.Forms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.XML.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Xml.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/System.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1d:45:e4:9a:e9:99:0e:1e:36:81:a1:5b:e3:99:97:bd:d4:b9:4f:ff
Signer

Actual PE Digest

1d:45:e4:9a:e9:99:0e:1e:36:81:a1:5b:e3:99:97:bd:d4:b9:4f:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 867KB - Virtual size: 867KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/AssemblyReferences/net40/mscorlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

dc:c2:47:5c:12:7b:fb:11:bd:4c:63:19:f8:88:b5:f4:fa:76:53:36
Signer

Actual PE Digest

dc:c2:47:5c:12:7b:fb:11:bd:4c:63:19:f8:88:b5:f4:fa:76:53:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/Downloads/.gitignore
Covenant-master/Covenant/Data/EmbeddedResources/SharpSploit.Resources.powerkatz_x64.dll
.dll windows:5 windows x64 arch:x64

284c69639cb6a217e9e31d533fce79ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

CryptSetHashParam
CryptGetHashParam
CryptExportKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDuplicateKey
CryptAcquireContextA
CryptGetProvParam
CryptImportKey
SystemFunction007
CryptEncrypt
CryptCreateHash
CryptGenKey
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData
CopySid
GetLengthSid
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
CreateWellKnownSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
SystemFunction032
ConvertSidToStringSidW
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
SetServiceObjectSecurity
OpenServiceW
BuildSecurityDescriptorW
QueryServiceObjectSecurity
StartServiceW
AllocateAndInitializeSid
QueryServiceStatusEx
FreeSid
ControlService
IsTextUnicode
OpenProcessToken
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
SetThreadToken
CryptSetProvParam
CryptEnumProviderTypesW
SystemFunction006
CryptGetUserKey
OpenEventLogW
GetNumberOfEventLogRecords
ClearEventLogW
SystemFunction001
CryptDeriveKey
SystemFunction005
LsaQueryTrustedDomainInfoByName
CryptSignHashW
LsaOpenSecret
LsaQuerySecret
SystemFunction013
LsaRetrievePrivateData
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
IsValidSid
LookupPrivilegeNameW
OpenThreadToken
CredFree
CredEnumerateW
GetSidSubAuthority
GetSidSubAuthorityCount
SystemFunction025
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction024
CredIsMarshaledCredentialW
CredUnmarshalCredentialW
A_SHAUpdate
A_SHAFinal
A_SHAInit

cabinet

ord11
ord14
ord10
ord13

crypt32

CertFindCertificateInStore
CryptEncodeObject
CertEnumSystemStore
CryptSignAndEncodeCertificate
CertEnumCertificatesInStore
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CertSetCertificateContextProperty
PFXExportCertStoreEx
CryptUnprotectData
CryptBinaryToStringW
CryptStringToBinaryW
CryptProtectData
CryptExportPublicKeyInfo
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertGetNameStringW
CertAddCertificateContextToStore
CertGetCertificateContextProperty

cryptdll

CDLocateCSystem
MD5Update
MD5Final
CDGenerateRandomBits
CDLocateCheckSum
MD5Init

dnsapi

DnsFree
DnsQuery_A

fltlib

FilterFindFirst
FilterFindNext

netapi32

DsGetDcNameW
NetRemoteTOD
NetSessionEnum
NetServerGetInfo
NetWkstaUserEnum
NetStatisticsGet
NetShareEnum
DsEnumerateDomainTrustsW
NetApiBufferFree
I_NetServerTrustPasswordsGet
I_NetServerReqChallenge
I_NetServerAuthenticate2

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
VariantInit
SysAllocString

rpcrt4

RpcServerRegisterIf2
RpcServerRegisterAuthInfoW
UuidToStringW
RpcServerUseProtseqEpW
RpcEpUnregister
NdrServerCall2
NdrClientCall2
UuidCreate
RpcEpResolveBinding
RpcMgmtEpEltInqDone
RpcMgmtEpEltInqNextW
RpcMgmtEpEltInqBegin
I_RpcGetCurrentCallHandle
RpcBindingVectorFree
RpcBindingFromStringBindingW
RpcStringBindingComposeW
MesEncodeIncrementalHandleCreate
RpcBindingSetAuthInfoExW
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcImpersonateClient
RpcBindingFree
RpcStringFreeW
RpcRevertToSelf
MesDecodeIncrementalHandleCreate
MesHandleFree
MesIncrementalHandleReset
NdrMesTypeDecode2
NdrMesTypeAlignSize2
NdrMesTypeFree2
NdrMesTypeEncode2
RpcServerUnregisterIfEx
I_RpcBindingInqSecurityContext
RpcServerInqBindings
RpcServerListen
RpcMgmtWaitServerListen
RpcEpRegisterW
RpcMgmtStopServerListening
RpcBindingToStringBindingW

shlwapi

PathCombineW
PathCanonicalizeW
PathIsDirectoryW
PathIsRelativeW
PathFindFileNameW

samlib

SamRidToSid
SamEnumerateUsersInDomain
SamGetMembersInGroup
SamGetGroupsForUser
SamEnumerateGroupsInDomain
SamiChangePasswordUser
SamSetInformationUser
SamConnect
SamOpenDomain
SamLookupIdsInDomain
SamLookupNamesInDomain
SamLookupDomainInSamServer
SamOpenUser
SamEnumerateAliasesInDomain
SamGetAliasMembership
SamOpenGroup
SamOpenAlias
SamFreeMemory
SamEnumerateDomainsInSamServer
SamCloseHandle
SamQueryInformationUser
SamGetMembersInAlias

secur32

LsaCallAuthenticationPackage
DeleteSecurityContext
FreeContextBuffer
LsaLookupAuthenticationPackage
LsaConnectUntrusted
LsaDeregisterLogonProcess
FreeCredentialsHandle
EnumerateSecurityPackagesW
InitializeSecurityContextW
QueryContextAttributesW
AcquireCredentialsHandleW
LsaFreeReturnBuffer

shell32

CommandLineToArgvW

user32

DefWindowProcW
DispatchMessageW
GetKeyboardLayout
IsCharAlphaNumericW
EnumClipboardFormats
SendMessageW
SetClipboardViewer
GetClipboardSequenceNumber
OpenClipboard
CreateWindowExW
ChangeClipboardChain
GetClipboardData
RegisterClassExW
TranslateMessage
DestroyWindow
CloseClipboard
GetMessageW
UnregisterClassW
PostMessageW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

hid

HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_GetFeature
HidP_GetCaps
HidD_FreePreparsedData
HidD_SetFeature

