Extracted

• backdoored.zip

  .zip
• BouncyCastle.Crypto.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:d7:ef:74:a9:ff:03:a2:20:b6:ed:bb:39:9d:14:c1

  Certificate

  Issuer

  CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  18/03/2020, 00:00

  Not After

  23/03/2023, 12:00

  Subject

  SERIALNUMBER=5101633,CN=Claire Novotny LLC,O=Claire Novotny LLC,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084e657720596f726b,1.3.6.1.4.1.311.60.2.1.3=#13025553

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  18/04/2012, 12:00

  Not After

  18/04/2027, 12:00

  Subject

  CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f6:a3:c5:7e:59:87:21:c6:7b:dd:bc:9b:b2:2d:4f:d1:d2:a5:cc:63:04:1d:78:fb:93:6c:0e:40:16:85:b2:61

  Signer

  Actual PE Digest

  f6:a3:c5:7e:59:87:21:c6:7b:dd:bc:9b:b2:2d:4f:d1:d2:a5:cc:63:04:1d:78:fb:93:6c:0e:40:16:85:b2:61

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  BouncyCastle.Crypto.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 3.2MB - Virtual size: 3.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Client.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 3.1MB - Virtual size: 3.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Client.exe.config

  .xml
• Gma.System.MouseKeyHook.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\globalmousekeyhook\MouseKeyHook\obj\Debug\Gma.System.MouseKeyHook.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Kira.exe

  .exe windows:5 windows x86 arch:x86

  e921ba1f3321b61750d1ebb84a888fb9

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  D:\x\code\epp3\Out\editplus32.pdb

