FiddlerSetup.5.0.20245.10105-latest.rar
- SHA256 5ee772e7a7658a404f63523ab01ad2c233d5c3158ec9651b97ad8763e8212a0d
Overview
overview
10Static
static
3FiddlerSet...st.exe
windows10-2004-x64
10$PLUGINSDI...up.exe
windows10-2004-x64
9$PLUGINSDI...em.dll
windows10-2004-x64
3Analytics.dll
windows10-2004-x64
1Be.Windows...ox.dll
windows10-2004-x64
1DotNetZip.dll
windows10-2004-x64
1EnableLoopback.exe
windows10-2004-x64
7ExecAction.exe
windows10-2004-x64
1FSE2.exe
windows10-2004-x64
3Fiddler.exe
windows10-2004-x64
3ForceCPU.exe
windows10-2004-x64
1GA.Analyti...or.dll
windows10-2004-x64
1ImportExpo...ts.dll
windows10-2004-x64
1ImportExpo...rt.dll
windows10-2004-x64
1Inspectors...on.dll
windows10-2004-x64
1Inspectors...or.dll
windows10-2004-x64
1Inspectors...es.dll
windows10-2004-x64
1Inspectors...ax.dll
windows10-2004-x64
1Inspectors...rd.dll
windows10-2004-x64
1Inspectors...ew.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Plugins/Ne...ws.dll
windows10-2004-x64
1RunNsisUni...rs.bat
windows10-2004-x64
1ScriptEdit...cs.dll
windows10-2004-x64
1ScriptEdit...or.dll
windows10-2004-x64
1ScriptEdit...on.dll
windows10-2004-x64
1ScriptEdit...or.dll
windows10-2004-x64
1ScriptEdit...rs.dll
windows10-2004-x64
1ScriptEdit...ax.dll
windows10-2004-x64
1Scripts/Fi...on.dll
windows10-2004-x64
1Scripts/Fi...on.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FiddlerSetup.5.0.20245.10105-latest.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
36 signatures
900 seconds
Behavioral task
behavioral2
Sample
$PLUGINSDIR/FiddlerSetup.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
19 signatures
900 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
Analytics.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
Be.Windows.Forms.HexBox.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
DotNetZip.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
EnableLoopback.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral8
Sample
ExecAction.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
FSE2.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral10
Sample
Fiddler.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
9 signatures
900 seconds
Behavioral task
behavioral11
Sample
ForceCPU.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
GA.Analytics.Monitor.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
ImportExport/BasicFormats.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
ImportExport/VSWebTestExport.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral15
Sample
Inspectors/QWhale.Common.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
Inspectors/QWhale.Editor.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
Inspectors/QWhale.Syntax.Schemes.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
Inspectors/QWhale.Syntax.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral19
Sample
Inspectors/Standard.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
Inspectors/SyntaxView.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral22
Sample
Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral23
Sample
RunNsisUninstallers.bat
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral24
Sample
ScriptEditor/Analytics.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
ScriptEditor/GA.Analytics.Monitor.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral26
Sample
ScriptEditor/QWhale.Common.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
ScriptEditor/QWhale.Editor.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral28
Sample
ScriptEditor/QWhale.Syntax.Parsers.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral29
Sample
ScriptEditor/QWhale.Syntax.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral30
Sample
Scripts/FiddlerOrchestra.Addon.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral31
Sample
Scripts/FiddlerOrchestra.Connection.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral32
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
900 seconds
General
- Target FiddlerSetup.5.0.20245.10105-latest.rar
- Size 4.4MB
- Sample250122-yhw11sslev
- SHA256 5ee772e7a7658a404f63523ab01ad2c233d5c3158ec9651b97ad8763e8212a0d
- MD5 acae0fb6815b20f455400909af5f8c4b
- SHA1 c69fca19298232c0f858873208a3d5a3952fea07
- SHA512 6b31d796084f0d3756e256ef71c9e80c46dafeb6b7b10aa0e7309f7e5b4e5ff574200feec5601ffefbed8e3d4cb244cd5b36070022db6e03c9cf557365729560
- SSDEEP 98304:6uJmwfS8yenQEcK62mizY7hbt45R32cJ1J5CZ49bUfWdpAYnA4zWF/:BJmwfVye1cK6ryY7hbUGcPJB9dpLApF/
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 19 IoCs
Checks for missing Authenticode signature.
resource unpack003/$PLUGINSDIR/System.dll unpack003/DotNetZip.dll unpack003/FSE2.exe unpack003/Inspectors/QWhale.Common.dll unpack003/Inspectors/QWhale.Editor.dll unpack003/Inspectors/QWhale.Syntax.Schemes.dll unpack003/Inspectors/QWhale.Syntax.dll unpack003/ScriptEditor/QWhale.Common.dll unpack003/ScriptEditor/QWhale.Editor.dll unpack003/ScriptEditor/QWhale.Syntax.Parsers.dll unpack003/ScriptEditor/QWhale.Syntax.dll unpack003/Scripts/QWhale.Common.dll unpack003/Scripts/QWhale.Editor.dll unpack003/Scripts/QWhale.Syntax.Parsers.dll unpack003/Scripts/QWhale.Syntax.dll unpack003/Tools/Brotli.exe unpack003/Tools/dwebp.exe unpack004/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/System.dll
File Explorer
-
FiddlerSetup.5.0.20245.10105-latest.rar.rar 4.4MB
-
FiddlerSetup.5.0.20245.10105-latest.exe.exe 4.4MB
-
$PLUGINSDIR/FiddlerSetup.exe.exe 4.4MB
-
$PLUGINSDIR/System.dll.dll 12KB
-
Analytics.dll.dll 32KB
-
Analytics.pdb47KB
-
App.ico24KB
-
Be.Windows.Forms.HexBox.dll.dll 60KB
-
Countdown.wav1KB
-
DotNetZip.dll.dll 461KB
-
EnableLoopback.exe.exe 82KB
-
EnableLoopback.pdb57KB
-
ExecAction.exe.exe 19KB
-
FSE2.exe.exe 50KB
-
Fiddler.exe.exe 3.5MB
-
Fiddler.exe.config261B
-
Fiddler.pdb1.8MB
-
ForceCPU.exe.exe 19KB
-
GA.Analytics.Monitor.dll.dll 52KB
-
GA.Analytics.Monitor.pdb93KB
-
ImportExport/BasicFormats.dll.dll 111KB
-
ImportExport/BasicFormats.pdb183KB
-
ImportExport/VSWebTestExport.dll.dll 44KB
-
ImportExport/VSWebTestExport.pdb101KB
-
Inspectors/QWhale.Common.dll.dll 192KB
-
Inspectors/QWhale.Editor.dll.dll 816KB
-
Inspectors/QWhale.Syntax.Schemes.dll.dll 284KB
-
Inspectors/QWhale.Syntax.dll.dll 228KB
-
Inspectors/Standard.dll.dll 246KB
-
Inspectors/SyntaxView.dll.dll 68KB
-
LoadScript.wav4KB
-
LoadScriptError.wav1KB
-
NOTICES.txt51KB
-
Newtonsoft.Json.dll.dll 695KB
-
Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll.dll 33KB
-
ResponseTemplates/200_FiddlerGif.dat433B
-
ResponseTemplates/200_SimpleHTML.dat150B
-
ResponseTemplates/200_TransPixel.dat173B
-
ResponseTemplates/204_NoContent.dat106B
-
ResponseTemplates/302_Redirect.dat165B
-
ResponseTemplates/303_RedirectWithGet.dat175B
-
ResponseTemplates/304_NotModified.dat108B
-
ResponseTemplates/307_RedirectWithMethod.dat183B
-
ResponseTemplates/401_AuthBasic.dat707B
-
ResponseTemplates/401_AuthDigest.dat823B
-
ResponseTemplates/403_AuthDeny.dat631B
-
ResponseTemplates/404_Plain.dat652B
-
ResponseTemplates/407_ProxyAuthBasic.dat719B
-
ResponseTemplates/502_Unreachable.dat661B
-
RunNsisUninstallers.bat334B
-
Screenshot.wav12KB
-
ScriptEditor/Analytics.dll.dll 32KB
-
ScriptEditor/Analytics.pdb47KB
-
ScriptEditor/FSE2.exe.config110B
-
ScriptEditor/GA.Analytics.Monitor.dll.dll 52KB
-
ScriptEditor/GA.Analytics.Monitor.pdb93KB
-
ScriptEditor/QWhale.Common.dll.dll 192KB
-
ScriptEditor/QWhale.Editor.dll.dll 816KB
-
ScriptEditor/QWhale.Syntax.Parsers.dll.dll 1.1MB
-
ScriptEditor/QWhale.Syntax.dll.dll 228KB
-
Scripts/FiddlerOrchestra.Addon.dll.dll 47KB
-
Scripts/FiddlerOrchestra.Addon.pdb71KB
-
Scripts/FiddlerOrchestra.Connection.dll.dll 1.8MB
-
Scripts/FiddlerOrchestra.Protocol.dll.dll 23KB
-
Scripts/FiddlerOrchestra.Utilities.dll.dll 18KB
-
Scripts/QWhale.Common.dll.dll 192KB
-
Scripts/QWhale.Editor.dll.dll 816KB
-
Scripts/QWhale.Syntax.Parsers.dll.dll 1.1MB
-
Scripts/QWhale.Syntax.dll.dll 228KB
-
Scripts/RulesTab2.dll.dll 34KB
-
Scripts/SampleRules.cs23KB
-
Scripts/SampleRules.js.js 22KB
-
Scripts/SimpleFilter.dll.dll 136KB
-
Scripts/SimpleFilter.pdb157KB
-
Scripts/Timeline.dll.dll 39KB
-
Scripts/Timeline.pdb39KB
-
Scripts/netstandard.dll.dll 96KB
-
SetupHelper.exe 18KB
-
Telerik.NetworkConnections.dll.dll 34KB
-
Tools/Brotli.exe.exe 732KB
-
Tools/JXR2PNG.exe.exe 13KB
-
Tools/JXR2PNG.exe.config.xml 279B
-
Tools/PngDistill.exe.exe 46KB
-
Tools/PngDistill.pdb25KB
-
Tools/Zopfli.exe.exe 162KB
-
Tools/dwebp.exe.exe 227KB
-
TrustCert.exe.exe 22KB
-
TrustCert.pdb17KB
-
credits.txt2KB
-
license.txt4KB
-
makecert.exe.exe 54KB
-
saz.ico11KB
-
uninst.exe.exe 105KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/System.dll.dll 12KB
FiddlerSetup.5.0.20245.10105-latest.exe
- IMPHASH f4639a0b3116c2cfc71144b88a929cfd
- SHA256 588024037b1e5929b1f2a741fff52a207bcab17f0650ec7cb0cd3cb78051998d
- MD5 c1980b018489df28be8809eb32519001
- SHA1 e860439703d7b6665af4507b20bbef2bbb7b73f4
- SHA512 f70d419e869e56700a9e23350a9779f5dd56bb78adb9a1b0d5039287a24f20004db20f842294d234d4717feaa3184a5e6d90f0ee3666208bad2ea518d37b0a35
- SSDEEP 98304:qMgxyUnSAaB1eXq8yOkLiGXv72Qomw6pvtFIAwdaRdA:qMoWvePjqHv72Qo96pvtF5wH
