sero.zip
- SHA256 480f683d425ef49564b7506f057daae3a42f080915101afe0178768128761249
Behavioral task
behavioral1
Sample
BRUH WTF/bin/settings.xml
Resource
win11-20241007-en
windows11-21h2-x64
10 signatures
150 seconds
General
- Target sero.zip
- Size 7.9MB
- Sample241224-xp5fastrdy
- SHA256 480f683d425ef49564b7506f057daae3a42f080915101afe0178768128761249
- MD5 e2e88fe8a7c8cfee0d814f8ec54b2252
- SHA1 2345f7856db703fe000b1970d090220ddde37fa7
- SHA512 9b192b187f815d30a2ccb665a30d029d7dcc3894b01bd5cec334324fc59b2e406567828be159172bc1efa879523738332b0b2ceb1f8921ee09e90b511898fafb
- SSDEEP 196608:+C2QwOvtA+25ZnzwojA5KCuBvu8HDGsJZjV/RWrQX5ch1Oqtl:Nx25tzjE53uBvuQZBsyYf7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Quasar family
- Quasar payload 1 IoCs
resource yara_rule static1/unpack001/BRUH WTF/bin/Quasar.Common.dll family_quasar - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BRUH WTF/SeroXen.exe
File Explorer
-
sero.zip.zip 7.9MB
-
BRUH WTF/README.txt2KB
-
BRUH WTF/SeroXen Documentation and TOS.pdf.pdf 389KB
-
BRUH WTF/SeroXen Toolkit Instructions.txt278B
-
BRUH WTF/SeroXen.exe.exe 334KB
-
BRUH WTF/bin/BouncyCastle.Crypto.dll.dll 2.7MB
-
BRUH WTF/bin/Cake.Core.dll.dll 590KB
-
BRUH WTF/bin/Cake.Powershell.dll.dll 84KB
-
BRUH WTF/bin/Gma.System.MouseKeyHook.dll.dll 57KB
-
BRUH WTF/bin/Logic.NET.dll.dll 472KB
-
BRUH WTF/bin/Microsoft.VisualStudio.CodeCoverage.Shim.dll.dll 7KB
-
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll.dll 124KB
-
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll.dll 9KB
-
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll.dll 99KB
-
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll.dll 25KB
-
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.TestFramework.dll.dll 58KB
-
BRUH WTF/bin/Mono.Cecil.Mdb.dll.dll 191KB
-
BRUH WTF/bin/Mono.Cecil.Pdb.dll.dll 265KB
-
BRUH WTF/bin/Mono.Cecil.Rocks.dll.dll 100KB
-
BRUH WTF/bin/Mono.Cecil.dll.dll 1.8MB
-
BRUH WTF/bin/MonoMod.Backports.dll.dll 141KB
-
BRUH WTF/bin/MonoMod.ILHelpers.dll.dll 7KB
-
BRUH WTF/bin/MonoMod.Utils.dll.dll 325KB
-
BRUH WTF/bin/Newtonsoft.Json.dll.dll 684KB
-
BRUH WTF/bin/Open.Nat.dll.dll 328KB
-
BRUH WTF/bin/Profiles/Default.xml1KB
-
BRUH WTF/bin/Quasar.Common.Tests.dll.dll 11KB
-
BRUH WTF/bin/Quasar.Common.dll.dll 280KB
-
BRUH WTF/bin/Renci.SshNet.dll.dll 3.7MB
-
BRUH WTF/bin/SeroXen.exe.exe 377KB
-
BRUH WTF/bin/System.Management.Automation.dll.dll 353KB
-
BRUH WTF/bin/System.ValueTuple.dll.dll 62KB
-
BRUH WTF/bin/Vestris.ResourceLib.dll.dll 284KB
-
BRUH WTF/bin/dnlib.dll.dll 6.1MB
-
BRUH WTF/bin/protobuf-net.dll.dll 1.5MB
-
BRUH WTF/bin/settings.xml688B
BRUH WTF/README.txt
- SHA256 b3ea2c088a91eaf36d87e5ee8baddfc241d4d008c6e0a5724193d7ebdd3c1cb0
- MD5 c510f911b80804edc6af12f4aef602e7
- SHA1 201ae250c870d13a61c31bd5b6be84244f2325ba
- SHA512 dccffe3b7e8ba9d1c4cfc325c3288daa4a49fca71ce2b33f90c9dac6f15b10b99429d7b327071842b1bcf0407edd60fa7d8b863d875e102824f2fc41dbafd434
- MD5 SHA1 SHA512
BRUH WTF/SeroXen Documentation and TOS.pdf
- SHA256 f3329fc8e298719361d0799fd3aa160ccc860fad1cdbf2d5b920370561079d24
- MD5 268a35fc151093712fd931438266733b
- SHA1 0cfe4de8b721ae00275f171874e975143ba4e5c3
- SHA512 60f12acab903f4213b2e6f96e0e4ef4d19b4378d0cd18e86b736e1ef4daecbf18f926d298a60e156fce06d4af4121636133cc87d61ce7aed815e66240ed2cc03
- SSDEEP 6144:gHN9PzWipJ6LIgy6WW9OyfnFTGndbcF7pVEtiOTwl/BdGqgZzu6cXmnV:saqcLIgySDYdbcJ/Etol2zu6dV
- MD5 SHA1 SHA512 SSDEEP
BRUH WTF/SeroXen Toolkit Instructions.txt