  Imports

  user32

  GetDlgCtrlID

  LoadStringW

  CreateAcceleratorTableW

  CopyAcceleratorTableW

  GetMenuItemInfoW

  GetMessagePos

  TranslateAcceleratorW

  TranslateMDISysAccel

  WindowFromPoint

  DestroyAcceleratorTable

  AdjustWindowRectEx

  GetKeyboardLayout

  keybd_event

  UnpackDDElParam

  IsWindowUnicode

  ReuseDDElParam

  GetWindowLongW

  IsChild

  SetLayeredWindowAttributes

  GetMenuInfo

  SetMenuInfo

  SetParent

  ModifyMenuW

  SetMenuItemInfoW

  GetMenuState

  CreatePopupMenu

  GetMenu

  EnableMenuItem

  CopyRect

  InvertRect

  GetCaretPos

  SetCaretPos

  ShowCaret

  HideCaret

  CreateCaret

  OpenClipboard

  LoadImageW

  wsprintfW

  IsCharUpperW

  IsCharLowerW

  IsWindowEnabled

  GetActiveWindow

  SetActiveWindow

  GetSysColor

  GetSysColorBrush

  DrawTextW

  FindWindowW

  GetFocus

  SetWindowTextW

  GetWindowTextLengthW

  GetWindowTextW

  IsCharAlphaNumericW

  CharUpperW

  CheckMenuItem

  AppendMenuW

  GetTabbedTextExtentW

  ClientToScreen

  DialogBoxParamW

  IsWindow

  DestroyMenu

  LoadMenuW

  TrackPopupMenuEx

  GetDlgItem

  GetDesktopWindow

  SetWindowLongW

  SetForegroundWindow

  DrawMenuBar

  InsertMenuW

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  LoadAcceleratorsW

  MessageBeep

  EndDialog

  CallWindowProcW

  SystemParametersInfoW

  SetWindowPos

  DdeUninitialize

  DdeClientTransaction

  DdeDisconnect

  DdeCreateStringHandleW

  DdeConnect

  DdeFreeStringHandle

  DdeInitializeW

  GetWindow

  SendDlgItemMessageA

  SetWindowsHookExW

  CallNextHookEx

  GetClassNameW

  SetPropW

  GetDC

  ReleaseDC

  InvalidateRgn

  GetCapture

  KillTimer

  SetTimer

  RegisterWindowMessageW

  GetKeyState

  SetClipboardViewer

  ChangeClipboardChain

  IsWindowVisible

  IsZoomed

  IsIconic

  IsClipboardFormatAvailable

  GetClassLongW

  SetClassLongW

  CharLowerW

  WinHelpW

  PtInRect

  TrackMouseEvent

  ReleaseCapture

  OffsetRect

  SetRect

  InflateRect

  FillRect

  TabbedTextOutW

  GetParent

  SetCapture

  InvalidateRect

  UpdateWindow

  ScreenToClient

  PostMessageW

  EnableWindow

  GetClientRect

  GetWindowRect

  DestroyIcon

  SendDlgItemMessageW

  LoadIconW

  LoadBitmapW

  GetMenuCheckMarkDimensions

  SetMenuItemBitmaps

  SetDlgItemTextW

  IsDialogMessageW

  MoveWindow

  SendMessageW

  ShowWindow

  ScrollWindowEx

  RemoveMenu

  LoadCursorW

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  GetClipboardData

  GetForegroundWindow

  DefWindowProcW

  SetCursor

  GetMessageTime

  CharNextExA

  GetDoubleClickTime

  RegisterClipboardFormatW

  GetPropW

  RemovePropW

  SetFocus

  GetLastActivePopup

  DispatchMessageW

  GetTopWindow

  UnhookWindowsHookEx

  PeekMessageW

  MapWindowPoints

  ScrollWindow

  TrackPopupMenu

  SetMenu

  SetScrollRange

  GetScrollRange

  SetScrollPos

  GetScrollPos

  ShowScrollBar

  MessageBoxW

  CreateWindowExW

  GetClassInfoExW

  GetClassInfoW

  RegisterClassW

  EqualRect

  DeferWindowPos

  GetScrollInfo

  SetScrollInfo

  SetWindowPlacement

  IntersectRect

  SystemParametersInfoA

  GetWindowPlacement

  GetSystemMetrics

  CreateDialogIndirectParamW

  DestroyWindow

  GetNextDlgTabItem

  DrawTextExW

  GrayStringW

  GetWindowDC

  BeginPaint

  EndPaint

  GetWindowThreadProcessId

  DefFrameProcW

  DefMDIChildProcW

  RedrawWindow

  InsertMenuItemW

  SetCursorPos

  DestroyCursor

  ValidateRect

  TranslateMessage

  GetMessageW

  ShowOwnedPopups

  IsRectEmpty

  GetSystemMenu

  WaitMessage

  DrawIcon

  SetWindowRgn