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW

winscard

SCardControl
SCardConnectW
SCardTransmit
SCardDisconnect
SCardGetAttrib
SCardEstablishContext
SCardListReadersW
SCardReleaseContext
SCardGetCardTypeProviderNameW
SCardListCardsW
SCardFreeMemory

winsta

WinStationCloseServer
WinStationEnumerateW
WinStationOpenServerW
WinStationFreeMemory
WinStationConnectW
WinStationQueryInformationW

wldap32

ord88
ord310
ord41
ord79
ord36
ord145
ord208
ord13
ord77
ord142
ord54
ord309
ord304
ord301
ord127
ord26
ord167
ord147
ord27
ord133
ord157
ord96
ord224
ord113
ord12
ord223
ord97
ord139
ord69
ord203
ord140
ord122
ord14
ord73

msasn1

ASN1_CloseEncoder
ASN1_CreateDecoder
ASN1_FreeEncoded
ASN1BERDotVal2Eoid
ASN1_CloseDecoder
ASN1_CreateModule
ASN1_CloseModule
ASN1_CreateEncoder

ntdll

RtlGetCurrentPeb
RtlGetCompressionWorkSpaceSize
NtQueryInformationProcess
NtQueryObject
RtlEqualUnicodeString
RtlInitUnicodeString
RtlFreeUnicodeString
RtlDowncaseUnicodeString
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
RtlCreateUserThread
RtlGUIDFromString
RtlStringFromGUID
NtCompareTokens
RtlGetNtVersionNumbers
RtlEqualString
RtlUpcaseUnicodeString
RtlAppendUnicodeStringToString
RtlAnsiStringToUnicodeString
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
NtResumeProcess
RtlAdjustPrivilege
NtSuspendProcess
NtTerminateProcess
NtQuerySystemEnvironmentValueEx
NtSetSystemEnvironmentValueEx
NtEnumerateSystemEnvironmentValuesEx
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
RtlCompressBuffer
NtQuerySystemInformation

kernel32

SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetFileType
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
GetModuleFileNameW
GetConsoleMode
GetConsoleCP
RtlUnwindEx
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetModuleHandleExW
ExitProcess
LoadLibraryExW
DecodePointer
EncodePointer
LoadLibraryExA
GetProcessId
GetComputerNameW
ProcessIdToSessionId
GetCurrentThread
SetCurrentDirectoryW
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
GetStdHandle
GetTimeZoneInformation
SetConsoleCursorPosition
GetSystemDirectoryW
CreateEventW
SetEvent
CreatePipe
SetHandleInformation
SetConsoleCtrlHandler
GetModuleHandleW
GlobalSize
GetProcAddress
LoadLibraryW
FreeLibrary
lstrlenA
RaiseException
AreFileApisANSI
GetSystemTime
GetCurrentProcessId
DeleteFileW
GetVersionExA
OutputDebugStringA
DeleteCriticalSection
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingA
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
HeapSize
GetTempPathW
MultiByteToWideChar
HeapValidate
HeapCreate
GetFileAttributesA
LeaveCriticalSection
HeapDestroy
GetVersionExW
FormatMessageW
InitializeCriticalSection
FormatMessageA
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
WaitForSingleObjectEx
LockFile
FlushViewOfFile
UnlockFile
HeapFree
QueryPerformanceCounter
HeapAlloc
SetEndOfFile
TryEnterCriticalSection
HeapCompact
CreateMutexW
GetFileSize
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
GetTimeFormatW
WideCharToMultiByte
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetDateFormatW
lstrlenW
PurgeComm
ClearCommError
CreateRemoteThread
WaitForSingleObject
SetLastError
CreateProcessW
CreateFileMappingW
UnmapViewOfFile
CompareStringW
LCMapStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
SetEnvironmentVariableA
MapViewOfFile
WriteProcessMemory
VirtualProtect
VirtualAllocEx
VirtualProtectEx
VirtualAlloc
ReadProcessMemory
VirtualFreeEx
VirtualQueryEx
VirtualFree
VirtualQuery
GetComputerNameExW
DeviceIoControl
DuplicateHandle
OpenProcess
GetCurrentProcess
ExpandEnvironmentStringsW
FindNextFileW
FindClose
GetCurrentDirectoryW
GetFileSizeEx
FlushFileBuffers
GetFileAttributesW
FindFirstFileW
DeleteFileA
GetTempPathA
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetTempFileNameA
SetFilePointer
CreateFileA
FileTimeToDosDateTime
CreateThread
LocalFree
CloseHandle
LocalAlloc
GetLastError
CreateFileW
ReadFile
Sleep
TerminateThread
WriteFile
FileTimeToSystemTime

