update[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

update.zip
Size

1.8MB
MD5

7306973f4ec8805a71896fb3cfbb2860
SHA1

ab1c53e3588694c5002669817d078c57cbe47b5d
SHA256

e4d922be6d3568957960f79f25491a66126637032d5fa3010733153d97ebf515
SHA512

cc88d0b0b08cb94a0726b6eab50f451b4a0b2fe7c3c6b777b97599c94ad5e7c6ea0b3b11c265d8f7b36e571bc9964af0680c354cfebf4815ea19438c5d3a39a3
SSDEEP

49152:8vF8eB3ZvQiNm/5XhG34AiRO8oApv4MaM94yqqi1Lo1GVn02:8JB3ZvRU11lw8TpZd94yqjsun02

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/t7compiler/DebugCompiler.exe
unpack001/t7compiler/External.dll
unpack001/t7compiler/Ionic.Zip.dll
unpack001/t7compiler/Irony.dll
unpack001/t7compiler/T7CompilerLib.dll
unpack001/t7compiler/T89CompilerLib.dll
unpack001/t7compiler/TreyarchCompiler.dll
unpack001/t7compiler/t7c_installer.exe
unpack001/t7compiler/t7cinternal.dll
unpack001/t7compiler/t8cinternal.dll
unpack001/t7compiler/xdevkit.dll
unpack001/t7compiler/xdrpc.dll

Files

update.zip
.zip
defaultproject/T7/.vscode/tasks.json
defaultproject/T7/gsc.conf
defaultproject/T7/project.code-workspace
defaultproject/T7/scripts/menu/headers.gsc
defaultproject/T7/scripts/menu/main.gsc
defaultproject/T8/.vscode/tasks.json
defaultproject/T8/gsc.conf
defaultproject/T8/project.code-workspace
defaultproject/T8/scripts/headers.gsc
defaultproject/T8/scripts/main.gsc
t7compiler/DebugCompiler.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\DebugCompiler\obj\x64\Debug\DebugCompiler.pdb

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t7compiler/DebugCompiler.exe.config
t7compiler/DebugCompiler.pdb
t7compiler/External.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\External\obj\x64\Debug\External.pdb

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t7compiler/External.pdb
t7compiler/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 449KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/Irony.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\MyProjects\Irony2\Irony\obj\Release\net40\Irony.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Buffers.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

Actual PE Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Buffers.xml
t7compiler/System.Collections.Immutable.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/02/2021, 20:09

Not After

10/02/2022, 20:09

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8e:ba:e7:d9:17:49:bd:71:4c:2c:14:a4:a1:84:e3:5d:00:98:82:aa:9a:d6:ad:9f:70:dd:5a:cd:c5:f7:72:c3
Signer

Actual PE Digest

8e:ba:e7:d9:17:49:bd:71:4c:2c:14:a4:a1:84:e3:5d:00:98:82:aa:9a:d6:ad:9f:70:dd:5a:cd:c5:f7:72:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Collections.Immutable/net461-Release/System.Collections.Immutable.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Collections.Immutable.xml
t7compiler/System.Memory.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Signer

Actual PE Digest

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Memory.xml
t7compiler/System.Numerics.Vectors.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Signer

Actual PE Digest

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

Digest Algorithm

sha256

PE Digest Matches

true

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Signer

Actual PE Digest

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Numerics.Vectors.xml
t7compiler/System.Reflection.Metadata.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:ba:38:ac:9f:c3:40:96:dd:52:2f:2e:1d:3b:db:03:da:d6:e8:88:91:6a:f5:3a:90:b5:6a:32:80:24:9a:92
Signer

Actual PE Digest

d8:ba:38:ac:9f:c3:40:96:dd:52:2f:2e:1d:3b:db:03:da:d6:e8:88:91:6a:f5:3a:90:b5:6a:32:80:24:9a:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/artifacts/obj/System.Reflection.Metadata/net461-Release/System.Reflection.Metadata.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Reflection.Metadata.xml
t7compiler/System.Runtime.CompilerServices.Unsafe.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/02/2021, 20:09

Not After

10/02/2022, 20:09

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Signer

Actual PE Digest

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/System.Runtime.CompilerServices.Unsafe.xml
t7compiler/T7CompilerLib.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\T7CompilerLib\obj\x64\Debug\T7CompilerLib.pdb

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t7compiler/T7CompilerLib.dll.config
.xml
t7compiler/T7CompilerLib.pdb
t7compiler/T7PCV2.db
t7compiler/T89CompilerLib.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\T8CompilerLib\obj\x64\Debug\T89CompilerLib.pdb

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t7compiler/T89CompilerLib.dll.config
.xml
t7compiler/T89CompilerLib.pdb
t7compiler/TreyarchCompiler.dll
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\TreyarchCompiler\obj\x64\Debug\TreyarchCompiler.pdb