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:ab:ba:90:e5:3d:6a:fc:0c:0b:7a:63:64:2a:cd:6a:38:a6:ea:08:65:a6:25:7e:84:53:31:d5:71:7d:d5:3a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:3DA5-963B-E1F4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:33:28:ed:15:29:98:a2:04:00:00:00:00:00:3a
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
13596
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
lstrcmpiA
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
WriteFile
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/FiddlerSetup.exe
- IMPHASH 9dda1a1d1f8a1d13ae0297b47046b26e
- SHA256 1f926cc353301e547e76c6d2eff23fcbe85495ba0292174cc6344fac26457af8
- MD5 c2a0eb6f104eacec3f39581451ee208f
- SHA1 9ae7d02aeb640fbd090dfc01885b98dd5dd0b6cc
- SHA512 8b062e4f0af1dce3a12b5776646fe8c235f30de6772f579da1a6ab2bb559ed69b3bd32af95eee248c48008ddcbd40a7e49eae722a44bc9b49dd13fe38113a3ca
- SSDEEP 98304:KgxyUnSAaB1eXq8yOkLiGXv72Qomw6pvtFIAwdaRdAM:KoWvePjqHv72Qo96pvtF5wHM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
da:2d:1d:9a:77:4b:b5:9d:f0:1c:e4:59:b1:18:92:37:d5:db:75:21:54:dc:81:52:e3:e9:ae:f7:17:0d:32:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
13925
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
WriteFile
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
CopyFileW
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Analytics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 166e1a6cf86b254525a03d1510fe76da574f977c012064df39dd6f4af72a4b29
- MD5 1c2bd080b0e972a3ee1579895ea17b42
- SHA1 a09454bc976b4af549a6347618f846d4c93b769b
- SHA512 946e56d543a6d00674d8fa17ecd9589cba3211cfa52c978e0c9dab0fa45cdfc7787245d14308f5692bd99d621c0caca3c546259fcfa725fff9171b144514b6e0
- SSDEEP 384:gpeCB0nVQ/EMq7+Zi9nQwnHgfLtVUEoBXejF6XFlnwnYPLYyTcGq1y2h33XcQ7:/U0VQMMrZi9QiHWtVxOFxwxGqXR7
- MD5 SHA1 SHA512 SSDEEP
Digest
88:d6:f9:6c:b4:16:7f:04:df:a6:ff:4f:30:a7:e0:aa:cc:fe:71:43:5f:1f:09:78:41:15:be:a5:6f:eb:53:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
ad:32:b3:e4:b2:e0:3c:86:0d:e2:73:2c:d5:49:be:a5:28:e2:17:f2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 29, 2018 - Aug 29, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Minor OS version
0
Major OS version
4
Entry point
25878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\JFAnalytics\obj\Release\Analytics.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Analytics.pdb
- SHA256 03ca5a20d36bbc0aea28aa3184d65b322cecc3080d55a975cdf0f5d31199829d
- MD5 f84fb6cd84b5d07e3de4d78d38f388ff
- SHA1 0b31f09eeb1af0681614c2f9f90d98b541df580f
- SHA512 03fa13b39d4fae8bc83b4f37cf24aafc8c4a12a5db0462968ae6a0c96232d727df9264d190ff641115921e350a1981ad518a4740c20e54c433b2f2065522ad52
- SSDEEP 384:IzCZdxQVINRdRoNFAYAz3GclBLEKiuNCFJkOLxYbs63N:fxz3oNqbTLUnjpLxY
- MD5 SHA1 SHA512 SSDEEP
App.ico
- SHA256 fbe4d11ca28371bf36d48378a9e1da29dce0efc373ff4e092e47b656505fc4c4
- MD5 2d49cdb07baad04a2bc9f50547783c6a
- SHA1 604bac84fd8ae87bbe9dc9a7c6503cb3a4014839
- SHA512 cdedf711ead1c551d33050db4c9502e09f50534904b1abfce72aaf64846a9032886bdb19f31af30c1e1a46303cd147091e4ecf244486934d8b3b7f3b7b25521d
- SSDEEP 768:iYgTDEuowwuwwwwowwwwwwIwwwwwwwwOwwwwwwwwwwIwwwwwwwwwwwwowwwwwwws:iYKowwuwwwwowwwwwwIwwwwwwwwOwww8
- MD5 SHA1 SHA512 SSDEEP
Be.Windows.Forms.HexBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bbfd21490a4be96e1a44a92e39406e87978aea1fc58b603702e4e21a143dd89e
- MD5 e6f7b8c5ec4d1543eaa7f5d148c6327c
- SHA1 61a5bf82b4f7da4040f76e7aec4b4b5fe0c544ec
- SHA512 6f4516677937f6d58d250f7b6a50f3815691f84ac17e455dd09dc6d4ecc215a8a8ea000706885c858708603223661908067ed36c037766a52d15f2eb33af1fc4
- SSDEEP 1536:/KS4Z+5ZUOxinOGm7kF5Gw5qQ0DaK/nbL0LolKo4I/AhYe:T4ZkiHOGT0Dpf08Bve
- MD5 SHA1 SHA512 SSDEEP
Digest
44:b8:8a:a0:9c:ca:56:a6:4c:61:27:c6:1e:3e:60:16:1e:a2:40:8b:aa:d9:ca:87:5b:21:be:83:45:7f:f7:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Dec 15, 2016
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
cc:f7:3a:9c:9e:8d:a7:bb:85:fd:67:54:b3:ab:c8:ea:a5:32:33:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Dec 15, 2016
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 5, 2016 - Dec 21, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 5, 2016 - Dec 21, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Apr 11, 2027
Minor OS version
0
Major OS version
4
Entry point
54574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Countdown.wav
- SHA256 e10937bd9491cc7944c8c5904faa3ecd971b329438cc1e5fe606ce731dc15dbc
- MD5 3241067e4d532f5feb4ad907076946b0
- SHA1 9130fefcaa638b7128c09ea12ee81a4d3a8aa720
- SHA512 d9f189c89242594f9fd89c353037f2822b7869639c30984c424f7c45ad2f5135808ebcb776a6d7730f479147a3ccc9f33c246e33b7c1ccaa140b72db93219600
- MD5 SHA1 SHA512
DotNetZip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e9c0362e9bfb3c49af59e1b4d376d3e85b13aed0fbc3f5c0e1ebc99c07345f3
- MD5 a999d7f3807564cc816c16f862a60bbe
- SHA1 1ee724daaf70c6b0083bf589674b6f6d8427544f
- SHA512 6f1f73314d86ae324cc7f55d8e6352e90d4a47f0200671f7069daa98592daaceea34cf89b47defbecdda7d3b3e4682de70e80a5275567b82aa81b002958e4414
- SSDEEP 6144:DuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/W:3QL32ikCaUS4csRBse6sfW
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
465934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb
mscoree
_CorDllMain
Name
.text
Size
459KB
Virtual Size
458KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
EnableLoopback.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 543f16b73f7d40177585332f433ce76dddc1526e12bcd62cb73edd11eb002341
- MD5 81564947d42846910eec2d08310e0d25
- SHA1 b7a167dcd3afb29c8a0e18c943d634e3fc58a44c
- SHA512 8f06409517697b022787bc9e2ed7e73100018422177aa3f63ecb406c3bdb6b021624f909a16fca0430002bfa7d35a461b38750c79c0273a154f63316b4e13037
- SSDEEP 768:AREI16zcI2eupxmhm/ljPb0O7/Al25znrShUABg4CqnZx6qmmlkoxPLabCxf1mlr:y1HLdwOLFzrShURwZoxmlkoxDtfIIM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d0:1e:fa:f8:68:a0:c7:8e:5a:c5:0f:36:ef:9d:1f:a1:9f:ac:db:27:62:0c:51:c3:a3:44:78:b8:66:2d:4f:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
61958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\EnableLoopback\obj\Release Signed\EnableLoopback.pdb
mscoree
_CorExeMain
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
EnableLoopback.pdb
- SHA256 b4e093041dd9943e8401d489fa65706f2d7853ab9a092f6612bdd59c8bb4a975
- MD5 2e546f82fb5bdd9c5cd4e9a840a2559e
- SHA1 e2cf9985022b2ca78c65009e120bd8d7c484fe99
- SHA512 23127f8d29653b3609234eb14c8138445e138bb62021376f4ed0ff26de13e4d47d37fb38cd2f60f3aa60d013b8c4c0808284850a1f2cea2cdfd5164ede5bde7d
- SSDEEP 768:DpRUiZxj/OiqdAJ5YvwKGuctURhEbi/N3Z:1qdc+YlUtV
- MD5 SHA1 SHA512 SSDEEP
ExecAction.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a23c852d3ed4148044708925e56e17246cdb88d6ecaaa375503fa1f915ba1272
- MD5 519310853c0ee273a3f8787d7518dd2e
- SHA1 22c4e25c4c4c2b5654d05cd6a1e737c6bcb588d8
- SHA512 30e51202416ab2d0bac9cd294d08c12d7973e75696283b1823c6442033698f85075d14dcd79fb1f56886f4491981b1e278d3a506e5e458a1eee6bb372d5e683d
- SSDEEP 192:ZsCrRJUlWDSnYe+PjPxucwwSoDvucwwfih5H0JOqxEV1a//bZ28WhTEn:GGOZnYPLxoAjo4S+JNY1cAhhY
- MD5 SHA1 SHA512 SSDEEP
Digest
27:83:40:20:fe:5a:55:25:ad:6f:41:20:5c:e0:28:cd:0e:c4:dc:2b:80:e3:4e:b5:50:50:26:0c:21:8d:7f:03
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Dec 15, 2016
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
80:a1:70:c5:99:24:24:64:9b:15:e4:19:82:b2:b6:cb:8e:c4:2a:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Dec 15, 2016
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 5, 2016 - Dec 21, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 5, 2016 - Dec 21, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Apr 11, 2027
Minor OS version
0
Major OS version
4
Entry point
11582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\src\GitHub\fiddler\Fiddler2\Common\ExecAction\v4\obj\x86\Release\ExecAction.pdb
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
FSE2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f55d5cb9968bcb875dc39cc84153bd52375f4cf8a680e0f5eb53a57a7e532561
- MD5 c2fe7c92a8fc763407233203b49685f9
- SHA1 d2f199e71eb7531caa71f85a679e49fa400cc401
- SHA512 f74d29f4520ae0c9aa153f3649bdf80c1ed882a61add7267eafaecb2d036f43fc44434279e3dacd763ebc42fedc78ec3ad52a11b55d14b224b01a8bebca0f6b5
- SSDEEP 768:YhiPG/qDcpEr7+zQ3Eo8P0gsH8Ufj02e0r/oEbkG3wR:ozKcy3+z7o88gsH5fjyXR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\FSE.Net45\obj\Release Signed\FSE2.pdb
mscoree
_CorExeMain
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fiddler.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ffb24fc36ade87988f9908e848d0333ce7ffb2b4e4d0ffb43f6556246069d057
- MD5 87bc17f56e744e74408e6ae8bb28b724
- SHA1 3aa572388083ff00a95405d34d1189c99c7ff5be
- SHA512 cbeee155c97b87a22b92b808f86fee25c18db51ab43a36b657d532d2d47d3a7db2f4507a699b72af904bf6d5ed851d1ae1fcfb4833a57096e6c7787211c0f35d
- SSDEEP 49152:cbvLSgf+VOdx3Vw5+mbSgwJKI0Qpvs3c2KTn4Xj9Bh:cTmgf+VOdc5vbSgwJKDP24Rf
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f4:9b:df:76:5b:81:c0:3a:76:dd:32:3b:2c:7e:08:aa:bd:d9:c7:55:8e:05:2f:ae:53:16:e8:31:6b:4c:c6:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