- SHA256 4dcd835f19899e85553a119a2a104f134cce78c3b6d5fe0376736f139b1705a0
- MD5 e3db26989ba45442c09b7b73c6e01966
- SHA1 92d5148d1bbe6d70c2de8f6bfbaed88450f946ed
- SHA512 23961a1820dc18cad3db595a84265373f064a35651c96a3607ae620822f3bdec1f9c708822aeda133501053a9ae065d1ea2e78c79bfe7edb62e8b59ac90b4388
- MD5 SHA1 SHA512
BRUH WTF/SeroXen.exe
- SHA256 dfa59e4d9561680fcaa24cd8960f3bb2e0ffd26100c1209f51c1be0f2a500508
- MD5 e9a1163f07012ba9cf0eeaa4f4274cb0
- SHA1 e67f4264c87ddee54d19f84b2b27d97c65960f90
- SHA512 f65b344b3ba17aa64d43a281e8e28cceb4a571d60dee3fadb1be045e319805da4ab301a809770c5e52223b371306be87c6ad75964eeed2948b23043fc14c3310
- SSDEEP 6144:tRdrZJksWBrhNNtEo7Mz47xwBjYjBLUec8+So53cn/BA+hbbIv:tRDLQ7gs7xijYjJelzcn/Th4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\net452\REPOS\SeroXen Launcher\SeroXen_Launcher\SeroXen Launcher\bin\x64\Release\SeroXen.pdb
Name
.text
Size
317KB
Virtual Size
316KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
BRUH WTF/bin/BouncyCastle.Crypto.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 068d21b18320762850a2ec079e43d24e41e8dc7b7d4d1e60b8b8a60161eee95d
- MD5 845661718fc59d2ec1e59c804ea0a319
- SHA1 0e280f4195b263b56d7bc2a8af06e66bc6fb6b84
- SHA512 13a23d645b09fa9debc2109417ea38fca9d2a8240ec8d2b9297bb5dfc3c7ed70aadf3d08c8b4980569fc14986262d5e48afe263bd2287eb5b0195c43f8b04b3d
- SSDEEP 49152:qEVmH5OGnsDVHKL54fKXyrJZd6HIksfqjQN/kIUcXYQ5:CH5OGIOsKXjQ3Uc75
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
37:4d:dd:80:d0:6b:63:20:d7:8c:09:38:8b:aa:f9:b6:e1:63:dd:ca
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
2783214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BouncyCastle.Crypto.pdb
mscoree
_CorDllMain
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Cake.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b4d014d493ce66208537a1394aba89190a93025bf71857c39d45f9c95685338
- MD5 9c0d3ed2549d77758c8d0e730e4a2380
- SHA1 4917b06f091836a4b46a70a0e230dae42a002d1c
- SHA512 95ea708ff271be8e76e2fb9c27766a1a80647a865c6086cc1114a6e45cccd52d9f7dc46a631676869d3542abb4314ec9f334bcddec4259789f0e895b1daa606f
- SSDEEP 6144:w7nQBBrO+hMKbDBNmFAdHmEwKCPgGruaa7adI3ExBAitPNbj5qRlXXKW1+SLeSfC:4nQBBrO+hMiBiAf7adNhNbj5L
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7e:e5:96:07:12:f4:75:26:dc:30:03:fa:fb:28:bc:8a:10:7f:fd:b2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
609022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Cake.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
587KB
Virtual Size
586KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Cake.Powershell.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12f075efa29c981553c80f506647c712d12757f551d382216f08e5d652eb8e6b
- MD5 b1df3b508e23822ad00398c763699107
- SHA1 a4595f098c07efb6f3082f7d8ffaba108d09cf5c
- SHA512 be0f27503f4c2bf97c5d077cec1955d5c5a3cb627c8554b6342efb6b9bbb7d620c49f0163290cee40522583543faa5fbe17a49c7411c4151a21487b91824e10d
- SSDEEP 1536:q5Ukj0EbYdY38gmrHS0YB9IBujxXkifqYD8FylHNum6elbAtYT0d4EZwaHNXt:LMYI0BnKAub2YT0dvdt
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a1:a9:3b:a1:ec:45:94:b9:51:63:a4:9e:63:8e:04:bf:f0:a2:74:06
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
91486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Cake.Powershell.pdb
mscoree
_CorDllMain
Name
.text
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Gma.System.MouseKeyHook.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18742c1399b62ed53fef75a2c63ba94b8adfbbe5e09b8c2d8fb426d2f9e0ade5