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t7compiler/TreyarchCompiler.pdb
t7compiler/motd
t7compiler/t7c_installer.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\ExternalTestingUtility\obj\x64\Debug\t7c_installer.pdb

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t7compiler/t7cinternal.dll
.dll windows:6 windows x64 arch:x64

af407ee795acda90bd56d31de8bddeda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Modding\Call of Duty\Black Ops 3\pub_compiler\treyarchcompiler\x64\Release\t7cinternal.pdb

Imports

kernel32

WriteFile
CreateFileA
CloseHandle
VirtualQuery
WriteConsoleW
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapReAlloc
HeapSize
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode

user32

FindWindowA
SendMessageA
FindWindowExA

Exports

Exports

HotloadScript
RegisterDetours
RemoveDetours

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/t8cinternal.dll
.dll windows:6 windows x64 arch:x64

d4ee3cda44b13a8d8154da99be2ac2e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
CloseHandle
WriteConsoleW
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode

user32

FindWindowA
SendMessageA
FindWindowExA

Exports

Exports

RegisterDetours
RemoveDetours
ResetDetours

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/vm_codes.db2
t7compiler/xdevkit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
t7compiler/xdrpc.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XDRPC.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vscode-txgsc-1.0.8.vsix
.zip
[Content_Types].xml
.xml
extension.vsixmanifest
.xml
extension/CHANGELOG.md
extension/debug.log
extension/generator/defGenerator.js
.js
extension/gsc.code-workspace
extension/gsc.configuration.json
extension/images/logo.png
.png
extension/native/deprecated/parser/.vscode/launch.json
extension/native/deprecated/parser/.vscode/tasks.json
extension/native/deprecated/parser/bin/test.gsc
extension/native/deprecated/parser/bin/test.sh
.sh linux
extension/native/deprecated/parser/makefile
extension/native/deprecated/parser/src/cpp/arg.cpp
extension/native/deprecated/parser/src/cpp/arg.h
extension/native/deprecated/parser/src/cpp/cmd.cpp
extension/native/deprecated/parser/src/cpp/cmd.h
extension/native/deprecated/parser/src/cpp/commands/cmd_common.h
extension/native/deprecated/parser/src/cpp/commands/cmd_help.cpp
extension/native/deprecated/parser/src/cpp/commands/cmd_symbols.cpp
extension/native/deprecated/parser/src/cpp/commands/cmd_tree.cpp
extension/native/deprecated/parser/src/cpp/cvar.cpp
extension/native/deprecated/parser/src/cpp/cvar.h
extension/native/deprecated/parser/src/cpp/main.cpp
extension/native/deprecated/parser/src/cpp/platform.h
extension/native/deprecated/parser/src/cpp/symbols/animtree.cpp
extension/native/deprecated/parser/src/cpp/symbols/animtree.h
extension/native/deprecated/parser/src/cpp/symbols/conditional.cpp
extension/native/deprecated/parser/src/cpp/symbols/conditional.h
extension/native/deprecated/parser/src/cpp/symbols/expression.cpp
extension/native/deprecated/parser/src/cpp/symbols/expression.h
extension/native/deprecated/parser/src/cpp/symbols/function.cpp
extension/native/deprecated/parser/src/cpp/symbols/function.h
extension/native/deprecated/parser/src/cpp/symbols/group.cpp
extension/native/deprecated/parser/src/cpp/symbols/group.h
extension/native/deprecated/parser/src/cpp/symbols/identifier.cpp
extension/native/deprecated/parser/src/cpp/symbols/identifier.h
extension/native/deprecated/parser/src/cpp/symbols/include.cpp
extension/native/deprecated/parser/src/cpp/symbols/include.h
extension/native/deprecated/parser/src/cpp/symbols/literal.cpp
extension/native/deprecated/parser/src/cpp/symbols/literal.h
extension/native/deprecated/parser/src/cpp/symbols/member.cpp
extension/native/deprecated/parser/src/cpp/symbols/member.h
extension/native/deprecated/parser/src/cpp/symbols/operator_enum.cpp
extension/native/deprecated/parser/src/cpp/symbols/operator_enum.h
extension/native/deprecated/parser/src/cpp/symbols/pointer.cpp
extension/native/deprecated/parser/src/cpp/symbols/pointer.h
extension/native/deprecated/parser/src/cpp/symbols/reference.cpp
extension/native/deprecated/parser/src/cpp/symbols/reference.h
extension/native/deprecated/parser/src/cpp/symbols/return.cpp
extension/native/deprecated/parser/src/cpp/symbols/return.h
extension/native/deprecated/parser/src/cpp/symbols/symbol.cpp
extension/native/deprecated/parser/src/cpp/symbols/symbol.h
extension/native/deprecated/parser/src/cpp/symbols/symbol_enum.cpp
extension/native/deprecated/parser/src/cpp/symbols/symbol_enum.h
extension/native/deprecated/parser/src/cpp/symbols/wait.cpp
extension/native/deprecated/parser/src/cpp/symbols/wait.h
extension/native/deprecated/parser/src/cpp/util/llist.h
extension/native/deprecated/parser/src/cpp/util/location.cpp
extension/native/deprecated/parser/src/cpp/util/location.h
extension/native/deprecated/parser/src/gsc.l
extension/native/deprecated/parser/src/gsc.ypp
extension/node_modules/vscode-jsonrpc/.eslintignore
extension/node_modules/vscode-jsonrpc/License.txt
extension/node_modules/vscode-jsonrpc/README.md
.js
extension/node_modules/vscode-jsonrpc/lib/cancellation.d.ts
extension/node_modules/vscode-jsonrpc/lib/cancellation.js
.js
extension/node_modules/vscode-jsonrpc/lib/events.d.ts
extension/node_modules/vscode-jsonrpc/lib/events.js
.js
extension/node_modules/vscode-jsonrpc/lib/is.d.ts
extension/node_modules/vscode-jsonrpc/lib/is.js
extension/node_modules/vscode-jsonrpc/lib/linkedMap.d.ts
extension/node_modules/vscode-jsonrpc/lib/linkedMap.js
.js
extension/node_modules/vscode-jsonrpc/lib/main.d.ts
extension/node_modules/vscode-jsonrpc/lib/main.js
.js
extension/node_modules/vscode-jsonrpc/lib/messageReader.d.ts
extension/node_modules/vscode-jsonrpc/lib/messageReader.js
.js
extension/node_modules/vscode-jsonrpc/lib/messageWriter.d.ts
extension/node_modules/vscode-jsonrpc/lib/messageWriter.js
.js
extension/node_modules/vscode-jsonrpc/lib/messages.d.ts
extension/node_modules/vscode-jsonrpc/lib/messages.js
.js
extension/node_modules/vscode-jsonrpc/lib/pipeSupport.d.ts
extension/node_modules/vscode-jsonrpc/lib/pipeSupport.js
.js
extension/node_modules/vscode-jsonrpc/lib/socketSupport.d.ts
extension/node_modules/vscode-jsonrpc/lib/socketSupport.js
.js
extension/node_modules/vscode-jsonrpc/package.json
