main.zip
- SHA256 babf47d8493a17a590dfe66ba74f204a24c9e2ff878a52deabe3082766d72a79
Overview
overview
10Static
static
10Installer/Accord.dll
windows7-x64
1Installer/Accord.dll
windows10-2004-x64
1Installer/CapCut.exe
windows7-x64
8Installer/CapCut.exe
windows10-2004-x64
10Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...rd.dll
windows7-x64
1Installer/...rd.dll
windows10-2004-x64
1Installer/...eo.dll
windows7-x64
1Installer/...eo.dll
windows10-2004-x64
1Installer/...eo.dll
windows7-x64
1Installer/...eo.dll
windows10-2004-x64
1Installer/...eo.dll
windows7-x64
1Installer/...eo.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Installer/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Installer/CapCut.exe
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
Installer/CapCut.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral5
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Installer/Tools/Accord.3.8.0/lib/net35/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Installer/Tools/Accord.3.8.0/lib/net35/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Installer/Tools/Accord.3.8.0/lib/net40/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Installer/Tools/Accord.3.8.0/lib/net40/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Installer/Tools/Accord.3.8.0/lib/net45/Accord.dll
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Installer/Tools/Accord.3.8.0/lib/net45/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Installer/Tools/Accord.3.8.0/lib/net46/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Installer/Tools/Accord.3.8.0/lib/net46/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Installer/Tools/Accord.3.8.0/lib/net462/Accord.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Installer/Tools/Accord.3.8.0/lib/net462/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.dll
Resource
win7-20241023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.dll
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target main.zip
- Size 20.1MB
- Sample241029-1rppea1ark
- SHA256 babf47d8493a17a590dfe66ba74f204a24c9e2ff878a52deabe3082766d72a79
- MD5 32672d2c0e42c11b9c05fb52dbceb4cf
- SHA1 bef3243b7db34785dcb9d456be25fc0ed02f3932
- SHA512 f996a26f0c6efe58fe94ad63893603d6102326fd0d4f5e304869ca776312831694ecb217ceed2a791119c0101634d2f9a563d7b15658eb0818f105a71c4d268b
- SSDEEP 393216:P2lQQT08IesheJJkSMtSEu6dfOIdCbr2uDoqYnOuI:Pcgb9UJJ2tSMf83XYns
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.0.0
Botnet
-
Office
C2
-
82.117.243.110:5173
Mutex
-
edH11NGQWIdCwvLx00
Attributes
-
encryption_key
aGPuRaDerdUDJPrAfXtB
-
install_name
csrss.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Framework
-
subdirectory
SubDir
Extracted
Family
-
vidar
C2
-
https://t.me/asg7rd
-
https://steamcommunity.com/profiles/76561199794498376
Attributes
-
user_agent
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15 Ddg/17.6
Signatures
- Async RAT payload 1 IoCs
resource yara_rule static1/unpack001/start-main/pthjadh.exe family_asyncrat - Asyncrat family
- DCRat payload 5 IoCs
resource yara_rule static1/unpack001/start-main/hnfsefawd.exe family_dcrat_v2 static1/unpack001/start-main/jythjadthawed.exe family_dcrat_v2 static1/unpack001/start-main/ksfawtyha.exe family_dcrat_v2 static1/unpack001/start-main/odrsfgawd.exe family_dcrat_v2 static1/unpack001/start-main/yjadyjasfdtj.exe family_dcrat_v2 - Dcrat family
- Detect Vidar Stealer 1 IoCs
resource yara_rule static1/unpack001/start-main/njrtdhadawt.exe family_vidar_v7 - Quasar family
- Quasar payload 2 IoCs
resource yara_rule static1/unpack001/start-main/hbfgjhhesfd.exe family_quasar static1/unpack001/start-main/jerniuiopu.exe family_quasar - StormKitty payload 1 IoCs
resource yara_rule static1/unpack001/start-main/pthjadh.exe family_stormkitty - Stormkitty family
-
resource yara_rule static1/unpack001/start-main/pthjadh.exe VenomRAT - Venomrat family
- Vidar family
- Unsigned PE 47 IoCs
Checks for missing Authenticode signature.
resource unpack002/Installer/Accord.dll unpack002/Installer/CapCut.exe unpack002/Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net35/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net40/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net45/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net46/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/net462/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.dll unpack002/Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net35-unity web v3.5/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net35/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net40/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net45/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net46/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/net462/Accord.Video.dll unpack002/Installer/Tools/Accord.Video.3.8.0/lib/netstandard2.0/Accord.Video.dll unpack002/Installer/avdevice-57.dll unpack002/Installer/avformat-57.dll unpack001/start-main/Session.exe unpack001/start-main/Sushi.exe unpack001/start-main/fgthawd.exe unpack001/start-main/gawdrgasd.exe unpack001/start-main/hbfgjhhesfd.exe unpack001/start-main/hdawuithjawe.exe unpack001/start-main/hnfsefawd.exe unpack001/start-main/jerniuiopu.exe unpack001/start-main/jthusjefth.exe unpack001/start-main/jythjadthawed.exe unpack001/start-main/khseofk.exe unpack001/start-main/khtoawdltrha.exe unpack001/start-main/ksfawtyha.exe unpack001/start-main/ktyhpldea.exe unpack001/start-main/lhoefskghas.exe unpack001/start-main/mhbiwejrtgha.exe unpack001/start-main/njrtdhadawt.exe unpack001/start-main/odrsfgawd.exe unpack001/start-main/opthjdkawrtgh.exe unpack001/start-main/pthjadh.exe unpack001/start-main/ptihjawdthas.exe unpack001/start-main/yjadyjasfdtj.exe
File Explorer
-
main.zip.zip 20.1MB
-
start-main/Installer.zip.zip 5.1MB
-
Installer/Accord.dll.dll 128KB
-
Installer/CapCut.exe.exe 332KB
-
Installer/Tools/Accord.3.8.0/.signature.p7s9KB
-
Installer/Tools/Accord.3.8.0/Accord.3.8.0.nupkg.nupkg 1003KB
-
Installer/Tools/Accord.3.8.0/build/Accord.dll.config213B
-
Installer/Tools/Accord.3.8.0/build/Accord.targets400B
-
Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.dll.dll 148KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.xml.xml 477KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.dll.dll 148KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.xml.xml 477KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.dll.dll 148KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.xml.xml 477KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.dll.dll 148KB
-
Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.xml.xml 477KB
-
Installer/Tools/Accord.3.8.0/lib/net35/Accord.dll.dll 148KB
-
Installer/Tools/Accord.3.8.0/lib/net35/Accord.xml.xml 477KB
-
Installer/Tools/Accord.3.8.0/lib/net40/Accord.dll.dll 128KB
-
Installer/Tools/Accord.3.8.0/lib/net40/Accord.xml.xml 418KB
-
Installer/Tools/Accord.3.8.0/lib/net45/Accord.dll.dll 128KB
-
Installer/Tools/Accord.3.8.0/lib/net45/Accord.xml.xml 408KB
-
Installer/Tools/Accord.3.8.0/lib/net46/Accord.dll.dll 128KB
-
Installer/Tools/Accord.3.8.0/lib/net46/Accord.xml.xml 408KB
-
Installer/Tools/Accord.3.8.0/lib/net462/Accord.dll.dll 128KB
-
Installer/Tools/Accord.3.8.0/lib/net462/Accord.xml.xml 408KB
-
Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.dll.dll 119KB
-
Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.xml.xml 406KB
-
Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.dll.dll 112KB
-
Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.xml.xml 408KB
-
Installer/Tools/Accord.Video.3.8.0/.signature.p7s9KB
-
Installer/Tools/Accord.Video.3.8.0/Accord.Video.3.8.0.nupkg.nupkg 225KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity web v3.5/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity web v3.5/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net35/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net40/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net40/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net45/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net45/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net46/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net46/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net462/Accord.Video.dll.dll 40KB
-
Installer/Tools/Accord.Video.3.8.0/lib/net462/Accord.Video.xml.vbs .xml 64KB
-
Installer/Tools/Accord.Video.3.8.0/lib/netstandard2.0/Accord.Video.dll.dll 27KB
-
Installer/Tools/Accord.Video.3.8.0/lib/netstandard2.0/Accord.Video.xml.vbs .xml 64KB
-
Installer/avdevice-57.dll.dll 1.9MB
-
Installer/avformat-57.dll.dll 4.7MB
-
start-main/Session.exe.exe 1.5MB
-
start-main/Sushi.exe.exe 12KB
-
start-main/fgthawd.exe.exe 472KB
-
start-main/gawdrgasd.exe.exe 329KB
-
start-main/hbfgjhhesfd.exe.exe 288KB
-
start-main/hdawuithjawe.exe.exe 1.2MB
-
start-main/hnfsefawd.exe.exe 933KB
-
start-main/jerniuiopu.exe.exe 288KB
-
start-main/jthusjefth.exe.exe 1.2MB
-
start-main/jythjadthawed.exe.exe 855KB
-
start-main/khseofk.exe.exe 1.2MB
-
start-main/khtoawdltrha.exe.exe 1.2MB
-
start-main/ksfawtyha.exe.exe 855KB
-
start-main/ktyhpldea.exe.exe 1.2MB
-
start-main/lhoefskghas.exe.exe 415KB
-
start-main/ltpohpadw.exe.exe 2.9MB
-
start-main/mhbiwejrtgha.exe.exe 313KB
-
start-main/njrtdhadawt.exe.exe 943KB
-
start-main/odrsfgawd.exe.exe 526KB
-
start-main/opthjdkawrtgh.exe.exe 392KB
-
start-main/pdf.exe.exe 2.7MB
-
$TEMP/Desk45KB
-
$TEMP/Easter52KB
-
$TEMP/Misc11KB
-
$TEMP/Rank865KB
-
$TEMP/Team67KB
-
$TEMP/Urls58KB
-
MonitoredAlgorithm/Illegal65KB
-
MonitoredAlgorithm/Ir98KB
-
MonitoredAlgorithm/Leather50KB
-
MonitoredAlgorithm/Literacy80KB
-
MonitoredAlgorithm/Mandate68KB
-
MonitoredAlgorithm/Mitsubishi81KB
-
MonitoredAlgorithm/Nc87KB
-
MonitoredAlgorithm/Niger54KB
-
MonitoredAlgorithm/Pairs85KB
-
MonitoredAlgorithm/Rod67KB
-
MonitoredAlgorithm/Springer53KB
-
MonitoredAlgorithm/Toronto56KB
-
MonitoredAlgorithm/Trivia96KB
-
NetscapeTier/Premier96KB
-
StopsPal/Alan56KB
-
StopsPal/Applicants83KB
-
StopsPal/Babes77KB
-
StopsPal/Browsing96KB
-
StopsPal/Cabin69KB
-
StopsPal/Deviation54KB
-
StopsPal/Opens60KB
-
StopsPal/Payroll97KB
-
StopsPal/Pentium86KB
-
StopsPal/Results84KB
-
StopsPal/Sans94KB
-
StopsPal/Such6KB
-
StopsPal/Voip58KB
-
StopsPal/Wma64KB
-
start-main/pthjadh.exe.exe 2.3MB
-
start-main/ptihjawdthas.exe.exe 29KB
-
start-main/yjadyjasfdtj.exe.exe 855KB
start-main/Installer.zip
- SHA256 1c620a7e3ff0f7de1e9080474a1f0a3adebc1868102efa5f8ccaf284d7bc59cb
- MD5 ff00853903bd75da0fe384d949566566
- SHA1 16156f0144b4b53254bdfa1aa8a0599757e6d8b2
- SHA512 1deea21f8380f6bfa6a6546a615cefa70a5232efbfd486c6a377f272792332994dd0f65fbf5f2d8ab12bf41bc32e36bde43323ac7a5c27a765c0a952d5036099