- MD5 a3408d8823fad55cc76859e1bfca7033
- SHA1 52f44344b4c44a0d30f71ead80751242f0d6a5fb
- SHA512 840bede9a2f062eb2111fb0b1225ffb9c112165b2b1c5b49d48fb0e5e055e7772f37990d9d72d6d43d8359a3af9c00f1f7a2bdc2314619850a5d9ddbd11bac7f
- SSDEEP 768:3YnDJGdu2oE3d7ltSl+Y8sCcm8Doi/L0CPw87qquEZ+r3FhuiFJ8Gb:oncoU48/AzPwYpNZ6rXJ8Gb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d0:1c:3e:7f:2a:e8:8c:ff:be:e3:ea:13:b8:ad:61:b7:c0:92:ce:5b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
52410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\globalmousekeyhook\MouseKeyHook\obj\Debug\Gma.System.MouseKeyHook.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Logic.NET.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8337d23ad9bcfd3fe1cb357d173a36307b16f2e8b65b2af7245746b6c23c7fb4
- MD5 a78ca07fdfd93bcfdc37ca824ec58850
- SHA1 d9c5ef1261a74f87a06e0934535c9f6c436b91fb
- SHA512 599e8357e03fce4d709452a6e2f0a8c4ff41eb477de92256b47a8b7599f86b153ce43d6c7b6c52a120ed6f708355e40f4b41802f0a9acfd85cdad897ab6c2040
- SSDEEP 12288:VU2sBpHa0w1o+Blc5xFrIUFRmwEE93f4D5+GqeA:VU2PBo+ByRsUFQk49+N
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e1:47:8e:1f:86:6e:2f:49:e9:27:04:bf:5f:22:b1:6c:63:f9:b8:3a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
488174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Downloads\LoGiC.NET-1.4\LoGiC.NET-1.4\obj\Release\LoGiC.NET.pdb
mscoree
_CorDllMain
Name
.text
Size
469KB
Virtual Size
468KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Microsoft.VisualStudio.CodeCoverage.Shim.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f3a346e1ba5250f06561a5e488f0378dd295a9c4ce1a5e3389c5bbb724421181
- MD5 f27e6a41d8b2aed44a4a3143a3e39ceb
- SHA1 35337c506f859ac4c078bbea66334367a2ffd696
- SHA512 988b2f84d2f942e1dcb80fdb79fffd6f4212b82e961e20023beba4c3096df99f788b5887edc965bf54efa6884c7b43bbe60441acd38fd08039c1f503ff339eb4
- SSDEEP 96:rQabibnD54HXPQGxvKAWQDdiDL1Il5SWPTgleSn6WPLYQOQl:rqjDofNxCV1I2W7e6WTMQl
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0a:7a:9c:00:f9:bc:ea:8b:0a:1a:1f:6d:6c:3b:ec:44:5b:cd:d0:dc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
11374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\binaries\Intermediate\vset\shim.csproj_kqmet5lz\objr\x86\Microsoft.VisualStudio.CodeCoverage.Shim.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b4189ff9118c8daafdb59c3b851dec5e1cb099d3f93ed33dff818622fbad4134
- MD5 f5b0619323bd200045b6a54710fe1d2b
- SHA1 4f598978d5768d00d541ccc2ba2d20c3185862ea
- SHA512 96843c4bc24b57429421f7ddbbcb147b613ac9c5ae7ef1689ee5d22a75844ff98809da5f54c85f308cfb9dc399991a9cc086e7a9ad01c19b414c6dc344966b14
- SSDEEP 3072:n9DFl7hiU7MK/C2ZZ6uw2HZRBUDIrmbu+c3B5HZttOPVY7PzaL2CKJ8Yx:viUAK/CoNHZPULST3B5HZttOPVY77aa1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5e:bf:52:e5:b7:28:ed:8f:c9:6b:bc:e0:35:d5:3b:b3:00:0e:e2:b2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
131338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\4790\s\src\Adapter\MSTest.CoreAdapter\obj\Release\Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.pdb
mscoree
_CorDllMain
Name
.text
Size
120KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a496524dd381e1a98a0430024240a409fa62039e2db7bba692100fa59604e5a
- MD5 8bb527db67433b149bcc4b4e7f4f5115
- SHA1 1cf1eb3ec9b8bd9aaa1b84320ab68549dca03ee8
- SHA512 0cc8dc74014f0eea614e9e088a80b9d009f303d4b8e073614d92593ca86e0c52dd5716090f7d1f1ecdeb9bf149d3d520e4549591fe4686cc4608f305a415d571