3638174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Fiddler.pdb
mscoree
_CorExeMain
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Fiddler.exe.config
- SHA256 e59afc2818ad61c1338197a112c936a811c5341614f4ad9ad33d35c8356c0b14
- MD5 c2edc7b631abce6db98b978995561e57
- SHA1 5b1e7a3548763cb6c30145065cfa4b85ed68eb31
- SHA512 5bef4b5487ecb4226544ef0f68d17309cf64bfe52d5c64732480a10f94259b69d2646e4c1b22aa5c80143a4057ee17b06239ec131d5fe0af6c4ab30e351faba2
- MD5 SHA1 SHA512
Fiddler.pdb
- SHA256 9c50823f84ce09af60ed760c95ce73da559505dbf411ef7797f4ce65fc0bf1bb
- MD5 5c43b7f1cff2f8f74d0c75721dd34797
- SHA1 75acf5d64bd38a4483b8ca99ec7d89af4a13e060
- SHA512 41984c51a4fff1ec003ace3e86a26a1a0612cc86df995fea9d2183e937fc8e20ec44e796ae7178ab12df657337016a88d1fac5da55ccdd56f048ab7e7f089661
- SSDEEP 12288:g+KL1RuHRAvLd5aHBh+8uLcIOpfSZs5qwBmo52D:gbxRuHRAvLdwHBhrucys5qUmoo
- MD5 SHA1 SHA512 SSDEEP
ForceCPU.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d
- MD5 b982a103b0d4e0db856026a163124bf3
- SHA1 40772be00068bbd394ff0fccd551151a822f3e70
- SHA512 214ecdf348e2093e91a489c0541f05eb3356e2531c1840a99d9f727caf1130f5041ccbc6356a7bc31fb4dece927d3fee2fa9e4689d2badbe680fd40104a9d327
- SSDEEP 192:fHtIemmfltxD5WLtWwiyT5hNGnYe+PjPxucwwyibSucwwQJk35H0JOqxEV1a//bG:xD5WLZ5qnYPLxoDfoDg+JNY1cAhhv
- MD5 SHA1 SHA512 SSDEEP
Digest
70:c3:fd:94:6c:88:9d:63:5d:58:6e:88:2b:63:48:3e:a5:ee:de:c5:86:5d:4d:d1:a9:2c:5d:f4:d3:89:60:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Dec 15, 2016
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
d9:34:02:4c:de:61:c0:a6:dd:6b:14:e9:c7:48:29:7c:a9:1f:ff:da
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Dec 15, 2016
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 5, 2016 - Dec 21, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=TELERIK AD,OU=IT,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
33:c7:ba:bd:75:5a:db:dd:20:b2:27:ac:4b:fe:ba:85
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 5, 2016 - Dec 21, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Apr 11, 2027
Minor OS version
0
Major OS version
4
Entry point
11854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
GA.Analytics.Monitor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3261a13953f4bedec65957b58074c71d2e1b9926529d48c77cfb1e70ec68790
- MD5 6f9e5c4b5662c7f8d1159edcba6e7429
- SHA1 c7630476a50a953dab490931b99d2a5eca96f9f6
- SHA512 78fd28a0b19a3dae1d0ae151ce09a42f7542de816222105d4dafe1c0932586b799b835e611ce39a9c9424e60786fbd2949cabac3f006d611078e85b345e148c8
- SSDEEP 768:7su21mzJ3+LDDke5WcsvOvHOQ+5bQZdKXJccxYi:7qmByvke5Wcs22QRGKLi
- MD5 SHA1 SHA512 SSDEEP
Digest
fa:f1:7f:01:54:15:0d:ab:ee:e3:96:00:c9:db:28:a2:58:c4:e5:01:f1:83:45:bc:88:82:8d:9b:a4:48:0c:fd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
4b:a5:04:79:a5:09:02:ba:2b:3f:59:c4:37:a8:91:b5:03:76:cf:13
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 29, 2018 - Aug 29, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Minor OS version
0
Major OS version
4
Entry point
45714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\GA.Analytics.Monitor\obj\Release\GA.Analytics.Monitor.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
GA.Analytics.Monitor.pdb
- SHA256 6c19ec08ffb13998ace51e1b531128af12cd47ccadff5e346176c6992c00a843
- MD5 df9591879a5af2a8458fb9148e197313
- SHA1 189df547db269f1694603eab40519ec0086fc326
- SHA512 89c8f7686048e3329d47bd7f6678cca880d1c2a704664a44276090ed2a5b6452d964c69e2d0161ec8b69586e3aae3c99f63445c22122a1b9bf532234f93af65c
- SSDEEP 768:qT0N9rXf8+G/ne3F8VWITK2gaZbAjJcrNtPja+RLDVa:i0N9rX2nevITK2CjC2+RPVa
- MD5 SHA1 SHA512 SSDEEP
ImportExport/BasicFormats.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28a908ac2d08de1dd2ae55edfa417ff72f535ec9207226a9ff4a0134871429f3
- MD5 58a251d92731afb962b29636a887b9c7
- SHA1 e54785f1804c9613b0e5b1728aee97f49b6d66ad
- SHA512 4831534feba39a30e7cf86e496c41ff7661d44784aa80b6ce1562b71bc36eae38308dda46e76209b919952e5e615ab5b8ad80cc349b78522f6e87e4a45f1b421
- SSDEEP 3072:T5zlHe5PmH2YVy3zhKOupG9g1rERA1Ten6V++HOHv7w:Lg/d2Z
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
68:97:fd:58:c7:21:dc:29:3d:54:a2:6a:b1:3d:f8:b2:4f:62:16:f6:13:4c:65:d7:1d:bc:62:c1:0a:60:e3:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:3DA5-963B-E1F4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:33:28:ed:15:29:98:a2:04:00:00:00:00:00:3a
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
111546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\BasicFormats\obj\Release Signed\BasicFormats.pdb
mscoree
_CorDllMain
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ImportExport/BasicFormats.pdb
- SHA256 9e3a2b553a53f069572285911e38800e9b696bd5c72d445009e844a59d8a1b7b
- MD5 4edf49f4586aac097367723d0af7e94c
- SHA1 b3194a116e69672fe2d83a66e164d5e1a67823fb
- SHA512 0cac8af303a608d7a5ddfc8084e6f6262e726677248afe5bd63ca1c2c9dc1cbaaefebb1e358934ee8fc3268c9867c02e8abd2650ecfe15298e92aceb60a02d1a
- SSDEEP 1536:YhKTzCxE+1iFoNKelb/PxrEw+aFlq/N/Q55T4aXrkAcQ3hIHDmcSvbhcVYhN2xXs:YsaXrZxymcYhtN+UgwsC6Yd
- MD5 SHA1 SHA512 SSDEEP
ImportExport/VSWebTestExport.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5566857f213582ddca5d202bc19a1b649061437fbfd7e699afd64986fea5fb61
- MD5 03fcff4a49159e5c405420df08b37757
- SHA1 89b0bc35a78f56212e53556e45d1f9039d2488d1
- SHA512 8cb0d400b848d01e74a0050cdd779224d96db3b87ea393a098a5e75c52c16fd3b3bf20f49196da976af61960c865620ef82ff0295774e2e67ac5c92949c248c4
- SSDEEP 768:obJ9YyrdngGT7Enn/IRXILJtGiU83aTwBmxCnF0Cxf1mlD0Z:EyEw/LtrU83aImx4fIIZ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
05:4f:85:56:10:91:77:1a:4d:4b:53:91:7a:25:16:40:0e:a6:2a:f0:8a:db:15:8e:41:db:99:80:ac:ca:c2:21
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
42778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\VSWebTestExport\obj\Release Signed\VSWebTestExport.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
956B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ImportExport/VSWebTestExport.pdb
- SHA256 1000c8bbfb78a5f3f0a9575814a166799e93538045dbf6ed18e19d403eb3bc0d
- MD5 e6b2eef554733187fa765e2d268794f9
- SHA1 15387eb99dc7c3cd14425ad0662aaee40bd568dc
- SHA512 c59bd84bd6457f3b37b9a76cb9d0f879695242d20ab1a721e82092fa4bbcb4c68aeb6b83a88c2bbf960b6af801c5d0a224855c3b421258e0843c70fff7f7fa90
- SSDEEP 768:9b4+hNvVmLAzJJ1LcR4OSEMGvq/G2HzfKRPb3eUCYiumAyxens+d0hT/Hj8qnAOL:9TfKRPb3D1y8nehTvpAOd/dV5
- MD5 SHA1 SHA512 SSDEEP
Inspectors/QWhale.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93b0f5d3a2a8a82da1368309c91286ee545b9ed9dc57ad1b31c229e2c11c00b5
- MD5 ac80e3ca5ec3ed77ef7f1a5648fd605a
- SHA1 593077c0d921df0819d48b627d4a140967a6b9e0
- SHA512 3ecc0fe3107370cb5ef5003b5317e4ea0d78bd122d662525ec4912dc30b8a1849c4fa2bbb76e6552b571f156d616456724aee6cd9495ae60a7cb4aaa6cf22159
- SSDEEP 1536:jnPlSpsvrGlP3wYeBKpqmSNbgM9ZtZLZQErK3PmIDXRtFhCj6ocpjyc44lc:rlSpsnQCg4ZtZmECfRtF0cpjy94lc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Inspectors/QWhale.Editor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe26c7e4723bf81124cdcfd5211b70f5e348250ae74b6c0abc326f1084ec3d54
- MD5 eaa268802c633f27fcfc90fd0f986e10
- SHA1 21f3a19d6958bcfe9209df40c4fd8e7c4ce7a76f
- SHA512 c0d6559fc482350c4ed5c5a9a0c0c58eec0a1371f5a254c20ae85521f5cec4c917596bc2ec538c665c3aa8e7ee7b2d3d322b3601d69b605914280ff38315bb47
- SSDEEP 12288:vC84TFHhCRR87er17m62l/YpMVuRWGoN0ty6B:vC9T+R87er325wMVuRaGtPB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
830670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Editor.pdb
mscoree
_CorDllMain
Name
.text
Size
804KB
Virtual Size
803KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Inspectors/QWhale.Syntax.Schemes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ad5749ba1914101cd4cf2736d0e74bbb8c7abbe93fd5e83377d5cbf33ddb78d
- MD5 681abb88692a8d2662c527eab350744b
- SHA1 58bf5fdfa668c2add65a6b7edbb43eab47648821
- SHA512 5f2a370b4bd64e03469ddaa90b7ebd75e588033dbe48ae1b111fa537e56aa13b5bd7e067126d3cc543faf45cd0595ea2355d8fa412197b61f18754e4f9876823
- SSDEEP 1536:/YiCDgqGqtbeBLmTnNLUSgk9NPOEbg0hIc2Vrl2XuPtlPpXB1sJOm8M93f2AkkgW:abMmTnNLUSgk9NPOEL2Wg1TOV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
282862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.Schemes.pdb
mscoree
_CorDllMain
Name
.text
Size
272KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Inspectors/QWhale.Syntax.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 79a2c829de00e56d75eeb81cd97b04eae96bc41d6a2dbdc0ca4e7e0b454b1b7c
- MD5 3be64186e6e8ad19dc3559ee3c307070
- SHA1 2f9e70e04189f6c736a3b9d0642f46208c60380a
- SHA512 7d0e657b3a1c23d13d1a7e7d1b95b4d9280cb08a0aca641feb9a89e6b8f0c8760499d63e240fe9c62022790a4822bf4fe2c9d9b19b12bd7f0451454be471ff78
- SSDEEP 3072:Ns/3b/8FpHf3kBFcCsbfqai2/8Fjitdmus95jMRrgk+vWZYz39dHiB796k9gR5+r:NQLa/kBFcCsbfRgzM07XGk+V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
227134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.pdb
mscoree
_CorDllMain
Name
.text
Size
216KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Inspectors/Standard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7f653b706f4d083d089670b8862b579f888450d3184085bc970daa3ff040012
