Full_version_repack.zip
- SHA256 b2ff65464943d289c66fa22abc2285c166893e3a087a6c4eae3b521bce0aaaf9
Password
2025
Overview
overview
10Static
static
10BugSplat.dll
windows10-2004-x64
3BugSplat.dll
windows11-21h2-x64
3COMSupport.dll
windows10-2004-x64
3COMSupport.dll
windows11-21h2-x64
3DBGHelp.dll
windows10-2004-x64
3DBGHelp.dll
windows11-21h2-x64
3DVDSetting.dll
windows10-2004-x64
3DVDSetting.dll
windows11-21h2-x64
3ExceptionHandler.dll
windows10-2004-x64
3ExceptionHandler.dll
windows11-21h2-x64
3Installer.exe
windows10-2004-x64
10Installer.exe
windows11-21h2-x64
10Library/AdobeXMP.dll
windows10-2004-x64
1Library/AdobeXMP.dll
windows11-21h2-x64
1Library/Au...er.dll
windows10-2004-x64
1Library/Au...er.dll
windows11-21h2-x64
1Library/Au...er.dll
windows10-2004-x64
3Library/Au...er.dll
windows11-21h2-x64
3Library/Az...ty.dll
windows10-2004-x64
1Library/Az...ty.dll
windows11-21h2-x64
1Library/Bo...ce.dll
windows10-2004-x64
1Library/Bo...ce.dll
windows11-21h2-x64
1Library/GRINTL32.dll
windows10-2004-x64
1Library/GRINTL32.dll
windows11-21h2-x64
1Library/InkDiv.dll
windows10-2004-x64
1Library/Mi...ns.dll
windows10-2004-x64
1Library/Mi...ns.dll
windows11-21h2-x64
1Library/Mi...nt.dll
windows10-2004-x64
1Library/Mi...nt.dll
windows11-21h2-x64
1Library/Mi...is.dll
windows10-2004-x64
1Library/Mi...is.dll
windows11-21h2-x64
1Library/Mi...es.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
BugSplat.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
BugSplat.dll
Resource
win11-20251015-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
COMSupport.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
COMSupport.dll
Resource
win11-20251015-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
DBGHelp.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
DBGHelp.dll
Resource
win11-20251015-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
DVDSetting.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
DVDSetting.dll
Resource
win11-20250619-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
ExceptionHandler.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
ExceptionHandler.dll
Resource
win11-20251015-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
Installer.exe
Resource
win10v2004-20251016-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral12
Sample
Installer.exe
Resource
win11-20250619-en
windows11-21h2-x64
15 signatures
150 seconds
Behavioral task
behavioral13
Sample
Library/AdobeXMP.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Library/AdobeXMP.dll
Resource
win11-20250619-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Library/AudioRenderer.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Library/AudioRenderer.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Library/AuraLayerManager.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
Library/AuraLayerManager.dll
Resource
win11-20251015-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
Library/Azure.Identity.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Library/Azure.Identity.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Library/BoxService.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Library/BoxService.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Library/GRINTL32.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Library/GRINTL32.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Library/InkDiv.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
Library/Microsoft.AspNetCore.Mvc.Abstractions.dll
Resource
win10v2004-20250619-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Library/Microsoft.AspNetCore.Mvc.Abstractions.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Library/Microsoft.Azure.Management.PrivateDns.Fluent.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Library/Microsoft.Azure.Management.PrivateDns.Fluent.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Library/Microsoft.Build.Tasks.CodeAnalysis.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Library/Microsoft.Build.Tasks.CodeAnalysis.dll
Resource
win11-20251015-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Library/Microsoft.CodeAnalysis.Remote.Workspaces.dll
Resource
win10v2004-20251016-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Full_version_repack.zip
- Size 49.6MB
- Sample251104-tb58wsdn6y
- SHA256 b2ff65464943d289c66fa22abc2285c166893e3a087a6c4eae3b521bce0aaaf9
- MD5 7c816420c607b7a91d2cd31d0537b78f
- SHA1 a5fcfc306b282dd13a9aa0b2508e20e67b56547f
- SHA512 7e8e6fed96c9364486c09b1cacb67c5a7a59b9f964695cbfa4bc96c3d97657f6e69bbdfc4ce166be0a6c1fa14835ba00898826d28c286bdca8b4311da45176b9
- SSDEEP 1572864:LNFiNZQpqdpuT8YNbQtb55yPVHbfPkQQE5XnZ5TR/1nlk:LNFiNZQpqjKRQn5yPVHbP0qjI
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\storehost_win64
-
inject_dll
%windir%\SysWOW64\rasapi32.dll
xor.hex
Signatures
- Detects HijackLoader (aka IDAT Loader) 1 IoCs
resource yara_rule static1/unpack001/Ceckflarrak.gag family_hijackloader - Hijackloader family
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/Installer.exe - Insecure Codesign Algorithm 1 IoCs
File was Codesigned using an insecure algorithm.