- SSDEEP 98304:ZNa8l+SDKQwZyGRhrmv9j/iKqyWfX23eYYF/cv6qYzcmqKKw:C8l+ZI/iKY4epznqKKw
- MD5 SHA1 SHA512 SSDEEP
Installer/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d36c225a84415c01bc2a8e84096590a7206dfc3d36173e3c7b6a62a04c0a33a9
- MD5 462500956d2d63725fb60c83516cec35
- SHA1 2d6326cb19d88bfdaa84112b6ff0259ec72d60f4
- SHA512 10b1c3fcdd21464bb6f1aee796171237dc3f0763b1a6b8b41a2410aa264047fc8e256588a06ae141905b78e9a85414797b22ecb73c2a9fca150b81f63efdde46
- SSDEEP 1536:+x8piUO4o++aIRYMUVptbFoSycwX6xIp4EB7zujXe4HvFIdtdUlIAq:+x8piUO5aIRtUVTFl86PEB7yFdIdY6F
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
124890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net462\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/CapCut.exe
- IMPHASH 82e9f830e8c4dfa28b9827c55b0c7c9e
- SHA256 a274bbefeca015c06188faf15493b32f3ed4b175a92fa4fdf59a0da55059f6db
- MD5 9095698e073c305cb31934f911e2f224
- SHA1 3c3a7cf49ecc1faf01d8f85d345425a3c417361e
- SHA512 8470d517a74c721911b7a5b93a8513630a9cfef747ef143296bfdcb3174620ddec7d2e170afbed2621f441aaa663b46eec676c9e8065b9fde87bf15633190fb6
- SSDEEP 6144:KurqFF99YI+Ka804ozhmKuRb5B/OalLbQg1/R:YFFXY9vrzoKud59Oahbv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
81616
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\danie\source\repos\MathsC++\x64\Release\MathsC++.pdb
kernel32
GetConsoleWindow
CloseHandle
CreateFileW
HeapSize
GetLastError
GetModuleFileNameW
WriteConsoleW
CreateProcessW
CreateDirectoryW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
WideCharToMultiByte
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
Sleep
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
WakeAllConditionVariable
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
RtlUnwind
user32
ShowWindow
advapi32
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
shell32
ShellExecuteExW
urlmon
URLDownloadToFileW
Name
.text
Size
235KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=181, id=261, version=30795,
count=17, id=260, version=30795,
count=10, id=259, version=33808,
count=17, id=260, version=33808,
count=92, id=261, version=33808,
count=11, id=257, version=30795,
count=145, id=1, productName=Unmarked objects,
count=1, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,
Installer/Tools/Accord.3.8.0/.signature.p7s
- SHA256 bb34e70649a5a6d659bd0ba0c42f3cb963ad178c984d223f9201baeca9b86363
- MD5 89819b2f2386db2761e13d953851c996
- SHA1 174fc4f83efb4359c5f140c528214240e3f9d7ee
- SHA512 c355d04b2d47bf587ac3d2a0b9812afb104bb2a07ffcb15509355523a878881e2d4102a4c1e7d22ffeddbd60aa5289943f1db5c236d59e3ffb42ce7ce15fe0aa
- SSDEEP 192:rd+7x0KDWpHhXZCVzV07RrYxAC9DH0JOqNG8Fp28Wh8naWon:BcvDGGVpmC9oJNNzFwhhiaZn
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/Accord.3.8.0.nupkg
- SHA256 9bfe7d078c6feeee2727ebb0c4de6e03f9c44885d47624caa3bc3e5acb6fc6cf
- MD5 3ebc20506cf5a823a87125f874925dd6
- SHA1 371252a77d98f2bd74f3fc0e3f74a52715c43305
- SHA512 f9e54d9a62d74cbe47659df371682042d2be70cb3a16108a8a6510df9324cb045c1615da9e0a50758bced1b031f5791caadc841d13b4c414aa371a1e84231e5f
- SSDEEP 24576:mJxUQqJkUQXJTUQPJkUQZJBUQlJfweRZipwpyjppeSsC:exfykf5TfBkfzBffwKyyHC
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/build/Accord.dll.config
- SHA256 3049e83f9b7fa9285a82fb3c7740e9c225b66a31f805d3582a9bfd34b5dd8e6e
- MD5 08a09a4c92f3b8a8ad1b1c268049bea1
- SHA1 5ad3f318e9e5470db33e3080e864f887063fcc5f
- SHA512 ebb465a0ccc5a001eb23357ee0807f86b9bb92b285340a6679dd42eb6efe15fd4b965f44a7e9c3115aaa51f777415ee37152ea9c9e73f749538c170f8b84ab64
- MD5 SHA1 SHA512
Installer/Tools/Accord.3.8.0/build/Accord.targets
- SHA256 0dcc4f0cf7003bf4b774cff9c9c343f4bd3e5fcf0eee77e1f1fc3731eb6c95e2
- MD5 d2c5dc64a9a80951c690c58ac7ae17c3
- SHA1 e0e480d82f61b0f86ffa2b27899d5076f2b8e9cf
- SHA512 84581befa071857db949570d032657e5a1e15d549d3c704805fdbd5f85b5ca1a1866ce9d2e9882a85b6bf11b2c0ce16cb92425b9b4aa0992c1462f9f9ee1ea5e
- MD5 SHA1 SHA512
Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e9838f1e2d120ed2297bab01042c5d947506fbf4a96e330528cc5bcf8960da0
- MD5 e155917f082b3d7754937f1c8a378209
- SHA1 f7793aa262439ab98323dd9a76988608cb3d6105
- SHA512 3848a4048a9e443239064129747c9f449d149dd8400b6a76362d4fd69e84bc9baba85c2600c5adfaa5ba3cfe224d77e2166557cb4ffcdcaea822481d57658cd8
- SSDEEP 3072:G+cdP98cPVdSvw4PDFiQezKm2sTqVJtPWdGLSJhfZETCvT4H:G+cdP98cP+4kLezKm2sgnPWoLmRZETCU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net35\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net35-unity full v3.5/Accord.xml
- SHA256 d9e5ba2cc8321c3be6c981fb644afcfc67ec904efade6e59a21d33816e022aff
- MD5 4e62e531fbd5f72814ff7b28924aa233
- SHA1 03fa36916c6f14291b353feed86f35af80c6f61d
- SHA512 b58ce0b3849b557b705257d0e60e9184e76f5f48d9d2b38beebed7475dda0616fbf22084990be092d8a056a70984f90014aac31db561d095f709e9d1d00b8340
- SSDEEP 6144:ka1MsFG4zwgR3Qq9YUL78NkPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOA:z1M03U
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e9838f1e2d120ed2297bab01042c5d947506fbf4a96e330528cc5bcf8960da0
- MD5 e155917f082b3d7754937f1c8a378209
- SHA1 f7793aa262439ab98323dd9a76988608cb3d6105
- SHA512 3848a4048a9e443239064129747c9f449d149dd8400b6a76362d4fd69e84bc9baba85c2600c5adfaa5ba3cfe224d77e2166557cb4ffcdcaea822481d57658cd8
- SSDEEP 3072:G+cdP98cPVdSvw4PDFiQezKm2sTqVJtPWdGLSJhfZETCvT4H:G+cdP98cP+4kLezKm2sgnPWoLmRZETCU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net35\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net35-unity micro v3.5/Accord.xml
- SHA256 d9e5ba2cc8321c3be6c981fb644afcfc67ec904efade6e59a21d33816e022aff
- MD5 4e62e531fbd5f72814ff7b28924aa233
- SHA1 03fa36916c6f14291b353feed86f35af80c6f61d
- SHA512 b58ce0b3849b557b705257d0e60e9184e76f5f48d9d2b38beebed7475dda0616fbf22084990be092d8a056a70984f90014aac31db561d095f709e9d1d00b8340
- SSDEEP 6144:ka1MsFG4zwgR3Qq9YUL78NkPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOA:z1M03U
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e9838f1e2d120ed2297bab01042c5d947506fbf4a96e330528cc5bcf8960da0
- MD5 e155917f082b3d7754937f1c8a378209
- SHA1 f7793aa262439ab98323dd9a76988608cb3d6105
- SHA512 3848a4048a9e443239064129747c9f449d149dd8400b6a76362d4fd69e84bc9baba85c2600c5adfaa5ba3cfe224d77e2166557cb4ffcdcaea822481d57658cd8
- SSDEEP 3072:G+cdP98cPVdSvw4PDFiQezKm2sTqVJtPWdGLSJhfZETCvT4H:G+cdP98cP+4kLezKm2sgnPWoLmRZETCU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net35\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net35-unity subset v3.5/Accord.xml
- SHA256 d9e5ba2cc8321c3be6c981fb644afcfc67ec904efade6e59a21d33816e022aff
- MD5 4e62e531fbd5f72814ff7b28924aa233
- SHA1 03fa36916c6f14291b353feed86f35af80c6f61d
- SHA512 b58ce0b3849b557b705257d0e60e9184e76f5f48d9d2b38beebed7475dda0616fbf22084990be092d8a056a70984f90014aac31db561d095f709e9d1d00b8340
- SSDEEP 6144:ka1MsFG4zwgR3Qq9YUL78NkPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOA:z1M03U
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e9838f1e2d120ed2297bab01042c5d947506fbf4a96e330528cc5bcf8960da0
- MD5 e155917f082b3d7754937f1c8a378209
- SHA1 f7793aa262439ab98323dd9a76988608cb3d6105
- SHA512 3848a4048a9e443239064129747c9f449d149dd8400b6a76362d4fd69e84bc9baba85c2600c5adfaa5ba3cfe224d77e2166557cb4ffcdcaea822481d57658cd8
- SSDEEP 3072:G+cdP98cPVdSvw4PDFiQezKm2sTqVJtPWdGLSJhfZETCvT4H:G+cdP98cP+4kLezKm2sgnPWoLmRZETCU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net35\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net35-unity web v3.5/Accord.xml
- SHA256 d9e5ba2cc8321c3be6c981fb644afcfc67ec904efade6e59a21d33816e022aff
- MD5 4e62e531fbd5f72814ff7b28924aa233
- SHA1 03fa36916c6f14291b353feed86f35af80c6f61d
- SHA512 b58ce0b3849b557b705257d0e60e9184e76f5f48d9d2b38beebed7475dda0616fbf22084990be092d8a056a70984f90014aac31db561d095f709e9d1d00b8340
- SSDEEP 6144:ka1MsFG4zwgR3Qq9YUL78NkPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOA:z1M03U
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net35/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e9838f1e2d120ed2297bab01042c5d947506fbf4a96e330528cc5bcf8960da0
- MD5 e155917f082b3d7754937f1c8a378209
- SHA1 f7793aa262439ab98323dd9a76988608cb3d6105
- SHA512 3848a4048a9e443239064129747c9f449d149dd8400b6a76362d4fd69e84bc9baba85c2600c5adfaa5ba3cfe224d77e2166557cb4ffcdcaea822481d57658cd8
- SSDEEP 3072:G+cdP98cPVdSvw4PDFiQezKm2sTqVJtPWdGLSJhfZETCvT4H:G+cdP98cP+4kLezKm2sgnPWoLmRZETCU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net35\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net35/Accord.xml
- SHA256 d9e5ba2cc8321c3be6c981fb644afcfc67ec904efade6e59a21d33816e022aff
- MD5 4e62e531fbd5f72814ff7b28924aa233
- SHA1 03fa36916c6f14291b353feed86f35af80c6f61d
- SHA512 b58ce0b3849b557b705257d0e60e9184e76f5f48d9d2b38beebed7475dda0616fbf22084990be092d8a056a70984f90014aac31db561d095f709e9d1d00b8340
- SSDEEP 6144:ka1MsFG4zwgR3Qq9YUL78NkPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOA:z1M03U
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net40/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 24e35568c79531d41330439a59ef5e2cd2e55bb87e0428daef37d9aa11ab432a
- MD5 7973f3ff5b1d9128ca66658576560819
- SHA1 d3bea89f8c3037a4faadf3b399d501bcc3798cd6
- SHA512 e283ab910f936ac852d659d18d1ee9a6829ceaf9353a14572f43efabd34e60beef5f29f937aa6ad4e146b3c875c59bd9acb10230c9543529f08b70251204d728
- SSDEEP 3072:ozUHt2atsOWiUcHCrltiud10RrqTEBlbX4YFDiT:ozUHRtsOWv5EgEvr4o
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
124906
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net40\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net40/Accord.xml
- SHA256 99fc2f7ad31bca6eb109db6f2d059aa72e0640f9dbfdf8a4558356a8679e50ea
- MD5 2d4043bc81d117f14f32f6e892ef7c9e
- SHA1 99442bb2d93a4d2a600f8ce7a06ac3a176762062
- SHA512 ee5b9a7675b0fc767b684f9a14c1f5ab19e6924c3015241d435a782807c28b127fd504e7a9c4bd9e321b570fda310fc2f681e511fbed37d2434432d776785a70
- SSDEEP 6144:ka1MsFG4zwgR3Qq9YUL7WkPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOtC:z1M038
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net45/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 67a1977a211dd33752c7e6fcafb1e6ab61b6f26f529b1373e54d1ca512ada858
- MD5 585e55a96f52a550c6a6ec7859996b6e
- SHA1 07f6112f3380eee1f349732b890a7757e9018fca
- SHA512 92f8b38f50c3b84fa8558b68bed62891bb508ac208a500cf18fb586e12adc37a70f3a7ee71d7a656be188b0ab3eedbd944313dcab5e7d0c06f543c98331d40dc
- SSDEEP 1536:288phvO4o++aI12Mo4BOtbF4kDDV2LYWm2aIp4EBVJo7Je4Hjs1IdtdUCIw7:288phvO5aI12Mo4EF/JEBSJFDiIdYdm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
124910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net45\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net45/Accord.xml
- SHA256 51fbab0a20b5ea0f9fd3db62d4005435e9c0d70ea6bdaf89fb3d71edc04d0f9c
- MD5 60913078059ab0007c2d3fb85ca47926
- SHA1 1eea5b7f7a75e6819dbb7f73a2784cd64e0ac726