Exports

Exports

powershell_reflective_mimikatz

Sections

.text
Size: 590KB - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/EmbeddedResources/SharpSploit.Resources.powerkatz_x86.dll
.dll windows:5 windows x86 arch:x86

d1f6dcf2618d308e94a5b0d0c76fe714

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CryptReleaseContext
CryptGenKey
CryptGetProvParam
CryptGetHashParam
CryptImportKey
CryptSetKeyParam
CryptDestroyHash
CryptSetHashParam
CryptHashData
CryptCreateHash
CryptExportKey
CryptDecrypt
SystemFunction007
CryptDuplicateKey
CryptEncrypt
CryptAcquireContextW
CryptGetKeyParam
CryptAcquireContextA
CryptDestroyKey
GetLengthSid
CopySid
LsaClose
LsaOpenPolicy
LsaQueryInformationPolicy
CreateWellKnownSid
CreateProcessAsUserW
CreateProcessWithLogonW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
SystemFunction032
ConvertSidToStringSidW
QueryServiceObjectSecurity
QueryServiceStatusEx
BuildSecurityDescriptorW
OpenServiceW
StartServiceW
FreeSid
ControlService
SetServiceObjectSecurity
DeleteService
AllocateAndInitializeSid
OpenSCManagerW
CloseServiceHandle
CreateServiceW
IsTextUnicode
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
OpenProcessToken
CryptSetProvParam
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
SetThreadToken
SystemFunction006
CryptEnumProviderTypesW
CryptGetUserKey
OpenEventLogW
ClearEventLogW
GetNumberOfEventLogRecords
CryptSignHashW
LsaRetrievePrivateData
LsaOpenSecret
LsaQueryTrustedDomainInfoByName
CryptDeriveKey
LsaQuerySecret
SystemFunction001
SystemFunction005
SystemFunction013
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
IsValidSid
OpenThreadToken
LookupPrivilegeNameW
CredFree
CredEnumerateW
SystemFunction025
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSidSubAuthority
GetSidSubAuthorityCount
SystemFunction024
CredUnmarshalCredentialW
CredIsMarshaledCredentialW
A_SHAInit
A_SHAFinal
A_SHAUpdate

cabinet

ord14
ord10
ord13
ord11

crypt32

CertGetNameStringW
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertEnumSystemStore
CryptProtectData
CertAddEncodedCertificateToStore
CertFreeCertificateContext
CertCloseStore
PFXExportCertStoreEx
CertSetCertificateContextProperty
CertOpenStore
CryptUnprotectData
CryptBinaryToStringW
CryptStringToBinaryW
CryptAcquireCertificatePrivateKey
CryptExportPublicKeyInfo
CryptSignAndEncodeCertificate
CertNameToStrW
CryptEncodeObject
CertFindCertificateInStore
CertGetCertificateContextProperty

cryptdll

CDGenerateRandomBits
MD5Update
MD5Final
CDLocateCheckSum
CDLocateCSystem
MD5Init

dnsapi

DnsQuery_A
DnsFree

fltlib

FilterFindNext
FilterFindFirst

netapi32

NetShareEnum
NetWkstaUserEnum
NetApiBufferFree
DsGetDcNameW
DsEnumerateDomainTrustsW
NetServerGetInfo
NetRemoteTOD
NetSessionEnum
NetStatisticsGet
I_NetServerAuthenticate2
I_NetServerReqChallenge
I_NetServerTrustPasswordsGet

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

VariantInit
SysFreeString
SysAllocString

rpcrt4

NdrServerCall2
UuidCreate
RpcMgmtEpEltInqBegin
RpcMgmtEpEltInqDone
RpcMgmtEpEltInqNextW
RpcEpResolveBinding
I_RpcGetCurrentCallHandle
I_RpcBindingInqSecurityContext
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
MesHandleFree
RpcImpersonateClient
RpcRevertToSelf
MesEncodeIncrementalHandleCreate
MesDecodeIncrementalHandleCreate
RpcBindingFree
MesIncrementalHandleReset
NdrMesTypeEncode2
NdrMesTypeDecode2
NdrMesTypeFree2
NdrClientCall2
NdrMesTypeAlignSize2
RpcBindingVectorFree
RpcServerUseProtseqEpW
RpcServerUnregisterIfEx
RpcBindingToStringBindingW
UuidToStringW
RpcServerRegisterIf2
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterAuthInfoW
RpcEpUnregister
RpcEpRegisterW
RpcServerInqBindings
RpcMgmtStopServerListening

shlwapi

PathCombineW
PathCanonicalizeW
PathIsRelativeW
PathFindFileNameW
PathIsDirectoryW

samlib

SamOpenUser
SamQueryInformationUser
SamFreeMemory
SamLookupDomainInSamServer
SamCloseHandle
SamConnect
SamLookupIdsInDomain
SamiChangePasswordUser
SamOpenGroup
SamEnumerateAliasesInDomain
SamRidToSid
SamOpenAlias
SamGetAliasMembership
SamEnumerateGroupsInDomain
SamGetMembersInGroup
SamGetMembersInAlias
SamGetGroupsForUser
SamEnumerateDomainsInSamServer
SamOpenDomain
SamLookupNamesInDomain
SamEnumerateUsersInDomain
SamSetInformationUser

secur32

LsaFreeReturnBuffer
FreeContextBuffer
QueryContextAttributesW
LsaCallAuthenticationPackage
LsaDeregisterLogonProcess
DeleteSecurityContext
AcquireCredentialsHandleW
InitializeSecurityContextW
FreeCredentialsHandle
LsaLookupAuthenticationPackage
EnumerateSecurityPackagesW
LsaConnectUntrusted

shell32

CommandLineToArgvW

user32

GetKeyboardLayout
IsCharAlphaNumericW
SendMessageW
GetClipboardSequenceNumber
TranslateMessage
GetClipboardData
EnumClipboardFormats
CloseClipboard
ChangeClipboardChain
DispatchMessageW
OpenClipboard
RegisterClassExW
UnregisterClassW
CreateWindowExW
GetMessageW
DefWindowProcW
PostMessageW
DestroyWindow
SetClipboardViewer

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

hid

HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetAttributes
HidD_GetFeature
HidD_SetFeature
HidP_GetCaps
HidD_GetHidGuid