resource unpack001/Library/NppShell_06.dll - Unsigned PE 16 IoCs
Checks for missing Authenticode signature.
resource unpack001/COMSupport.dll unpack001/DVDSetting.dll unpack001/ExceptionHandler.dll unpack001/Library/InkDiv.dll unpack001/Library/PowerArgs.dll unpack001/Library/XamlAnimatedGif.dll unpack001/Library/msys-ksba-8.dll unpack001/Library/msys-pcre2-8-0.dll unpack001/Library/msys-svn_ra_serf-1-0.dll unpack001/Library/msys-svn_wc-1-0.dll unpack001/Library/scintilla.dll unpack001/Resource/driver_booster_setup.exe unpack001/Updates/Setup.exe unpack001/Updates/bin/trust.exe unpack001/Updates/bin/x86_64-w64-mingw32-agrep.exe unpack001/Updates/trust.exe - Untrusted Codesign Signers 6 IoCs
Codesigned binary was signed by an untrusted entity.
resource unpack001/BugSplat.dll unpack001/DBGHelp.dll unpack001/Library/AdobeXMP.dll unpack001/Library/AudioRenderer.dll unpack001/Library/GRINTL32.DLL unpack001/Library/ogalegit.dll
File Explorer
-
Full_version_repack.zip.zip 49.6MB
-
BugSplat.dll.dll 296KB
-
COMSupport.dll.dll 59KB
-
Ceckflarrak.gag5.3MB
-
DBGHelp.dll.dll 968KB
-
DVDSetting.dll.dll 41KB
-
ExceptionHandler.dll.dll 128KB
-
Installer.exe.exe 646.4MB
-
Library/AdobeXMP.dll.dll 957KB
-
Library/AudioRenderer.dll.dll 798KB
-
Library/AuraLayerManager.dll.dll 160KB
-
Library/Azure.Identity.dll.dll 304KB
-
Library/BoxService.dll.dll 336KB
-
Library/GRINTL32.DLL.dll 203KB
-
Library/InkDiv.dll.dll 350KB
-
Library/Microsoft.AspNetCore.Mvc.Abstractions.dll.dll 262KB
-
Library/Microsoft.Azure.Management.PrivateDns.Fluent.dll.dll 265KB
-
Library/Microsoft.Build.Tasks.CodeAnalysis.dll.dll 250KB
-
Library/Microsoft.CodeAnalysis.Remote.Workspaces.dll.dll 439KB
-
Library/Microsoft.Crm.Sdk.Proxy.dll.dll 375KB
-
Library/Microsoft.NET.Build.Tasks.dll.dll 1.1MB
-
Library/Microsoft.ProgramSynthesis.Transformation.Text.dll.dll 1.3MB
-
Library/Microsoft.VisualStudio.ConnectedServices.Package2.resources.dll.dll 224KB
-
Library/Microsoft.VisualStudio.Interactive.Editor.dll.dll 309KB
-
Library/Microsoft.VisualStudio.TeamFoundation.VersionControl.resources.dll.dll 301KB
-
Library/Microsoft.VisualStudio.TestTools.TestSettings.dll.dll 630KB
-
Library/Microsoft.WebTools.Languages.Shared.VS.dll.dll 204KB
-
Library/NppShell_06.dll.dll 227KB
-
Library/NuGet.Console.dll.dll 211KB
-
Library/OneDriveService.dll.dll 326KB
-
Library/PowerArgs.dll.dll 787KB
-
Library/PresentationFramework.Luna.dll.dll 666KB
-
Library/ProtectionManagement.dll.dll 555KB
-
Library/System.Collections.Concurrent.dll.dll 258KB
-
Library/System.Data.SQLite.dll.dll 377KB
-
Library/System.IO.Pipelines.dll.dll 198KB
-
Library/TaskbarSetting.dll.dll 263KB
-
Library/UIAutomationClient.dll.dll 406KB
-
Library/WzBGTool.resources.dll.dll 1.3MB
-
Library/WzWXFlc64.dll.dll 608KB
-
Library/Xamarin.Forms.Platform.WPF.dll.dll 466KB
-
Library/XamlAnimatedGif.dll.dll 252KB
-
Library/cpfecl.Android.arm.dll.dll 416KB
-
Library/libaccess_output_shout_plugin.dll.dll 455KB
-
Library/libdtv_plugin.dll.dll 883KB
-
Library/microsoft.visualstudio.graphics.dll.dll 664KB
