CryptoChecker v2.0 By @Drcrypt0r.zip
- SHA256 5cdb93c281ff160f0dc5ab94f490fb2dc8c10c5dc44159e98e7da119fe51b576
Password
Cracked_By_@Drcrypt0r
Overview
overview
9Static
static
7CryptoChec...ib.exe
windows10-ltsc 2021-x64
1CryptoChec...to.dll
windows10-ltsc 2021-x64
1CryptoChec....0.exe
windows10-ltsc 2021-x64
9CryptoChec...et.dll
windows10-ltsc 2021-x64
1CryptoChec...ce.dll
windows10-ltsc 2021-x64
1CryptoChec...ns.dll
windows10-ltsc 2021-x64
1CryptoChec...k1.dll
windows10-ltsc 2021-x64
1CryptoChec...in.dll
windows10-ltsc 2021-x64
1CryptoChec...BI.dll
windows10-ltsc 2021-x64
1CryptoChec...ts.dll
windows10-ltsc 2021-x64
6CryptoChec...et.dll
windows10-ltsc 2021-x64
1CryptoChec...ex.dll
windows10-ltsc 2021-x64
1CryptoChec...nt.dll
windows10-ltsc 2021-x64
1CryptoChec...re.dll
windows10-ltsc 2021-x64
1CryptoChec...el.dll
windows10-ltsc 2021-x64
1CryptoChec...LP.dll
windows10-ltsc 2021-x64
1CryptoChec...PC.dll
windows10-ltsc 2021-x64
1CryptoChec...12.dll
windows10-ltsc 2021-x64
1CryptoChec...er.dll
windows10-ltsc 2021-x64
1CryptoChec...il.dll
windows10-ltsc 2021-x64
1CryptoChec...on.dll
windows10-ltsc 2021-x64
1CryptoChec...el.dll
windows10-ltsc 2021-x64
1Behavioral task
behavioral1
Sample
CryptoChecker v2.0 By @Drcrypt0r/BitcoinLib.exe
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CryptoChecker v2.0 By @Drcrypt0r/BouncyCastle.Crypto.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
CryptoChecker v2.0 By @Drcrypt0r/CryptoChecker v2.0.exe
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
CryptoChecker v2.0 By @Drcrypt0r/Extreme.Net.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
CryptoChecker v2.0 By @Drcrypt0r/Licence.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
CryptoChecker v2.0 By @Drcrypt0r/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.Secp256k1.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.ABI.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Accounts.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.HdWallet.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Hex.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.JsonRpc.Client.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.KeyStore.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Model.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RLP.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RPC.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.EIP712.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Util.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
CryptoChecker v2.0 By @Drcrypt0r/Newtonsoft.Json.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
CryptoChecker v2.0 By @Drcrypt0r/Pastel.dll
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
0 signatures
150 seconds
General
- Target CryptoChecker v2.0 By @Drcrypt0r.zip
- Size 5.2MB
- Sample241031-valcrszlay
- SHA256 5cdb93c281ff160f0dc5ab94f490fb2dc8c10c5dc44159e98e7da119fe51b576
- MD5 3c57d76e5ed92dc88954d4fb2a8c413e
- SHA1 d4d35aa127bdae01bbfa66946f177389c4abd7f4
- SHA512 e0e28a8321f94014f5c071aefa8649f1a06b75c7c149ebdb9ccc4b40e4f7cb2b29b446563ca4db4a62e7cdc8dd5d0c5fc5af56e5bb36780c1f60890f53ba0124
- SSDEEP 98304:YUG+gsBcJdu3RA4+YNcFfDxeAf58Qs+qnqNlE3MTzsk7RbcG7SwGZ3:YUXLcju3e4JcBDxPu1JAlEMF7Rb7Swg
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/CryptoChecker v2.0 By @Drcrypt0r/CryptoChecker v2.0.exe themida - Unsigned PE 18 IoCs
Checks for missing Authenticode signature.