- MD5 2f2dcf9a8bea903a95abb95808066201
- SHA1 98b473a015e874638d35731710b5790fe8ec9df9
- SHA512 228f56acea5ac941dcb192775f8e8e8230c0b0e24487f135bfb5025b1a1bf64ee8cc733c44f5dcdc8eb2f63a9040e9a8ec251ec3e105f81e3007d31a15608344
- SSDEEP 6144:5DdXkVTfwIyE8W+pb7fUQ/51ftYx2Ngzs2L3NUR/m1N:5DdXkiIyEV+pb7Znrxmb
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
88:38:75:28:75:29:96:40:81:69:96:c0:36:7a:ad:ac:f7:df:6a:18:41:cf:41:85:c6:26:54:fc:73:a5:b1:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
249302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
236KB
Virtual Size
235KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Inspectors/SyntaxView.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c5178b2aab92a79be9e4b31e2214d6650961b53bbdc48d952d20725e473b2fe
- MD5 49c71e4f9141cc77798718e41ec8a0d3
- SHA1 84bf7e9f3a462dbbe7ee3e627a83422cf0df4d08
- SHA512 ed7d35e6929670cd181a398b4c09fdf444b7eacff147a9be3bc783944e65541ebf883629fc23d6c6b642eb6719e8e9fa8a4d1c4c9ef65ba78d1ea5539f9f4843
- SSDEEP 1536:KSYKCJHDFPc0WIo1zf2tr7OWzKxrCfIP:K2CRDFYIo1zfBgG/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
fc:32:a3:7d:3d:e1:09:95:15:04:24:8d:a0:97:10:82:64:31:46:ac:de:66:eb:df:5e:6f:ca:03:37:c4:6e:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:3DA5-963B-E1F4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:33:28:ed:15:29:98:a2:04:00:00:00:00:00:3a
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
54010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LoadScript.wav
- SHA256 4d97caeee07cfd354e2f5210ad1522c948bdcfc520fe8bde27652cda92f28241
- MD5 6ea0adcb5af7ab65714e76374ad655fe
- SHA1 6bd0ecafd9ecd4b7921624dba983680cadec14fe
- SHA512 834391490fe6f99efe358dbd58f051a87717accce839fde5524f8cef4d7f872707b220ae975591038909e9ae95d04a04104ee7294d4ac0c53ecf5ca0076c4e39
- SSDEEP 96:IiHTx2ZENf0NWxuKKVf5Pwb1fT0qUB6X6:lTx22kWxujf5Pwb1b07
- MD5 SHA1 SHA512 SSDEEP
LoadScriptError.wav
- SHA256 dce3297d94996c91126446e133145e4395c87ba47c4b731ca86c4c845dad8049
- MD5 72309f20f2bfee0595fe8d20b8cbefb0
- SHA1 efc2b2b263722dddffea44ffc7a116daf09709b3
- SHA512 0de89f9b0ca62cd9977e2becf30d8e9c416ad42f66d1bfbf78e34dc6301e0cec559813d76a05f11abeb39c7cac45e6c20bdf88c86c398c09158cb9f6c3af5942
- MD5 SHA1 SHA512
NOTICES.txt
- SHA256 0a28fb1c261b7eed6cf8f59373bfed456a622b1c30ba828693f1834cd24c1e25
- MD5 adfc592f90745c1ceb5088be6233ca8e
- SHA1 323558f4eec2237d47dfa0805337c99fa1e952cd
- SHA512 0bb50a823270f9aa629e4cf7de4d4de3b04bdb79a6f2dc732c50243de1040cdbdaa46e8e75ce0b3dd9cd85224d69974ce44e57ff319fddf4b1bedcf19ae51d9f
- SSDEEP 1536:SNtCkkRZhAgD0eL8kcp8ZMoh0FVntHOIzm:SNtgRZhF58kcKiXtHnC
- MD5 SHA1 SHA512 SSDEEP
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
704578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3564b25b24569b8d8a0128f2f4bddec89c0b8986da7542d9c64aac730360a600
- MD5 5889357424d717c8629c8bfabcd0be50
- SHA1 87e7047a40e24bd5ac23f89e072ee39a14a53023
- SHA512 1af458742cefd4730d64b19ecc05460354f0e47a79cdcd7794877aa0f6c56cfb92f37a0daf66fedaec2a579eb0187d774b7d5ba1fff65d6ab1504df4c3668fad
- SSDEEP 768:2LpjNBBUyOzcB7RZbkTg+jO4HmBWKNTjNTlfKaE:2LB9VRpOg+jmBPFjF0aE
- MD5 SHA1 SHA512 SSDEEP
Digest
a6:c2:80:24:e2:f9:6f:3a:e5:9b:b5:71:bb:b5:d1:88:9f:3f:d3:33:91:4f:b8:e5:02:42:d9:c7:67:f6:5c:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Chains
Oct 3, 2019
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
33:a3:6e:43:4c:f3:22:e6:91:dc:ac:96:4c:27:4c:c9:e1:da:4d:bb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Chains
Oct 3, 2019
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Serial Number
6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 3, 2019 - Jan 16, 2020
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Serial Number
6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 3, 2019 - Jan 16, 2020
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
2b:b1:74:16:9b:8c:42:56:00:00:00:00:55:91:e9:0e
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 5, 2018 - Jan 5, 2030
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Minor OS version
0
Major OS version
4
Entry point
26342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Jenkins\NetworkConnections_Release\workspace\src\Telerik.NetworkConnections\Telerik.NetworkConnections.Windows\obj\Release\net40\Telerik.NetworkConnections.Windows.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ResponseTemplates/200_FiddlerGif.dat
- SHA256 07db49dc0d250b90e8f6cbd8d3a4340eb01af2afbcc1ae6e539312b1e7f71b97
- MD5 0847d00123f892514a4ad127632ae14e
- SHA1 193c87427c3b37fcea7e1ff20918bd18f4d487ff
- SHA512 dd5727b39f13eb05be49aec3654479ac5162c28157258bf8af8f6878ff55b1e111335fd73be04346a6685ecd0c22ccd7726e7d7b2cd7ce871888f9bc148be27e
- MD5 SHA1 SHA512
ResponseTemplates/200_SimpleHTML.dat
- SHA256 c1de5d01d11cfe466b819af52ba381f217573c889781c60be82eb285e9fa8908
- MD5 ce18f4915c278f5196cacbb086e0afdd
- SHA1 3cd4f950beedba52f6988f082bec98c153706ae3
- SHA512 d4b756f9ad78da3fe740cc283aaab754e3fbcce81e030ad01598f63022452e0afbbea06f9eabd45f22cb0aea12e876bdea462ff56fc7a0cf4f432219f0f008d8
- MD5 SHA1 SHA512
ResponseTemplates/200_TransPixel.dat
- SHA256 55e9d8acc7dc6ead2e4b09c5212d23fde6e9d7f8de739a2cf3821c4d93713845
- MD5 2312c8130d9203f27c0cece742b8928f
- SHA1 03ffc27128a1d8c87e0e3b47797fc1914aad5c40
- SHA512 afb5a0fafa9f2297899c16745e04cb2f8c647f1c8caeae6522732e5c62075a1b771156795e0c148d64fb79a738e33febb28523217ebc9a7ec7a548d574ec77a6
- MD5 SHA1 SHA512
ResponseTemplates/204_NoContent.dat
- SHA256 57a03ea6c0480797d923c72ece7e6e5d3b0b34299bfb879f67e519c9b6cd4fcc
- MD5 b381d9c48a57ec5d61d20b963fa2e0c7
- SHA1 77d0e8255534785ced3dda0906c871f2d662a7d2
- SHA512 07a8a08143ab20350ce04fb51c70356748e76c486c33495b5bae1d72d53b8913bb420694b55f7fea8d9ce087b4418b965f7fdc4fe368f61662569ea2dc109808
- MD5 SHA1 SHA512
ResponseTemplates/302_Redirect.dat
- SHA256 5192579a4a2761b0c65544d1b61804222c169cdabd007fed0f40de09c3f9e854
- MD5 bed4c478ec0842f8230bf9a025491a14
- SHA1 362e4d075aa2846c4e1b998e1a3f15a1d96dff81
- SHA512 723e56024f577a082fde1907a29ccd80b8a5d0cb9a2877ba68d1c0a69aa5ab0395cfd8749e8d73b70d4e680bc8e7892a7100dc42eaf8fff921d25b8505129f33
- MD5 SHA1 SHA512
ResponseTemplates/303_RedirectWithGet.dat
- SHA256 e857508c27591ecf82c522121ab261472ac57023cbf817ca5eb1212ac8b18735
- MD5 972cdf70d09eac166bd8d82573382698
- SHA1 df3d3874688f2294de50590c754411aad8171952
- SHA512 96c4c0dcfe37236845f135d9a50b895433d4b49d532d3dac3a0d7e2831a9afae5c2bb8fcfdf5723d74d50be842a67ad675c33c2f1554d2f59a05b476e7e7c33a
- MD5 SHA1 SHA512
ResponseTemplates/304_NotModified.dat
- SHA256 4d34160482a2fe82b27d396eac3c32b5e9aed7e774e8a60dbe787bd066988944
- MD5 155d2112c5a34e0122456e65eea0415e
- SHA1 4600910ab706b69a9ef2eeeaca73fc015ba16c92
- SHA512 7faa29cab291902af60fdb8aed74e3a686de80b047b0941d4b47dd1d8d5c669f640d220acd785ac775f74b3a0c7f852ba1859c5f09ae82e31af0589d3ffd97b1
- MD5 SHA1 SHA512
ResponseTemplates/307_RedirectWithMethod.dat
- SHA256 631ee98f55964e23c04d6e24a445cdd0b0de7d2f1dc3eaf5be7ae211ddb7d2dc
- MD5 ec8f186d82b4d5d32ee18db08c59bfb0
- SHA1 452a15ebfa2a7c0ff53f4a5a85903f8d09c8ed65
- SHA512 ff5c154f8f8992816fe9f41ca6ce84bff2318adee26e5090dc92a4371fed08ec3b36e848a864cb509813ccf4dbfb3f830d1f5d45bf89e5c502d0bda9a4274c25
- MD5 SHA1 SHA512
ResponseTemplates/401_AuthBasic.dat
- SHA256 3e2e69628454fd3c220f099fec1ccce73f2e779bd43939762928bc8079383dfa
- MD5 0760f4f0adbee7abfb5d05530450ff33
- SHA1 69d35928f1d2061047129c99bedf56b5e0d0fbcc
- SHA512 c3824dc3882282399d2c3211217def0e96f94d6986b6fbff5378b3aa864d8e93788b529502fe3137e15bd753dd52496192851c846a83d09f471998ec2741fc1e
- MD5 SHA1 SHA512
ResponseTemplates/401_AuthDigest.dat
- SHA256 cd8b03f62a20d47fc5c9a495615b350e4da7eabfff34b8e112afec63bab1cbec
- MD5 49756f7861bf92ff1fd84076616b242a
- SHA1 38187c1d3c748fade05dbc10da27dc93d183fd15
- SHA512 08655d1d59e13f95d8a2a36a9de88be2a5abd3b6a21a98ed8ddc8b7c53f38e912e64064bf1d9d83d2df4eb41e3abc2477463cc454bd531800f49857da8d7dca5
- MD5 SHA1 SHA512
ResponseTemplates/403_AuthDeny.dat
- SHA256 3768d4f6467396343baad8df2fe102d22611318f2be090c2cfd8ac82fd201513
- MD5 7374b4d828fba72d4c46f9badc47ca3e
- SHA1 0dee779bb2d38fe4e8e712f214e743d647a8788c
- SHA512 678046183fa344be53841d88b2a978fef3fa1352a1c084a50d1864d6f95d36188523d6d1987df14d682fd589efec6d2228530f18f038725c6e94a86f22946813
- MD5 SHA1 SHA512
ResponseTemplates/404_Plain.dat
- SHA256 a136c0e17264c40873534669af5f78e7e17e70f8661046c32599c6615cad80cf
- MD5 5463ff9babdc2dc1e1304f04400120aa
- SHA1 351449f2043e8ccef14ac76ae8aa87e8ca4b7a9d
- SHA512 3c8f8d41acf6c26f85a5fff8fb12d062381f45820d529e6037e54804cc043eb4d956bf5a4f807429a9eb816a8fafa29bec4db720b6ecb987075ccd13845d6bbb
- MD5 SHA1 SHA512
ResponseTemplates/407_ProxyAuthBasic.dat
- SHA256 a39a2dba0a39ab590535ec9bb33c1095b7b6e79f7686c2fd5368230010721876
- MD5 32c8d78b7bcefa8ea4d459bd9328bcb0
- SHA1 f816a637e20f541618bb9c62095c175df16ed48b
- SHA512 5d6339daa5bb788e6ad6b3a600f153467859793e78e8fa1e2143d335e90d815bd683a1660ed97e5672350be61085f15b0d84ac3c24c59fb89fbcd8db8f59d9f5
- MD5 SHA1 SHA512
ResponseTemplates/502_Unreachable.dat
- SHA256 056e734fd9ef5bbe213a5fccfc32b23f71f7f6cf7b792fa8e614d1c968a2210e