-
Library/mozwer.dll.dll 322KB
-
Library/msemp.dll.dll 437KB
-
Library/msys-ksba-8.dll.dll 237KB
-
Library/msys-pcre2-8-0.dll.dll 620KB
-
Library/msys-svn_ra_serf-1-0.dll.dll 187KB
-
Library/msys-svn_wc-1-0.dll.dll 697KB
-
Library/ogalegit.dll.dll 622KB
-
Library/qtquickcontrols2materialstyleplugin.dll.dll 728KB
-
Library/scintilla.dll.dll 617KB
-
Library/symsrv.dll.dll 405KB
-
Resource/ChromeSetup.exe.exe 10.4MB
-
Resource/DateInterval_serialize-003.phpt.js 1KB
-
Resource/DateTime_clone_basic4.phpt808B
-
Resource/GlobIterator_internal_null_pointer.phpt2KB
-
Resource/LICENSE3KB
-
Resource/ReflectionMethod_hasPrototype_basic.phpt777B
-
Resource/anb.c11KB
-
Resource/array_chunk_variation15.phpt1KB
-
Resource/array_push_variation2.phpt2KB
-
Resource/bug13213.jpg.jpg 596B
-
Resource/bug24499.phpt381B
-
Resource/bug43450.phpt481B
-
Resource/bug44144.phpt423B
-
Resource/bug60160.phpt522B
-
Resource/bug72731.phpt.js 300B
-
Resource/bug73333.phpt504B
-
Resource/bug79467.phpt226B
-
Resource/bug80745.phpt772B
-
Resource/closedir_basic.phpt1KB
-
Resource/copyonwrite22.phar.phpt240B
-
Resource/driver_booster_setup.exe.exe 31.7MB
-
Resource/dtor_not_called_if_not_init.phpt.js 742B
-
Resource/fe_fetch_op2_live_range.phpt.js 238B
-
Resource/file_get_contents_variation9.phpt2KB
-
Resource/font_element.h669B
-
Resource/fopen_edgecases2.phpt.js 1KB
-
Resource/gc_002.phpt265B
-
Resource/getalias.phpt.js 1KB
-
Resource/gh10187.phpt161B
-
Resource/import_of_namepace_conflicting_attributes.phpt1KB
-
Resource/json_decode_exceptions.phpt.js 884B
-
Resource/ns_end_resets_seen_symbols_2.phpt721B
-
Resource/odbc_field_name_001.phpt.js 931B
-
Resource/oss-fuzz-65498.phpt238B
-
Resource/parse_url_basic_007.phpt6KB
-
Resource/pcgoneseq128xslrr64_seed.phpt.js 1KB
-
Resource/pdo_sqlite_open_basedir.phpt955B
-
Resource/phar_copy.phpt.js 1KB
-
Resource/phar_gzip.phpt1013B
-
Resource/preload_ind.inc59B
-
Resource/private_members.phpt1KB
-
Resource/property_override_private_private.phpt421B
-
Resource/r2_base_005s.phpt1KB
-
Resource/reconcile_reused_namespace.phpt1KB
-
Resource/sni_server_cs.pem3KB
-
Resource/spoofchecker_class.h3KB
-
Resource/strspn_variation5.phpt.ps1 2KB
-
Resource/throw_into_yield_from_array.phpt.js 611B
-
Resource/value_edge_cases.phpt.js 389B
-
Resource/zend_accelerator_debug.h1KB
-
UpdateLogs/DisplayLanguageNames.ar_LB.txt32KB
-
UpdateLogs/DisplayLanguageNames.en_BE_PREEURO.txt32KB
-
UpdateLogs/DisplayLanguageNames.hy_AM.txt28KB
-
UpdateLogs/NETCoreSdkRuntimeIdentifierChain.txt20B
-
UpdateLogs/README_el_GR.txt2KB
-
UpdateLogs/SYMBOL.TXT15KB
-
UpdateLogs/cover_cgo_xtest.txt464B
-
UpdateLogs/cover_runs.txt413B
-
UpdateLogs/example.com_retract_ambiguous_nested_v1.9.0-bad.txt178B
-
UpdateLogs/gopath_install.txt1KB
-
UpdateLogs/import_unix_tag.txt751B
-
UpdateLogs/isodate.license.txt1KB
-
UpdateLogs/list_replace_absolute_windows.txt693B
-
UpdateLogs/mod_dot.txt4KB
-
UpdateLogs/mod_nomod.txt644B
-
UpdateLogs/mod_string_alias.txt146B
-