resource unpack001/CryptoChecker v2.0 By @Drcrypt0r/BitcoinLib.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/CryptoChecker v2.0.exe unpack001/CryptoChecker v2.0 By @Drcrypt0r/Extreme.Net.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.Secp256k1.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.ABI.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Accounts.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.HdWallet.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Hex.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.JsonRpc.Client.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.KeyStore.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Model.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RLP.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RPC.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.EIP712.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Util.dll unpack001/CryptoChecker v2.0 By @Drcrypt0r/Pastel.dll
File Explorer
-
CryptoChecker v2.0 By @Drcrypt0r.zip.zip 5.2MB
-
CryptoChecker v2.0 By @Drcrypt0r/BitcoinLib.dll.exe 563KB
-
CryptoChecker v2.0 By @Drcrypt0r/BitcoinLib.runtimeconfig.json147B
-
CryptoChecker v2.0 By @Drcrypt0r/BouncyCastle.Crypto.dll.dll 3.2MB
-
CryptoChecker v2.0 By @Drcrypt0r/CryptoChecker v2.0.exe.exe 2.2MB
-
CryptoChecker v2.0 By @Drcrypt0r/Extreme.Net.dll.dll 121KB
-
CryptoChecker v2.0 By @Drcrypt0r/Licence.dll30B
-
CryptoChecker v2.0 By @Drcrypt0r/Microsoft.Extensions.Logging.Abstractions.dll.dll 60KB
-
CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.Secp256k1.dll.dll 83KB
-
CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.dll.dll 1.5MB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.ABI.dll.dll 92KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Accounts.dll.dll 38KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.HdWallet.dll.dll 9KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Hex.dll.dll 13KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.JsonRpc.Client.dll.dll 39KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.KeyStore.dll.dll 28KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Model.dll.dll 30KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RLP.dll.dll 11KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RPC.dll.dll 160KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.EIP712.dll.dll 6KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.dll.dll 37KB
-
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Util.dll.dll 41KB
-
CryptoChecker v2.0 By @Drcrypt0r/Newtonsoft.Json.dll.dll 695KB
-
CryptoChecker v2.0 By @Drcrypt0r/Pastel.dll.dll 11KB
-
CryptoChecker v2.0 By @Drcrypt0r/Settings.ini187B
-
CryptoChecker v2.0 By @Drcrypt0r/custom_passwords.txt638B
CryptoChecker v2.0 By @Drcrypt0r/BitcoinLib.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 896d51d65f23ef76d8ab7214f527121ac3242455bd8dddf048ff7e3225c21f7d
- MD5 a8945e9509e1d6eb9e755b033ef440c8
- SHA1 9def4a846736901400614dd21135cf44df40d572
- SHA512 321ffcc777a066fc2483c6ae02c0075f4b80984c9b6e838ca24501c3c4a778c07cebe99e530f021d24642f0640f5768e575d120c28e36047eaadac9546c08552
- SSDEEP 12288:qm/X3xrdw5YhwEKTe0u2ucBETtRDgAj3qMhX/qF3qMzCI3g9W:qqrdReEC5BE5SAj3pApos
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Cracked_By_@Drcrypt0r
Minor OS version
0
Major OS version
4
Entry point
701066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.Vx%
Size
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.?`w
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.6`x
Size
538KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/BitcoinLib.runtimeconfig.json
- SHA256 f03c65b081ae722b8c7e574c583688d95ee15b246a6bf5c9a79cb496cbd27583