- MD5 1c7df40e98f04b29a79af929a3aec437
- SHA1 c7e246673a4efbdae3955095f3183c95af2f3732
- SHA512 552d3d89716bf3c9068179e2190d6dc257ae1bc023356a228ba36fa5fc6e61c89ac9a9cee95bd67779f13b8c04fe1c3cea08834d4e96d2cfb08e6e54e81dc5be
- MD5 SHA1 SHA512
RunNsisUninstallers.bat
- SHA256 80d570928745176a574d82e45adb33dcab7fa68f80da07038c3da415c355463b
- MD5 adedc0065e7ede15a0d8dab1c985ddee
- SHA1 53803b6179deaded7c57606cea410de34bfcb301
- SHA512 b303123360d4c6ce787814376526ae5af035a0105fe2114d50fc9b8f6e5de8bac0db3de6a0756f6a53294bf6ec379c2ff034058eb84b2a1e510164bf816599a8
- MD5 SHA1 SHA512
Screenshot.wav
- SHA256 d474865a5e5c2f9d039c0f7a017e9a5e23a159cf6f534e879e979c61085fa1f9
- MD5 99803241008ee3d6f14ad27a5f24c34b
- SHA1 43a13f3c5844a577a5221fcfdbfb75a58478683f
- SHA512 4366935af45cb5c3b963aeea3d19507a028760be375717c5f7ec59115417680359a404c8d87a33a5be362ebf3f12eb28cdac539c153f3388446d912a57b37c96
- SSDEEP 384:dIR94458ov44jkTZeh9QUHsG0h6rWll9Rm3BI:GZnPjkTZeh9fBMAiNm3q
- MD5 SHA1 SHA512 SSDEEP
ScriptEditor/Analytics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 166e1a6cf86b254525a03d1510fe76da574f977c012064df39dd6f4af72a4b29
- MD5 1c2bd080b0e972a3ee1579895ea17b42
- SHA1 a09454bc976b4af549a6347618f846d4c93b769b
- SHA512 946e56d543a6d00674d8fa17ecd9589cba3211cfa52c978e0c9dab0fa45cdfc7787245d14308f5692bd99d621c0caca3c546259fcfa725fff9171b144514b6e0
- SSDEEP 384:gpeCB0nVQ/EMq7+Zi9nQwnHgfLtVUEoBXejF6XFlnwnYPLYyTcGq1y2h33XcQ7:/U0VQMMrZi9QiHWtVxOFxwxGqXR7
- MD5 SHA1 SHA512 SSDEEP
Digest
88:d6:f9:6c:b4:16:7f:04:df:a6:ff:4f:30:a7:e0:aa:cc:fe:71:43:5f:1f:09:78:41:15:be:a5:6f:eb:53:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
ad:32:b3:e4:b2:e0:3c:86:0d:e2:73:2c:d5:49:be:a5:28:e2:17:f2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 29, 2018 - Aug 29, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Minor OS version
0
Major OS version
4
Entry point
25878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\JFAnalytics\obj\Release\Analytics.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ScriptEditor/Analytics.pdb
- SHA256 03ca5a20d36bbc0aea28aa3184d65b322cecc3080d55a975cdf0f5d31199829d
- MD5 f84fb6cd84b5d07e3de4d78d38f388ff
- SHA1 0b31f09eeb1af0681614c2f9f90d98b541df580f
- SHA512 03fa13b39d4fae8bc83b4f37cf24aafc8c4a12a5db0462968ae6a0c96232d727df9264d190ff641115921e350a1981ad518a4740c20e54c433b2f2065522ad52
- SSDEEP 384:IzCZdxQVINRdRoNFAYAz3GclBLEKiuNCFJkOLxYbs63N:fxz3oNqbTLUnjpLxY
- MD5 SHA1 SHA512 SSDEEP
ScriptEditor/FSE2.exe.config
- SHA256 f72019a677a2a8447d6e72a731c2ec3ebec6ae03cd7fe266637e665ee11af7ff
- MD5 c5ad2c7e6331c37e5a70d989832eb250
- SHA1 53c2ec3aae4bbd62b5b7095bec8fe7e915ade4f6
- SHA512 92da69b448df5821895aa017f630f1f9916f8a8623f726d72c245375b6bda6c8b6522dd629e297e65c70f854a6457bfe9b43534ffa3a0a28fe0084eb0a07e30d
- MD5 SHA1 SHA512
ScriptEditor/GA.Analytics.Monitor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3261a13953f4bedec65957b58074c71d2e1b9926529d48c77cfb1e70ec68790
- MD5 6f9e5c4b5662c7f8d1159edcba6e7429
- SHA1 c7630476a50a953dab490931b99d2a5eca96f9f6
- SHA512 78fd28a0b19a3dae1d0ae151ce09a42f7542de816222105d4dafe1c0932586b799b835e611ce39a9c9424e60786fbd2949cabac3f006d611078e85b345e148c8
- SSDEEP 768:7su21mzJ3+LDDke5WcsvOvHOQ+5bQZdKXJccxYi:7qmByvke5Wcs22QRGKLi
- MD5 SHA1 SHA512 SSDEEP
Digest
fa:f1:7f:01:54:15:0d:ab:ee:e3:96:00:c9:db:28:a2:58:c4:e5:01:f1:83:45:bc:88:82:8d:9b:a4:48:0c:fd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
4b:a5:04:79:a5:09:02:ba:2b:3f:59:c4:37:a8:91:b5:03:76:cf:13
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 21, 2018
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=TELERIK EAD,OU=IT,O=TELERIK EAD,L=Sofia,ST=Sofia,C=BG
Serial Number
79:75:e7:79:d6:b3:30:a1:6f:d3:a3:87:2c:9c:b5:54
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 3, 2018 - Dec 22, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
84:33:7b:a2:89:b7:8c:ba:00:00:00:00:55:91:da:87
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 29, 2018 - Aug 29, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Minor OS version
0
Major OS version
4
Entry point
45714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\JenkinsHome\jobs\AnalyticsReleaseBuild\workspace\Telerik.FJ.Analytics\GA.Analytics.Monitor\obj\Release\GA.Analytics.Monitor.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ScriptEditor/GA.Analytics.Monitor.pdb
- SHA256 6c19ec08ffb13998ace51e1b531128af12cd47ccadff5e346176c6992c00a843
- MD5 df9591879a5af2a8458fb9148e197313
- SHA1 189df547db269f1694603eab40519ec0086fc326
- SHA512 89c8f7686048e3329d47bd7f6678cca880d1c2a704664a44276090ed2a5b6452d964c69e2d0161ec8b69586e3aae3c99f63445c22122a1b9bf532234f93af65c
- SSDEEP 768:qT0N9rXf8+G/ne3F8VWITK2gaZbAjJcrNtPja+RLDVa:i0N9rX2nevITK2CjC2+RPVa
- MD5 SHA1 SHA512 SSDEEP
ScriptEditor/QWhale.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93b0f5d3a2a8a82da1368309c91286ee545b9ed9dc57ad1b31c229e2c11c00b5
- MD5 ac80e3ca5ec3ed77ef7f1a5648fd605a
- SHA1 593077c0d921df0819d48b627d4a140967a6b9e0
- SHA512 3ecc0fe3107370cb5ef5003b5317e4ea0d78bd122d662525ec4912dc30b8a1849c4fa2bbb76e6552b571f156d616456724aee6cd9495ae60a7cb4aaa6cf22159
- SSDEEP 1536:jnPlSpsvrGlP3wYeBKpqmSNbgM9ZtZLZQErK3PmIDXRtFhCj6ocpjyc44lc:rlSpsnQCg4ZtZmECfRtF0cpjy94lc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ScriptEditor/QWhale.Editor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe26c7e4723bf81124cdcfd5211b70f5e348250ae74b6c0abc326f1084ec3d54
- MD5 eaa268802c633f27fcfc90fd0f986e10
- SHA1 21f3a19d6958bcfe9209df40c4fd8e7c4ce7a76f
- SHA512 c0d6559fc482350c4ed5c5a9a0c0c58eec0a1371f5a254c20ae85521f5cec4c917596bc2ec538c665c3aa8e7ee7b2d3d322b3601d69b605914280ff38315bb47
- SSDEEP 12288:vC84TFHhCRR87er17m62l/YpMVuRWGoN0ty6B:vC9T+R87er325wMVuRaGtPB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
830670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Editor.pdb
mscoree
_CorDllMain
Name
.text
Size
804KB
Virtual Size
803KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ScriptEditor/QWhale.Syntax.Parsers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 acff23204982780d844f5b0cbfe0bf1849c1dfe782cb4084ba2bdc9bf53f026c
- MD5 9fe6e9cfedb661c61a2c70fa75008ec3
- SHA1 0f6a0f4e7fc5552088d3f2dd0c0adf6f6c45b686
- SHA512 a8864ee43628f667d6e0acf071fbba414ff768fe9dd302e6f9498432b3ce48a22deecfe438099a3caa684ad8e9588fae111de752c37c158eebd76e48ab67e02d
- SSDEEP 6144:DDsAkHPWoMvThdMlLQtRZfScxaHrlXnp55VAWvRY02OCo6+shEd2qxrGa:DDs7uounM5WSNAG2otTh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1191710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.Parsers.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ScriptEditor/QWhale.Syntax.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 79a2c829de00e56d75eeb81cd97b04eae96bc41d6a2dbdc0ca4e7e0b454b1b7c
- MD5 3be64186e6e8ad19dc3559ee3c307070
- SHA1 2f9e70e04189f6c736a3b9d0642f46208c60380a
- SHA512 7d0e657b3a1c23d13d1a7e7d1b95b4d9280cb08a0aca641feb9a89e6b8f0c8760499d63e240fe9c62022790a4822bf4fe2c9d9b19b12bd7f0451454be471ff78
- SSDEEP 3072:Ns/3b/8FpHf3kBFcCsbfqai2/8Fjitdmus95jMRrgk+vWZYz39dHiB796k9gR5+r:NQLa/kBFcCsbfRgzM07XGk+V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
227134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.pdb
mscoree
_CorDllMain
Name
.text
Size
216KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/FiddlerOrchestra.Addon.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38a7fa0c13d5700eec8178db2116a51c7e23d97871dbd159fb16104f91c0bfee
- MD5 465761effbd26e70fb83595cb5f8a20a
- SHA1 9b98750ebbc7ce144a2f8150f3b1d8201a53a2af
- SHA512 063c93d8cfc0dd17d56abccb25c00c430066a117e993205ceb0161260214a104627672eaac0ea2ec6c8be488cd2056b92cf002c94c873efcf464efe35efbda7c
- SSDEEP 768:h/M61OLoQSR1KWAEI086vCNVTFzQyx0yHjNbpV+5y43hDxnTxiDTxf1mlQh5VdJs:h/cBEI08WCNVT7Hjdv+hhDxn9WfI+vIz
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
80:f0:2e:cb:bc:11:9b:c3:f1:a6:57:34:38:2b:06:41:0c:c3:07:73:42:55:c0:8d:1d:9f:af:0b:f0:c6:94:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:39:62:06:a6:f0:2e:c2:6c:de:00:00:00:00:00:39
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
44866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler\FiddlerOrchestra\FiddlerOrchestra.Addon\obj\Release\FiddlerOrchestra.Addon.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/FiddlerOrchestra.Addon.pdb
- SHA256 2767835db3f851e82f993538f3f73c016790da3a7f9bbd9539a3e8d95d5bd844
- MD5 71b456d4426bf662ac9d742b962617e1
- SHA1 cf491e85d93bc63b4acafe8dd614179ded8230ba
- SHA512 177ddabfc413742bc7fb48fd30059790d943917cb9207e8554b168eb804d59a5a289b07b2e6a57ed4794ee09228814f1207b6ef70b9f3c2f0c676f208059ba23
- SSDEEP 768:9iqJO0yQHfxdjKn5z/S5ewtbWohS79rHsjbYblVkE81JbvaYB7O4K/NI03e9:miJtbRS9fVkp1JbvzvK/NI03e
- MD5 SHA1 SHA512 SSDEEP
Scripts/FiddlerOrchestra.Connection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a041deb6934864bc3c057d1440f00e2e56104018069e57201f0fc877ef78713
- MD5 19d00193a0df0b4d0734d209989f594c
- SHA1 1adaabf30ef7350df16b7fed023bd980809f4086
- SHA512 6402fa43a1b0e5a96f3270751f18be7b22774fa59a1a6737a0c1549642ef4f148765eaf30776c46f371d5dff69a164454b908ad00fc371d8bdeeddc52f7c9789
- SSDEEP 49152:pkLbcPdI5jVkVyEf8qLFlBPdl7KsQ3+rLmk54aqJJd:YEPFXYzd