UpdateLogs/rsc.io_quote_v0.0.0-20180709162918-a91498bed0a7.txt2KB
-
UpdateLogs/test_compile_binary.txt136B
-
UpdateLogs/test_doctest4.txt331B
-
UpdateLogs/test_race_install_cgo.txt1KB
-
UpdateLogs/testfp.txt7KB
-
UpdateLogs/ug.txt11KB
-
UpdateLogs/usr_50.txt4KB
-
UpdateLogs/vet_internal.txt1KB
-
Updates/CppCoreCheck.dll.dll 1.0MB
-
Updates/Microsoft.Build.Engine.dll.dll 642KB
-
Updates/Microsoft.VisualStudio.CppSvc.Internal.dll.dll 201KB
-
Updates/Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost.dll.dll 543KB
-
Updates/Microsoft.VisualStudio.DesignTools.XamlLanguageService.dll.dll 1.2MB
-
Updates/Microsoft.VisualStudio.TestPlatform.Common.dll.dll 490KB
-
Updates/Microsoft.VisualStudio.VisualC.Utilities.dll.dll 213KB
-
Updates/Microsoft.WebTools.Languages.Html.VS.dll.dll 333KB
-
Updates/Setup.exe.exe 77KB
-
Updates/System.Windows.Forms.resources.dll.dll 464KB
-
Updates/WzWXFll64.dll.dll 596KB
-
Updates/bin/Setup.exe.exe 1.1MB
-
Updates/bin/trust.exe.exe 229KB
-
Updates/bin/x86_64-w64-mingw32-agrep.exe.exe 35KB
-
Updates/trust.exe.exe 229KB
BugSplat.dll
- IMPHASH 0dac91d571710abf1256a743c4b815f1
- SHA256 4b33ee0e8a4153c0c8ccd945adb18d8f91b5b824746a15986bf6781f081f9968
- MD5 27d48c6c48d5259a4e2ad7be369ce906
- SHA1 66ea6266024a66826a9dd57a1420b8ce6fd13b0c
- SHA512 a037c86bb33b98d768c27d975bc27be348382e75f4bf96d736d2f3bbcc02b7da9dc922994502fad1eb8f80d4df791c2c0e826b55b68c20580a46b1a0fe2cb43f
- SSDEEP 6144:zKNX3re4rLmb8Gh8cGLdutlE7ZWeyFEq0DQtzYtRVljQ:zKN6emgGh6LdGwWJFE9ls
- MD5 SHA1 SHA512 SSDEEP
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Password
2025
PE Signature issue
Digest
b3:09:89:96:66:be:f3:d4:ae:1f:fe:16:d1:94:c7:3a:35:88:43:67
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BugSplat LLC,O=BugSplat LLC,L=Henniker,ST=NH,C=US
Chains
Apr 27, 2015
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
Serial Number
03:01
Issuer
OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 16, 2006 - Nov 16, 2026
Subject
CN=BugSplat LLC,O=BugSplat LLC,L=Henniker,ST=NH,C=US
Serial Number
07:ff:9e:4e:18:62:cf
Issuer
SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2012 - May 29, 2015
Minor OS version
1
Major OS version
5
Entry point
61821
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\www\src\BugSplat\bin\BugSplat.pdb
wininet
InternetWriteFile
InternetConnectA
HttpAddRequestHeadersA
HttpSendRequestA
InternetCloseHandle
HttpOpenRequestA
InternetReadFile
InternetAttemptConnect
InternetOpenA
HttpQueryInfoA
HttpEndRequestA
HttpSendRequestExA
shlwapi
PathAppendA
PathFileExistsA
PathRemoveExtensionA
PathStripPathA
kernel32
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LocalFree
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcessId
OpenThread
GetLastError
GetThreadContext
SuspendThread
ResumeThread
CloseHandle
FormatMessageA
lstrlenA
LoadLibraryA
GetTempPathA
CreateFileA
DeleteFileA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
LocalAlloc
GetFileSize
ReadFile
InterlockedExchange
FreeLibrary
GlobalLock
GlobalFree
FlushInstructionCache
VirtualProtect