  UnregisterClassW

  PostThreadMessageW

  GetDCEx

  LockWindowUpdate

  CharNextW

  MapDialogRect

  SetWindowContextHelpId

  CreateMenu

  GetTabbedTextExtentA

  GetNextDlgGroupItem

  BringWindowToTop

  EndDeferWindowPos

  BeginDeferWindowPos

  PostQuitMessage

  SetRectEmpty

  DrawFocusRect

  GetKeyNameTextW

  MapVirtualKeyW

  GetCursorPos

  GetMenuStringW

  DeleteMenu

  comctl32

  ImageList_DrawEx

  ImageList_DrawIndirect

  ImageList_Draw

  wsock32

  accept

  WSAStartup

  setsockopt

  WSAGetLastError

  socket

  htons

  recv

  select

  send

  WSACleanup

  gethostbyname

  bind

  getsockname

  listen

  shutdown

  ioctlsocket

  getservbyname

  closesocket

  connect

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueW

  imm32

  ImmSetCompositionWindow

  ImmReleaseContext

  ImmGetConversionStatus

  ImmGetContext

  ImmSetCandidateWindow

  ImmSetCompositionFontW

  ImmEscapeA

  ImmEscapeW

  ImmGetCompositionStringA

  ImmGetCompositionStringW

  uxtheme

  SetWindowTheme

  GetThemeBackgroundContentRect

  CloseThemeData

  OpenThemeData

  IsAppThemed

  DrawThemeBackground

  EnableThemeDialogTexture

  mpr

  WNetOpenEnumW

  WNetAddConnection2W

  WNetGetConnectionW

  WNetCloseEnum

  WNetEnumResourceW

  usp10

  ScriptStringOut

  ScriptStringAnalyse

  ScriptStringCPtoX

  ScriptString_pSize

  ScriptStringFree

  ScriptString_pLogAttr

  gdiplus

  GdipBitmapLockBits

  GdipCreateBitmapFromScan0

  GdipDisposeImage

  GdipDeleteGraphics

  GdipAlloc

  GdipBitmapUnlockBits

  GdipCreateFromHDC

  GdipSetInterpolationMode

  GdipDrawImageRectRectI

  GdipFree

  GdiplusShutdown

  GdiplusStartup

  GdipCloneImage

  crypt32

  CertStrToNameW

  CryptFindCertificateKeyProvInfo

  CryptBinaryToStringW

  CertCreateSelfSignCertificate

  CertFreeCertificateContext

  CryptStringToBinaryW

  CryptBinaryToStringA

  secur32

  FreeCredentialsHandle

  AcquireCredentialsHandleW

  FreeContextBuffer

  InitializeSecurityContextW

  EncryptMessage

  QueryContextAttributesW

  DecryptMessage

  DeleteSecurityContext

  ApplyControlToken

  dbghelp

  MiniDumpWriteDump

  kernel32

  EnumSystemLocalesA

  InterlockedCompareExchange

  GetUserDefaultLCID

  GetStringTypeW

  GetStringTypeA

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringA

  LCMapStringW

  GetTimeZoneInformation

  InitializeCriticalSectionAndSpinCount

  IsValidCodePage

  GetOEMCP

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  VirtualFree

  HeapCreate

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  VirtualQuery

  GetSystemInfo

  VirtualAlloc

  VirtualProtect

  HeapSize

  CreateThread

  IsValidLocale

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CreateFileA

  SetEnvironmentVariableA

  GetLocaleInfoA

  ExitThread

  RaiseException

  HeapReAlloc

  IsDebuggerPresent

  UnhandledExceptionFilter

  TerminateProcess

  HeapAlloc

  HeapFree

  RtlUnwind

  GetStartupInfoW

  GetFileSizeEx

  LocalFileTimeToFileTime

  SizeofResource

  LockResource

  LoadResource

  FindResourceW

  LoadLibraryW

  GetModuleHandleW

  GetProcAddress

  SetLastError

  GetLastError

  MultiByteToWideChar

  GetACP

  GlobalMemoryStatusEx

  GetTickCount

  WideCharToMultiByte

  FindCloseChangeNotification

  WaitForSingleObject

  FindNextChangeNotification

  FindFirstChangeNotificationW

  InterlockedIncrement

  InterlockedDecrement

  GetTimeFormatW

  GetDateFormatW

  GetTempPathW

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  FreeLibrary

  CloseHandle

  GetSystemDefaultLCID

  SetThreadLocale