- SSDEEP 192:umwc44i5A4vBYfWcUeKD8xJ5zBy/TW0xOq:Vi5AIBIW+KDq8LW0Mq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a7:d9:c5:aa:a1:d3:e2:75:6a:46:13:55:a7:dd:32:83:02:ac:d7:8b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
14278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\4790\s\src\Adapter\PlatformServices.Interface\obj\Release\Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2277d6eaa6fb3edc48c4c3b03aa024ecb89fb3e6ce1f23a348e77ea495e790cf
- MD5 85392bce56ebfc0fa98053e387d9bc75
- SHA1 8da051c274cbbcb385c1b118ac7084594b0b5042
- SHA512 f9735e4772a7490e21c6851ea9af7f1c7d9283b4d4f3a6b41c64ce4cdfd88c71699c02a4bad6e585c34fc04a58544808350515ea4d71a9597ca5322f349ed0f5
- SSDEEP 1536:stdZMxG+d5x8JcNBaVV7nOHzVbKihRauFHQgMNfaElrsff95gUdR16gKAh8W11P:s44cNBSpOHBKihRaEQAEqff9VdRf8A1P
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5f:65:71:f0:46:1f:d6:7c:1d:d6:18:91:1c:3b:38:1d:67:a7:c9:10
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
105934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\4790\s\src\Adapter\PlatformServices.Desktop\obj\Release\Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.pdb
mscoree
_CorDllMain
Name
.text
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0998ee28d8b43a5753f0a3af8d80bddaf414a3e03a8732981f4d719d67564fc2
- MD5 2300250ee990b536eb9ec1401617213b
- SHA1 29bf3b475506406ffa49814c300e209b7a4f1d11
- SHA512 1276f2a5941ac03315ee3d907ed2ead4e26c964b1567c08481e78c10e16d34c80d9349d4dd6cb8e72bc55f7b06e11d674ce62bd9fdd938219a656bf2015afb86
- SSDEEP 384:yrDjuKfEO77j7K+Hw63UZg+fzlgl8hb4bb/6bQfEKAM29cSaKjmST2ozngxYaWH5:KfuKfVzsgFCQxA5/mWng25
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d3:c7:d9:ad:7e:b5:23:e9:82:75:fa:6f:d2:f6:95:1b:5e:47:0f:90
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
29698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\4790\s\src\TestFramework\Extension.Desktop\obj\Release\Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Microsoft.VisualStudio.TestPlatform.TestFramework.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5bc913c7410f7f4f1b0db7f0ddc90cac5858e4076d642744416830f7c2a4a6b
- MD5 ae48ee9e36c045d98904c0e48ab661b1
- SHA1 4734a4894906aacc58d57bb7c828d3af98197004
- SHA512 c98cb6ab212ebc1f82fe2d76e6c0838657f7b864b2c500d2952b9161744a83c69616df11c62f248345e4968ea767884684dc3f7e870be3712a58716eed27ac80
- SSDEEP 768:khK6GEpsh6tjavt/VhlPeMHi3klMdARhdhlD7pxva6K8W2FXvhLmiqc0WvnZHXM7:YDGEpNyr/CMfTCpRivvDWN+gqHof0q3R
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9f:0e:a1:3c:e4:6d:79:5a:d2:03:ce:74:d0:8c:e5:a0:ca:75:5c:5b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
63598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\4790\s\src\TestFramework\MSTest.Core\obj\Release\Microsoft.VisualStudio.TestPlatform.TestFramework.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bad4bd80811674ecb8a9247c15775cbb40df527441a0cdfd35d0b18ba3c93587
- MD5 816bd7caee4eb82de66a3500aecdbcd4
- SHA1 8c58f70335c60e5dc2ff27bea9568ab4886bc30b
- SHA512 8119df718e37efed003fac05d48686d52aae132c324370142a2aca847af27c1455b63048199906bab5e0cbdd6ea15bbfd6f53a0cefeb786e0e557a54b9834c91
- SSDEEP 3072:qlCvZMUxyaaHy8pgFPNDBQLfAVc67e4upqn6CyhAPGXdxhss:qQvZMUxyaaHyhJNyDlVU69MGtxhf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3d:f2:d5:ca:af:12:66:5b:de:ce:77:71:32:85:6b:b5:64:33:e0:0b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