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
98:2b:0e:d6:9c:e1:30:46:7a:f4:7a:98:76:54:6a:cf:2a:52:c9:90:7c:7e:bc:01:04:10:f2:2f:a2:46:da:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:3DA5-963B-E1F4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3a:33:28:ed:15:29:98:a2:04:00:00:00:00:00:3a
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
1872950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
FiddlerOrchestra.Connection.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/FiddlerOrchestra.Protocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cbcbffd8cd89ddcf1e4d6a4ab6f0d3c14112cac8e03e3f8f2236bab96977ebe2
- MD5 d045d2bebb047748dcc73d2bb50ab6d1
- SHA1 1a793331a1724a82d25a989006530461b2311955
- SHA512 1359f51a80204d0a8c100dc24dcf473f494f871ff430599779c20a9f747428074387dd607a3c594993179e2b46269fb97409a486f02e5f3ae9f6a36c1354df01
- SSDEEP 384:XjDVyjBjiEBh7oMb1ZPcSVrRSj2qXksk3nrAixn7pdcTjdAA1m5wMQhKuVdJRm5J:XcLPc8rRST3Kn3xTcTxf1mlQh5VdJRm/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
23:0c:12:35:fe:05:b6:07:9e:81:81:f9:04:00:0e:77:f6:07:d7:c3:5b:b5:a3:34:15:c3:96:f6:8d:6d:d7:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:39:62:06:a6:f0:2e:c2:6c:de:00:00:00:00:00:39
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
20238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
FiddlerOrchestra.Protocol.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/FiddlerOrchestra.Utilities.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da9ba58734468c70efd57a7da7cf6d9f5405bc563eb2136b7a6e7b1b07fe6f3e
- MD5 0bd9f14a40e05bdac2c6e79ae92f3081
- SHA1 049c44cefb7789d93796f6ed3415476f4c3be6b9
- SHA512 d759dd46e2d47a1a18a04c8f44f91390ffd917ff76ec1d4898dec93512ef7b6f33b045f22835e8225f4f679c09210df3fca6649143fd507edf7cc3002b40be4e
- SSDEEP 384:nLb4drWQGX2OGsctX63rAix8XwTjdAA1m5wMQhKuVdJHm5LrAe:X4AF+VK3HxEwTxf1mlQh5VdJHm5Xv
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:75:8d:99:57:48:ab:96:b4:7a:8b:f3:8f:62:8a:e6:49:03:7c:26:44:85:8f:8c:e6:40:53:97:1f:90:ea:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:39:62:06:a6:f0:2e:c2:6c:de:00:00:00:00:00:39
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
15498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
FiddlerOrchestra.Utilities.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/QWhale.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93b0f5d3a2a8a82da1368309c91286ee545b9ed9dc57ad1b31c229e2c11c00b5
- MD5 ac80e3ca5ec3ed77ef7f1a5648fd605a
- SHA1 593077c0d921df0819d48b627d4a140967a6b9e0
- SHA512 3ecc0fe3107370cb5ef5003b5317e4ea0d78bd122d662525ec4912dc30b8a1849c4fa2bbb76e6552b571f156d616456724aee6cd9495ae60a7cb4aaa6cf22159
- SSDEEP 1536:jnPlSpsvrGlP3wYeBKpqmSNbgM9ZtZLZQErK3PmIDXRtFhCj6ocpjyc44lc:rlSpsnQCg4ZtZmECfRtF0cpjy94lc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/QWhale.Editor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe26c7e4723bf81124cdcfd5211b70f5e348250ae74b6c0abc326f1084ec3d54
- MD5 eaa268802c633f27fcfc90fd0f986e10
- SHA1 21f3a19d6958bcfe9209df40c4fd8e7c4ce7a76f
- SHA512 c0d6559fc482350c4ed5c5a9a0c0c58eec0a1371f5a254c20ae85521f5cec4c917596bc2ec538c665c3aa8e7ee7b2d3d322b3601d69b605914280ff38315bb47
- SSDEEP 12288:vC84TFHhCRR87er17m62l/YpMVuRWGoN0ty6B:vC9T+R87er325wMVuRaGtPB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
830670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Editor.pdb
mscoree
_CorDllMain
Name
.text
Size
804KB
Virtual Size
803KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/QWhale.Syntax.Parsers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 acff23204982780d844f5b0cbfe0bf1849c1dfe782cb4084ba2bdc9bf53f026c
- MD5 9fe6e9cfedb661c61a2c70fa75008ec3
- SHA1 0f6a0f4e7fc5552088d3f2dd0c0adf6f6c45b686
- SHA512 a8864ee43628f667d6e0acf071fbba414ff768fe9dd302e6f9498432b3ce48a22deecfe438099a3caa684ad8e9588fae111de752c37c158eebd76e48ab67e02d
- SSDEEP 6144:DDsAkHPWoMvThdMlLQtRZfScxaHrlXnp55VAWvRY02OCo6+shEd2qxrGa:DDs7uounM5WSNAG2otTh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1191710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.Parsers.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
728B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/QWhale.Syntax.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 79a2c829de00e56d75eeb81cd97b04eae96bc41d6a2dbdc0ca4e7e0b454b1b7c
- MD5 3be64186e6e8ad19dc3559ee3c307070
- SHA1 2f9e70e04189f6c736a3b9d0642f46208c60380a
- SHA512 7d0e657b3a1c23d13d1a7e7d1b95b4d9280cb08a0aca641feb9a89e6b8f0c8760499d63e240fe9c62022790a4822bf4fe2c9d9b19b12bd7f0451454be471ff78
- SSDEEP 3072:Ns/3b/8FpHf3kBFcCsbfqai2/8Fjitdmus95jMRrgk+vWZYz39dHiB796k9gR5+r:NQLa/kBFcCsbfRgzM07XGk+V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
227134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\Projects\Dot.NET\SVN\Editor.NET\source\obj\Release\QWhale.Syntax.pdb
mscoree
_CorDllMain
Name
.text
Size
216KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/RulesTab2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dac4bf7e1eb765e462a43e6567602d35f512118bab9f75a0a4da972966972941
- MD5 042541ff2925d654930906b654b724aa
- SHA1 ece609e7b1871530473cedb77c375535ab15044a
- SHA512 25879cc5ee5bfdb43ef044d449d6f636a0d330480750dd4e4b9243fb702ea978d667e7c64f5080ce95e540411bbdae34f29ae6533be81002dea7dd9cc6c9a965
- SSDEEP 384:YSz6dWOaBkYRnJOAtTeoa8pGjMqxYMjZ09CZe4862VXQ2I/Q2FQ/urixGP6BiUCd:mNoBcMhW986ePQa/u2x63UCxf1mlD0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5a:a6:da:1f:ae:34:45:7a:d3:f5:1f:8d:0b:ee:1d:32:8e:bc:ca:ae:5d:89:93:40:43:92:c2:62:63:ae:f1:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
32454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\RulesTab2\obj\Release Signed\RulesTab2.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/SampleRules.cs
- SHA256 7cc16a1b2010c7cfc15d763d093f18455d337d2089f9aa17eed6905b313e074f
- MD5 6329a822fc0d3e5de5bab3b05d86e3b1
- SHA1 47f4e415686e7a10ccc28bb211f4a6f1316bf41d
- SHA512 e334bdff2e975f3d4bca0dd50022fc431b47647f3051dda2e4d63313cfb68010c249ed06522b10cdeaac0dc9fc1bf7a0fc31da11e68cd0b92c87aa95603b09c6
- SSDEEP 192:/HpPawh9p96vClMRhLYTOdyB0kHKdbKAzUaN5lXDmxpl9XB3KLTHIJLerD0xF7PV:/pPFvZW8VTHdx9LArm
- MD5 SHA1 SHA512 SSDEEP
Scripts/SampleRules.js
- SHA256 69cc5397e0fa9f99a0d21476da21147631a213f9f15652f8f182f34025abb500
- MD5 cb7bf8b2d0e15c0ecc290a242b9f743a
- SHA1 f1215262c0729dc6700fd5158ef6e437e64a4821
- SHA512 49202347079e366477ba67372b086f5064b108c0c40aa52dfd833dee821b87cc37d9929d5da4fefdd62a824ebf34c161107f08ea7b33d866d21c266ce99972fe
- SSDEEP 192:M8hsqImy1MTb0LB1GeagkQqzzzgWGZIVW0Gdcen9CpNlPdhr3f8nYny7+zjW6CXp:MI0gg2zWia9SVnyqOZ
- MD5 SHA1 SHA512 SSDEEP
Scripts/SimpleFilter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 487f39724bf1e4f387e131e6d932a0900bc949153077e200ddbc1a8e80b08337
- MD5 c258bdc1ade8a12029f394db00956db9
- SHA1 adfabb841df1c3cfa1fb1e97a5b3f8783054baa1
- SHA512 093d3909859c7907bbf6034460a3cd0b087e4890d25c515199c612a9febad2fd9b3c1acf4d639c8e9fbb6092d183258919ba68c308e9f3e9205b0680ba89bed9
- SSDEEP 3072:cZNNCgj9CZFkWb8S2ubYZgzSR2ATfwIrWKyajC9aTGqqtfL7OrMz037CDWCye3O7:cZNNgkWb8S2ubYZgzSR2ATfwIrW3ajCA
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a2:66:32:fd:00:2b:e8:f0:b6:4d:a2:0c:f4:a3:30:c2:c5:33:30:32:05:20:2a:b7:2d:5f:c2:60:61:c9:00:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
136286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\SimpleFilter\obj\Release Signed\SimpleFilter.pdb
mscoree
_CorDllMain
Name
.text
Size
125KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/SimpleFilter.pdb
- SHA256 e60c267b2b5b9d8d4565eefb656a2ade3bc67b964919f8f5b1b4e90ec3da9e75
- MD5 0487154e9dc1b67aa06337526090cbec
- SHA1 9b38d0f546379f8cc6ebf86a68aa7ff9f9fd8a89
- SHA512 ddefbbc34931c18b26358ee095bd7474b408f05bdf1df21540a13bb3bcf904c010e451d492595a61101783553f0b4db4e113a350b964a78b139c4fa598f22ec9
- SSDEEP 1536:b/lXb6Llgb4WgzVkJXr6bd2LKOxHmyFFwRsCc0YY8m/EulWy8WQbvPMA:bF1sWTVeSG6m+CSY8msunNEXM
- MD5 SHA1 SHA512 SSDEEP
Scripts/Timeline.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a26c68a703720ecae24b54b4e288d7c2f486fdba18afd90fab09223d2fc1fb6
- MD5 10c47bca8ff64c65a0c987b29a2dc53c
- SHA1 e7c2a97e4c27dc3641707f04be1de351aa96e897
- SHA512 cc7cd0b390d6b899244f9b2856b410e8486d879bf196e1c521761724fb0b0984ee33521d10c7046a06a11112e34f1222031ca266468e1c3012d42ebc09411d39
- SSDEEP 768:FE8uqoL19VqLPLyYh/9L5POBRz6e4NPTiIgxUXVCE6Txf1mlBqsvrvcYh:MVqLPLyYh9BGzyiIgx/fIQsTt
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:6c:82:bc:0d:3f:16:17:8b:3a:8f:63:de:90:21:87:22:fa:d9:bd:be:d6:f4:49:c5:f0:e3:30:a2:e8:d8:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
36570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\Timeline\obj\Release Signed\Timeline.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Scripts/Timeline.pdb
- SHA256 0eb3f319506f82e2fa24f59bd3e3d597df13f34a7b3e893f6ce717c20d74f546
- MD5 8fcc3cd7cd603bc67055fc66a80bf582
- SHA1 43531818827c7c19ddfdf25ba57e05492f7d3c42
- SHA512 ec55162cd8b1d5799e078f0c593315d60d92f1032028c328a654c9a1a9ca36e04a4a868c0fabc5697d557c16bb8db507f64665c3cba717cfda79664c6f8ff785