- MD5 accb867d1022208b6244a1504ad61c6e
- SHA1 5028ba7f3503486654cacad0d327e9c18fde0de3
- SHA512 836d5ae174248a0ee72c29a10e9681a0198e5a965ee16eb0b61049b32e3781b6a63c611952765eeb2ad8f2731f42a8883a3db215c40c526b52158b715ee82c76
- MD5 SHA1 SHA512
CryptoChecker v2.0 By @Drcrypt0r/BouncyCastle.Crypto.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f42b8609854d80d7f81f276340504aa5e82bbe4d73d05080fef1fcca2444b4d5
- MD5 9fe1a31fdc7b67f5480e936d359ef6c3
- SHA1 576269a42c0991e90f5e83c8205eb808d7b4d3ba
- SHA512 7b7cae9fc0afccee7533971f97af11e5dedb54775bbfe45ad94b82bfda6122e65fb378bd27b2390bfe45af89438dbb550171f6939febcf742034a405b49339a7
- SSDEEP 49152:C50b59Aj1ZLCpTT2TzAOeJ+KaGxHIkMNqo5wW0DlI6eujzc3:y0b3AjaFZE5WIR3
- MD5 SHA1 SHA512 SSDEEP
Password
Cracked_By_@Drcrypt0r
Digest
79:87:a0:79:c9:e7:e0:91:04:22:e4:1d:f0:e6:fc:98:c3:6f:3a:ae:b5:cd:87:1a:7e:82:22:1e:e0:30:55:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Oct 19, 2021
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 18, 2020 - Mar 23, 2023
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
3222938
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BouncyCastle.Crypto.pdb
mscoree
_CorDllMain
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/CryptoChecker v2.0.exe
- SHA256 cf1b7176a9955b4f0ec37689abd0d3af8fd180e1cad3a9516ada1f81cdb57126
- MD5 cb2a517209c59c5740bd544c2a7392b4
- SHA1 36a3da25bb5ba4a3320a14af66e663e99c3439be
- SHA512 5356b223473458f720fc52a06b88bf73e2a95ca3a3c63bcd98dca1c6a8a358af411cbbd331193b0254dc334196c2d91b8718108874de04801fb1adf611402b60
- SSDEEP 49152:X5ZHDTQqCkJruTWE7++reV9aF7PGN5bCKtfQWFjB1:XvHCdTj71U9apPGzztoWhr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Cracked_By_@Drcrypt0r
Minor OS version
0
Major OS version
6
Entry point
3706968
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
45KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
12KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=77, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=162, id=1, productName=Unmarked objects,
count=10, id=265, version=30140,
count=1, id=258, version=30140,
CryptoChecker v2.0 By @Drcrypt0r/Extreme.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a6518ab7419fbec3ac9875baa3afb410ad1398c7aa622a09cd9084ec6cadfcd
- MD5 f79f0e3a0361cac000e2d3553753cd68
- SHA1 4314bcef76fddc9379a8f3a266b37d685d0adb79
- SHA512 c77516e7f5540ecd13fa5d8cecfce34629acecd9b5a445f5f48902c9e823328fa9a6694ecaa39f5b6053de61c2b850c2d87df25357548afaad6ec37eb3e5e355
- SSDEEP 3072:bdoECIgjBibgp2tBqL0Y++ruXqMG4ih3lbpMqc:bdoECIgUrG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Cracked_By_@Drcrypt0r
Minor OS version
0
Major OS version
4
Entry point
129182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Licence.dll
- SHA256 6e04a5b38d54a82d97d5d553a06b81dacef3c476a8ed00edf1cec4eb9beda025
- MD5 56583a08f0a1f7d22a3711be9018e34e
- SHA1 91f7f94d5eaf686261a518510d251dcce0c7d60a
- SHA512 ee6f01550b23bfe627e59cc04d63fecf500288d7b74fd9922b2ea9b9fd0c747d46220cbba8cc819e613bf7670ba04be1a8180466c68e99e07dc7d2254c53a2ae
- MD5 SHA1 SHA512
CryptoChecker v2.0 By @Drcrypt0r/Microsoft.Extensions.Logging.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3e73ec5f2e1f10200c25ba1ba0c8f73cb0fbc09a6202fd44f19ee813ece89da
- MD5 2d352734d0b1b60b04f29be9f21189b2
- SHA1 0d8799d2f98dedc3b0af806a539240c5f52a4826
- SHA512 77bd3e4d6a082cde14f9221fe4d65ca0b769e9c13e0d305d61af13d5fa7f02a78312cc5c3b2e7a4497316a40a30bb768af6ba95f5b262d9e217baec6e988123e
- SSDEEP 768:U+UfRQY8PGNWovMLJYBjtLgnuAAAAAknwd45F1rzf51/yJuoidblHJg6GOw9W9jJ:U+tY8PIiq51wcF1PfXnoejRwUV2JGT
- MD5 SHA1 SHA512 SSDEEP
Password
Cracked_By_@Drcrypt0r
PE Signature issue