201006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14f9512115c3f24ea4433cc74b2ed4ad68122cfc38633f8ba83306d4c5628c1b
- MD5 c6c90c9a2a3b7735c78ab274e1be51ac
- SHA1 e4a5aa44b47e605167e80d5b49ebdf844ccb91d5
- SHA512 8e2cba3c2b08dc7cc27e5788b59660d0e6f40ae123138107b269b6cc603d569aff0c4b369c28ff473adaa5715cc96d373e0917d1b291daef4cd5d136700fc926
- SSDEEP 3072:Wyl7NjpG/hwPXumS1I6iIf10yD9TpYfR0KPONxthzESE5xZ0AxA0RVzLVi/I7jBD:Z7pAJ03GpYZ9kxthzE7P9RughLM2
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
79:04:23:6b:3c:e5:f0:83:16:71:8c:d7:c5:f0:08:78:8d:82:9f:ea
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
276814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
262KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f7d70e962f46af559614267c2153b4db6609a54f56f8388a0e16ba401970f52
- MD5 efc05992923eae4261142d6c6e0766ea
- SHA1 861dc1f1597330248586c75b3eaab0f36b2b3485
- SHA512 70ba3cfc82884831c57626005fa30522711898f9a56bd8a3645c1eba7c8239be077cac5d011d6f7fae76439ae7e5c3f8864e592e5634964a4fe2a83196c0e84a
- SSDEEP 3072:tpjx70ixRB8E10W42Aw/otf44SitEB9wrpNMVtP8dHE8x1HwAQ5j0AU0fK:tpjx70ixRB8E10W42Aw/otf44SitEB9Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6d:52:d8:3f:b3:65:a9:5f:5e:54:b0:d7:1d:68:74:4c:68:a9:b0:8a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
108014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 867df4eae1113e63ad5d744477fb34954f339fca68c8b60cea1368e28503800e
- MD5 925879684b81b251f166e375dc722f27
- SHA1 eabfb765267902df4abe38c28ec894e3637332d3
- SHA512 6d2543ebdaea8ea3d9f2ee5b03f5de3142c8d3e08f36c4879aad76a6cb46da99cd8da869cf0262c4e677f81db1c8470feb7ea148ba67d21cd2d6b620da5ad02e
- SSDEEP 24576:L9IIx+jSHUd+1powI4UT8+g4DjvnmCrlwzE:LhhUd+1KwI4UjmC5wzE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c7:2f:ee:81:68:fe:fc:48:9e:19:f7:6b:73:06:22:82:16:5b:9c:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
1893358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/MonoMod.Backports.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8532834bea849ae36fcc6e19549ec8e9afae255c3431d0950f2dff962966d81a
- MD5 afaab860413af6f3f713e170df6147ab
- SHA1 dc6a187ace4138cc6105daf422fab7404dac359f
- SHA512 ddd6402c1366fa2a2c8d4e0463f2e236559c322ebe0da95425277c64a88df8bd00e62df6b91f1eae6ea4f03570f31c4b56a563eb8debec97f5a44f0b2923f5e8
- SSDEEP 3072:PRu4JIdcESkVIk7l/R/WO7/OdaJ3Y+UkWmh:PRBJIa5KIW1OETUVI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
40:8c:05:53:60:a9:2a:e8:62:41:9d:d6:a6:bb:3c:0d:c5:29:e6:b3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
149014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Z:\Users\aaron\Source\Repos\MonoModReorg\MonoMod\artifacts\obj\MonoMod.Backports\Release\net452\MonoMod.Backports.pdb
mscoree
_CorDllMain
Name
.text
Size
138KB
Virtual Size
137KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/MonoMod.ILHelpers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de0b17eb030f751dcfa33097569c805cdf76c400b2de76c99e5bb27eb8d69bd0
- MD5 d95c2e2b9150f62130e400f9956310a3
- SHA1 7590dbad6a7ca327a680660484145dabdff81ed8
- SHA512 d5242521f30e535eb1baccc8d8d2d8bff6fa01bc7b4b0cb877854b67527757c763cca6ab4e8f1cd8edb20258dca332b343fe3ce258cac693f9476ceb7d663b9c
- SSDEEP 96:1A5172VL9HZNBrfq7LgcA6S8I2DqDXGnADX62WuauAuRt/0AYlOKJS5:O8xDfYLgcAMtAXG+rPVL/hYkcS5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
09:f5:3d:d4:fd:a1:41:b1:f7:fe:76:84:3e:d9:a0:22:e5:b9:0f:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