- SHA512 26b08004bbf2237e3d9592173b0803388b4d7793ec42c9587498738518b3185ed0f0f916e1589be4b40a41af5e49f881bbd169268ffcb976e9b3935cc1bc8bab
- SSDEEP 6144:kS1MsFG4zwgR3Qq9YUL71kPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOtC:71M03f
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net46/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8eba126ccbe1e641b062fa1a4f45d094519bd5bc6ea81a4a24d4c2e549e883f
- MD5 c988f0203059a8017533d086718ae3a9
- SHA1 861c257a172625436305d1ebf6205bae2f695d9b
- SHA512 60c85cb06c60850fbe883802b52268611dea94be9cdbb9d168c7f800e51184e41243e9b0e0b4d9e31ad94160948d2590bf82e3759bc5235d722a9326829cacd1
- SSDEEP 1536:ox8piUO4o++aIRYMUVpJbFoSycwX6xIp4EB7zuPfe4HvFIdtdUJIA5:ox8piUO5aIRtUVXFl86PEB72FdIdYGm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
124886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net46\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net46/Accord.xml
- SHA256 51fbab0a20b5ea0f9fd3db62d4005435e9c0d70ea6bdaf89fb3d71edc04d0f9c
- MD5 60913078059ab0007c2d3fb85ca47926
- SHA1 1eea5b7f7a75e6819dbb7f73a2784cd64e0ac726
- SHA512 26b08004bbf2237e3d9592173b0803388b4d7793ec42c9587498738518b3185ed0f0f916e1589be4b40a41af5e49f881bbd169268ffcb976e9b3935cc1bc8bab
- SSDEEP 6144:kS1MsFG4zwgR3Qq9YUL71kPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOtC:71M03f
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/net462/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d36c225a84415c01bc2a8e84096590a7206dfc3d36173e3c7b6a62a04c0a33a9
- MD5 462500956d2d63725fb60c83516cec35
- SHA1 2d6326cb19d88bfdaa84112b6ff0259ec72d60f4
- SHA512 10b1c3fcdd21464bb6f1aee796171237dc3f0763b1a6b8b41a2410aa264047fc8e256588a06ae141905b78e9a85414797b22ecb73c2a9fca150b81f63efdde46
- SSDEEP 1536:+x8piUO4o++aIRYMUVptbFoSycwX6xIp4EB7zujXe4HvFIdtdUlIAq:+x8piUO5aIRtUVTFl86PEB7yFdIdY6F
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
124890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\net462\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/net462/Accord.xml
- SHA256 51fbab0a20b5ea0f9fd3db62d4005435e9c0d70ea6bdaf89fb3d71edc04d0f9c
- MD5 60913078059ab0007c2d3fb85ca47926
- SHA1 1eea5b7f7a75e6819dbb7f73a2784cd64e0ac726
- SHA512 26b08004bbf2237e3d9592173b0803388b4d7793ec42c9587498738518b3185ed0f0f916e1589be4b40a41af5e49f881bbd169268ffcb976e9b3935cc1bc8bab
- SSDEEP 6144:kS1MsFG4zwgR3Qq9YUL71kPsApQeorwWxN8N2MOxmarMhdwBAq0nwSGXICa6BOtC:71M03f
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b3bbe2b42ec0ca04aedd3a27eaa6e9ee24a24734ae285c2b2920ffdec94bba0
- MD5 05df8292b5608279d129259be5baaaad
- SHA1 3d529801aac42f571e33fd8a32819b040bb8523a
- SHA512 6da88a00a6bb18dc64b7126135767f237911b9e6b48cede3bf9df8109a46891c14c377c2a4d9ed8e0c37548f1745d0c62927f354d364060cb522611ffca49f84
- SSDEEP 3072:yo7/5B5HeE3U5Xfl9rHXJYwMAT+aYvvHAR:ygBB5HeEE599rZYwJ+1ng
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
127490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\Release\netstandard1.4\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
117KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/netstandard1.4/Accord.xml
- SHA256 1c5d702a38c990249c60237e89d33e3fe13ae6c9d5bd2a927817c236e5d29325
- MD5 de782fdc0a4995554e9270ff97b1adac
- SHA1 8d68756e840fd8efcf6623f86ab1f67326f2c2cb
- SHA512 c180005f39b6624e288743bc9c8fb76a6a74fa43c528572e649849928d2de17b67524484ec26825347772f7de8ff0a849992219965d2b81d5fd017b0142e69f1
- SSDEEP 6144:HfFG4zwgR3Qq9YUL7y1MOTfol1D5kvDorwWxN8NWApQronwSGXICa6BOtpF0ZY13:n3a1Mc
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6fc7ed6a7e60a666ded3284c1c5558624c2a9f7300cf8dcf76f698df5aad40f2
- MD5 ebea077a998d01670625ed58a8ed63fe
- SHA1 a841053293b79ad6268459f9c54f2daaf99bc269
- SHA512 2a40ee02bb39c422ce5b617823f7fc2eb763cdb91f7f287aa611d5ce2e0954f6cae27143ca834f5c5a64ca012f1ea9d2f2fb133c43ab176a445618f31eb3c913
- SSDEEP 3072:m5S5mn/wwTmzEfFGaBr+0fb552z1dlLBom:m5S5mn/wweEfM4tfb5QPlBo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Core\obj\Release\netstandard2.0\Accord.pdb
mscoree
_CorDllMain
Name
.text
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.3.8.0/lib/netstandard2.0/Accord.xml
- SHA256 4cd2332a7997c8d7a3a0323a05766742959b082c7b185d6925bde8117a526a3c
- MD5 3d890e8dc5ff485f3bd987410962d6c0
- SHA1 36260a0cdbaa3be55f7fa1a8bee006952174c901
- SHA512 3aa3e3837ec7f16d3299309fa22c47301d8a2d96338718ff101d7f3792085c10498c04b54b6a8f485ca254d6b329e47ea53202389c755627cd72436643e95684
- SSDEEP 6144:PfFG4zwgR3Qq9YUL7y1MZWtYUpfoex+q1D5kvDorwWxN8NWApQronwSGXICa6BO2:P3a1MI
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/.signature.p7s
- SHA256 7d7f069fa8456e2d1564a71fc75e874d482acbddc4652ae0794c28143f32953f
- MD5 0039052664bbffc366e32466d749341e
- SHA1 6584d04425e40470a5bcd080087fba2ea543f7fb
- SHA512 033b3d8b7db5202e8d7672e048248a6137b508b95b9a03b8ab895563959da70f02da6aea82b384a67426b8e7670d232ee9579e3ca9d151e5280d6766804e1ff3
- SSDEEP 192:Ods7x0KDWpHhXZCVzV07Vr0K2L9DH0JOqNG8Fp28Wh8nJd:qWvDGGVp79oJNNzFwhhiJd
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/Accord.Video.3.8.0.nupkg
- SHA256 c550a080d19931aa2dd04693f900c016132231bbc2d1ad4b4f63c814cc16fb6e
- MD5 d3b1137716ee556ac898567e4f10e1a8
- SHA1 5334e88eca18f702180224b1c98bf81980e7bf84
- SHA512 245c3380c83be62601b2d8b8738d6eb1865360b5982e37a388b1cab65d40b866fce7b0b365d9244aa4aa1e5b9636b75ab98bc1eda4c2cee29adbfc2f33c44641
- SSDEEP 6144:AqQwsBmi5QzsBmicQqsBmiYQGsBmipQjsBmijysBmijSsBmiEsBmiLRBsBminU4H:AqQw8Qz7QqjQGoQjdFN4kJVjV
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40139b60e4f0e397d955a87a658cee8d6be061eb8c45abba0f229d000a9a9f53
- MD5 b7041a2701653f7c3f6f781dd8ab6d1a
- SHA1 7ae8f161f8e472ee2fe9815f2003832dd02e5c27
- SHA512 c893e93bfd391bd93b34d1c539dfb93e79d54417a2cf75388b6b85c424118714a4fe36e3c951f7e4a265f3ae5a196fdf6d7d43ff675ed2fe1930b653cfd9c265
- SSDEEP 768:KFhvlTCmwfsjsCNPKbKfv1p6PXRoPNE+:G96EtTs+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net35\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity full v3.5/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40139b60e4f0e397d955a87a658cee8d6be061eb8c45abba0f229d000a9a9f53
- MD5 b7041a2701653f7c3f6f781dd8ab6d1a
- SHA1 7ae8f161f8e472ee2fe9815f2003832dd02e5c27
- SHA512 c893e93bfd391bd93b34d1c539dfb93e79d54417a2cf75388b6b85c424118714a4fe36e3c951f7e4a265f3ae5a196fdf6d7d43ff675ed2fe1930b653cfd9c265
- SSDEEP 768:KFhvlTCmwfsjsCNPKbKfv1p6PXRoPNE+:G96EtTs+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net35\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity micro v3.5/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40139b60e4f0e397d955a87a658cee8d6be061eb8c45abba0f229d000a9a9f53
- MD5 b7041a2701653f7c3f6f781dd8ab6d1a
- SHA1 7ae8f161f8e472ee2fe9815f2003832dd02e5c27
- SHA512 c893e93bfd391bd93b34d1c539dfb93e79d54417a2cf75388b6b85c424118714a4fe36e3c951f7e4a265f3ae5a196fdf6d7d43ff675ed2fe1930b653cfd9c265
- SSDEEP 768:KFhvlTCmwfsjsCNPKbKfv1p6PXRoPNE+:G96EtTs+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net35\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity subset v3.5/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity web v3.5/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40139b60e4f0e397d955a87a658cee8d6be061eb8c45abba0f229d000a9a9f53
- MD5 b7041a2701653f7c3f6f781dd8ab6d1a
- SHA1 7ae8f161f8e472ee2fe9815f2003832dd02e5c27
- SHA512 c893e93bfd391bd93b34d1c539dfb93e79d54417a2cf75388b6b85c424118714a4fe36e3c951f7e4a265f3ae5a196fdf6d7d43ff675ed2fe1930b653cfd9c265
- SSDEEP 768:KFhvlTCmwfsjsCNPKbKfv1p6PXRoPNE+:G96EtTs+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net35\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net35-unity web v3.5/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net35/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40139b60e4f0e397d955a87a658cee8d6be061eb8c45abba0f229d000a9a9f53
- MD5 b7041a2701653f7c3f6f781dd8ab6d1a
- SHA1 7ae8f161f8e472ee2fe9815f2003832dd02e5c27
- SHA512 c893e93bfd391bd93b34d1c539dfb93e79d54417a2cf75388b6b85c424118714a4fe36e3c951f7e4a265f3ae5a196fdf6d7d43ff675ed2fe1930b653cfd9c265
- SSDEEP 768:KFhvlTCmwfsjsCNPKbKfv1p6PXRoPNE+:G96EtTs+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net35\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net35/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net40/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f91f0381878359790ac70a3807daab26b46601e0ceff7ee4080d6c4f2a97180
- MD5 e2f1968116edc42206a4c697bf790644
- SHA1 93e9b68a55125268558f254b38fad69f477aee3d
- SHA512 4e5ba07c3e08c5293443e757747eb92241c53521d2c549cbd5705ea4474e11a17d699b537cde9503cd7ce52c4a3019e1a9d725ab8ad3f8282c22b30e6e497737
- SSDEEP 384:ZjhmsyhElyCFVOMz5ifEEk40PemmafKkPrhvnJNuE1Wj+kraxGMtxMXRGdPNk1VQ:ZhhQEcC/z5sEfWJKuQAXRoPNJX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net40\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net40/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net45/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ddbc49df553ca39db447db3bdfa97c0ec081bde7f515755ef4ad3a05e95df82
- MD5 1ae7635c84d07b15b270370fd95c08ac
- SHA1 fb9d47dd0f9967b7f7f604322007eb0c83406e4e
- SHA512 f43e7f9f6b8f80578030f52e65af49dbcdd41a4e5246369c00c14621db6f660224bf64f9d2f2a2cdc13d58b92ab4b877a5b8a582bf7b2be2c2320c71a3ba006d
- SSDEEP 768:R0TBhYgp1R0IMs1B03kP7LLLLmhFIXRoPnu:R0v1xDv1B0ne
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net45\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net45/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net46/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4f049a8e94d6b8e07663d0ad66e8f6daf7a96043c301614a2e13d74d2eefc60
- MD5 94a87c93bfe1d32c92625462ecc504a1
- SHA1 d8afc3872282451d23aeda950db1d66b302a2607
- SHA512 cf250c2569bfe6730918c1ec90b6c67437f3b6a9fdbe6c206bae2a99379b59e31ed01743d718bba2efb37c52beed2432c7135adca549e7b03930950880f2f37f
- SSDEEP 384:zV7vBs0xOSnyO1rvDD7hNr4RuocvWcWlaZcKs+yNjR4anMtxInhRGdPnk15lxxB:zV7vW0xByO1rrhNfw6sN3ZhRoPnYB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net46\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net46/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/net462/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5feaaa1d49f2c2c8363a0a6f0ef42df5ebefcdb8989c707d93adc3eb9db10874
- MD5 2fd8b8a3ad77336fa9b5ddd6a1b37f1b
- SHA1 7555beb85118bba223e9b80414ede91fc01d084a
- SHA512 117c61d2ce5d4e6321d307f9ed94c1e61b688b10f9c7d1f70017af66e397ad4b10e37961f71103260062bdba69091abad96ae232bfcdbe1a537d6c8e2181e9a6
- SSDEEP 384:NV7vBs0xOSnyO1rvDD7hBr4RuocvWcWlaZcKI+yNj94anMtxInhRGdPnk1plx8DW:NV7vW0xByO1rrhBfw6IN7ZhRoPnXW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\net462\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/net462/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/Tools/Accord.Video.3.8.0/lib/netstandard2.0/Accord.Video.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 01972061dead031698582fc87258dddbe494dd747193197e4c6b8cc611111f81