Digest
69:29:1c:1d:77:8c:4f:ac:b0:00:c4:41:55:f4:ae:a0:25:ff:5d:fb:67:12:a5:de:10:2f:a6:2d:76:e0:b2:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 29, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
57606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/net6.0-Release/Microsoft.Extensions.Logging.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.Secp256k1.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b91446c8fb053038a622496fa30119738363d15d18b1308f41408fbd3cd7e3b
- MD5 1f980df3c2b3133dde28ca905d8e204a
- SHA1 5bccbd46e775ac7682c5e1995e1adc849e2c96ba
- SHA512 58811de395a7bff122c50ec4b951151266d8e062d3b75884bbe1b421c924ee33120db7c819dc41fd0b2845595c7ba43cd7cd2b4ee54f0ec3a3168d9d8341ec89
- SSDEEP 768:1Gqlkfm5tcpvLRIeONZN/qm6OyswUuOXE3FFZndDkyzCju4g1uvDq/UbUdSaUFIR:1GqltcpvLRYBTybYXE3JdQbjg42dH
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Cracked_By_@Drcrypt0r
Minor OS version
0
Major OS version
4
Entry point
89934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Sources\NBitcoin\NBitcoin.Secp256k1\obj\Release\netcoreapp2.1\NBitcoin.Secp256k1.pdb
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/NBitcoin.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 45a054a8ae42123ab1169cee3a6b5c42f2f1145709d011a36121aa709792e240
- MD5 4e99cc44c043169500f556cb1ef1777f
- SHA1 7b34801123615da564d99c84ace9f66c2333a9b3
- SHA512 f772e9429ec30d22bac486f008949c868962f3ad07075abf41a46a41c74e6622a3379004f3ff72c04946147a3a6d006e5a89f5a2a0212c1317b27a559107eb3e
- SSDEEP 24576:meEUpLP9DaTpXpbTbP8oFGojOzjELi9dVoGdl:m89N8hTbP4jwi9d
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Cracked_By_@Drcrypt0r
Minor OS version
0
Major OS version
4
Entry point
1511706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Sources\NBitcoin\NBitcoin\obj\Release\net6.0\NBitcoin.pdb
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.ABI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d1351b8193450b7b7c4f9da8c6cc2e2f484d06a6bd9863011e3983c27c4ce7e
- MD5 20d207cadd9296e1087c7ec92c2ab9fd
- SHA1 5dbe3eb7257191fd0880d2b6f634a1516cb3e9f4
- SHA512 0906c8eebe888c6de7b9e50f970500369cbb9f0902c3119d710e47f3935e37bb3599675f5f47edbf7039ed24a217adc1543ae13cbcb5fe0e9dfa0b85a9452126
- SSDEEP 1536:F3g3egl1BAMxv/YGyrrnAwDkVGepz54c3qGK1dDzIqIemi:zgl1B8GukYsNmGMZ2i
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Cracked_By_@Drcrypt0r
Minor OS version
0
Major OS version
4
Entry point
99922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.ABI\obj\Release\net5.0\Nethereum.ABI.pdb
mscoree
_CorDllMain
Name
.text
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Accounts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6f96e331814e9c89dbd442c6d17b00d23105fa7a879f1fde4a07f81b2168c69
- MD5 08fd10405dc61db35ef7dbeeef2641bf
- SHA1 cf8b5bc02bc08bdf068300983ac20716e2c6c8ec
- SHA512 ba66d2c9358a875882d8b1b7cf244509e996dd563e24fc8a2ecfaec54c5f7a177b9191d700be52b16e44b781443e8f678783235ad4a111e90b62787b49eec838
- SSDEEP 768:lHauFSle9UDKbHJf2mFwCk+kKucZvMqWOblCC1LjCIBsZ:5FmWTpf2mFwpxKuOvlCC4IBM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.Accounts\obj\Release\net5.0\Nethereum.Accounts.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.HdWallet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 99f5bf5dd2ea393291bdb5892b015de55266b669faa979784ef64cce40d70434
- MD5 35b9965e5f0a83aa8bec6112450a8b19
- SHA1 574c7ee0ea4599e20af2170beba04e3d66a2a320
- SHA512 4499ffbe08fdae637540083a368702603126da716cac2f04f7f73eade861740c6bd603b463ccb11ff26a07eda210395d28de7cc2bf4be8ae3bd429e2fa6154a8
- SSDEEP 192:aWLegGoG6EuKaM2bqgF7F5yOmJr3CI0J5ca:sNoG65plbqW5jyr3CI0JJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.HDWallet\obj\Release\netstandard2.0\Nethereum.HdWallet.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