extension/node_modules/vscode-jsonrpc/thirdpartynotices.txt
extension/node_modules/vscode-jsonrpc/typings/thenable.d.ts
extension/node_modules/vscode-languageclient/License.txt
extension/node_modules/vscode-languageclient/README.md
extension/node_modules/vscode-languageclient/lib/client.d.ts
extension/node_modules/vscode-languageclient/lib/client.js
.js
extension/node_modules/vscode-languageclient/lib/codeConverter.d.ts
extension/node_modules/vscode-languageclient/lib/codeConverter.js
.js
extension/node_modules/vscode-languageclient/lib/colorProvider.d.ts
extension/node_modules/vscode-languageclient/lib/colorProvider.js
.js
extension/node_modules/vscode-languageclient/lib/configuration.d.ts
extension/node_modules/vscode-languageclient/lib/configuration.js
.js
extension/node_modules/vscode-languageclient/lib/foldingRange.d.ts
extension/node_modules/vscode-languageclient/lib/foldingRange.js
.js
extension/node_modules/vscode-languageclient/lib/implementation.d.ts
extension/node_modules/vscode-languageclient/lib/implementation.js
.js
extension/node_modules/vscode-languageclient/lib/main.d.ts
extension/node_modules/vscode-languageclient/lib/main.js
.js
extension/node_modules/vscode-languageclient/lib/protocolCodeLens.d.ts
extension/node_modules/vscode-languageclient/lib/protocolCodeLens.js
extension/node_modules/vscode-languageclient/lib/protocolCompletionItem.d.ts
extension/node_modules/vscode-languageclient/lib/protocolCompletionItem.js
extension/node_modules/vscode-languageclient/lib/protocolConverter.d.ts
extension/node_modules/vscode-languageclient/lib/protocolConverter.js
.js
extension/node_modules/vscode-languageclient/lib/protocolDocumentLink.d.ts
extension/node_modules/vscode-languageclient/lib/protocolDocumentLink.js
extension/node_modules/vscode-languageclient/lib/typeDefinition.d.ts
extension/node_modules/vscode-languageclient/lib/typeDefinition.js
.js
extension/node_modules/vscode-languageclient/lib/utils/async.d.ts
extension/node_modules/vscode-languageclient/lib/utils/async.js
.js
extension/node_modules/vscode-languageclient/lib/utils/electron.d.ts
extension/node_modules/vscode-languageclient/lib/utils/electron.js
.js
extension/node_modules/vscode-languageclient/lib/utils/electronForkStart.d.ts
extension/node_modules/vscode-languageclient/lib/utils/electronForkStart.js
.js
extension/node_modules/vscode-languageclient/lib/utils/is.d.ts
extension/node_modules/vscode-languageclient/lib/utils/is.js
extension/node_modules/vscode-languageclient/lib/utils/processes.d.ts
extension/node_modules/vscode-languageclient/lib/utils/processes.js
.js
extension/node_modules/vscode-languageclient/lib/utils/terminateProcess.sh
.sh linux
extension/node_modules/vscode-languageclient/lib/utils/uuid.d.ts
extension/node_modules/vscode-languageclient/lib/utils/uuid.js
extension/node_modules/vscode-languageclient/lib/workspaceFolders.d.ts
extension/node_modules/vscode-languageclient/lib/workspaceFolders.js
.js
extension/node_modules/vscode-languageclient/package.json
extension/node_modules/vscode-languageclient/thirdpartynotices.txt
extension/node_modules/vscode-languageserver-protocol/.eslintignore
extension/node_modules/vscode-languageserver-protocol/License.txt
extension/node_modules/vscode-languageserver-protocol/README.md
extension/node_modules/vscode-languageserver-protocol/lib/main.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/main.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/messages.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/messages.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.callHierarchy.proposed.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.callHierarchy.proposed.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.colorProvider.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.colorProvider.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.configuration.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.configuration.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.d.ts
.vbs
extension/node_modules/vscode-languageserver-protocol/lib/protocol.declaration.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.declaration.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.foldingRange.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.foldingRange.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.implementation.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.implementation.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.progress.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.progress.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.selectionRange.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.selectionRange.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.sematicTokens.proposed.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.sematicTokens.proposed.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.typeDefinition.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.typeDefinition.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/protocol.workspaceFolders.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/protocol.workspaceFolders.js
.js
extension/node_modules/vscode-languageserver-protocol/lib/utils/is.d.ts
extension/node_modules/vscode-languageserver-protocol/lib/utils/is.js
extension/node_modules/vscode-languageserver-protocol/package.json
extension/node_modules/vscode-languageserver-protocol/thirdpartynotices.txt
extension/node_modules/vscode-languageserver-types/.eslintignore
extension/node_modules/vscode-languageserver-types/License.txt
extension/node_modules/vscode-languageserver-types/README.md
extension/node_modules/vscode-languageserver-types/lib/esm/main.d.ts
extension/node_modules/vscode-languageserver-types/lib/esm/main.js
.js
extension/node_modules/vscode-languageserver-types/lib/tsconfig.esm.tsbuildInfo
extension/node_modules/vscode-languageserver-types/lib/umd/main.d.ts
extension/node_modules/vscode-languageserver-types/lib/umd/main.js
.js
extension/node_modules/vscode-languageserver-types/package.json
extension/node_modules/vscode-languageserver-types/tsconfig.esm.json
extension/out/defs/defs.js
.js
extension/out/defs/field.js
.js
extension/out/extension.js
extension/out/features/completionItemProvider.js
.js
extension/out/request.js
.js
extension/package.json
extension/snippets.json
extension/syntaxes/gsc.tmLanguage
.xml