13502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Z:\Users\aaron\Source\Repos\MonoModReorg\MonoMod\artifacts\obj\MonoMod.ILHelpers\Release\net452\verpatched\MonoMod.ILHelpers.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 68c2ce987a173783b83cbf0d00599c7074a1da990cb296db895a0f791e6746e5
- MD5 3e73b968ca6791e5a54e597334b93183
- SHA1 1396b1c654247871828257e1ccea1590fe26d190
- SHA512 d04008a4f22dd9bc845a8cf72ae67f2f40bf9574e37b8122caec1a9d16424dffa37fa617468bb01033559cc89d07a29e462e5dc0c7bd69cb0cf228ab4f2991e0
- SSDEEP 6144:r0307ojIhSsI+wcynColdHZ11GtXaEhZKKl13Ls:rGqokbIm9oldHLKhc
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
20:12:5d:b7:00:51:1a:68:5a:af:fc:ea:1b:39:bf:75:8c:9c:31:c6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
336990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Z:\Users\aaron\Source\Repos\MonoModReorg\MonoMod\artifacts\obj\MonoMod.Utils\Release\net452\MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
321KB
Virtual Size
321KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25553ca736b5a1f10ab3f60a6f3594af79600d8ebb01875366f0e153d6c739ed
- MD5 c467814a1cf2cd5d297553f51aeb41db
- SHA1 d0d81e08833b59a51ec9df98b17b5d36e5b07bf5
- SHA512 23709dc556fe1bdb2ce046da31fe6d5376456191aecb14cea0f7f7092ca08158ff45ac9e75805b9c0cb22cc35da7b7d7b8416d4fa96de4f7443956af10dad09b
- SSDEEP 12288:9BARJBRZl/j1TbQ7n5WLm4k0X57ZYrgNHgK9C1BSjRlXP36RMGy1NqTUI:9BA/ZTvQD0XY0AJBSjRlXP36RMGR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
81:23:d1:fa:ee:1c:d4:58:8e:87:e2:44:00:4a:31:47:44:49:ed:d8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
704522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Open.Nat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d8c06a65a9af7ddf36d67d9d7383b1808ae282b67fe412bf8b75adab4f8d020
- MD5 de7413b148730d4b50baf70079ea3f77
- SHA1 f92dbc5d17c8bc92fd1f25e9e7e4b3b76120b9b7
- SHA512 c6b858190bf30438831ed7602581158f72f4b64b5b1fb07b85cde76c642a5f617d0106b37ab1ef79bf237713c41982563fb1be4402920d4532db7e5c1ce32304
- SSDEEP 6144:G3oYEee9II1cGAiSuLuCQR4CjQb05IuIq6NOW8SVk27HycH3YbJolTeVdJb:YoYEee9II1cbiSuCVaCjBFIq6NOW8SVq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ce:73:51:33:f7:08:24:37:19:f0:b0:8e:82:e6:8d:e0:77:49:0a:63
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
340622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Open.Nat.pdb
mscoree
_CorDllMain
Name
.text
Size
325KB
Virtual Size
324KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Profiles/Default.xml
- SHA256 aa52673492f90f076efcc50af8e706ca197247c50c0feda400aba7e3eddb63c9
- MD5 328fcf1f3194ebbe02addc0e5b0da52d
- SHA1 49f782d0f3116802d43ed32bd09a202ff8ebf9ff
- SHA512 6e5fa929ac041dd7333f756ff8a4e8f5b8afe8b50d62aa8870fbbafb12798c45209a4635d1511d6f91faa21d5062666d55f291de06aea12289c4a22df6b921a9
- MD5 SHA1 SHA512
BRUH WTF/bin/Quasar.Common.Tests.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7369839f74d8a3243108ff788eb6f916bda3ed8f123d6bdbdbf2f794f2c1af9
- MD5 d83c314d13844ac6d938ec98ef5cc502
- SHA1 11be0e01c20cbaa9dd71d5b73c13c64084441a8c
- SHA512 11a051b38dc9d3204f3688975e754a11c2f32008dc9cbfdb9664825eac4adea0f2b86f2823b99118e89089443408cc38575f02e35680001b26790b959a738f02
- SSDEEP 192:X/PbpLlPJeDR0QAj7SCFi5SM7LhJCd0t+MTjr+7k5:X3bZNADRLAjN5M7LhJJ+D45
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
27:05:e7:e4:3c:31:79:7e:94:70:0e:a7:1d:4a:aa:48:4b:cf:59:3f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