956B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Hex.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 09d132bcc6a4bee454f2aefa12b65e896f1149559e3ca2f8cf763561a1cc9a03
- MD5 82290b458e93cb98b9230787cc2bd80e
- SHA1 231b833d040c47b0ad03751a435ccede39c0e2e2
- SHA512 11324efc4e36d3c231c69a6aabbe6aae13a3113748905c5dbd412b36010dde4e7f031f007ec223e91416199c32301a9eba15851f45e8615250b75b6b5ec20e60
- SSDEEP 192:aQ0l5184NRVVmDlSLhJ1nt8iWCRIXdXeKpGm4tMCIzQGoMfNSQcD:90z13NDoAQB5dXeyG8CI/oMfYQu
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.Hex\obj\Release\net5.0\Nethereum.Hex.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.JsonRpc.Client.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1aba6f294d850d2df06eb1ade5a86d9e19c29d7c10f59218efe0b0f9bb8c8cfc
- MD5 ae92134db11b9d18073e78b5fb9217e9
- SHA1 ea7850a7a00a28670d465f16924d0efe212768ff
- SHA512 e717f726268f210771edc32a8b2e0a24dbbdaf0b75a0e053c7e387c7d5717dfe71b1d37f619a1eec6b1d7131e7d197c306e6b462e4ad48158218cde147739e66
- SSDEEP 768:ySgM1yWvuepqwDgoMhW25zO4HtLOiILvMOoePdgJg2YC5t8tDCIXfe19:yjiDgogue8vNoeMIk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.JsonRpc.Client\obj\Release\net5.0\Nethereum.JsonRpc.Client.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.KeyStore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 464bd2e67d292a477acc706be0cbf7e329b33b8b1810e8379b892d3be3150910
- MD5 5a0975898a1420771e6e074139cbde95
- SHA1 b068973cbeb0378eb4e1caf187576090960fecc8
- SHA512 add991c539fe726d9e3d33ddd8e19dc0989f6ed20b63ee31b875f1e030ece94d2199680e0fec4bd632ab94d5f32cddf609b38a9524afaedabcdb00bdab00a271
- SSDEEP 768:GoZybC3X5fhSHebql51Yz7LZCI5dbTDe:Bj3p/O1Yz7LYI3bTC
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.KeyStore\obj\Release\net5.0\Nethereum.KeyStore.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
956B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Model.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c33984136bc4ed7a9388982dabe6426cf1f075386b37866d9f4a365f69b01605
- MD5 c14aaa8900e998cac1e8a1372e0761a6
- SHA1 61b2f0fb5a67c55b91f740fb6bbc569493ff8781
- SHA512 e005e997f663afe65f3081a755f4a897abd5bec6cd8282b25360da64d9d09140209cb744725f416fb9fc6c9ceb1215e53fb47bdd0e42168c8135bfc2b5f26012
- SSDEEP 768:b+gIJfy+WvEp5CYYh5ZNDWSpW80y1XCIfJfDq:yBI5EpOjWSt0y1yIfJfe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.Model\obj\Release\net5.0\Nethereum.Model.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RLP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 639f40db503e7b5a751817c48ff3a6e38c6e2b30c528f1ce444cc5f69a36d8a5
- MD5 800ba061fbf9bdc4989b09a78fdb4528
- SHA1 c4a2dce17e378393ec738d5a73a2ad652ecd03af
- SHA512 8b2922196f46451411de6931638b8cc4a0b0ee17c19fac4767ddf50eab8d9263534fc65effa99a58b6c59c0cdd863f3b9947b644078b38d9cef2b6f18ae74f45
- SSDEEP 192:LiQmFjzAAuWSA9w566hhhhh4eAfQbwlvZ8/OTH6cssEDoI7CI+R3B:0FvBFSAW566hhhhh4eAfQslvSt6SCI+j
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.RLP\obj\Release\net5.0\Nethereum.RLP.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.RPC.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69f012125bb34307c39e107778315b303e15ad9d406023c52d3a09bb07553c52
- MD5 f75ea6dd775ef055af9833870836d643
- SHA1 e0234c00eca307641b07519a404d3e653ecbaf6e
- SHA512 d52517a7fe183359335723f120f14354842ecf1963fb81e3045cd9ea03d3286386e77e3bcb02f8d397d7d056254847bfbf63f4a49e893b4ae82e2bbbdfea9bdd
- SSDEEP 3072:x5ywWFRp8ESOM+NTc0v01Ofrat3F5EK8Qxbr/2sTWkkYtnUHPSP:x5ywwMIAofrWX8srTWVYtnoPS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