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces

winscard

SCardDisconnect
SCardConnectW
SCardControl
SCardListReadersW
SCardGetCardTypeProviderNameW
SCardListCardsW
SCardReleaseContext
SCardGetAttrib
SCardFreeMemory
SCardTransmit
SCardEstablishContext

winsta

WinStationEnumerateW
WinStationConnectW
WinStationFreeMemory
WinStationCloseServer
WinStationQueryInformationW
WinStationOpenServerW

wldap32

ord113
ord310
ord73
ord13
ord36
ord79
ord41
ord142
ord77
ord145
ord54
ord301
ord304
ord309
ord167
ord133
ord127
ord26
ord27
ord147
ord224
ord203
ord88
ord14
ord140
ord157
ord97
ord122
ord139
ord12
ord69
ord96
ord223
ord208

msasn1

ASN1_CreateEncoder
ASN1_CloseModule
ASN1_FreeEncoded
ASN1BERDotVal2Eoid
ASN1_CreateModule
ASN1_CloseEncoder
ASN1_CreateDecoder
ASN1_CloseDecoder

ntdll

RtlCompressBuffer
NtQueryInformationProcess
NtQueryObject
RtlInitUnicodeString
RtlEqualUnicodeString
RtlDowncaseUnicodeString
RtlFreeUnicodeString
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlGetCurrentPeb
RtlCreateUserThread
RtlGUIDFromString
RtlStringFromGUID
NtCompareTokens
RtlGetNtVersionNumbers
RtlEqualString
RtlAppendUnicodeStringToString
RtlUpcaseUnicodeString
RtlAnsiStringToUnicodeString
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
NtResumeProcess
RtlAdjustPrivilege
NtTerminateProcess
NtSuspendProcess
NtSetSystemEnvironmentValueEx
NtQuerySystemEnvironmentValueEx
NtEnumerateSystemEnvironmentValuesEx
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
RtlGetCompressionWorkSpaceSize
NtQuerySystemInformation

kernel32

GetCPInfo
GetEnvironmentStringsW
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetConsoleMode
GetConsoleCP
LCMapStringW
CompareStringW
GetFileType
GetACP
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedFlushSList
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
LoadLibraryExA
GetProcessId
GetComputerNameW
ProcessIdToSessionId
GetCurrentThread
IsWow64Process
SetConsoleCursorPosition
SetCurrentDirectoryW
FillConsoleOutputCharacterW
GetTimeZoneInformation
GetSystemDirectoryW
GetStdHandle
GetConsoleScreenBufferInfo
SetEvent
CreateEventW
CreatePipe
SetHandleInformation
GetModuleHandleW
GlobalSize
SetConsoleCtrlHandler
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
RaiseException
GetTickCount
QueryPerformanceCounter
FormatMessageA
GetSystemTime
GetProcessHeap
GetCurrentProcessId
DeleteCriticalSection
GetFileSize
LockFileEx
CreateFileMappingA
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
GetSystemInfo
HeapReAlloc
DeleteFileW
GetVersionExA
WaitForSingleObjectEx
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
MultiByteToWideChar
HeapSize
HeapValidate
GetVersionExW
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
InitializeCriticalSection
LeaveCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
InterlockedCompareExchange
GetFullPathNameW
EnterCriticalSection
HeapFree
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
GetDateFormatW
GetSystemTimeAsFileTime
WideCharToMultiByte
SystemTimeToFileTime
GetTimeFormatW
lstrlenW
ClearCommError
PurgeComm
CreateRemoteThread
WaitForSingleObject
SetLastError
CreateProcessW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
SetFilePointerEx
WriteConsoleW
ReadConsoleW
GetOEMCP
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
VirtualQueryEx
VirtualQuery
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
VirtualProtectEx
VirtualAlloc
VirtualFree
DecodePointer
VirtualProtect
WriteProcessMemory
GetComputerNameExW
DeviceIoControl
OpenProcess
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
GetCurrentDirectoryW
GetFileAttributesW
FindClose
ExpandEnvironmentStringsW
FindNextFileW
GetFileSizeEx
FindFirstFileW
FileTimeToDosDateTime
GetTempFileNameA
FileTimeToLocalFileTime
DeleteFileA
CreateFileA
GetTempPathA
GetFileInformationByHandle
GetCurrentDirectoryA
SetFilePointer
LocalFree
CreateThread
CloseHandle
TerminateThread
GetLastError
Sleep
CreateFileW
LocalAlloc
WriteFile
ReadFile
FileTimeToSystemTime