16238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Desktop\dlls\Quasar.Common.Tests.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Quasar.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5f41b3b67e6de15de8d826bb437d69733216456a740c433598c064d82639987d
- MD5 36770bbcb444a0d3399abf7f9686ee44
- SHA1 852537a7aba76fc527f393b8915c23699d675ce4
- SHA512 58b579557ee759ee8aa1016ae3736766d97687df8f692a1d4a6bec380b44438a5532b1263175ae132123eaada9cff391cbe659b20362432db938a0ebe38a0872
- SSDEEP 3072:gdA74q8YM4NUSPbc7kEf7sDbDRL/CWjZ0IdTbSjlfEsN7w7op6qDsMr:gdA44UAo75sDb9jdjZ0kTbQhprDss
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
PE Signature issue
Digest
79:9f:ac:6a:c4:87:ee:ed:50:d3:9d:1a:9b:94:43:9c:79:d0:78:4c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
291438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Desktop\dlls\Quasar.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
277KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Renci.SshNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 859e6c8f999af42e677a90f00482d33bc3a78884344f7fdff0e5b51f03ca3375
- MD5 38b483c1f86d2caf3bb0662dedef9516
- SHA1 147386f8d231fbaa50512fcbba6e9d12ebe92f3e
- SHA512 9c9ca5c3be7514bfdd5dce6258df71f7df8a1ac23f8a5e1ecc4d074301f6b9ed016e98e7280cb7e549f7808daacd5455aca894dbab8f2ac8aab72d5bee037bc8
- SSDEEP 49152:3gnx9zb3dvUoQRcUcTBCHvGrGJzE5AMRyYt55aM8UWd:3gnx9zb3dvURcUcTBAvj5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
9a:05:25:64:71:e1:0b:eb:d3:26:73:70:77:6f:c1:f7:b7:b2:0d:3b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
3916174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Renci.SshNet.pdb
mscoree
_CorDllMain
Name
.text
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/SeroXen.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4bcfa0f7718a498ccbf53c0158de659b41993ffa42b1de6a2aa706feb10e9f60
- MD5 e6091aa84ba27e7b0d91c5a1e7e86789
- SHA1 906e1cc59deda97b06125e0f1c0562849e8840c8
- SHA512 22d381657a2491da2c7b568b2486e85db98fb5f8afbdb12d3235a1b19474844633b7b9494c81c68500ce9eb793c3117fed1e05e7ecbb2457dacf82790a04f664
- SSDEEP 3072:o1/V31wvYfdA+vmciqBKsUimr9BPye4pmegLQgmvAKMQS6o6xp2J0vEylkil7s6c:8A+ecikN5mhBqAKMUg0nu7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
PE Signature issue
Digest
e4:30:9d:59:dd:1a:c9:1f:e3:4e:2d:c7:ea:91:1b:f5:84:43:60:13
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
375210
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\net452\REPOS\SeroXen_Initializer\SeroXen\SeroXen\bin\x64\Release\SeroXen.pdb
mscoree
_CorExeMain
Name
.text
Size
359KB
Virtual Size
358KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/System.Management.Automation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 01ce775ddc060a4ce46100c2c4a109ed84827af8fa71745a49e34a1fbaa2858e
- MD5 3f8ac0a7be2c53071bdc5da410815ee8
- SHA1 fd07dbe5dbaef1934dc96cd658fce699e8f4cd12
- SHA512 e922b29d6e65080d9c07988808bd35376c0393d5445be90724a74d2f676c2b6fc6ef602fe149372d40f01d7b21b05c6573050fb66d7e0fd28fd1c82f8493e029
- SSDEEP 3072:I/SDqTIE+QQVVBCTmAG17iT+Lt8D/1L2iLZdrs81sDotEKjRmarzRm+5gSBZqoEm:I/PXS6WK2iLZdgotEKj9rzRmkgSBAot/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1c:14:c3:36:cb:e7:4b:09:75:6c:22:cc:fb:67:e9:69:55:ae:14:fc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
359678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
344KB
Virtual Size
343KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91462515d169dd8aa19ec604e12c0b6c81d941c816869512680d027f9420d8da