169806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.RPC\obj\Release\net5.0\Nethereum.RPC.pdb
mscoree
_CorDllMain
Name
.text
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.EIP712.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69c6b780fcc61ac4f7b24d113619d2b003259364a5dc88a10a8cf6ef4c36868e
- MD5 e627b8829a1247bcc0b52a9cc01dc645
- SHA1 6393c5a7733c1f454359226ed273714061fcb8c1
- SHA512 5272cf56f564c5189ce2b500e5ac36acf59f7bf0173909d8e1436618e5a2394cf889659de0f19b2c7ebc91e4b76bf6722a5f7ca3bf73d9ec15f828a64d54ed37
- SSDEEP 96:Da42z00pcLTJnuYBvSRPF2RVynOz5lYMfVCI5fxg5WmhWBB:Y0e8HBvsr4A8CI0ThM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.Signer.EIP712\obj\Release\net5.0\Nethereum.Signer.EIP712.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
820B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Signer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1e6ebcc1ad5f0c90be5b344b3a0c407c001063f4af11418898f5ce71d56c4180
- MD5 7d02e5d0d220e9dd911ae96a05787372
- SHA1 4e78ea03390821bfdce987fe7a66404e982be2aa
- SHA512 a0423afb2e9d22b2000a8035c78c3b6cb8c862ed86cd14bdc387145101c714ad36a7188adf9e21fd38cb2b2094d9444f5097327da99274b77d17a445bacbf15b
- SSDEEP 768:94Y5oC5RYc5Krf/QFW8E2WDW2zA1XXCI8EdsmkAGl:7oCxtWBDWioXyI1smkAGl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.Signer\obj\Release\net5.0\Nethereum.Signer.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Nethereum.Util.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50a372ef57039f045601b5bb554a72ebae970ceaf5517b4c42e90f79ffe02d5c
- MD5 ec13045cf781ebb18e9f40b76db756fc
- SHA1 30472642f5d22951812059eaaec4c0493b9af4e6
- SHA512 d22ee2dd1af6bc2437e844cc8c86977b2e8b89ce5dbb1a2ee7043faa3f0cbf36f80d84f7e1928f151e5c7ff91b1e74e251490e8f60d3444005c42a4d64147483
- SSDEEP 768:tM/U/NYQPcLw3UNavuuqXKTdd3QNTTZa8zNV6MYvXaPwCIztLX:t60eQUNafTdyzNVFYMTIB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
H:\JuanFran\Documents\Source\Repos\Nethereum\src\Nethereum.Util\obj\Release\net5.0\Nethereum.Util.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
- MD5 adf3e3eecde20b7c9661e9c47106a14a
- SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
- SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
- SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
705086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
681KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Pastel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e5b201795c414641aeac6d303cbdec9f76d3f0bcc22f0d7ee9d1c10973fe0ea5
- MD5 056e487138b2cfb04bc36bffa2e43014
- SHA1 d80aedb31a33671923d931be95610bb72c6cb4a5
- SHA512 e0d67b4c7df1b181c07a77916bf5331d779343f6e08d80b7ab57c94a11cba622f3ff49842655dc80109bd058320dbfe6eea76c1fd3b661530d6555158ad1e8e7
- SSDEEP 192:xzuVjHRIViS+rKXrUii6Ug7qZw/ffxRihNvTWPRNt+yV1/H:gx6KrKrN7q6/BRihNmR/+C1P
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\2017\2018\Pastel\src\obj\Release\net6.0\Pastel.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CryptoChecker v2.0 By @Drcrypt0r/Settings.ini
- SHA256 66cf3eacea9a9136faf0cc5d1b06c86f98e234798269020dea4c7ad43f861c5f
- MD5 b91f4506bd8786ee6b842eb39cb5e27b
- SHA1 077322773a1b60ac406e62e4e09685f890621ea7
- SHA512 a17ddfe8b61ce84cd95ea78ebb1272c81a50d2419fd0300153ce3ee94a40aaab3a827699744d8b55a53bc40f2c71dad58fe8f1f36493693eac2170bee6c13ebf
- MD5 SHA1 SHA512
CryptoChecker v2.0 By @Drcrypt0r/custom_passwords.txt
- SHA256 fc1ea8495cc648ccf01e4213cdf9d8b5ac8925a2c5eeec4e89a05a49e37b7e6c
- MD5 38f8669e1a34cad26ed1201f568b7f92
- SHA1 98ce22913e0a3af06319eed4a61048ba45990d24
- SHA512 5a3d23adcfa6cc5a26ca10326727e5d1944218a9e225ccbf6add68785bfe81fe74e13a9b09a46be37b298255eb75924afa1f626d38f91a9968c98d5bc8dd1bbc
- MD5 SHA1 SHA512