Exports

Exports

powershell_reflective_mimikatz

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/Data/Grunt/.gitignore
Covenant-master/Covenant/Data/Grunt/Brute/Brute.cs
.js
Covenant-master/Covenant/Data/Grunt/Brute/Brute/.gitignore
Covenant-master/Covenant/Data/Grunt/Brute/Brute/Brute.csproj
Covenant-master/Covenant/Data/Grunt/Brute/Brute/Brute.sln
Covenant-master/Covenant/Data/Grunt/Brute/BruteStager.cs
.ps1
Covenant-master/Covenant/Data/Grunt/Brute/BruteStager/.gitignore
Covenant-master/Covenant/Data/Grunt/Brute/BruteStager/BruteStager.csproj
Covenant-master/Covenant/Data/Grunt/Brute/BruteStager/BruteStager.sln
Covenant-master/Covenant/Data/Grunt/Brute/Task/.gitignore
Covenant-master/Covenant/Data/Grunt/Brute/Task/Task.sln
Covenant-master/Covenant/Data/Grunt/GruntBridge/GruntBridge.cs
.js
Covenant-master/Covenant/Data/Grunt/GruntBridge/GruntBridgeStager.cs
.ps1
Covenant-master/Covenant/Data/Grunt/GruntHTTP/GruntHTTP.cs
.js
Covenant-master/Covenant/Data/Grunt/GruntHTTP/GruntHTTPStager.cs
.ps1
Covenant-master/Covenant/Data/Grunt/GruntSMB/GruntSMB.cs
.js
Covenant-master/Covenant/Data/Grunt/GruntSMB/GruntSMBStager.cs
.ps1
Covenant-master/Covenant/Data/Launchers/.gitignore
Covenant-master/Covenant/Data/Listeners/.gitignore
Covenant-master/Covenant/Data/Profiles/CustomHttpProfile.yaml
.ps1
Covenant-master/Covenant/Data/Profiles/DefaultBridgeProfile.yaml
.ps1
Covenant-master/Covenant/Data/Profiles/DefaultHttpProfile.yaml
.ps1
Covenant-master/Covenant/Data/Profiles/TCPBridgeProfile.yaml
.ps1
Covenant-master/Covenant/Data/Static/.gitignore
Covenant-master/Covenant/Data/Tasks/CSharp/Compiled/net35/.gitignore
Covenant-master/Covenant/Data/Tasks/CSharp/Compiled/net40/.gitignore
Covenant-master/Covenant/Data/Tasks/CSharp/Compiled/netcoreapp3.0/.gitignore
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/Assembly.task
.ps1
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/ChangeDirectory.task
.js
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/ListDirectory.task
.js
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/ProcessList.task
.js
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/Shell.task
.js
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/ShellCmd.task
.js
Covenant-master/Covenant/Data/Tasks/CSharp/netcoreapp3.0/WhoAmI.task
.js
Covenant-master/Covenant/Data/Tasks/DefaultGruntTasks.yaml
.js
Covenant-master/Covenant/Data/Tasks/DotNetCore.yaml
.js
Covenant-master/Covenant/Data/Tasks/GhostPack.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSC.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.Credentials.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.Enumeration.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.Evasion.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.Execution.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.LateralMovement.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.Persistence.yaml
.js
Covenant-master/Covenant/Data/Tasks/SharpSploit.PrivilegeEscalation.yaml
Covenant-master/Covenant/Data/Temp/.gitignore
Covenant-master/Covenant/Data/appsettings.json
Covenant-master/Covenant/Dockerfile
Covenant-master/Covenant/Hubs/CommandOutputHub.cs
Covenant-master/Covenant/Hubs/CovenantHub.cs
Covenant-master/Covenant/Hubs/EventHub.cs
Covenant-master/Covenant/Hubs/GruntCommandHub.cs
Covenant-master/Covenant/Hubs/GruntHub.cs
Covenant-master/Covenant/Hubs/GruntTaskingHub.cs
Covenant-master/Covenant/Models/Common.cs
Covenant-master/Covenant/Models/Covenant/CapturedCredential.cs
.js
Covenant-master/Covenant/Models/Covenant/CovenantUser.cs
Covenant-master/Covenant/Models/Covenant/Event.cs
.js
Covenant-master/Covenant/Models/Covenant/Theme.cs
Covenant-master/Covenant/Models/CovenantContext.cs
Covenant-master/Covenant/Models/Grunts/Grunt.cs
Covenant-master/Covenant/Models/Grunts/GruntTask.cs
Covenant-master/Covenant/Models/Grunts/GruntTaskAuthor.cs
Covenant-master/Covenant/Models/Grunts/GruntTaskComponents.cs
Covenant-master/Covenant/Models/Grunts/GruntTaskOption.cs
Covenant-master/Covenant/Models/Grunts/GruntTasking.cs
Covenant-master/Covenant/Models/Grunts/ImplantTemplate.cs
.js
Covenant-master/Covenant/Models/Indicators/Indicator.cs
Covenant-master/Covenant/Models/Launchers/BinaryLauncher.cs
Covenant-master/Covenant/Models/Launchers/CscriptLauncher.cs
Covenant-master/Covenant/Models/Launchers/InstallUtilLauncher.cs
.js
Covenant-master/Covenant/Models/Launchers/Launcher.cs
.js
Covenant-master/Covenant/Models/Launchers/MSBuildLauncher.cs
.js
Covenant-master/Covenant/Models/Launchers/MshtaLauncher.cs
Covenant-master/Covenant/Models/Launchers/PowerShellLauncher.cs
.ps1
Covenant-master/Covenant/Models/Launchers/Regsvr32Launcher.cs
Covenant-master/Covenant/Models/Launchers/ShellCodeLauncher.cs
Covenant-master/Covenant/Models/Launchers/WmicLauncher.cs
Covenant-master/Covenant/Models/Launchers/WscriptLauncher.cs
Covenant-master/Covenant/Models/Listeners/BridgeListener.cs
.js
Covenant-master/Covenant/Models/Listeners/HttpListener.cs
.js
Covenant-master/Covenant/Models/Listeners/InternalListener.cs
.ps1
Covenant-master/Covenant/Models/Listeners/Listener.cs
Covenant-master/Covenant/Models/Listeners/Profile.cs
.ps1
Covenant-master/Covenant/Pages/Login.cshtml
Covenant-master/Covenant/Pages/Login.cshtml.cs
.js
Covenant-master/Covenant/Pages/Logout.cshtml
Covenant-master/Covenant/Pages/Logout.cshtml.cs
Covenant-master/Covenant/Pages/Shared/_LoginLayout.cshtml
Covenant-master/Covenant/Pages/_Host.cshtml
Covenant-master/Covenant/Pages/_Host.cshtml.cs
Covenant-master/Covenant/Properties/launchSettings.json
Covenant-master/Covenant/Startup.cs
.js
Covenant-master/Covenant/libman.json
Covenant-master/Covenant/refs/Confuser.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\Confuser.Core\obj\Release\netstandard2.0\Confuser.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/Confuser.DynCipher.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\Confuser.DynCipher\obj\Release\netstandard2.0\Confuser.DynCipher.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/Confuser.MSBuild.Tasks.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\Confuser.MSBuild.Tasks\obj\Release\netstandard2.0\Confuser.MSBuild.Tasks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/Confuser.Protections.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\Confuser.Protections\obj\Release\netstandard2.0\Confuser.Protections.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/Confuser.Renamer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\Confuser.Renamer\obj\Release\netstandard2.0\Confuser.Renamer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/Confuser.Runtime.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\Confuser.Runtime\obj\Release\net461\Confuser.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/Donut.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/PeNet.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\a\1\s\src\PeNet\obj\Release\netstandard2.0\PeNet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/refs/dnlib.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cobbr\Documents\Visual Studio 2017\Projects\ConfuserEx\dnlib\src\obj\Release\net35\dnlib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Covenant-master/Covenant/wwwroot/css/bootstrap-datetimepicker.css
Covenant-master/Covenant/wwwroot/css/bootstrap-datetimepicker.min.css
Covenant-master/Covenant/wwwroot/css/bootstrap-multiselect.css
Covenant-master/Covenant/wwwroot/css/bootstrap-select.min.css
Covenant-master/Covenant/wwwroot/css/bootstrap.css
Covenant-master/Covenant/wwwroot/css/bootstrap.min.css
Covenant-master/Covenant/wwwroot/css/covenant-graph.css
Covenant-master/Covenant/wwwroot/css/covenant.css
Covenant-master/Covenant/wwwroot/css/dashboard.css
Covenant-master/Covenant/wwwroot/css/jquery.typeahead.css
Covenant-master/Covenant/wwwroot/css/jquery.typeahead.min.css
Covenant-master/Covenant/wwwroot/css/signin.css
Covenant-master/Covenant/wwwroot/dist/clipboard.min.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/AUTHORS
Covenant-master/Covenant/wwwroot/dist/codemirror/CHANGELOG.md
Covenant-master/Covenant/wwwroot/dist/codemirror/CONTRIBUTING.md
Covenant-master/Covenant/wwwroot/dist/codemirror/LICENSE
Covenant-master/Covenant/wwwroot/dist/codemirror/README.md
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/comment/comment.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/comment/continuecomment.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/dialog/dialog.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/dialog/dialog.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/display/autorefresh.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/display/fullscreen.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/display/fullscreen.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/display/panel.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/display/placeholder.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/display/rulers.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/edit/closebrackets.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/edit/closetag.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/edit/continuelist.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/edit/matchbrackets.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/edit/matchtags.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/edit/trailingspace.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/brace-fold.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/comment-fold.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/foldcode.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/foldgutter.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/foldgutter.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/indent-fold.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/markdown-fold.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/fold/xml-fold.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/anyword-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/css-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/html-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/javascript-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/show-hint.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/show-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/sql-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/hint/xml-hint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/coffeescript-lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/css-lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/html-lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/javascript-lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/json-lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/lint.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/lint/yaml-lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/merge/merge.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/merge/merge.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/mode/loadmode.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/mode/multiplex.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/mode/multiplex_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/mode/overlay.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/mode/simple.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/runmode/colorize.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/runmode/runmode-standalone.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/runmode/runmode.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/runmode/runmode.node.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/scroll/annotatescrollbar.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/scroll/scrollpastend.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/scroll/simplescrollbars.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/scroll/simplescrollbars.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/search/jump-to-line.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/search/match-highlighter.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/search/matchesonscrollbar.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/search/matchesonscrollbar.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/search/search.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/search/searchcursor.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/selection/active-line.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/selection/mark-selection.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/selection/selection-pointer.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/tern/tern.css
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/tern/tern.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/tern/worker.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/addon/wrap/hardwrap.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/activeline.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/anywordhint.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/bidi.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/btree.html
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/buffers.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/changemode.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/closebrackets.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/closetag.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/complete.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/emacs.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/folding.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/fullscreen.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/hardwrap.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/html5complete.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/indentwrap.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/lint.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/loadmode.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/marker.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/markselection.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/matchhighlighter.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/matchtags.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/merge.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/multiplex.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/mustache.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/panel.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/placeholder.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/preview.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/requirejs.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/resize.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/rulers.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/runmode-standalone.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/runmode.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/search.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/simplemode.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/simplescrollbars.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/spanaffectswrapping_shim.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/sublime.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/tern.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/theme.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/trailingspace.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/variableheight.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/vim.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/visibletabs.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/widget.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/demo/xmlcomplete.html