- SSDEEP 384:Z4RN/OYENw2WU576+k2g1K1Kz3Z3I44JLJbanBg+ekKS:Z4RN/OC2Thk2g1L35WLJiK
- MD5 SHA1 SHA512 SSDEEP
Scripts/netstandard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8be4a2270f8b2bea40f33f79869fdcca34e07bb764e63b81ded49d90d2b720dd
- MD5 0adf6f32f4d14f9b0be9aa94f7efb279
- SHA1 68e1af02cddd57b5581708984c2b4a35074982a3
- SHA512 f81ac2895048333ac50e550d2b03e90003865f18058ce4a1dfba9455a5bda2485a2d31b0fdc77f6cbdfb1bb2e32d9f8ab81b3201d96d56e060e4a440719502d6
- SSDEEP 1536:Q2Ec05j4eAH64rh5fSt5T9nFcI94WiVQTjpu:nlK4eA7mDmWqQXpu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8e:56:4d:05:69:0c:fa:09:46:27:ef:0b:e8:36:5f:b0:7b:27:1c:55:01:fc:39:d0:19:d8:78:be:b9:ce:56:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 21, 2025
PE Signature issue
Digest
8d:e0:1e:69:c8:d1:ea:17:33:ff:e8:81:e3:03:2e:80:ff:4c:05:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
87550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SetupHelper
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 77523d1504ab2c0a4cde6fcc2c8223ca1172841e2fd9d59d18e5fc132e808ae2
- MD5 b1827fca38a5d49fb706a4a7eee4a778
- SHA1 95e342f3b6ee3ebc34f98bbb14ca042bca3d779f
- SHA512 41be41372fe3c12dd97f504ebabb70ce899473c0c502ff7bfeaddc748b223c4a78625b6481dbab9cb54c10615e62b8b2dbe9a9c08eb2f69c54ebf5933efbeb1b
- SSDEEP 384:tCgQl6Tk+JUEt/aSowaKaix0iAFCjdAA1m5wMDBu4d:tCHsk+JxaSLhxaFCxf1mlD0C
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7b:e2:a1:41:15:55:45:c2:e3:0b:2b:a5:02:47:5d:63:4f:99:f3:0b:97:57:8a:9d:9a:30:4e:d6:17:1a:3c:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
15018
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\Fiddler.SetupHelper\obj\Release Signed\Fiddler.SetupHelper.pdb
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Telerik.NetworkConnections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb90b6e76fdc617ec4ebf3544da668b1f6b06c1debdba369641c3950cab73dd2
- MD5 798d6938ceab9271cdc532c0943e19dc
- SHA1 5f86b4cd45d2f1ffae1153683ce50bc1fb0cd2e3
- SHA512 644fde362f032e6e479750696f62e535f3e712540840c4ca27e10bdfb79b2e5277c82a6d8f55f678e223e45f883776e7f39264c234bc6062fc1865af088c0c31
- SSDEEP 768:GfDHRLnD0jEGs7UUe7DZXKNT8NTcYfKal:SHZgZ6F8Fctal
- MD5 SHA1 SHA512 SSDEEP
Digest
09:25:f9:02:38:ec:01:73:20:e8:df:4f:f6:06:db:87:bb:4e:52:2a:80:80:7e:18:1a:26:03:8e:7c:a8:08:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Chains
Oct 3, 2019
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
89:6d:82:44:27:91:d5:78:9e:c9:33:50:20:05:c3:9c:97:d9:f6:ae
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Chains
Oct 3, 2019
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Serial Number
6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 3, 2019 - Jan 16, 2020
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Progress Software Corporation,O=Progress Software Corporation,L=Bedford,ST=Massachusetts,C=US
Serial Number
6b:24:23:0a:1f:41:58:a8:a8:b9:ec:c7:a5:49:63:d8
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 3, 2019 - Jan 16, 2020
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Entrust Time Stamping Authority,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
2b:b1:74:16:9b:8c:42:56:00:00:00:00:55:91:e9:0e
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 5, 2018 - Jan 5, 2030
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Minor OS version
0
Major OS version
4
Entry point
27198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Jenkins\NetworkConnections_Release\workspace\src\Telerik.NetworkConnections\Telerik.NetworkConnections\obj\Release\net40\Telerik.NetworkConnections.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Tools/Brotli.exe
- IMPHASH abde5b16095d3ba52da82b2720c99f51
- SHA256 bdf333ebad3c91e5280755c07ab6eb4e8ffd4463f96617f33c25f66ef82b341f
- MD5 e57e9adb99414cf052cd9c90205bfe3d
- SHA1 5765b48637395c48ac839bb31c0842e90eaffd90
- SHA512 2f1a75de7b49bc150deaa28c99b9c970c02e1d562598097e64e5128613dc79dcfba2a6f9d948fda9dbf5c5363c842fa7c5dade51475751de91a005683da3b9ac
- SSDEEP 12288:I3H2D06ndyrxxCP9myHMfAHhlyVM1o/5XTw05nmZfRR8cdMnXFb:GH2D06ndM2Vmy2AOKAmZfR2cdMnXFb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4800
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_fdopen
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
_sopen_s
_unlink
abort
atexit
atoi
calloc
clock
exit
fclose
fopen_s
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
localeconv
malloc
mbstowcs
memcmp
memcpy
memmove
memset
perror
printf
realloc
setlocale
signal
strchr
strcmp
strcoll
strlen
tolower
vfprintf
wcslen
wcstombs
Name
.text
Size
258KB
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
421KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Tools/JXR2PNG.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b210d589290a6364a9e303c2f72831c9f6a303b73f898e9ae4aec961e61df875
- MD5 1ba9ad64054a370e87d4f50b8c66572d
- SHA1 c78eb09db64f8414274aef95c5133095fd35a776
- SHA512 7dc88886c6d67251546301c6064fd0465a29aa7d1709d979590b004e7433af5bf78e0210cb93d9b919b55ee079a1af4481101375de9f752b0348904a04b6a312
- SSDEEP 192:62ma8AyahFW1zxM7x0tbKktMhDWpHeLWwsU7K6CY1PK:wAHhFW1gzzDGNMK6j
- MD5 SHA1 SHA512 SSDEEP
Digest
8a:8b:6d:34:5b:59:1c:53:3a:bf:e2:04:31:54:83:c1:16:ef:2c:3c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Eric Lawrence,O=Eric Lawrence,L=Austin,ST=Texas,C=US
Chains
Jul 24, 2015
CN=Eric Lawrence,O=Eric Lawrence,L=Austin,ST=Texas,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=Eric Lawrence,O=Eric Lawrence,L=Austin,ST=Texas,C=US
Serial Number
0e:7a:7f:db:64:01:29:64:95:1c:89:0f:fc:f2:3c:10
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 23, 2015 - Jan 31, 2018
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Timespan
Nov 10, 2006 - Nov 10, 2021
Minor OS version
0
Major OS version
4
Entry point
11550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\src\JPEGXR2PNG\JPEGXR2PNG\obj\Release\JXR2PNG.pdb
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Tools/JXR2PNG.exe.config
- SHA256 eaaeba1a6b05a4091d7271da8b8a7bd0c3f39b73968c50287267a78d60e0fdd2
- MD5 f7cef9ef7b7b0d5d17e496a0aa5ef753
- SHA1 26605124011ae156ee2687b7973f95c1862f6106
- SHA512 76b0fae88a24b1ed5a5b03db672cf2d3b0b44dc515eca5ee0aa631c7d30dc825bb964017dde131be72424ee958311ac346047d8ebf20b7e2bd65125ac5e86c0b
- MD5 SHA1 SHA512
Tools/PngDistill.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ae32e1f31a22ce473ad5e9e6b865e9d10d321e34ee76b5dd84942563b83147a4
- MD5 f8294e5c0bb977d765c7d7a814ad3fbc
- SHA1 9eb8265a33a41024742108124c1d9fa6a01e8b7d
- SHA512 6b098fd6974a12b40af6a775d45a413863257b95d59552476b8567ba64db9dd203141cb738e6adfae057bff094bd2682821bf100102b1abc79352ba3163ab089
- SSDEEP 768:ZkIVnY1p6yMxzph6akvzGTF0U0QwvI1KmwDx8cNCxf1mlD09:ZLnYTgpdkvSZ6vi9wDxAfII9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
1e:17:aa:95:bf:1d:9a:45:a1:f2:ed:15:e3:29:7d:ab:cc:07:bf:c7:bd:bd:ea:e6:cb:b1:41:24:3f:e0:3b:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
26326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\BundledExtensions\PngDistill\obj\Release Signed\PngDistill.pdb
mscoree
_CorExeMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Tools/PngDistill.pdb
- SHA256 3290569230b85d908cb10ff937efea102f89f3f0e4b62679c6b5a400bf94c267
- MD5 ce7ff68343825b2844ddfd04c1230b29
- SHA1 1d74a1af0f3d76656c02d1523e701950a403d3bf
- SHA512 30f5bad56417b05bcc544ac53848488c64372fae0607fb4a5c9d3aa829e1e103059aebf8c81abbf9e4b916f7b38a011ab5bd230a7721ce69f81dd0fb906d8761
- SSDEEP 192:6APNAPAAPOKZnwKpuCYbIHYTr9dYLWAyy3UOx9T8xweKOCBz31UO4eC5acXNwwLm:Vm/7iIAYWAyy3UOx906r1QCzm
- MD5 SHA1 SHA512 SSDEEP
Tools/Zopfli.exe
- IMPHASH 0ee9b066fb0acca861b061bc6205cb49
- SHA256 ff6b47ee6165f4e10d450c96c1875d932b8e7fe788d0f53e615f2f25558db06b
- MD5 9c8cc053ce3163bdc94258df6fac1419
- SHA1 98adc48aca53ca5c6c90b9aa3dfbb60db57fce76
- SHA512 099a6acaec501462702a33ee9a2c2a7b5e2bb91b7bb77e4e762e50166bc4af3ea8cde675289ed7769981627664d7161fd4e1f7eb711b91a57b6fcc550b338077
- SSDEEP 3072:WQBil5nSdPza27aZK4zFD6bLIuEke1KsXL4PoYmopuJQ74PoXh:WQAlUdL3mF+LIWC5kd7f
- MD5 SHA1 SHA512 SSDEEP
Digest
63:f5:4e:21:54:95:f8:70:75:30:eb:3f:7b:c1:e1:45:18:77:a7:c5:93:d4:d5:33:0c:9e:9d:6a:29:dd:6f:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 7, 2016
CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
e4:0b:3e:dd:e9:94:cf:77:e2:3b:cd:7d:18:e5:b6:eb:a8:70:69:fc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Chains
Jun 7, 2016
CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
14:59:b2:a4:9c:0c:d9:2a:08:f9:c5:03:15:cd:3d:8a
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 28, 2016 - Dec 16, 2016
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=TELERIK AD,O=TELERIK AD,L=Sofia,ST=Sofia,C=BG
Serial Number
14:59:b2:a4:9c:0c:d9:2a:08:f9:c5:03:15:cd:3d:8a
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 28, 2016 - Dec 16, 2016
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G1,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:f3:7d:a1:71:67:51:bc:6a:8d:0a:d2:74:b2:8b:13
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Apr 11, 2027
Minor OS version
1
Major OS version
5
Entry point
28667
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\telerik\fiddler\ThirdParty\zopfli\Release\Zopfli.pdb