  GetSystemDefaultLangID

  GetUserDefaultUILanguage

  SetThreadUILanguage

  GetStringTypeExW

  GetThreadLocale

  lstrlenW

  lstrcmpiW

  UnmapViewOfFile

  MapViewOfFile

  ReadFile

  SetFilePointer

  GetFileSize

  SetCurrentDirectoryW

  GetCPInfo

  GetLocalTime

  GetShortPathNameW

  GetModuleFileNameW

  CreateFileMappingW

  OpenFileMappingW

  FindClose

  FindNextFileW

  GetFullPathNameW

  GetTempFileNameW

  CopyFileW

  FindFirstFileW

  DeleteFileW

  GetSystemTime

  GetCurrentDirectoryW

  SetUnhandledExceptionFilter

  MulDiv

  lstrlenA

  CreateFileMappingA

  GetCurrentThreadId

  SystemTimeToFileTime

  GetCurrentThread

  SetEndOfFile

  GetCurrentProcess

  CreateDirectoryW

  CreateFileW

  GetFileAttributesW

  SetFileAttributesW

  FreeResource

  GetVersionExW

  ExpandEnvironmentStringsW

  GetFileTime

  GetCurrentProcessId

  ExitProcess

  LocalFree

  FormatMessageW

  WriteFile

  GetLocaleInfoW

  GetPrivateProfileStringW

  CreateProcessW

  GlobalAddAtomW

  GlobalGetAtomNameW

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  GlobalMemoryStatus

  GetStdHandle

  GetProcessHeap

  Sleep

  FileTimeToLocalFileTime

  lstrcmpW

  EnumSystemCodePagesW

  FlushFileBuffers

  CreatePipe

  GetVolumeInformationW

  ResumeThread

  SuspendThread

  GetDriveTypeW

  ExpandEnvironmentStringsA

  LoadLibraryA

  GetVersionExA

  CompareStringW

  GlobalDeleteAtom

  GlobalFindAtomW

  GlobalSize

  GetModuleHandleA

  lstrcmpA

  SetThreadPriority

  SetEvent

  CreateEventW

  InterlockedExchange

  CompareStringA

  EnumResourceLanguagesW

  ConvertDefaultLocale

  GetPrivateProfileIntW

  WritePrivateProfileStringW

  SetErrorMode

  MoveFileW

  LockFile

  UnlockFile

  DuplicateHandle

  SetFileTime

  GetDiskFreeSpaceW

  GlobalFlags

  GetProfileIntW

  LocalAlloc

  LeaveCriticalSection

  TlsGetValue

  EnterCriticalSection

  GlobalReAlloc

  GlobalHandle

  InitializeCriticalSection

  TlsAlloc

  TlsSetValue

  LocalReAlloc

  DeleteCriticalSection

  TlsFree

  GetFileAttributesExW

  gdi32

  GetNearestColor

  GetCharWidthW

  Ellipse

  LPtoDP

  CreateEllipticRgn

  GetMapMode

  SetRectRgn

  GetViewportOrgEx

  EndDoc

  AbortDoc

  SetAbortProc

  EndPage

  StartPage

  DPtoLP

  ExtSelectClipRgn

  GetCurrentPositionEx

  ScaleWindowExtEx

  SetWindowExtEx

  SetWindowOrgEx

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  GetPolyFillMode

  Escape

  TextOutW

  RectVisible

  PtVisible

  StartDocW

  GetPixel

  GetWindowExtEx

  GetViewportExtEx

  IntersectClipRect

  ExcludeClipRect

  SetMapMode

  SetStretchBltMode

  SetROP2

  SetPolyFillMode

  RestoreDC

  SaveDC

  CopyMetaFileW

  CreateBitmap

  GetClipBox

  SetTextAlign

  CreatePolygonRgn

  PatBlt

  GetRgnBox

  CombineRgn

  CreateRectRgn

  Polygon

  GetBkColor

  CreatePatternBrush

  CreateDIBitmap

  SelectClipRgn

  ExtTextOutA

  CreateDIBSection

  GetDeviceCaps

  GetCurrentObject

  GetCharABCWidthsW

  GetOutlineTextMetricsW

  CreateICW

  EnumFontFamiliesExW

  Rectangle

  DeleteDC

  GetTextExtentPointW

  GetTextMetricsW

  SetTextColor

  SetBkColor

  CreateRectRgnIndirect

  GetObjectW

  GetStockObject

  GetROP2

  GetStretchBltMode

  GetTextAlign

  GetTextFaceW

  CreateSolidBrush

  GetBkMode

  SetBkMode

  ExtTextOutW

  GetTextColor

  CreatePen

  MoveToEx

  LineTo

  DeleteObject

  GetTextExtentPoint32W

  BitBlt

  SelectObject

  CreateCompatibleDC

  CreateDCW

  CreateCompatibleBitmap

  CreateFontIndirectW

  GetTextExtentPoint32A

  GetWindowOrgEx

  SetViewportOrgEx