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/activebookmark.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/docs.css
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/internals.html
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/logo.png
.png
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/logo.svg
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/manual.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/realworld.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/releases.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/reporting.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/upgrade_v2.2.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/upgrade_v3.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/upgrade_v4.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/doc/yinyang.png
.png
Covenant-master/Covenant/wwwroot/dist/codemirror/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/keymap/emacs.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/keymap/sublime.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/keymap/vim.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/lib/codemirror.css
Covenant-master/Covenant/wwwroot/dist/codemirror/lib/codemirror.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/apl/apl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/apl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/asciiarmor/asciiarmor.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/asciiarmor/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/asn.1/asn.1.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/asn.1/index.html
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/asterisk/asterisk.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/asterisk/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/brainfuck/brainfuck.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/brainfuck/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clike/clike.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clike/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clike/scala.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clike/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clojure/clojure.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clojure/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/clojure/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cmake/cmake.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cmake/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cobol/cobol.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cobol/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/coffeescript/coffeescript.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/coffeescript/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/commonlisp/commonlisp.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/commonlisp/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/crystal/crystal.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/crystal/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/css.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/gss.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/gss_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/less.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/less_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/scss.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/scss_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/css/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cypher/cypher.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cypher/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/cypher/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/d/d.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/d/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/d/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dart/dart.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dart/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/diff/diff.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/diff/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/django/django.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/django/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dockerfile/dockerfile.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dockerfile/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dockerfile/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dtd/dtd.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dtd/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dylan/dylan.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dylan/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/dylan/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ebnf/ebnf.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ebnf/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ecl/ecl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ecl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/eiffel/eiffel.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/eiffel/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/elm/elm.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/elm/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/erlang/erlang.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/erlang/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/factor/factor.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/factor/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/fcl/fcl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/fcl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/forth/forth.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/forth/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/fortran/fortran.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/fortran/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gas/gas.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gas/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gfm/gfm.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gfm/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gfm/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gherkin/gherkin.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/gherkin/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/go/go.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/go/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/groovy/groovy.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/groovy/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haml/haml.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haml/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haml/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/handlebars/handlebars.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/handlebars/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haskell-literate/haskell-literate.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haskell-literate/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haskell/haskell.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haskell/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haxe/haxe.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/haxe/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/htmlembedded/htmlembedded.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/htmlembedded/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/htmlmixed/htmlmixed.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/htmlmixed/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/http/http.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/http/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/idl/idl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/idl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/javascript/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/javascript/javascript.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/javascript/json-ld.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/javascript/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/javascript/typescript.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/jinja2/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/jinja2/jinja2.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/jsx/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/jsx/jsx.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/jsx/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/julia/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/julia/julia.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/livescript/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/livescript/livescript.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/lua/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/lua/lua.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/markdown/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/markdown/markdown.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/markdown/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mathematica/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mathematica/mathematica.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mbox/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mbox/mbox.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/meta.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mirc/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mirc/mirc.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mllike/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mllike/mllike.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/modelica/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/modelica/modelica.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mscgen/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mscgen/mscgen.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mscgen/mscgen_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mscgen/msgenny_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mscgen/xu_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mumps/index.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/mumps/mumps.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/nginx/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/nginx/nginx.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/nsis/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/nsis/nsis.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ntriples/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ntriples/ntriples.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/octave/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/octave/octave.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/oz/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/oz/oz.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pascal/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pascal/pascal.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pegjs/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pegjs/pegjs.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/perl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/perl/perl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/php/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/php/php.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/php/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pig/index.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pig/pig.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/powershell/index.html
.html .ps1 polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/powershell/powershell.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/powershell/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/properties/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/properties/properties.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/protobuf/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/protobuf/protobuf.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pug/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/pug/pug.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/puppet/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/puppet/puppet.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/python/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/python/python.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/python/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/q/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/q/q.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/r/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/r/r.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rpm/changes/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rpm/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rpm/rpm.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rst/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rst/rst.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ruby/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ruby/ruby.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ruby/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rust/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rust/rust.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/rust/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sas/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sas/sas.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sass/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sass/sass.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sass/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/scheme/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/scheme/scheme.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/shell/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/shell/shell.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/shell/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sieve/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sieve/sieve.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/slim/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/slim/slim.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/slim/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/smalltalk/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/smalltalk/smalltalk.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/smarty/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/smarty/smarty.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/solr/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/solr/solr.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/soy/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/soy/soy.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/soy/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sparql/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sparql/sparql.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/spreadsheet/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/spreadsheet/spreadsheet.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sql/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/sql/sql.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/stex/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/stex/stex.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/stex/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/stylus/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/stylus/stylus.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/swift/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/swift/swift.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/swift/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tcl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tcl/tcl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/textile/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/textile/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/textile/textile.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tiddlywiki/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tiddlywiki/tiddlywiki.css