- MD5 100db6796527b801e956379118b7257c
- SHA1 4dfb156c5d807f56e249f9c1285885d5aba3dbbc
- SHA512 61e25e8bf762d5b9da07fa2f7a7c996834717b4790a9817e4c2678ffc93f98759a0e5cc5c11dada3121d9f7192a3b86f2a11064fb725a284d4ece05f9cb98500
- SSDEEP 384:EDOU1sZDyAeUYuMqva29hdl/iRKFO1jxZ+UcXFkIlPjw4a5MtoIhxRGdPnk1RK/e:mUZGAeErP9HURKojiUMkIyaXRoPn1/e
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34042
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Projects\Accord.NET\framework\Sources\Accord.Video\obj\Release\netstandard2.0\Accord.Video.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/Tools/Accord.Video.3.8.0/lib/netstandard2.0/Accord.Video.xml
- SHA256 883c6c13d95be3d9ba0be8bedbbc50c395c4e717952944ce519e562ae4062fb3
- MD5 0790f23801accad07415798f528381d0
- SHA1 408d589e7fd8c276b6e77aec3fc52e46af91d513
- SHA512 bbc647e8c728d8f5977e62486bda2bb8dce56c489da8b2ddcd73a6e2e72845c4c22228385c1a8f1ce46f440703528bd31b839a454f48a11307375cd00a919776
- SSDEEP 384:qW7OTTcteSZKuAHbjjYi+qpugcdc98mG/2k98khzLFN1eNuFcwXnJVQ0pHG:qBTccBYi+qpugcdiG/2uz1eNNw6
- MD5 SHA1 SHA512 SSDEEP
Installer/avdevice-57.dll
- IMPHASH 147a6b2b5756db95c56dfa522fad646b
- SHA256 3b4690347c13ed9e8734f9ec0693f99ba5e82ec28b8f89cda5ff1e8e80dd771c
- MD5 1c8eda8349dab32f5b328ab1efaeb9b5
- SHA1 82ffcac74909d107ee393cc6a48f628a8fe1999f
- SHA512 03728348d6133c415dffb099e14034db84dd444287a26be98f6290d2909cc9d8a3e0b5c7736f61e200f6b37cdd4b64f7fdf5182c86c4093184cd7e3431536693
- SSDEEP 24576:lOIAERbso9+u34Wxj4PBJ3f2a9PUtt4w2wjvIOJZYg744bJUB0J:tRbwuIWRt4w2wjvI4ZYg7e
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
gdi32
BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers
imm32
ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionStringW
ImmSetCompositionWindow
kernel32
AllocConsole
AttachConsole
CloseHandle
CompareStringA
CreateConsoleScreenBuffer
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FormatMessageW
FreeConsole
FreeLibrary
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileSizeEx
GetLastError
GetModuleHandleA
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MulDiv
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
SetConsoleActiveScreenBuffer
SetConsoleCursorInfo
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetConsoleWindowInfo
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputW
WriteConsoleW
WriteFile
lstrcatW
lstrlenW
msvcrt
__dllonexit
__doserrno
__mb_cur_max
__pioinfo
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_filelengthi64
_fileno
_i64toa
_initterm
_iob
_lock
_lseeki64
_ltoa
_onexit
_stricmp
_strlwr
_strnicmp
_strrev
_strupr
_ui64toa
_ultoa
_unlock
_vsnprintf_s
calloc
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputs
fread
free
fsetpos
ftell
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
qsort
rand
realloc
setlocale
signal
sprintf
srand
sscanf
strchr
strcmp
strlen
strncmp
strrchr
strstr
strtok
strtol
strtoul
_vsnprintf
_write
abort
acos
asin
atan
atof
tan
tolower
toupper
ungetc
vfprintf
wcscmp
wcscpy
atoi
_wcsdup
_strdup
_itoa
_getpid
ole32
CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
oleaut32
OleCreatePropertyFrame
SysFreeString
shell32
DragAcceptFiles
DragFinish
DragQueryFileW
SHGetFolderPathW
shlwapi
SHCreateStreamOnFileA
user32
AdjustWindowRectEx
BeginPaint
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FindWindowA
FrameRect
GetAsyncKeyState
GetClassInfoW
GetClientRect
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetMenu
GetMessageExtraInfo
GetMessageW
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetWindowLongA
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
LoadCursorA
LoadCursorW
LoadImageW
MapVirtualKeyW
OpenClipboard
PeekMessageA
PeekMessageW
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetClipboardData
SetCursor
SetCursorPos
SetPropW
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TrackMouseEvent
TranslateMessage
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
WindowFromPoint
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
avcodec-57
av_get_pcm_codec
av_init_packet
av_new_packet
av_packet_new_side_data
av_packet_unref
avcodec_find_decoder
avpriv_find_pix_fmt
avpriv_get_raw_pix_fmt_tags
avfilter-6
av_buffersink_get_frame_flags
avfilter_get_by_name
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_dump
avfilter_graph_free
avfilter_graph_parse_ptr
avfilter_inout_free
avfilter_link
avfilter_link_get_channels
avfilter_pad_get_type
avfilter_register_all
avformat-57
av_codec_get_id
av_find_input_format
av_format_get_control_message_cb
av_iformat_next
av_oformat_next
av_register_input_format
av_register_output_format
avformat_alloc_context
avformat_alloc_output_context2
avformat_free_context
avformat_get_riff_video_tags
avformat_new_stream
avio_closep
avio_open2
avio_read_to_bprint
avpriv_set_pts_info
avutil-55
av_bprint_chars
av_bprint_finalize
av_bprint_init
av_bprintf
av_default_item_name
av_dict_copy
av_dict_free
av_dict_get
av_dict_set
av_frame_alloc
av_frame_free
av_frame_get_channels
av_frame_get_metadata
av_frame_get_pkt_pos
av_frame_unref
av_free
av_freep
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_padded_bits_per_pixel
av_get_pix_fmt_name
av_get_sample_fmt_name
av_gettime
av_image_copy_to_buffer
av_image_fill_arrays
av_image_get_buffer_size
av_int_list_length_for_size
av_log
av_malloc
av_mallocz
av_mul_q
av_opt_set_bin
av_opt_set_defaults
av_opt_set_dict
av_opt_set_dict2
av_opt_set_int
av_parse_video_rate
av_parse_video_size
av_pix_fmt_desc_get
av_rescale
av_rescale_q
av_rescale_q_rnd
av_strdup
av_usleep
av_device_capabilities
av_device_ffversion
av_input_audio_device_next
av_input_video_device_next
av_output_audio_device_next
av_output_video_device_next
avdevice_app_to_dev_control_message
avdevice_capabilities_create
avdevice_capabilities_free
avdevice_configuration
avdevice_dev_to_app_control_message
avdevice_free_list_devices
avdevice_license
avdevice_list_devices
avdevice_list_input_sources
avdevice_list_output_sinks
avdevice_register_all
avdevice_version
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
758KB
Virtual Size
757KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
700B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Installer/avformat-57.dll
- IMPHASH a44302e9f0e0e01b16f217b48362a78e
- SHA256 3453dab742bb6538db890f0205074927f37e9bd28f98d72dfa52ec59ce173b75
- MD5 70d82806d42b33e7c3e49986dd918193
- SHA1 9f34177067f380d82cf7a775987d535625557f76
- SHA512 50fe19cb63ecdbfeab49da091dbe950df331a94f077ea0194dafcfd81b21664383c7f28e96436da8a58cf85910da8f2e3e20325eea4930a1852933ef4e3b5790
- SSDEEP 98304:8tRv8ucpBqsXWgJtbzL1nzcOjS90pSLn//K9BNIvK5pg1YZ/CfZXr9zkZD7tYhE/:8t9sBqsXWgnb31ngmoHyIva7/CfZXr9q
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
DeregisterEventSource
RegisterEventSourceA
ReportEventA
gdi32
CreateCompatibleBitmap
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectA
kernel32
CloseHandle
CreateDirectoryW
CreateEventA
CreateSemaphoreA
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleW
GetProcAddress
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalUnlock
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MoveFileExA
MoveFileExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
ResetEvent
SetEvent
SetLastError
SetThreadAffinityMask
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
lstrcpynA
msvcrt
__dllonexit
__doserrno
__mb_cur_max
__pioinfo
__setusermatherr
_access
_amsg_exit
_beginthreadex
_errno
_exit
_filelengthi64
_fileno
_findclose
_fstati64
_getch
_hypot
_initterm
_iob
_lock
_lseeki64
_mkdir
_onexit
_rmdir
_setmode
_snwprintf
_stat
_wfindfirst
time
mktime
localtime
gmtime
_stricmp
_strnicmp
_unlink
_unlock
bsearch
calloc
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getenv
isalnum
isalpha
islower
isprint
isspace
isupper
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putchar
puts
qsort
raise
rand
realloc
setlocale
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
_vsnprintf
_waccess
_wfindnext
_wfopen
_wmkdir
_wremove
_write
_wrmdir
_wunlink
abort
atof
tolower
toupper
ungetc
vfprintf
wcscpy
wcslen
wcsstr
atoi
_stati64
_write
_strdup
_setmode
_read
_putenv
_fileno
_fdopen
_close
secur32
AcquireCredentialsHandleA
ApplyControlToken
DecryptMessage
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
QueryContextAttributesA
user32
GetDC
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
MessageBoxW
ReleaseDC
wsprintfA
winmm
timeGetTime
ws2_32
WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
htons
inet_addr
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
avcodec-57
av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_bsf_alloc
av_bsf_free
av_bsf_get_by_name
av_bsf_get_null_filter
av_bsf_init
av_bsf_list_parse_str
av_bsf_receive_packet
av_bsf_send_packet
av_codec_get_lowres
av_codec_is_decoder
av_codec_next
av_codec_set_lowres
av_codec_set_pkt_timebase
av_copy_packet
av_copy_packet_side_data
av_dirac_parse_sequence_header
av_dup_packet
av_dv_codec_profile2
av_dv_frame_profile
av_fast_padded_malloc
av_get_audio_frame_duration
av_get_audio_frame_duration2
av_get_bits_per_sample
av_get_codec_tag_string
av_get_exact_bits_per_sample
av_grow_packet
av_init_packet
av_new_packet
av_packet_alloc
av_packet_copy_props
av_packet_free
av_packet_from_data
av_packet_get_side_data
av_packet_merge_side_data
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_split_side_data
av_packet_unref
av_parser_close
av_parser_init
av_parser_parse2
av_shrink_packet
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_decode_subtitle2
avcodec_descriptor_get
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_free_context
avcodec_get_name
avcodec_get_type
avcodec_is_open
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_pix_fmt_to_codec_tag
avcodec_receive_frame
avcodec_register_all
avcodec_send_packet
avcodec_string
avpriv_aac_parse_header
avpriv_ac3_channel_layout_tab
avpriv_ac3_parse_header
avpriv_align_put_bits
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_copy_bits
avpriv_copy_pce_data
avpriv_dca_convert_bitstream
avpriv_dca_sample_rates
avpriv_dnxhd_get_frame_size
avpriv_dnxhd_get_interlaced
avpriv_exif_decode_ifd
avpriv_find_pix_fmt
avpriv_find_start_code
avpriv_get_raw_pix_fmt_tags
avpriv_h264_has_num_reorder_frames
avpriv_lock_avformat
avpriv_mjpeg_bits_ac_chrominance
avpriv_mjpeg_bits_ac_luminance
avpriv_mjpeg_bits_dc_chrominance
avpriv_mjpeg_bits_dc_luminance
avpriv_mjpeg_val_ac_chrominance
avpriv_mjpeg_val_ac_luminance
avpriv_mjpeg_val_dc
avpriv_mpa_bitrate_tab
avpriv_mpa_freq_tab
avpriv_mpeg4audio_get_config
avpriv_mpeg4audio_sample_rates
avpriv_mpegaudio_decode_header