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 33KB - Virtual size: 32KB

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 169KB - Virtual size: 168KB

.rsrc Size: 1024B - Virtual size: 888B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 449KB - Virtual size: 448KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 138KB - Virtual size: 138KB

.rsrc Size: 1024B - Virtual size: 908B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

8e:ba:e7:d9:17:49:bd:71:4c:2c:14:a4:a1:84:e3:5d:00:98:82:aa:9a:d6:ad:9f:70:dd:5a:cd:c5:f7:72:c3Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 175KB - Virtual size: 174KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

.text
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: 169KB - Virtual size: 168KB

.rsrc
Size: 1024B - Virtual size: 888B

.text
Size: 449KB - Virtual size: 448KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 138KB - Virtual size: 138KB

.rsrc
Size: 1024B - Virtual size: 908B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

8e:ba:e7:d9:17:49:bd:71:4c:2c:14:a4:a1:84:e3:5d:00:98:82:aa:9a:d6:ad:9f:70:dd:5a:cd:c5:f7:72:c3
Signer

.text
Size: 175KB - Virtual size: 174KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Signer

.text
Size: 126KB - Virtual size: 126KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Signer

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Signer

.text
Size: 93KB - Virtual size: 93KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d8:ba:38:ac:9f:c3:40:96:dd:52:2f:2e:1d:3b:db:03:da:d6:e8:88:91:6a:f5:3a:90:b5:6a:32:80:24:9a:92
Signer

.text
Size: 440KB - Virtual size: 440KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Signer