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tiddlywiki/tiddlywiki.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tiki/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tiki/tiki.css
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tiki/tiki.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/toml/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/toml/toml.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tornado/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/tornado/tornado.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/troff/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/troff/troff.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ttcn-cfg/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ttcn-cfg/ttcn-cfg.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ttcn/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/ttcn/ttcn.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/turtle/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/turtle/turtle.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/twig/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/twig/twig.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vb/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vb/vb.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vbscript/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vbscript/vbscript.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/velocity/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/velocity/velocity.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/verilog/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/verilog/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/verilog/verilog.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vhdl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vhdl/vhdl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vue/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/vue/vue.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/wast/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/wast/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/wast/wast.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/webidl/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/webidl/webidl.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/xml/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/xml/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/xml/xml.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/xquery/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/xquery/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/xquery/xquery.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/yacas/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/yacas/yacas.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/yaml-frontmatter/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/yaml-frontmatter/yaml-frontmatter.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/yaml/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/yaml/yaml.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/z80/index.html
.html
Covenant-master/Covenant/wwwroot/dist/codemirror/mode/z80/z80.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/package.json
Covenant-master/Covenant/wwwroot/dist/codemirror/rollup.config.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/addon/runmode/codemirror-standalone.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/addon/runmode/codemirror.node.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/addon/runmode/runmode-standalone.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/addon/runmode/runmode.node.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/codemirror.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/Display.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/focus.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/gutters.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/highlight_worker.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/line_numbers.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/mode_state.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/operations.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/scroll_events.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/scrollbars.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/scrolling.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/selection.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/update_display.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/update_line.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/update_lines.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/display/view_tracking.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/CodeMirror.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/commands.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/deleteNearSelection.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/drop_events.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/fromTextArea.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/global_events.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/key_events.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/legacy.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/main.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/methods.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/mouse_events.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/options.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/edit/utils.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/ContentEditableInput.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/TextareaInput.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/indent.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/input.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/keymap.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/keynames.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/input/movement.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/line/highlight.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/line/line_data.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/line/pos.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/line/saw_special_spans.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/line/spans.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/line/utils_line.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/measurement/position_measurement.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/measurement/widgets.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/Doc.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/change_measurement.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/changes.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/chunk.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/document_data.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/history.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/line_widget.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/mark_text.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/selection.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/model/selection_updates.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/modes.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/StringStream.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/bidi.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/browser.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/dom.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/event.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/feature_detection.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/misc.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/src/util/operation_group.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/comment_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/contenteditable_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/doc_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/driver.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/emacs_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/html-hint-test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/index.html
.html .js polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/test/lint.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/mode_test.css
Covenant-master/Covenant/wwwroot/dist/codemirror/test/mode_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/multi_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/run.js
.js .sh linux polyglot
Covenant-master/Covenant/wwwroot/dist/codemirror/test/scroll_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/search_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/sql-hint-test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/sublime_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/test/vim_test.js
.js
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/3024-day.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/3024-night.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/abcdef.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/ambiance-mobile.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/ambiance.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/ayu-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/ayu-mirage.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/base16-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/base16-light.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/bespin.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/blackboard.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/cobalt.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/colorforth.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/darcula.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/dracula.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/duotone-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/duotone-light.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/eclipse.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/elegant.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/erlang-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/gruvbox-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/hopscotch.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/icecoder.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/idea.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/isotope.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/lesser-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/liquibyte.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/lucario.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/material-darker.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/material-ocean.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/material-palenight.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/material.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/mbo.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/mdn-like.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/midnight.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/monokai.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/moxer.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/neat.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/neo.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/night.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/nord.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/oceanic-next.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/panda-syntax.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/paraiso-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/paraiso-light.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/pastel-on-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/railscasts.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/rubyblue.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/seti.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/shadowfox.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/solarized.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/ssms.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/the-matrix.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/tomorrow-night-bright.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/tomorrow-night-eighties.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/ttcn.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/twilight.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/vibrant-ink.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/xq-dark.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/xq-light.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/yeti.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/yonce.css
Covenant-master/Covenant/wwwroot/dist/codemirror/theme/zenburn.css
Covenant-master/Covenant/wwwroot/dist/feather.css
Covenant-master/Covenant/wwwroot/dist/fonts/Feather.svg
.xml
Covenant-master/Covenant/wwwroot/dist/fonts/Feather.ttf
Covenant-master/Covenant/wwwroot/dist/fonts/Feather.woff
Covenant-master/Covenant/wwwroot/images/covenant-black.png
.png
Covenant-master/Covenant/wwwroot/images/covenant-bluewhite.png
.png
Covenant-master/Covenant/wwwroot/images/covenant-white.png
.png
Covenant-master/Covenant/wwwroot/images/covenant.png
.png
Covenant-master/Covenant/wwwroot/images/favicon.ico
Covenant-master/Covenant/wwwroot/images/favicon.svg
Covenant-master/Covenant/wwwroot/images/legend-blue.png
.png
Covenant-master/Covenant/wwwroot/images/legend-green.png
.png
Covenant-master/Covenant/wwwroot/images/legend-red.png
.png
Covenant-master/Covenant/wwwroot/js/bootstrap-datetimepicker.js
.js
Covenant-master/Covenant/wwwroot/js/bootstrap-datetimepicker.min.js
.js
Covenant-master/Covenant/wwwroot/js/bootstrap-multiselect.js
.js
Covenant-master/Covenant/wwwroot/js/bootstrap-select.min.js
.js
Covenant-master/Covenant/wwwroot/js/bootstrap.js
.js
Covenant-master/Covenant/wwwroot/js/bootstrap.min.js
.js
Covenant-master/Covenant/wwwroot/js/components/master.js
.js
Covenant-master/Covenant/wwwroot/js/covenant-graph.js
.js
Covenant-master/Covenant/wwwroot/js/d3.js
.js
Covenant-master/Covenant/wwwroot/js/d3.min.js
.js
Covenant-master/Covenant/wwwroot/js/inputfile.js
.js
Covenant-master/Covenant/wwwroot/js/jquery.js
.js
Covenant-master/Covenant/wwwroot/js/jquery.min.js
.js
Covenant-master/Covenant/wwwroot/js/moment.js
.js
Covenant-master/Covenant/wwwroot/js/moment.min.js
.js
Covenant-master/Covenant/wwwroot/js/popper.min.js
.js
Covenant-master/Covenant/wwwroot/js/typeahead.bundle.js
.js
Covenant-master/Covenant/wwwroot/js/typeahead.bundle.min.js
.js
Covenant-master/Covenant/wwwroot/lib/signalr/dist/browser/signalr.js
.js
Covenant-master/Covenant/wwwroot/lib/signalr/dist/browser/signalr.min.js
.js
Covenant-master/LICENSE
Covenant-master/README.md