avpriv_pix_fmt_bps_avi
avpriv_pix_fmt_bps_mov
avpriv_split_xiph_headers
avpriv_tak_parse_streaminfo
avpriv_toupper4
avpriv_unlock_avformat
avutil-55
av_add_stable
av_adler32_update
av_aes_alloc
av_aes_crypt
av_aes_ctr_alloc
av_aes_ctr_crypt
av_aes_ctr_free
av_aes_ctr_get_iv
av_aes_ctr_increment_iv
av_aes_ctr_init
av_aes_ctr_set_iv
av_aes_ctr_set_random_iv
av_aes_init
av_append_path_component
av_asprintf
av_base64_decode
av_base64_encode
av_basename
av_bprint_append_data
av_bprint_chars
av_bprint_clear
av_bprint_finalize
av_bprint_init
av_bprintf
av_buffer_alloc
av_buffer_create
av_buffer_default_free
av_buffer_unref
av_calloc
av_compare_mod
av_compare_ts
av_crc
av_crc_get_table
av_d2q
av_default_item_name
av_des_alloc
av_des_crypt
av_des_init
av_des_mac
av_dict_copy
av_dict_count
av_dict_free
av_dict_get
av_dict_get_string
av_dict_parse_string
av_dict_set
av_dict_set_int
av_dirname
av_display_rotation_get
av_div_q
av_dynarray_add
av_dynarray_add_nofree
av_escape
av_expr_eval
av_expr_parse
av_fast_malloc
av_fast_realloc
av_fifo_alloc
av_fifo_alloc_array
av_fifo_drain
av_fifo_freep
av_fifo_generic_peek_at
av_fifo_generic_read
av_fifo_generic_write
av_fifo_realloc2
av_fifo_reset
av_fifo_size
av_fifo_space
av_find_info_tag
av_find_nearest_q_idx
av_frame_alloc
av_frame_free
av_frame_get_channels
av_frame_get_pkt_duration
av_free
av_freep
av_gcd
av_get_bytes_per_sample
av_get_channel_layout_nb_channels
av_get_channel_name
av_get_media_type_string
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_name
av_get_random_seed
av_get_sample_fmt_name
av_get_token
av_gettime
av_gettime_relative
av_hash_alloc
av_hash_final_hex
av_hash_freep
av_hash_get_name
av_hash_init
av_hash_update
av_hmac_alloc
av_hmac_final
av_hmac_free
av_hmac_init
av_hmac_update
av_image_check_sar
av_image_check_size
av_image_fill_linesizes
av_image_get_buffer_size
av_lfg_init
av_log
av_log_get_level
av_lzo1x_decode
av_malloc
av_mallocz
av_match_list
av_match_name
av_md5_alloc
av_md5_final
av_md5_init
av_md5_sum
av_md5_update
av_memdup
av_mul_q
av_opt_copy
av_opt_find
av_opt_flag_is_set
av_opt_free
av_opt_get
av_opt_get_dict_val
av_opt_get_int
av_opt_get_key_value
av_opt_next
av_opt_ptr
av_opt_serialize
av_opt_set
av_opt_set_defaults
av_opt_set_dict
av_opt_set_dict2
av_opt_set_dict_val
av_opt_set_from_string
av_opt_set_int
av_parse_ratio
av_parse_time
av_parse_video_rate
av_pix_fmt_desc_get
av_pix_fmt_get_chroma_sub_sample
av_q2intfloat
av_rc4_alloc
av_rc4_crypt
av_rc4_init
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_sample_fmt_is_planar
av_set_options_string
av_sha_alloc
av_sha_final
av_sha_init
av_sha_update
av_small_strptime
av_stereo3d_alloc
av_stereo3d_type_name
av_strcasecmp
av_strdup
av_strerror
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strndup
av_strstart
av_strtod
av_strtok
av_sub_q
av_tea_alloc
av_tea_crypt
av_tea_init
av_thread_message_flush
av_thread_message_queue_alloc
av_thread_message_queue_free
av_thread_message_queue_recv
av_thread_message_queue_send
av_thread_message_queue_set_err_recv
av_thread_message_queue_set_err_send
av_thread_message_queue_set_free_func
av_timecode_check_frame_rate
av_timecode_get_smpte_from_framenum
av_timecode_init
av_timecode_init_from_string
av_timecode_make_smpte_tc_string
av_timecode_make_string
av_timegm
av_tree_destroy
av_tree_enumerate
av_tree_find
av_tree_insert
av_tree_node_alloc
av_usleep
av_vlog
avpriv_dict_set_timestamp
avpriv_get_gamma_from_trc
avpriv_open
avpriv_report_missing_feature
avpriv_request_sample
avpriv_set_systematic_pal2
avpriv_tempfile
av_add_index_entry
av_append_packet
av_apply_bitstream_filters
av_codec_get_id
av_codec_get_tag
av_codec_get_tag2
av_convert_lang_to
av_demuxer_open
av_dump_format
av_filename_number_test
av_find_best_stream
av_find_default_stream_index
av_find_input_format
av_find_program_from_stream
av_fmt_ctx_get_duration_estimation_method
av_format_ffversion
av_format_get_audio_codec
av_format_get_control_message_cb
av_format_get_data_codec
av_format_get_metadata_header_padding
av_format_get_opaque
av_format_get_open_cb
av_format_get_probe_score
av_format_get_subtitle_codec
av_format_get_video_codec
av_format_inject_global_side_data
av_format_set_audio_codec
av_format_set_control_message_cb
av_format_set_data_codec
av_format_set_metadata_header_padding
av_format_set_opaque
av_format_set_open_cb
av_format_set_subtitle_codec
av_format_set_video_codec
av_get_frame_filename
av_get_frame_filename2
av_get_output_timestamp
av_get_packet
av_guess_codec
av_guess_format
av_guess_frame_rate
av_guess_sample_aspect_ratio
av_hex_dump
av_hex_dump_log
av_iformat_next
av_index_search_timestamp
av_interleaved_write_frame
av_interleaved_write_uncoded_frame
av_match_ext
av_new_program
av_oformat_next
av_pkt_dump2
av_pkt_dump_log2
av_probe_input_buffer
av_probe_input_buffer2
av_probe_input_format
av_probe_input_format2
av_probe_input_format3
av_program_add_stream_index
av_read_frame
av_read_pause
av_read_play
av_register_all
av_register_input_format
av_register_output_format
av_sdp_create
av_seek_frame
av_stream_get_codec_timebase
av_stream_get_end_pts
av_stream_get_parser
av_stream_get_r_frame_rate
av_stream_get_recommended_encoder_configuration
av_stream_get_side_data
av_stream_new_side_data
av_stream_set_r_frame_rate
av_stream_set_recommended_encoder_configuration
av_url_split
av_write_frame
av_write_trailer
av_write_uncoded_frame
av_write_uncoded_frame_query
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_configuration
avformat_find_stream_info
avformat_flush
avformat_free_context
avformat_get_class
avformat_get_mov_audio_tags
avformat_get_mov_video_tags
avformat_get_riff_audio_tags
avformat_get_riff_video_tags
avformat_init_output
avformat_license
avformat_match_stream_specifier
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_query_codec
avformat_queue_attached_pictures
avformat_seek_file
avformat_transfer_internal_stream_timing_info
avformat_version
avformat_write_header
avio_accept
avio_alloc_context
avio_check
avio_close
avio_close_dir
avio_close_dyn_buf
avio_closep
avio_enum_protocols
avio_feof
avio_find_protocol_name
avio_flush
avio_free_directory_entry
avio_get_str
avio_get_str16be
avio_get_str16le
avio_handshake
avio_open
avio_open2
avio_open_dir
avio_open_dyn_buf
avio_pause
avio_printf
avio_put_str
avio_put_str16be
avio_put_str16le
avio_r8
avio_rb16
avio_rb24
avio_rb32
avio_rb64
avio_read
avio_read_dir
avio_read_to_bprint
avio_rl16
avio_rl24
avio_rl32
avio_rl64
avio_seek
avio_seek_time
avio_size
avio_skip
avio_w8
avio_wb16
avio_wb24
avio_wb32
avio_wb64
avio_wl16
avio_wl24
avio_wl32
avio_wl64
avio_write
avio_write_marker
avpriv_dv_get_packet
avpriv_dv_init_demux
avpriv_dv_produce_packet
avpriv_io_delete
avpriv_io_move
avpriv_mpegts_parse_close
avpriv_mpegts_parse_open
avpriv_mpegts_parse_packet
avpriv_new_chapter
avpriv_set_pts_info
ff_inet_aton
ff_rtp_get_local_rtcp_port
ff_rtp_get_local_rtp_port
ff_rtsp_parse_line
ff_socket_nonblock
ffio_open_dyn_packet_buf
ffio_set_buf_size
ffurl_close
ffurl_open
ffurl_write
url_feof
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
87KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
689KB
Virtual Size
688KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
566KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
start-main/Session.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d4bdf4588069d6c2ff81830097755f1202c643c9da2298525e845bb7d615a15e
- MD5 a8578b1ff74aa8506b592af6e80dd7bc
- SHA1 6d28f1e3f26a9417eca24735ef4cc5319c71a6ee
- SHA512 972443fede85c401f84509644930cb26aea926a00911bb283227cf2ab758d3e3584800471c86a39a2fd738ac9b45afd195b2e3a98d9240383c5aad3a88fb74df
- SSDEEP 768:hnlqO2/uz1/egx2LeGaja2fr9644XtH2:hEZGz1/Caja2fr9644s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\danie\source\repos\Session\Session\obj\Debug\Session.pdb
mscoree
_CorExeMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/Sushi.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d38bb1435e7b381645983377916233aa5eaa453a2ce800471a1bac5b178644a0
- MD5 3c21bbb4c39b971d4a9b1cbf2278bfe1
- SHA1 4d16934c233d41a83e9ee1539deb49b844b0bb9e
- SHA512 01a5ce1e7b675d220a96b57ae7b809f31335a038f4be2140286fbc0ec541cc00d62f8f57c8f00000759dd77a008c058fb1d4e4f0ff0ff69677ad2d94a0389f4e
- SSDEEP 192:14G1UU5tiCLdrZtefSU0x1EagBsOp+kVnMe:14UUuLdrZg6UieawVM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\danie\source\repos\Sushi\Sushi\obj\Debug\Sushi.pdb
mscoree
_CorExeMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/fgthawd.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6022fdab4f5ac5267337aab5a6eefd5076f4e615838b3ff31c6335d985306cb8
- MD5 95a8abfcc4bdd662984351539c7fc9c4
- SHA1 8ac52de0cdb2288b41c9f647af2cc879a5390c2f
- SHA512 32a0b205b725e90d6e8ca728ffd0712d743c9380ed58ffde489fb5517f60ddca893e5bcd0e9313ed9c3690633ad58613b3d52fb595c43dae7297dbd0b156b582
- SSDEEP 12288:8+2Ksc+c1YpqA9CO2Iev1xAdsw81niKfx:EKs5MYIA9Xev1x2s71ikx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
327086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
311KB
Virtual Size
311KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/gawdrgasd.exe
- IMPHASH 82e9f830e8c4dfa28b9827c55b0c7c9e
- SHA256 b08683d5fcb12088546ac00c82a97920d4c7ab6b81dbb041acdf2c33c4950e34
- MD5 81ab7fea76bf6da3974c36621aa4cb31
- SHA1 6372c305ef2ce39889fdfe7af2c793230de7fc85
- SHA512 c62b402c52b5d565467b06799ebba12005a3897ccd4bb36e598b2fab4975f73ecacd58c62e3b7e6be53d61bc3a22c8a1f01981fd0baa82b70c615961ba57232d
- SSDEEP 6144:s+NevZ1DxnKawbFXF1qmHyuLUC2UoMZH:VeB1FnAFV1qQRYC2Ot
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\danie\source\repos\MathsC++\x64\Release\MathsC++.pdb
kernel32
GetConsoleWindow
CloseHandle
CreateFileW
HeapSize
GetLastError
GetModuleFileNameW
WriteConsoleW
CreateProcessW
CreateDirectoryW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
WideCharToMultiByte
GetCurrentThreadId
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
Sleep
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
WakeAllConditionVariable
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
RtlUnwind
user32
ShowWindow
advapi32
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
shell32
ShellExecuteExW
urlmon
URLDownloadToFileW
Name
.text
Size
233KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=181, id=261, version=30795,
count=16, id=260, version=30795,
count=10, id=259, version=33808,
count=17, id=260, version=33808,
count=92, id=261, version=33808,
count=11, id=257, version=30795,
count=145, id=1, productName=Unmarked objects,
count=1, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,
start-main/hbfgjhhesfd.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f0d45f8340cd203ee98c7765267175576d8017df5166f425f8a7483cb35a91c8
- MD5 2b3a191ee1f6d3b21d03ee54aa40b604