- MD5 cc379594492af38d98913aea6fbc4408
- SHA1 1eb806b5bedd1d79a2a304048b054605760e7a8b
- SHA512 8afa38da75bc4a3e094150f522ed7f88d7cfc6fe4a35516add16d2431794403908aa9bff886d34d6881ae70b83e2a26fb016ff4cbaee6bf9fb6fc33032180354
- SSDEEP 1536:s784YWac+abptsy5VyYc/9n1RcGxzeeUVn9KyQgHo0JuresehaAN:s7N1r9KGI04CCAN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
68586
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ValueTuple\netstandard1.0\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/Vestris.ResourceLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dfd95a330ed6d8e49dc8d8cae338a10fbe8bcff443fe4d2269abca531e840355
- MD5 45dfc2454c2d733b396d86cc2d189484
- SHA1 ae5dd9965abecffccb5cbb541ba82f4084334777
- SHA512 da4e7440bc77252d4a7f63df1674404360fe34c222909b868b5c3aa7a288ed96cf4f639eabacaaac457f5c9921f49c8f7717d3c4d1cec53e92c1bcb68b8feaf7
- SSDEEP 6144:5BNDVxhahqeXLiFuHll8bftl2FG8tK5DOA:51ai4HleZEFy6A
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
23:0f:c8:cb:be:02:cd:f3:72:20:6e:48:9c:9f:38:ed:8e:fa:c4:46
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
295918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\Vestris.ResourceLib.pdb
mscoree
_CorDllMain
Name
.text
Size
281KB
Virtual Size
280KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b7291a45ae4e8f0b06d2ae26ad5cd7d8614189b101d3644aa36b5db2ff17a61
- MD5 d7b36d83104d9013f96abbee3107baca
- SHA1 456cf25a25f55a0f7a3edd89b2498c4311f5ba92
- SHA512 3a8fdcc6c3e84c5aeec6988388cf7b5f7419a55a9a293cfaf7da7cff536af6dd07596be3ea10648c620bcf568bb9f675fee5646dc7c3ea4252817e745c2f50b7
- SSDEEP 98304:y1Cew9loEpT9RT7RZRlFAjYf+UqUdqmJ2+hG/qm6w:y1jUyE9RZRlOSA/Ew
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
62:b7:5d:57:b8:45:38:ed:59:7b:10:d2:83:cc:4a:a4:38:1b:93:11
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
6410382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
6.1MB
Virtual Size
6.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/protobuf-net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 44f9a8d84dd2a8d8271af62bcd4c330d4cfa741f9461dd612573c4f4bb410598
- MD5 44ee2a9fe1c7040a897c305ea8b3595c
- SHA1 7f126b3f279bc09ce139e0a7c59b3ca2bbc373e6
- SHA512 a3bde2c4786213e4ec7d6d5140309ef8c2d7297b4690b4d535cc537156e7af5a4b08e6a477cefa89ee20ba0de7c5439938c09a90baca4d5147aad785343dae8f
- SSDEEP 12288:ZPg1++yomKDHqui80Ad6HcT5DR7dEmkax+1lvC3JEER2fBf6mykBNQcSn:ZcPy6D0816HcTD5Emfx+1Sz2ZfdqcG
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6b:89:d7:bc:b6:90:42:96:f8:93:63:e4:87:b4:31:17:d1:f9:eb:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Chains
Dec 12, 2024
Subject
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Serial Number
28:51:0d:78:56:26:44:86:4f:77:90:84:22:31:00:38
Issuer
CN={37461E0F-BE27-431A-B6C7-06F5933648BC}
Timespan
Aug 26, 2023 - Aug 25, 2024
Minor OS version
0
Major OS version
4
Entry point
1592894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\C5\Documents\SeroXen Stuff\Quasar-master\Quasar-master-release\bin\Release\protobuf-net.pdb
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BRUH WTF/bin/settings.xml
- SHA256 a5828dc580978f8e1f37459d33e8158416b6c8a0c2881e9eabced034ecfbd15c
- MD5 5769c0618b9fe4873c9256b5cbbf2b95
- SHA1 e123705e308feb804baf0f23949f966e78162dd5
- SHA512 15f80ce7cb33125c856dd7b6ed032dedc0ea30c40eb72d44e0c4f7cecefe33e54449c51f70efe88154dc35f52bdaa78b6fa6079cc55425aefcd7088d3f25acae
- MD5 SHA1 SHA512