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 68KB - Virtual size: 66KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

fb:b1:41:21:bd:dd:6a:f5:f6:ad:06:64:40:70:c3:7c:0c:1b:8a:c3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 272KB - Virtual size: 271KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 39KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

060912f4522489ca999f0db104d1af54

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr80

ntdll

mscoree

kernel32

advapi32

ws2_32

crypt32

user32

ole32

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.nep Size: 512B - Virtual size: 32B

.data Size: 2KB - Virtual size: 32KB

.pdata Size: 11KB - Virtual size: 11KB

.sdbid Size: 20KB - Virtual size: 20KB

.rsrc Size: 85KB - Virtual size: 85KB

.reloc Size: 14KB - Virtual size: 13KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

.text
Size: 68KB - Virtual size: 66KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

fb:b1:41:21:bd:dd:6a:f5:f6:ad:06:64:40:70:c3:7c:0c:1b:8a:c3
Signer

.text
Size: 272KB - Virtual size: 271KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 2.9MB - Virtual size: 2.9MB

.nep
Size: 512B - Virtual size: 32B

.data
Size: 2KB - Virtual size: 32KB

.pdata
Size: 11KB - Virtual size: 11KB

.sdbid
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 85KB - Virtual size: 85KB

.reloc
Size: 14KB - Virtual size: 13KB

.text
Size: 272KB - Virtual size: 269KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 172KB - Virtual size: 171KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 380KB - Virtual size: 378KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 544KB - Virtual size: 540KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 384KB - Virtual size: 380KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 2.6MB - Virtual size: 2.5MB

.rsrc
Size: 320KB - Virtual size: 316KB

.reloc
Size: 4KB - Virtual size: 12B