- SHA1 8ecae557c2735105cc573d86820e81fcff0139c4
- SHA512 31f621fd96bf2964529607ae64a173c4a99f3976a91283a3609edc3799d98f59de80da6266ca10c26e5c8733644f1764aab00c7ba3e4dc5456573b9b20b6a393
- SSDEEP 6144:k7zO0LSclT6FOwEP5Kq+SMv0VGb7bDcllbken:alJtTF9zVGkllbkm
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
300046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
285KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/hdawuithjawe.exe
- SHA256 b287d2057d489ff4a90316ee3fb0d4d83d84ed6d4e58c4560181be412e6bf586
- MD5 cee5bab49d1d0a50638850890cd4a700
- SHA1 cbfd2ec7599c72df635a59c2bfb0ed33e25435a6
- SHA512 f3e6add5fa4fd66b8ad83cdd12abf0d1bb264d300bca01d3392aae0b3b349c124083f8bf454ab366ab593aa4ec3b08cbf7d4d7425982a84a9de509bf26aa380a
- SSDEEP 24576:Wu+uTl0eITgu8mYoJrXsHClGBm7DZ6IjjcyGWyloX454DvJjkH379tjWlvs:WTclITgu4CyWDUIjjEuvJjkHrTWG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
43670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
141KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
174KB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
916KB
Virtual Size
920KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
start-main/hnfsefawd.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9cc4afb19c3702ceb41940a0261c7bdc8dafb347aa9aea1b6c84a88e62669e84
- MD5 7842a71a8910e4e39077f7b7e9c08eb6
- SHA1 1446760ee849308d7ed97b4e215f96db54681a5f
- SHA512 ae90232ecdc9ca11eb768fe579b356699ecf25829b38a83b0ff57b74278d250adf96f96c083115c87a1346e5192a1f721141f42f1719b30e5251871f1b1b56d2
- SSDEEP 12288:Zj71U9TGD8RPSSDoioHTDN3UpW3Ari4VVyZC0+1cw2jINofdiBZRwsCM9hsJeY60:ZP+QMZD9oHTW3iE0nHmd9Y61+
- MD5 SHA1 SHA512 SSDEEP
-
DCRat payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
961102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
931KB
Virtual Size
930KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/jerniuiopu.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b64b141eb3b3fa67f6605eb99b0e6f78eb5df7d483a2a0889821ccfac71a7a96
- MD5 d0d7ce7681200387de77c7ab2e2841cd
- SHA1 8b6c4315e260954b6c33f450ad3baa9f79fe72e2
- SHA512 bc3cfac3450cbc17ce8c9758f10c7e4034764f40a6797edd4a8eb6e95d6db9c5f46a46487a6e483ef0eed23243e9f92c0ea391a0416ebbc6854e2b9914ad9788
- SSDEEP 6144:w7zO0LSclT6FOwEP5Kq+SMv0VGb7bDcllbk9n:OlJtTF9zVGkllbkh
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
300046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
285KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/jthusjefth.exe
- SHA256 afee949b260be87c08ed4db102681e63a872816be5b3e99e31a477d543d4a7d5
- MD5 00e59658c53df6a6fa31a635e1dc6bc8
- SHA1 f761c91f428390f205f975dce57ab16f91480c9b
- SHA512 f0b9cf30d6fdc1d80c26bd955c9e0829188447d04996cea7460a727db2330f962e56bec9f65ca70eb8e86d500d6c0504675332e9016c6a02316fe7454aac5544
- SSDEEP 24576:QZwAn2KJSXMtH/E1CRrNv0HwHicFX84Q5KxEbq+ptXWGyfUP51Vhc7HDAJoh:QZdnoXseCRrN8HwCrK2e+3WG6KC7bh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
40347
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
141KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
174KB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
922KB
Virtual Size
924KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
start-main/jythjadthawed.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6b986293d3057fb2ffb8759b53182756595f68aa95c584d73b9e1e9e3997826d
- MD5 fda06a638ce0756950f40dff83a675e8
- SHA1 7d121e94b2c4885f8838a2a18ffaa4a25afd96d0
- SHA512 26d033f6d3e490a1773622072674001c1c962214a19b38d9a0a63383cde9fbfadf6658359895f19c9a68890d5c8a21a047beb578134d35ecd18f733dd002d1e0
- SSDEEP 12288:OWTns93nQb1f13TH3XmaZ4JJMA+zpW3Ari4VVyZC0+1cp9rcDNpTWDTQGFZ6:OWTnbb1f1bmaZKJMA+z3iE0nTr/6
- MD5 SHA1 SHA512 SSDEEP
-
DCRat payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
881518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
853KB
Virtual Size
852KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/khseofk.exe
- SHA256 f24dd18ba78871ead826608c2d0a32dad08d7f76640e6eb47ca968e076d1511e
- MD5 99ce1a5c77d557edc51c446dc8bad726
- SHA1 d7a96730b111c26e0273405dc0007a4b61ac04a0
- SHA512 132c9aaf2cce823f402034d94b9e80b125c1e5e13288cd0bf5831b42d27c8a44dd4347e10cc09ac2e6ff28abe450990dfb9e59d04942b9c2c7602dd9b1d15eec
- SSDEEP 24576:/lnycwIeFS2eYQPxKY0dXTylMvqeYD46wipwzadXq5A49sw+GK:/lny5Zr6xGddvr6IipwzX5ZD+G
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
139276
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
141KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
174KB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
918KB
Virtual Size
920KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
start-main/khtoawdltrha.exe
- SHA256 9aaa862061c903f3f5a1d509f0016a599b9152d02ea0365dfd3bbd9c5c147656
- MD5 21eb0b29554b832d677cea9e8a59b999
- SHA1 e6775ef09acc67f90e07205788a4165cbf8496ca
- SHA512 e7434e0d46e37e4a76bd8e394063a3ac531892b972347b3de8aa71689ded1ce4968b1a1defda720af4cfa66037390cbe771105e7bf892ef640cbee12e862e742
- SSDEEP 24576:VUt6SS6/lwChL5nLexP9eVKN3RjJMDnhY3YnBypzcnNftDquJN:+t6fYFexPoKNfMbcYnEINVG8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
101142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
140KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
174KB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
918KB
Virtual Size
920KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
start-main/ksfawtyha.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6b986293d3057fb2ffb8759b53182756595f68aa95c584d73b9e1e9e3997826d
- MD5 fda06a638ce0756950f40dff83a675e8
- SHA1 7d121e94b2c4885f8838a2a18ffaa4a25afd96d0
- SHA512 26d033f6d3e490a1773622072674001c1c962214a19b38d9a0a63383cde9fbfadf6658359895f19c9a68890d5c8a21a047beb578134d35ecd18f733dd002d1e0
- SSDEEP 12288:OWTns93nQb1f13TH3XmaZ4JJMA+zpW3Ari4VVyZC0+1cp9rcDNpTWDTQGFZ6:OWTnbb1f1bmaZKJMA+z3iE0nTr/6
- MD5 SHA1 SHA512 SSDEEP
-
DCRat payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
881518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
853KB
Virtual Size
852KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/ktyhpldea.exe
- SHA256 f8dbff120f44cf68bcb802c11f24bbc506f11803e8745883a0f650decea1db47
- MD5 e9a83661d98fca881cd4497a985a20de
- SHA1 38c9937610d563b848a634aed39366ef8b2a8f37
- SHA512 df008a6302c877f4dae1780bb3ed3682498586c9e556681c8359012948ba9bb6d720af87b51f1f850d6550d809eb6e9242992b07c6dbf1b9c7b2fd3afe389e2e
- SSDEEP 24576:uSdwEX22dRlHrWJd7NvGSv6C+amn+TBlT7SYr4kBtDUs8/Xa:uS+EX2QudpQamn+1RS+4xs8/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
118553
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
141KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
174KB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
916KB
Virtual Size
920KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
start-main/lhoefskghas.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 686b2be963226d6ce410599e55e87854d8ccbcaf323fed1cfc8120a16880b712
- MD5 c7b0cb9208e2b95e4feb6b741ff1d84c
- SHA1 5d7446910dbbdca73e8b54657effbe4bca26c848
- SHA512 7d9ebee121b5191a3b7e5cd51661a47db6d396c1dd5f38b9fa12cb222e3508db9ef31bdbfc7fbbcbdd0011e0d8cb6da8c2c4091ad94497cd62f6ad7675fe7681
- SSDEEP 12288:x1kr8FfCb2FwUv8ONiweKY+eCszyL4f3a:LkrKfC6wUv8ONiwGN/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
430846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
413KB
Virtual Size
412KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/ltpohpadw.exe
- IMPHASH 3d303175fced9345f14b8a51817a6c63
- SHA256 60700457539dee99f5c3fcad53c5ef6dac76a4ca838c11234420bd94ff4b76a2
- MD5 038ccf7da7eaea8511b82fc514af1ec7
- SHA1 380e9b386e877d188b967ab41fc5f2d561cc25ad
- SHA512 758fa847d6f5f7d99229138a4a2803f1189835f0a572a8709a1e95039fa2032c4aa73b2f6614295e9c3940aa890cba9d17feced1cf4392689012aef2eede2bc3
- SSDEEP 49152:Ugmjw6s/KHSc8unyD/zCpeEI3TyGpB4BNkG5P+YUa9kyXITBPxBRo:WTs4ScD8qeybkqUa9Dudo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c5:aa:ca:9c:c2:81:1b:95:e2:cf:4a:1c:f5:b3:fa:bf:2e:ea:b5:c4:0e:ce:ce:26:5f:8d:68:53:e2:a6:6c:c1
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 29, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Aug 20, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
4416
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
_time64
_wcsicmp
_wcsnicmp
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
rand
signal
srand
strlen
strncmp
vfprintf
wcscat
wcscpy
wcslen
wcsncmp
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
396B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
181KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
start-main/mhbiwejrtgha.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7bc005cf74975a16d641094c34335de9533ae3a7bad07e8cde787622bd0667f1
- MD5 89fa96935b10329dd2ca85165a2117b7
- SHA1 8f8a9841caba7287f8608117d77e7849133a0b70
- SHA512 79ba570c62939356f09a5f7071981c41d20f6e4af9cb724814cc08b9add2efd6a5adb55dd0f7d41bdf49b011b74b31242082fa0547562ba0bf5e22900075ae46
- SSDEEP 6144:IMtTmCSh9wbLYUvftSwNTILx5HzMCVB3wBDDJnoSLdkrEeh99qbDUyJ:IM9m99slRQx5HzMCVB3wBDDJoSLGrEeG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
323390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/njrtdhadawt.exe
- IMPHASH dae99f55715d10799c7a5f3e0cd9d13d
- SHA256 cab6c398667a4645b9ac20c9748f194554a76706047f124297a76296e3e7a957
- MD5 96e4917ea5d59eca7dd21ad7e7a03d07
- SHA1 28c721effb773fdd5cb2146457c10b081a9a4047
- SHA512 3414450d1a200ffdcc6e3cb477a0a11049e5e86e8d15ae5b8ed3740a52a0226774333492279092134364460b565a25a7967b987f2304355ecfd5825f86e61687
- SSDEEP 24576:ajfMVHefX7eO2FwYPMGNL/geFyNcTN+jv75TQn652VBuNyb2i:oEQreO8wRGJtF4ch+jvNm0Nyb2
- MD5 SHA1 SHA512 SSDEEP
-
Detect Vidar Stealer
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
98096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcrt
strncpy
malloc
_wtoi64
??_V@YAXPAX@Z
atexit
strcpy_s
memchr
strchr
strtok_s
??_U@YAPAXI@Z
_time64
srand
rand
memmove
__CxxFrameHandler3
kernel32
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapSize
WideCharToMultiByte
IsValidCodePage
GetOEMCP
ExitProcess
SetCriticalSectionSpinCount
FlsAlloc
HeapAlloc
GetCurrentProcess
HeapFree
VirtualFree
GetProcessHeap
WriteFile
VirtualAllocExNuma
Sleep
ReadFile
CreateFileW
lstrcatA
MultiByteToWideChar
GetTempPathW
GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
GlobalMemoryStatusEx
ConvertDefaultLocale
lstrcmpiW
GetModuleHandleA
VirtualProtect
CloseHandle
lstrlenA
FreeLibrary
GetThreadContext
SetThreadContext
ReadProcessMemory
VirtualAllocEx
SetHandleCount
VirtualQueryEx
OpenProcess
GetComputerNameA
FileTimeToSystemTime
WaitForSingleObject
GetDriveTypeA
CreateProcessA
CreateDirectoryA
GetLogicalDriveStringsA
CreateThread
CreateFileA
GetFileSize
SetFilePointer
MapViewOfFile
UnmapViewOfFile
lstrcpynA
SystemTimeToFileTime
GetTickCount
GetLocalTime
CreateFileMappingA
GetFileInformationByHandle