  comdlg32

  GetFileTitleW

  winspool.drv

  DocumentPropertiesW

  OpenPrinterW

  GetJobW

  ClosePrinter

  advapi32

  CryptReleaseContext

  RegCreateKeyW

  GetFileSecurityW

  SetFileSecurityW

  RegOpenKeyExA

  RegQueryValueExA

  RegEnumKeyW

  GetUserNameW

  RegOpenKeyW

  CryptExportKey

  CryptDecrypt

  CryptEncrypt

  CryptSetKeyParam

  CryptDestroyKey

  CryptVerifySignatureW

  CryptHashData

  CryptGetHashParam

  CryptDestroyHash

  CryptGenKey

  CryptGenRandom

  CryptCreateHash

  CryptImportKey

  RegSetValueExW

  CryptAcquireContextW

  RegEnumValueW

  RegSetValueW

  RegQueryValueW

  RegDeleteValueW

  RegDeleteKeyW

  RegQueryValueExW

  RegOpenKeyExW

  RegCreateKeyExW

  RegCloseKey

  shell32

  ExtractIconW

  ord62

  DragFinish

  SHBindToParent

  ord16

  SHGetSettings

  SHFileOperationW

  ShellExecuteExW

  DragQueryFileW

  SHGetFileInfoW

  DragAcceptFiles

  Shell_NotifyIconW

  SHBrowseForFolderW

  SHGetDesktopFolder

  SHGetSpecialFolderLocation

  SHGetPathFromIDListW

  SHChangeNotify

  ShellExecuteW

  ExtractIconExW

  shlwapi

  PathIsUNCW

  PathFindExtensionW

  UrlEscapeW

  UrlUnescapeW

  StrCmpLogicalW

  SHAutoComplete

  PathRemoveFileSpecW

  PathRemoveExtensionW

  PathFindFileNameW

  PathFileExistsW

  PathStripToRootW

  oledlg

  OleUIBusyW

  ole32

  OleDuplicateData

  ReleaseStgMedium

  CoInitializeEx

  CLSIDFromProgID

  CLSIDFromString

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoTaskMemAlloc

  CoCreateInstance

  OleUninitialize

  CoFreeUnusedLibraries

  OleInitialize

  CreateStreamOnHGlobal

  OleIsCurrentClipboard

  OleFlushClipboard

  DoDragDrop

  OleGetClipboard

  RegisterDragDrop

  CoLockObjectExternal

  RevokeDragDrop

  CoGetClassObject

  CoRevokeClassObject

  CoRegisterMessageFilter

  StgOpenStorageOnILockBytes

  StgCreateDocfileOnILockBytes

  CreateILockBytesOnHGlobal

  OleTranslateAccelerator

  IsAccelerator

  OleCreateMenuDescriptor

  OleDestroyMenuDescriptor

  oleaut32

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayGetUBound

  SafeArrayGetLBound

  SafeArrayGetElemsize

  SafeArrayGetDim

  VariantCopy

  VariantChangeType

  SafeArrayDestroy

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  SysAllocStringLen

  SysFreeString

  LoadTypeLi

  SysStringLen

  SafeArrayCreate

  SysAllocString

  OleCreateFontIndirect

  VariantClear

  SafeArrayPutElement

  VariantInit

  urlmon

  CoInternetSetFeatureEnabled

  oleacc

  AccessibleObjectFromWindow

  CreateStdAccessibleObject

  LresultFromObject

  Sections

  .text

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 280KB - Virtual size: 280KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 33KB - Virtual size: 208KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Microsoft.TestPlatform.AdapterUtilities.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  bd:3c:97:6c:2a:1e:92:de:56:e0:d4:c4:55:c4:51:e0:4d:c0:90:8f:29:5f:c8:44:b5:cc:85:5c:76:c3:62:03

  Signer

  Actual PE Digest

  bd:3c:97:6c:2a:1e:92:de:56:e0:d4:c4:55:c4:51:e0:4d:c0:90:8f:29:5f:c8:44:b5:cc:85:5c:76:c3:62:03

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\_work\1\s\src\Microsoft.TestPlatform.AdapterUtilities\obj\Release\net45\any\Microsoft.TestPlatform.AdapterUtilities.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 880B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.VisualStudio.CodeCoverage.Shim.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  df:e5:08:a0:58:55:0e:67:a6:78:33:5e:39:ac:9c:d8:d7:f1:cf:8b:e8:fb:60:62:61:b9:20:91:84:3a:c5:6d