GetUserDefaultLCID
OpenProcess
TerminateProcess
SetUnhandledExceptionFilter
SetErrorMode
DebugBreak
WaitForSingleObject
GetSystemTime
SystemTimeToFileTime
GetModuleFileNameA
GetModuleHandleA
CreateProcessA
OutputDebugStringA
WritePrivateProfileStringA
WideCharToMultiByte
DecodePointer
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadResource
SizeofResource
lstrcmpiA
LoadLibraryExA
FindResourceA
IsDBCSLeadByte
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
HeapReAlloc
GetProcessHeap
GetTimeZoneInformation
DeleteFileW
GetFileType
GetStringTypeW
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
SetEndOfFile
ReadConsoleW
VirtualQuery
HeapSize
GetCurrentThread
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetModuleFileNameW
WriteFile
GetStdHandle
CreateSemaphoreW
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
OutputDebugStringW
EncodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
RtlUnwind
IsProcessorFeaturePresent
CreateThread
ExitThread
LoadLibraryExW
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetSystemInfo
VirtualAlloc
GetCommandLineA
FatalAppExitA
UnhandledExceptionFilter
SetLastError
CreateEventW
Sleep
user32
CharUpperA
MessageBoxA
LoadStringA
wvsprintfA
CharLowerA
CharNextA
UnregisterClassA
DestroyWindow
advapi32
RegOpenKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateGuid
oleaut32
SysFreeString
VarUI4FromStr
urlmon
URLDownloadToFileA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
rpcrt4
RpcStringFreeA
UuidToStringA
??0BugSplatImp@@QAE@XZ
??0MiniDmpSender@@QAE@ABV0@@Z
??0MiniDmpSender@@QAE@PBD000K@Z
??0MiniDmpSender@@QAE@PBG000K@Z
??0MiniDmpSender@@QAE@PB_W000K@Z
??1MiniDmpSender@@UAE@XZ
??4BugSplatImp@@QAEAAV0@ABV0@@Z
??4MiniDmpSender@@QAEAAV0@ABV0@@Z
??_7MiniDmpSender@@6B@
?CreateMiniDump@BugSplatImp@@QAEHPAUHINSTANCE__@@KPAXKPAU_EXCEPTION_POINTERS@@PBDPADK@Z
?DoFullMemoryDumpThenExit@BugSplatImp@@2_NA
?GetReducedGuid@BugSplatImp@@QAEXPADK@Z
?MiniDumpType@BugSplatImp@@2W4_MINIDUMP_TYPE@@A
?ReduceGuidString@BugSplatImp@@QAEXPADK@Z
?ResumeSuspendedThreads@BugSplatImp@@QAEXXZ
?SetDbghelpFlags@MiniDmpSender@@QAEXW4dbghelpFlags@1@@Z
?SuspendAllThreadsInProcess@BugSplatImp@@QAEXPAX@Z
?SuspendThreadsInCurrentProcess@BugSplatImp@@QAEXXZ
?createReport@MiniDmpSender@@QAEXPAU_EXCEPTION_POINTERS@@@Z
?createReport@MiniDmpSender@@QAEXPBD@Z
?createReport@MiniDmpSender@@QAEXPB_W@Z
?createReport@MiniDmpSender@@QAEXXZ
?createReportAndExit@MiniDmpSender@@QAEXXZ
?enableExceptionFilter@MiniDmpSender@@QAE_N_N@Z
?enableFullMemoryDumpAndExit@MiniDmpSender@@QAE_N_N@Z
?getFlags@MiniDmpSender@@QBEKXZ
?imp@MiniDmpSender@@QAEPAXXZ
?isExceptionFilterEnabled@MiniDmpSender@@QBE_NXZ
?isFullMemoryDumpAndExitEnabled@MiniDmpSender@@QBE_NXZ
?resetAppIdentifier@MiniDmpSender@@QAEXPBD@Z
?resetAppIdentifier@MiniDmpSender@@QAEXPB_W@Z
?resetVersionString@MiniDmpSender@@QAEXPBD@Z
?resetVersionString@MiniDmpSender@@QAEXPB_W@Z
?setCallback@MiniDmpSender@@QAEXP6A_NIPAX0@Z@Z
?setDefaultUserEmail@MiniDmpSender@@QAEXPBD@Z
?setDefaultUserEmail@MiniDmpSender@@QAEXPBG@Z