lstrcpyA
HeapSetInformation
GetCommandLineA
HeapReAlloc
GetCPInfo
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
SetConsoleCtrlHandler
IsProcessorFeaturePresent
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
GetACP
TlsFree
TlsSetValue
GetFileType
QueryPerformanceCounter
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
WriteProcessMemory
GetStringTypeW
TlsGetValue
TlsAlloc
RaiseException
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetModuleFileNameW
GetStdHandle
GetModuleHandleW
HeapDestroy
HeapCreate
RtlUnwind
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
user32
GetDesktopWindow
OpenDesktopA
CreateDesktopA
CloseDesktop
OpenInputDesktop
wsprintfW
IsDialogMessageW
MessageBoxA
GetWindowLongW
ReleaseDC
GetWindowContextHelpId
SetThreadDesktop
RegisterClassW
IsWindowVisible
GetCursorPos
CharToOemA
gdi32
CreateDCA
GetDeviceCaps
advapi32
RegGetValueA
RegOpenKeyExA
GetUserNameA
GetCurrentHwProfileA
shell32
SHFileOperationA
ole32
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
oleaut32
SysFreeString
VariantClear
VariantInit
SysAllocString
psapi
EnumProcessModules
GetModuleBaseNameA
shlwapi
ord155
Name
.text
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
687KB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=171, productName=VS2010 build 30319, version=30319,
count=15, id=158, productName=VS2010 build 30319, version=30319,
count=63, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=31104,
count=160, id=1, productName=Unmarked objects,
count=16, id=175, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
start-main/odrsfgawd.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 bdf890b78dc6fd33cec86be7fe593714ae1b713f0644402819cabd5bba5f1bbd
- MD5 29f1c1d7a651b39f96ec5cef9cd4071d
- SHA1 ce27d36c953fe12c733c920ca9aee4199ee4dbb7
- SHA512 24149490810f23f2b08fde9e7ab4c8702784bf26d5b72c76b0eab9dce5881fb3412faa6ec1f7c5e183a015fe4e7a3dc332d94782fbd21361f66f19f1cbbb659a
- SSDEEP 6144:tSveb1jQZD0wmWozuZW5DwwzqLhh13QEGQnh9lTRXvtkpAbj7KvaP5fsz61+:tom1Mh0AZYtzE3TvnhhXFU0j5M61+
- MD5 SHA1 SHA512 SSDEEP
-
DCRat payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
544878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
524KB
Virtual Size
524KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/opthjdkawrtgh.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dd3b16a32ef24a5b566d5ddee47ad2b500121653b526f55cb632c4897da59ce4
- MD5 fb4d937965edc85f6283ac8bd239b92d
- SHA1 a316279a002dd18ede5fce6e560b052e438491c5
- SHA512 9e53eb5c4b936ad5611617e49e54c9b19ec289c19db5ff9654bc56f5ee540118dbb0fc43923d779ab669510ad9ef0871765eeacd86904f34d662fa68e1a7db7b
- SSDEEP 12288:84WcRRT+qaLO8i5id1RWlds1WASepDwJEek2N5vdhnvSfvo:845jsFewgRSf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
405342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
388KB
Virtual Size
387KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/pdf.exe
- IMPHASH be41bf7b8cc010b614bd36bbca606973
- SHA256 3b738aca822d7d42a1e7700ee8a8e3c3c86bcc0b5ba6f5ef8d3583003c17c81c
- MD5 cf84711e3c2b8a0d6df8ac0550185893
- SHA1 16238c6487a5c00398458658a123be9a8bf63532
- SHA512 ead98b871890458131bb096124fd92f38e94795e19ecf5a70597b74ab8617b87ec81368113660c6588d60f98f74372728134c4cd81cc938e1afa76e4fb2cef96
- SSDEEP 49152:/ZEkRPDWaRdGSQ5K//XMCs9pvilPahSzWXXyvd0jX3N6XbOE+HfW:/ZHHcvsnMleaszWng0b3NWa/W
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fd:37:3a:43:a4:6d:d7:57:57:3b:cc:7c:85:ad:81:a2:b9:30:4a:1f:7f:b7:3e:42:f0:93:a1:fb:ae:2f:ff:8e
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Oct 3, 2024
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0d:e9:cf:2e:71:83:64:a0:06:2e:0d:83:09:3e:34:d7
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 24, 2024 - Sep 24, 2027
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
14467
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
415KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
516KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$TEMP/Desk
- SHA256 404244eebe1914dbd647f9450f1172b5078f121606b0fc0eb051396996f10966
- MD5 d8f8586d0b7fd6d85a8921cf59ca85d3
- SHA1 5414069556b17fdaec3e29b6c6e08fd34030a93f
- SHA512 0e77b9f4345ce40782d889b1829ee8ed303dd16e47680321f6f845d3536b7ad58c160a4a90d473686ca30b35f39b88c07de2099c92dd9290ba318970bf869f1d
- SSDEEP 768:iGpowX9vyLVzqebc+psxfex0xYQj/mKfORepIK5Z+DwMSLGPspWtE++L:iHPLVzqdxfPx9eyIK5ZuxPrtI
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Easter
- SHA256 d4a3c9482801f5f3a875dac83f71adaf42f1934150bd0e9296bf99b32a0acd32
- MD5 750b2e397d68b12b85b5f3e0d1ce72c0
- SHA1 1b80801a2acb50d7d7511b6845f988d0147f21b1
- SHA512 cfe94e7b656481fcd5e397c93e22b42d4fa292f885997b4e27814472090589bd1a66579c4f6d4fe585a9a673ea81fc0542716c6c17c3e928a13e7a5860a285ab
- SSDEEP 1536:OObPPv8BVs4NrmYCnDZvEUm/0+3Nbtvjo:OObXv8BVs0a31e/T3NbtLo
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Misc
- SHA256 3063432654dd95302b6e8a1e79566ad6affdd057b332e7825eae32aac6386f23
- MD5 c493fb82695e52377cf9e51e9e247c6e
- SHA1 77d6b2edc152c5b9b464e77b11a22b10825d1c71
- SHA512 5c6b11e48a55068e79ff419310d35aa788c11ad97e00f071a3f898d88323e2ac7416621c32889b628e5711cdebc41813728b8ebeca3a69cfcf229d99c144794e
- SSDEEP 192:/sIo3xyCzK87n1CcCC4/TcNh57vnpCzXVpl4qJFBL0:/po4CxT1CcCCjNh5vpYXVb4qJFd0
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Rank
- SHA256 6cff93b0c5c136c83b635e4c98876c9b2c7f603349d7b96d1e00790d84503491
- MD5 fa347706be2299d345d4e32e07b80f17
- SHA1 ebf2bb76201a45a6df5724777db44b99f8dfbba8
- SHA512 bf436fb4d7577c65f59279cabab73521c508ef4d8c685e9fecf71aac7f47bd0368eebe9ce022e0c1952d60a617f4ada464c54c96118b67ffda28eb2cef068b46
- SSDEEP 12288:TV0etV7qtINsegA/rMyyzlcqakvAfcN9b2MyZa31tqoPTdFbgawV2501:pxz1JMyyzlohMf1tN70aw8501
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Team
- SHA256 1b085eb86f759074a3fae406a542eda42c3c7bd5e80f72ca8872190d890dcbad
- MD5 1caad729070dba0e6bea05d47e819ce8
- SHA1 260a499b7c71c65fd8729fcd13c027049c4bbdc3
- SHA512 d57514a0dc2d906847b2786f676a2f7b271eaa859ca389cf7c874862b0437ac12fd112d7aae651499e958a72bfb9bf1ce7c47a12e7057f9f353cc65cec6b9148
- SSDEEP 1536:cqRzZ7WNRUiGFnaRJqpD0MRWfLkK5hUZLzK+0Mu4aC1:bFZ7yrGuc1R6kK8zKY1
- MD5 SHA1 SHA512 SSDEEP
$TEMP/Urls
- SHA256 0a9c0b814b2f939642154df277074485727de9c9d5f26b6d506bd614e7da3c81
- MD5 cd872941a072c8c4b5b04c92dd3f818e
- SHA1 923988e2ff5fa23bb6219b73840442bad0704c4a
- SHA512 8fa8647f483b7c7d8d86c08aa6f062b5ce5ab8bbd4c115dcb4795815c971ecd53322e22892499f69499d19fd989bef98885db992f4143f9cd4b62db4cac11a5a
- SSDEEP 768:sfg9zMuq9wpYQcVezgd21rn+FQ2V2Kw4mpPupKRJG2ExkzsU93olOSeNYTI1unvv:zX0wmP8m2BnumGp+R6kH4lOBAnJUDuT
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Illegal
- SHA256 9cd3168efadd91aca965cfb5710046ae2553dbcc42c7131d4fbc864ff5a12574
- MD5 1b160c98ff3827e00c6f90733eb201ca
- SHA1 3a862bdb020845b03fbd43a52bbb96e36b248304
- SHA512 e0c6e0983e3823056ed5dadd3a5d171c9654efe25c369b6caecfd1fb5b9967172892b9d83a17f40ac3b187f4cf8bb0c849e4bbf61e5c78fb5bd4b83016772669
- SSDEEP 1536:p+X6Rc2Dbchok9ln8Zj3w4dZ6GAONTxKoDPgEeZs3azd2MI9:p+qAomlojVZ6GAYTxKmPgPZs3azJo
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Ir
- SHA256 f6d797b8280935cf06a2d2f855ca8b94fc4699aba59eb2a2067ae60024f65c81
- MD5 f1b799c02542f9aa89f431458563dac2
- SHA1 562d7f04dab6fa5179deb7f9763f38ae227c0837
- SHA512 221e25bd42d980de935d68176033976bb70bc5d8603775f840e546514884d8d0832e6438b92f56562ef657ce96547ec8a1bd5d3b62061963854170c690628ba0
- SSDEEP 1536:j7Qxqu6nVByq9FgJxbqp1UGXOPAktDCPPYxvKTYpoxMKHeAoPa2+VSkCNbvifb4J:EqzPobqByA4DCPQxvCkYka2+Ijyg
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Leather
- SHA256 1c6626edd1e186041a6a8baea931ad139d1e0021b7308e054e8339d51fcb4994
- MD5 6b542654af52105a7842240799c3eed9
- SHA1 51d0ced279c91ad4b7609a4fdb4f36541574cbd3
- SHA512 451df23ef8a7f47d858e628df762b82a79f0101e9d35e83cd8cce8b2d69e8e32045a45c4ad4e4c305c6f7e254618c97b63055d6d98a598cb6cca995b8f7dbaf8
- SSDEEP 768:88XvVkYSIuutlmypiLDY0KfZUkgn6dPfFMRs1IdBALZ2fO:9f8Ioq9pfZ46JfF4zdBA122
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Literacy
- SHA256 ea697fa9caad451b599d381e8015386088101d490d1b204f367aecf964c7b9dd
- MD5 64c7e1263f1a917fb49207c777b1ea56
- SHA1 e751d77de6a5045b64e7abb686358e7c3e4b442c
- SHA512 eea82b3297bd1863aa68a5fec727ec95949dcac98b1b44a02b264f97773dd001fdae1e0ff73ec62f8999a189e0ac2635254dde37efce6295183f267c074e4116
- SSDEEP 1536:AhonKcFmBgH6IhFRo7dEudAt7+MQ2ZGeHqEkrS4jlVeyetMSsDeiKqa8TfM:1m86gCdEudAtjKEQv2Wplk
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Mandate
- SHA256 1a2d72a2b8fe7764ac606320ad896c58f63c022ab2d546ea17833b6b7c24f099
- MD5 530088f73a57f49b796879e8d476024b
- SHA1 cc9c7acaadd70e0783219c8495e706c48813babc
- SHA512 2dde4b68d7c390a866ecb9e3423dfd81033f7de8efc3d4fa3cf01fc72490e76715c5146186159739265f322e7c430fd6531cf6299f1e9f1077f3da4ab9146f21
- SSDEEP 1536:pBSHLV2qDk8fiZ3ZSwJOcXYrRzddfGw/QSF27dT06jk8tQPp:pBSHps8fG303cad2XI8ti
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Mitsubishi
- SHA256 1159df0cc6dc480dfab3516cb05fd9ea7fd0393633663b1a209de6cf97bf06fa
- MD5 e57fed1c8fbe11284452e9e43683d212
- SHA1 95a94e64d6ca90e619e0983a647f895d6ee23704
- SHA512 9ddf4a2797f3131ba3e034f2a1cba2a36d160659e65a2ed9603d3824ee0b336212a0b396156138aa36cf3c174e663ceb45bc73ac9345cb0bf31f4713e1f94bea
- SSDEEP 1536:MDbGEs5V8cGy56S7/BqpF4E9FIPbqlMogPjgInKo37xoR72iH/DgTvxm:M/GEC8cbBqpyaFAGhGj3737uR68UTvxm
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Nc
- SHA256 aae3ba16ce7e741f5bf0d5bcfdf863c242c51a39c71cf510c5b206cb04917d36
- MD5 404826a2426c0c188d9d8628dae3e5a8
- SHA1 baa78d8b3c547b96183b225ce8ce76c37c022c2d
- SHA512 21c266ac32dd067a6355d652fb1cb822dab7bc568f81b86776d08094d373186939821ab03cd8c61bbcaf5302297635137f506ccc686c6f9f90846d6f3f0484a8
- SSDEEP 1536:iR9pRqg0L8H7zDPWdr9fMSNEyJ3vVJP6gNTGkDxHtnPGsJA1KXYEKf8Y4sZV++:mp8h8bvOxGy7JP6gdFHRPG1hJ0Y4sZVd
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Niger
- SHA256 3a309c1e884849ea04061f8207d623b224c5f197e75aba8d08cfb9454a1ed3aa
- MD5 dc4f5d54d8d39cedf73cf34abb200e60
- SHA1 61c3c6f82d4402294950a91d40f6a7b23d359012
- SHA512 dcc2a00a8a03e30642fd41ebeb316e04fd40762cdff5c2d77bc5b55c2c99b536198b5b18f548d828647dd91de67b4929759a80c6caaeaa2491fa28570778344f
- SSDEEP 768:+B6WMBN5FvtKYR0rh0ZNAn53FfJ4/pGNCotVnDoDG/fSb6sdo3LYKaVtrBIwn:8UlIrhHnejot+bjonaXp
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Pairs
- SHA256 36b4ac6ff5027888e608f5e8e13a2f925821e98efee615b5ea6f7e4dfc53cbe5
- MD5 ffa7ec98ee25ac2f5e234a8844164a99
- SHA1 45a10b3c1e349a5636e5ac3f365791f384a11d67
- SHA512 1c046e3d92996ac2c57f5bf246b63c83f21a9e9166c3c7a16ee6ef5b0bcb055569c81c490dd96991646d70dc0d5f15a1573392d5448250fb5b281380310cff03
- SSDEEP 1536:BHcCztFTwXjJrmChra7OU9A4KSpNN/3HUbZE5HU+7tLwdNs2SHcVqjV2FAeGsK0:hcCJF0XjJrDhrO9Kgb0tEhUQCN4HPjV2