kernel32
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetLastError
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
ReadFile
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
CompareStringW
LCMapStringW
GetFileType
HeapReAlloc
SetFilePointerEx
GetConsoleMode
ReadConsoleW
CloseHandle
SetStdHandle
GetConsoleCP
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
FlushFileBuffers
CreateFileW
WriteConsoleW
HeapSize
SetEndOfFile
DecodePointer
RaiseException
UnhandledExceptionFilter
advapi32
SystemFunction036
Name
.text
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=134, id=243, version=40116,
count=25, id=242, version=40116,
count=19, id=259, version=23907,
count=30, id=261, version=23907,
count=17, id=260, version=23907,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=88, id=1, productName=Unmarked objects,
count=13, id=269, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Tools/dwebp.exe
- IMPHASH 2d085d0bc738a6c295d68bd5aed725a8
- SHA256 7230212a8242f90a518b5282717cce125c06599d52274547657491c848334867
- MD5 20e8776b40c1ae01526df9d629a8976b
- SHA1 34045f876b75b178c706e7d2b5cfc7db636835c0
- SHA512 97f9ee3da84851668b12449f003b9c7cfc03cfbc7d8f77ff549dd8817de357bd292c9defeef094bc91ccf2210b47debdd249fa4ba7a2a5cfad2e6237b2eb9380
- SSDEEP 3072:quomVW49bB0zguJ25uPpHbbaa3TlO78fn0HZ3mHWqnaSBuPJ31T6+/zdqH:qunZb78f0wHWqD+Z1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
130769
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
ole32
CoInitialize
CoCreateInstance
GetHGlobalFromStream
CreateStreamOnHGlobal
shlwapi
SHCreateStreamOnFileA
kernel32
VirtualFree
RaiseException
GetProcessHeap
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
WriteFile
GlobalSize
SetConsoleMode
GlobalLock
GetConsoleMode
GetStdHandle
SetThreadPriority
CloseHandle
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
CreateSemaphoreA
SetEvent
ReleaseSemaphore
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
ExitThread
GetCurrentThreadId
CreateThread
GetProcAddress
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetModuleHandleW
ExitProcess
WideCharToMultiByte
GetConsoleCP
RtlUnwind
SetStdHandle
HeapCreate
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
MultiByteToWideChar
ReadFile
GetModuleFileNameA
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetEndOfFile
Name
.text
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=35, id=132, productName=VS2008 build 21022, version=21022,
count=30, id=149, productName=VS2008 build 21022, version=21022,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=107, id=1, productName=Unmarked objects,
count=165, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
TrustCert.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0aad2ef66eaf23c20b46e129e8e6b84b4920c910bb3070242bc2031a71a0bbc4
- MD5 aeaafb82c9da482ebd353fede1da1c59
- SHA1 5325056e13cbcee94398faf93b0194c00753c2e8
- SHA512 f5211c8b89c10d1703b92648c2413cebaa8a80acea2664e6ada60fa791e79d27b238d7e7cd530bcb78cb4767c34208d7b23e3f58af8a0c460d43bd86440403f2
- SSDEEP 384:4cfsyZmstjYgixVTvCaTjdAA1m5wMAvru4LTAVVz+4E2k:n06jYLxdvCaTxf1mlA6NVVq
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:ef:2e:d4:69:f3:76:52:c0:5c:df:52:08:14:6a:15:de:bf:cf:4d:57:3d:65:23:78:03:3a:47:d7:cf:ff:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:35:09:05:b5:b2:e7:84:ef:0c:00:00:00:00:00:35
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
14470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\fiddler-classic\fiddler-classic\Fiddler2\TrustCert\TrustCert\obj\x86\Release Signed\TrustCert.pdb
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
TrustCert.pdb
- SHA256 64c9312eed203cdcbc621bf97a8d2406152010ecaf53296740b455210bb09b6c
- MD5 546d55d915e55ff503c3fe6082c7ef98
- SHA1 c2fba2b250b92f0f7671ce8e2401e42fdf07e72b
- SHA512 6e8a5e2115f65befb87f2d115ee7efab89238ad8778ca59ffc48e5a1b7560054e52d723102f37477c6c9cc9740203be8424b0c8b8f3f0f8206516b1c7a7adcb8
- SSDEEP 192:nAAPZFAPAAPrTFBzK3tfxWtEf4zVt31SFz97uhR:/s/efM3h
- MD5 SHA1 SHA512 SSDEEP
credits.txt
- SHA256 0b63b836496ce758c4a84b175eac7db0a0dbb1104dac33d1f97a71703e5146c6
- MD5 622517e6d7a15a9950c8be105f25039c
- SHA1 ef98484f96bbc6440d9515d6f1048dc62a8e961f
- SHA512 039870cc4aa92931bcd4c002669e129bab004a0c311654551b802a1ec35bb20af007437dcc7752459d1df7c6168233f9aae413aac18d61a1996f79d2995567b8
- MD5 SHA1 SHA512
license.txt
- SHA256 53b68dfc6f203a233364dc18c550f3ddf5ff224d922177f119eae47b97f3d797
- MD5 da2c3104a5797f34948f766c8bacbc28
- SHA1 1c5aa77277b7178abe2fa0938c78fb64682497ca
- SHA512 5a997268de9b1fbbe19b267a83b32341c8462b620da6fb57b05d3b0aab5e652007255be8d1b966cb0d54f768b5eef19fa3cca4eded50614e16d1a967a9bb6c31
- SSDEEP 96:z220PCCe4nnikZsB1d/+DYw6Roh5RY4uYNoizT:zZmvPnnikyB1dmR6ezRYzKTT
- MD5 SHA1 SHA512 SSDEEP
makecert.exe
- IMPHASH 8edc201d42ea718d1e65bb5d3125c066
- SHA256 61d76327de227ae8f15afbb0f99c1df6152061855df7b35dbd6ff7329fc1ba4d
- MD5 3da54bd90c1a4ef9a12270102c047fc5
- SHA1 f1633906d490813514621de980e12e4b4b9fba0e
- SHA512 90161aa69d9b59e6a5864b61237dd00bec121b24607bc8dcb3184159e42eca81fde64e68e4cae2f8ee7e798a6051affce8af47b005883adf23f73beefba9a66d
- SSDEEP 1536:Mh3UWxHO1W7R//8XfpenTJ42aar/dN1Eq52:MhEWRz7Rn8PpenTJ42aUfEq52
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8f:e9:cc:ee:a9:91:fe:40:b3:fb:c2:f1:56:90:9c:e8:9b:77:6a:71
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 15, 2009
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
24327
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
MakeCert.pdb
advapi32
CryptReleaseContext
CryptGetProvParam
CryptAcquireContextA
CryptDestroyKey
CryptGenKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptGetUserKey
kernel32
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetVersion
MapViewOfFile
CreateFileMappingA
GetFileSize
WriteFile
WideCharToMultiByte
LocalAlloc
MultiByteToWideChar
CreateFileW
GetProcessHeap
HeapSetInformation
CompareFileTime
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryA
GetProcAddress
FreeLibrary
LocalFree
DeleteFileW
UnmapViewOfFile
CloseHandle
FindResourceA
LoadResource
SizeofResource
LockResource
FreeResource
SetLastError
SystemTimeToFileTime
LocalFileTimeToFileTime
GetLastError
GetModuleHandleA
GetCurrentThreadId
msvcrt
malloc
free
vwprintf
_wcsicmp
_wcsnicmp
_vsnwprintf
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
strtok
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
memset
_wtol
wprintf
mssign32
SignError
GetCryptProvFromCert
FreeCryptProvFromCert
PvkPrivateKeyAcquireContextFromMemory
PvkGetCryptProv
PvkPrivateKeySave
PvkFreeCryptProv
crypt32
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CertFreeCRLContext
CryptSignAndEncodeCertificate
CertCreateCRLContext
CertGetPublicKeyLength
CryptHashCertificate
CryptHashPublicKeyInfo
CertStrToNameW
CryptQueryObject
CryptEncodeObject
CryptExportPublicKeyInfo
CertComparePublicKeyInfo
CryptDecodeObject
CertCreateCertificateContext
CertOpenStore
CertAddEncodedCertificateToStore
CertSetCertificateContextProperty
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore
user32
LoadStringA
LoadStringW
ole32
CoUninitialize
CoCreateGuid
CoInitialize
oleaut32
VarDateFromStr
rpcrt4
UuidToStringA
RpcStringFreeA
UuidCreate
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=69, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=177, id=1, productName=Unmarked objects,
count=19, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
saz.ico
- SHA256 6d0e756d6ef91ee4a45a55857dc473ca8e4fcc2d47bb3285cb6be9b52bf9d239
- MD5 a1d6a5ff94fefbef1d05bcbced52126c
- SHA1 4e6b230e29ea4b73ca8fc6b4ab8e433bb10b97c8
- SHA512 45d44046b6ffbfefd8151908b252fbb799415718108b99efac8e3008cf97f62e288fbfb5617ac26d85d75bfeab7bd8a1248f69c27577ca52dbeeab12ebb7f110
- SSDEEP 48:uy2FX87Vo3+Qzm0atW7NZ5hwpwk+3Z4VaR2TLPv/i0S3duwR/O0YUIemJojskYt5:LUT3+Qz3aY7NfhSpwZ4VaRC60jUmOjsx
- MD5 SHA1 SHA512 SSDEEP
uninst.exe
- IMPHASH f4639a0b3116c2cfc71144b88a929cfd
- SHA256 488a1936ae37a1ad1916004cda6ff1737da0c040180ab2a4e9ed2d3c4075e05f
- MD5 e00adf1da1a9c01ab40c6b264ba629e2
- SHA1 6d518d25e93f18020f11d8efd72c771e41ecea26
- SHA512 afc9b72fc74d47223a4c7ef6412a0520ad3bd2267f54f233cdb0bfc4a3bbb8f142efe695a70969d35d911c2d0b1e96c42d7a62e54ef60c83e1bc5e6f43d00a3e
- SSDEEP 1536:3fHLrLkSRoybCQUZsrs0DC1cuGwwwwwwIwwwwwwwwOwwwwwwwwwwIwwwwwwwwwwa:3fr3k+o5buDC1cuis7ouiSUK9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ce:c2:eb:21:d4:f0:0c:64:e5:99:4e:41:fb:cb:b4:2d:cc:b8:fe:a0:16:f5:45:12:73:39:c9:26:b7:0d:58:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Oct 16, 2024
Subject
SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 27, 2023 - Oct 27, 2024
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:E462-96F0-442E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:38:ff:62:32:e5:01:d4:ad:04:00:00:00:00:00:38
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 15, 2024 - Feb 15, 2025
Minor OS version
0
Major OS version
4
Entry point
13650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
lstrcmpiA
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
WriteFile
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,