  Signer

  Actual PE Digest

  df:e5:08:a0:58:55:0e:67:a6:78:33:5e:39:ac:9c:d8:d7:f1:cf:8b:e8:fb:60:62:61:b9:20:91:84:3a:c5:6d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/artifacts/obj/Microsoft.VisualStudio.Coverage.Shim/Release/net35/Microsoft.VisualStudio.CodeCoverage.Shim.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  1d:10:4c:01:64:ca:94:c8:0a:19:d5:5d:48:57:cc:29:fe:1b:a9:27:f7:ad:76:0a:47:ce:d7:fa:e2:cc:d9:63

  Signer

  Actual PE Digest

  1d:10:4c:01:64:ca:94:c8:0a:19:d5:5d:48:57:cc:29:fe:1b:a9:27:f7:ad:76:0a:47:ce:d7:fa:e2:cc:d9:63

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\_work\1\s\src\Adapter\MSTest.CoreAdapter\obj\Release\Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 143KB - Virtual size: 142KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  57:37:b5:f1:6d:82:2e:ce:31:a5:97:e1:48:57:a7:3a:a0:e3:1a:81:18:9f:b7:b5:2a:60:67:86:97:61:d8:28

  Signer

  Actual PE Digest

  57:37:b5:f1:6d:82:2e:ce:31:a5:97:e1:48:57:a7:3a:a0:e3:1a:81:18:9f:b7:b5:2a:60:67:86:97:61:d8:28

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\_work\1\s\src\Adapter\PlatformServices.Interface\obj\Release\Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  51:79:a0:16:73:27:89:05:56:ea:bd:96:3c:3c:be:40:db:ee:ab:b7:df:38:26:0c:85:8a:dc:36:c7:d5:a3:61

  Signer

  Actual PE Digest

  51:79:a0:16:73:27:89:05:56:ea:bd:96:3c:3c:be:40:db:ee:ab:b7:df:38:26:0c:85:8a:dc:36:c7:d5:a3:61

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\_work\1\s\src\Adapter\PlatformServices.Desktop.Legacy\obj\Release\Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  50:71:db:34:10:2e:c9:6c:35:d3:a6:36:2c:c9:4c:e5:f8:f5:a9:c8:c3:ee:1d:f6:9a:56:0a:b0:8d:91:bb:9f

  Signer

  Actual PE Digest

  50:71:db:34:10:2e:c9:6c:35:d3:a6:36:2c:c9:4c:e5:f8:f5:a9:c8:c3:ee:1d:f6:9a:56:0a:b0:8d:91:bb:9f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\_work\1\s\src\TestFramework\Extension.Desktop\obj\Release\Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.VisualStudio.TestPlatform.TestFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/09/2021, 18:32

  Not After

  01/09/2022, 18:32

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  85:57:f2:d3:26:93:e9:ce:14:28:8c:6d:0f:e4:d4:62:f6:a0:5c:b5:a0:53:6c:52:94:bb:9f:56:b1:a2:bb:0c

  Signer

  Actual PE Digest

  85:57:f2:d3:26:93:e9:ce:14:28:8c:6d:0f:e4:d4:62:f6:a0:5c:b5:a0:53:6c:52:94:bb:9f:56:b1:a2:bb:0c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\_work\1\s\src\TestFramework\MSTest.Core\obj\Release\Microsoft.VisualStudio.TestPlatform.TestFramework.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 60KB - Virtual size: 59KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Mono.Cecil.Mdb.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\src\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 864B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Mono.Cecil.Pdb.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\src\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 85KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 864B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Mono.Cecil.Rocks.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\src\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 25KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 876B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Mono.Cecil.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\src\cecil\obj\Release\net40\Mono.Cecil.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 348KB - Virtual size: 347KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 840B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Open.Nat.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 66KB - Virtual size: 65KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Quasar.Common.Tests.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 948B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Quasar.Common.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 60KB - Virtual size: 60KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Quasar.exe.config

  .xml
• Vestris.ResourceLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\resourcelib\Source\ResourceLib\obj\Release\net45\Vestris.ResourceLib.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 73KB - Virtual size: 73KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• client.bin

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 3.1MB - Virtual size: 3.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• protobuf-net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  protobuf-net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 280KB - Virtual size: 279KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• quasar.p12
• settings.xml