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Rod
- SHA256 264754e115e53155a8125cac9d197e5048f2d44a5791ff653794c36d1db08af2
- MD5 f2dd8b4bb70fa14cb7dd776dbafc50a5
- SHA1 f2a9658b185119ada0c5e4b7ec7db2e4c9493b3a
- SHA512 3260e12548b06f2a7fa6b8f1387603e911a34d8a7a11477d9d78394402caadde1ff24e68671cdcd66ca1d7bcf30f3902d9563a2eac5628a6a793a4b4b27ec4c8
- SSDEEP 1536:y6ar9LLTLPqHsb6+VIXO/Z6T0SJtBCIEmGFVJgemonJZcy:yjdLHPY+eXioJXKFVtTgy
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Springer
- SHA256 538a376952912bf81f2c774a0f7dffd4ced913431b47715cb87602c94e8d018a
- MD5 fce62a42e0f0e9c74d277a47d7ecc8b7
- SHA1 d1788d13d3163c01a7356f1d32517b065acc6147
- SHA512 e203b3c580360702fe1187edf59cc8722fffc2f9aa9e0909e4eed4140ccf91473864c70b19d31fe6937601f4dbeeaa89d3c2127d7f82e6fb30dca4250fa0112b
- SSDEEP 1536:M77MVH4PMpRBGXLBdn4Rxhh9PL6eyfnHq0q:YepRcbBdnkBlme2Hfq
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Toronto
- SHA256 4c69395aeb3572461096d7673c9744b1cc2baae5f43c3c4412b36c3a24d3429c
- MD5 0469ac1b1aa70a3991e91725ebf4bbaa
- SHA1 521fef0480447e5c46bf5c259c211756019d6355
- SHA512 111d5073e43ab131e6c64eb4bee853c8304c0db2b9bf2997c90902a17e2dba43b849992139df507a444ee35953c1bd1be8989491276229c9cd8beb8188c3ac05
- SSDEEP 1536:KuV9Czu1f7vwovKBDx1rfcZrXQbe6E7NnR:lVQzu1fTwovKBDT0ZrXMe6onR
- MD5 SHA1 SHA512 SSDEEP
MonitoredAlgorithm/Trivia
- SHA256 18e4ad555d55667069338b839f50b308395f57cec88e368090291aef1cc55ecb
- MD5 a02bfdcae53bf0764e40a1f7f7588d75
- SHA1 155090ebe3705486e8fbfd8268267b9453623553
- SHA512 b01087783d13cc2d2f34781ccbc9616ea40359bd79330dc0b82e06b9d778da7538aca6be0435463528470a574d9fb33f3bbdff8dde8072597e970c181addc930
- SSDEEP 1536:sq8XN7Gg7ui8zBQr7Od1dKguFfyFi+SZyc5uheCIJzw/pG3tK5lt0qP3MWNn:uSeuf9Q23tiH0/owBG30q+n
- MD5 SHA1 SHA512 SSDEEP
NetscapeTier/Premier
- SHA256 b2c3e6feee599a31010dd6c51fcb9ae1dd1239c3bc03d9727303936e3a01e99c
- MD5 257884ffeb572e8958a3351ef51b9eb8
- SHA1 bf11f05c15662f543dd2f2d108d7599ed4382a6b
- SHA512 4f0521c2be1665acb97a579ee608f1b19a662bf898f85ef719a8f3393c6c9c45c3cbf535a37523f761ef7c01e9a56a836b621574beed59e2a88b4b637d84ece4
- SSDEEP 1536:daMLRy+cmbxLnE9fAvTxbA4L2WUmU6cdgFC08Gw5IYPh15pgj7O:daMLRy+cmljE98TxbA4LgwC08Gw5IYWO
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Alan
- SHA256 0d2b6e00b090f85dc962462011e8733481d231df5ac0f169d20231da082cf47a
- MD5 76e4fc6f9ca6a6e6cf42cfaa26bf2715
- SHA1 ad281925e4a0f138784d0324c580fcc34a52abbe
- SHA512 c0887ac3306f8c846f2854dae4c384242f655816a91284b587dc023ed40cd8327d4d5b465e6b6a8aa19d1a7195447f6e48121ce1269549fa154950d87973623f
- SSDEEP 1536:q7v1DNX0RKc9YvdiyDi4WH2lThIcGENmjkbFjfpfLDUpTut:qhDSKc648EQTa5HjkbFdfXUJW
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Applicants
- SHA256 9c37ff6c7959ff682841f49a06d8bea8852664a8a49a3b7f1d8d83f19e3a57fb
- MD5 6e359dee7bdbd9b837b50a9aeaf479e7
- SHA1 5dd5e5ae23babe1a312568e6c3d7d70d504da9d0
- SHA512 3eacffbc8316cf977daf18ddefd52757e992d167b2e20af4617bca2718608ed443fe298ec92fc0b4e34e0707e845c965321950d30cca63f318744e53ac0b97c1
- SSDEEP 1536:Ve/vNd+6+qKNa2tQUzUkrFEP5iVF2FT4IBjMgDZIYzyKjGIMaXxtAjD9eS:s/vNd+Ht7UuhSFaSZry7BahtW
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Babes
- SHA256 531f6b85be33cf9c14ac87debc964f169f3271f04ff7de3ca0cecc9c24e03855
- MD5 f7577d1fbb2f3783fe79b4f7daeeb3ec
- SHA1 fa40b019ba987c30017499f0b72a925d35548452
- SHA512 72210d2f2164861cc00b650804192bbcd5d19e84241f0686bb66caf10dc248e214c1304a0f47b7333a915ee5cdd109bb245614a6a8d21a916f01418db6270179
- SSDEEP 1536:0B9yvpHI9jTrJE8gyMuSyXXcEl1JNPuBLOvHEDSZFsrq1:0BAvtI9jTH97qY1QYsSHcm
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Browsing
- SHA256 07be8147208c50428b18175a8661748d079fd5b5c9896c26c93dfe4045419a32
- MD5 3db73acb7771b6177a8d27bf4f2fc11c
- SHA1 cf6156d1791d3026c10b6cf1028a5c4c791710e0
- SHA512 b4f8d7c21640285a7b8c215971d40f26e43c71c09f1db3a6d74f04edc96cf9c3217b663c44fb0c59cac1d8cc968c2f68b258c77c5fbea0a8dae6d40e5549e13c
- SSDEEP 1536:srNGQ3nTk0csJLnxXUy+VvEsWz0z4R+tLi562DEV/T55haEHbv55qE3XTIS:srP3nTk0cs9BeMIsYi5dQRvhaYv5tXTb
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Cabin
- SHA256 2e943d3f07a9afc1c486078fca412405473f0f5e285dfd22fa7066eecd66b9b5
- MD5 dc0382e457f5b38acc953fdfa16d9ca7
- SHA1 3f692afea6c44df928323b0cced07db545cc2ece
- SHA512 e84003181845982a711183ea03ca97eea3919f51e5d08dd37b6e255e1d814949d97474c84dd84091f42bb4238e24d00ee2c5af510beadca3ef1397485b81b569
- SSDEEP 1536:/q/NIM29QtC0C3xo0ranSRwdBWMbXIi/GMl/Dvqe5qe17pyQ:/w929QtCg0rZM0MbXFGA75R9
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Deviation
- SHA256 ce9cccf96f6796b644e04a7f8467927fd47bc7f99caa8caba8f54e7ddeb91f39
- MD5 57367a25edc038d8965acfd3d5047bc9
- SHA1 145fb060989ffd1f558971087c72b7eaf25693c2
- SHA512 e063b6651ac28f52530d2f9104cc3ac04057479e02f07760fa6fdb73ab0dc5a241efe13f77e86897c5504844ebcec7d7cee2da44f228c50475ad9fff077072f5
- SSDEEP 1536:alkdaDMptFpKyTpfM0JQBLDAZVgL7T5NAOhri:nY87KyTp18D/d/ri
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Opens
- SHA256 cff85e516a13fbaaf29b379aef45fb9342f2248008cc201239a254c4ce64f1b7
- MD5 f15b1afc8caac6ab52065b8fabe473aa
- SHA1 f2440c4d212af0d9535b2703cbfe740352de4b9a
- SHA512 6013603f714bc2a63c2b876c2dce4801dd36d88f34874a750c6de3b7835ceadc8c3e0513e88338026aaedee8269d98f6818a76aaa0c905c4e5a8ae32207bb3ec
- SSDEEP 1536:Nsrpn/Gb8mmQbQQAxdg5TtSd+VFqL7AXsR98g8fxbZrwKjR:NQpnnmmCY+Tf87AXsM7Z19
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Payroll
- SHA256 29c7480f51688e9ce157fa786d7c0d44af173bfec1ace4cfd2a77b2747410acd
- MD5 0dd261a5a7b70660626180c1ca221a53
- SHA1 df75319b6d6e88d833fcf92f3b8a21ed105799ec
- SHA512 71d39780cfd088bb5e541396f3dd5f6473c173af2363bc86a5d81504d53213a073ee66dc018a9aee7b6b6c7338c4499961e3cdea631dd3676e15f35ffd6b625b
- SSDEEP 3072:G+c7HNox8aDZnIaheOJqLWJ+js3q1uHFyV:U5iDN1Jq6J+js3+EyV
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Pentium
- SHA256 0884be0e7f22e6e68087b3a82158f31055c17d535d629158ea036d5cb5e619eb
- MD5 fc81e9890a614de20403d1ccf91b38dc
- SHA1 65937b0ff763483fd2d947f57d92a2741e912c5e
- SHA512 1a7656c4966f0a82871a76269b084bb8d516d4e326b4405725725069a999b8b01871fed4f402c337c88c73b81d630349c4962363881a6c2eefc33d7856550579
- SSDEEP 1536:mlqPRVw+1Z053FbBeJ5tTE+Dm6aJ+bBb4AT+Grw7rydcptCtT6Dg:mlF+1a51UPtgKaJ+bBNTTmx+x6Dg
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Results
- SHA256 82de48db3ed669ddaaa84cfaa8377697bdda9403feaec86ab5a1c8a97d424d91
- MD5 9d82679ec8579ac0683c8ee851373cdf
- SHA1 5bcbbfecc28201ad766d8cf90886ba33dcc2fa90
- SHA512 2e89176803079461433457bd255dc2461da797b84aee1246d2e8e3c6402a4b4034506a110f818f16c85e2e67eb89863d6be2c49f06a71386f0bb5247bfdccdb4
- SSDEEP 1536:+F9Yb7g1Dsm0T2C8xdrcPjjbBggSeoC7z8RQsEwN/ns8d9hU9sCQKqcrg:m2Un3bZcPjjzZk6ivld9hCPg
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Sans
- SHA256 b79332189029c14705fcfa3f8d24a83ae7f332f95490de413f76f4f4a83a978d
- MD5 b194ea6dd234a294a1aaa9aca190e363
- SHA1 ef249bb085014723216a9ec46a567865d7c6ee3d
- SHA512 f1e68db590170ef7d01437af18a7c91d02912d169e5da33c13a2bad9c49a3628b95137520ba24b57f531fa200295c9cddb5bf03375bb005359ada6a3f721359d
- SSDEEP 1536:WdKUtTcSIi1n4dIU88gV9qFewGX8cRZpsF3xBegzc6PU2/tbUnKI3ZLF0WVp1LYj:WdK0cSIi14dYV9qFeJMQvAxBesPxhUKp
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Such
- SHA256 c552aab1f3782272df8917bdd64eb83e31fc216f18169bda2015887104bfc20c
- MD5 d02459a0f20c79021814846d683d6437
- SHA1 092b751f6eaa3b8fca4429889c35f2a5aee30e05
- SHA512 82ca53a3e5a42ba0ffdf6140e191ec98d0cc7759436a9e77bebf2c880f4b2d60837839fe2a151f2a5ac0e1b33661ac787f694b124ae504522596d243ba02c561
- SSDEEP 192:OHAeOqAFDw09CV/2nPvj6DdMP3r1HI5jMlba:OHAHhww+/2nlP3r1WAe
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Voip
- SHA256 3a12bd967185b67d00f6252a805f22ddf28b249a95e2529b95616918a4658139
- MD5 2b9e55fa11e22d0efb19cb24b7ae39bc
- SHA1 9d4db06fcdcdcb22124655df91cee34f8f71454d
- SHA512 edd3b396717fb87bead6898a6ca51463fd4cc1a07a1e404a2a97ce556ca622f1760223fc192422bcb16ba2228d1b6e13f8ab44fa10acfe1bb9a3d1ca96dc026a
- SSDEEP 1536:xJozlgfDw+6nAnaWCeNnR7tTxDuhUG5ayZiObMwvDQ5njwUauxHhl08q5Ry:gzlgbB6AnTCu5Tdujfb7DejwoHtqe
- MD5 SHA1 SHA512 SSDEEP
StopsPal/Wma
- SHA256 329b6df842cd2d65b9950501862b9e7b19fc0fbee7ce43df48288d7fedd04098
- MD5 fc911ba4ad812574310d7fcbf2673116
- SHA1 4d802821ff2a6633c46471486d729c009443f205
- SHA512 ea04e88adf483d21a5195e113ad97400d7a5c8c5f4a6b1ddbb5d4576db42d1332e51ca9befcbab955e15848a0efdcb4353e96578a359d19e7807915767ce26cd
- SSDEEP 768:yg4d8PUtj6hS4+2iWq0HnJsj5l2Avco63tT0anw2E0lb/6+VFAl31NdKEHi3+o8E:ud8+6h/kW2jrN0o63tT3nwK6j3woiRD
- MD5 SHA1 SHA512 SSDEEP
start-main/pthjadh.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 798b09042289ed11db467e8c1d239b68e9ae1cf1f73401e5bf2bdc95bcc8a123
- MD5 9c044a232b3f817c3b91ce10adc92e0c
- SHA1 12c9eb2e4c0b014356112a40cde6f4ff6ea5af6b
- SHA512 37b8c133ca63e3f32e44d1417d3d6f7ff6c682696012bbedc65d07e0773ec9d70a9e12e519b9368ccc1bdf6273edb63d5b797b7b3e7c1bf749f42ed08052bef6
- SSDEEP 49152:Rwcx9pgRLTOTnqEOEvERC2F9L0ViBBM84yv8Pdm/c7YrFUJUUUUUUU:Rwcx9pgRLTOT3dERjUJUUUUUUU
- MD5 SHA1 SHA512 SSDEEP
-
Async RAT payload
-
StormKitty payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2383854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
start-main/ptihjawdthas.exe
- IMPHASH 0252f8597a857ddcc37d09e38ea5837d
- SHA256 121bfcb759e561bca3f63777498646c80d030a92dac5a27c7c9cc8f5581e672e
- MD5 3ace4cb9af0f0a2788212b3ec9dd4a4e
- SHA1 2914bd74b5553f5f4dbd5f7b23bc00d04a2c77cb
- SHA512 76ecc354b1fb5bf93f18bbe9f85401ef40e0826f7eea73a0cb5afda5d69ec384a459c07b6cc2386176888978d2dbb9bac9360e249114c59799de0984bbba5c56
- SSDEEP 384:EhEy+hzv91UqVY8+JppEhKe+Ej7sI4GSFdX9NAb/QX22r5A/w/o0el7xI:IEy+hT91UqVY8+XpEh6CMs7gx/o17
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4864
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
CopyFileA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
calloc
free
fwrite
malloc
mbstowcs
memcpy
realloc
rename
setlocale
signal
sprintf
strcoll
strlen
tolower
vfprintf
wcstombs
shell32
ShellExecuteA
user32
CloseClipboard
EmptyClipboard
GetClipboardData
OpenClipboard
SetClipboardData
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
start-main/yjadyjasfdtj.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4b1967b04039c9b7a23651043b38c895cca2eb560de30a960368f82549079605
- MD5 5780dbae6ac61a88c8d89f216f324146
- SHA1 cebcebedc7aaea3a4dd1fbec933cd169bf92e9dc
- SHA512 8a595384247649e31ef0c69a63243199d224334d75b66fd486a8e6ba0ac3c2b5521e1ead4b64fb9c968c21a4836581dde10e78f36217b62862c40bed2d105920
- SSDEEP 12288:I/TnPz84JfpflKH6qHJJMA+7pW3Ari4VVyZC0+1cp9rcDNpTWDTQGCZ6:I/TnzfS6qpJMA+73iE0nTr66
- MD5 SHA1 SHA512 SSDEEP
-
DCRat payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
881358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
853KB
Virtual Size
852KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