?setDefaultUserEmail@MiniDmpSender@@QAEXPB_W@Z
?setDefaultUserName@MiniDmpSender@@QAEXPBD@Z
?setDefaultUserName@MiniDmpSender@@QAEXPBG@Z
?setDefaultUserName@MiniDmpSender@@QAEXPB_W@Z
?setFlags@MiniDmpSender@@QAE_NK@Z
?setUserZipPath@MiniDmpSender@@QAEXPBD@Z
?setUserZipPath@MiniDmpSender@@QAEXPBG@Z
?setUserZipPath@MiniDmpSender@@QAEXPB_W@Z
?storeUserLog@MiniDmpSender@@QAEXPBD@Z
?storeUserLog@MiniDmpSender@@QAEXPB_W@Z
?unhandledExceptionHandler@MiniDmpSender@@QAEJPAU_EXCEPTION_POINTERS@@@Z
CreateMiniDmpSender
DestroyMiniDmpSender
MDSGetFlags
MDSResetAppIdentifier
MDSResetVersionString
MDSSetFlags
Name
.text
Size
215KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=223, version=20806,
count=149, id=224, version=20806,
count=71, id=225, version=20806,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=174, id=1, productName=Unmarked objects,
count=7, id=225, productName=VS2013 build 21005, version=21005,
count=1, id=220, productName=VS2013 build 21005, version=21005,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 build 21005, version=21005,
COMSupport.dll
- IMPHASH b196abf09e30eabcd24a4d23b2fd07e5
- SHA256 b1038928a6da2a1b5064a27187403563f3ab7e8d4ec034dfa8d5d3f6be231191
- MD5 976ef4af05e92e4dbb612756e6798a37
- SHA1 b6eeeab344272c6e9965820d35ca596703a311d6
- SHA512 dde2923cf55dbd7a9eecd4a114d475008123d433a003ea71da0c50e9ec557fe6dc270e26d97c9076546ba225a9388e303330e601ecaa11dda4e812809a9665db
- SSDEEP 768:8qr8sIYRM5ZJi9nCJELr6p0KkR7Dp4iUcj3QcYUyQaQIbPYTdRcmt3uo:8qvMi9T6fGmbcbjqmI8TdC03
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2025
Minor OS version
0
Major OS version
5
Entry point
11266
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\svn_code\Common\MultimediaPlatform\Branch\4.2.5_DVDCreator221957\Src\SymbolTable\Release\COMSupport.pdb
kernel32
LoadLibraryW
GetProcAddress
lstrcmpiW
OutputDebugStringA
lstrcpyW
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
ole32
StringFromCLSID
CoCreateInstance
CoTaskMemFree
oleaut32
VariantInit
VariantClear
SysAllocString
SetCOMProfile
WSCreateInstance
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=77, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=36, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=84, id=1, productName=Unmarked objects,
count=1, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Ceckflarrak.gag
- SHA256 2a01096fa435f93eaec18bd9d6972fba7b21b9fbbb755d882d22f4033b7fe23d
- MD5 7449d35b254920852d660bfe7708b60a
- SHA1 e746e2734f0ff9fe5d2afdc743473bb64b2b959e
- SHA512 412480ea7fd2c2860b9eaa326e6b21f341e0a68895d7feae3d1a30cd1645df382686060942c2a83275a0bfc1b167d619c1baea380578aae58f4458dd0be01281
- SSDEEP 98304:ZiUyPfuqfi6eEcoOOnxgSWm5hinFlCMO7aLUSqNLAgPs7hP:Zmmqfi6hcgnpWmKnyMYaLTqNjyP
- MD5 SHA1 SHA512 SSDEEP
-
Detects HijackLoader (aka IDAT Loader)
DBGHelp.dll
- IMPHASH 39525b45c40c6c59481ed9e5dc908b2d
- SHA256 c1275ddf04a0942b416c1a0b2d32003a4eda732c6f97c74181c236e35d12420f
- MD5 3094481f0cb0531b407d2388ecb4b85f
- SHA1 b2ed7c1895e417e0620e1043a8d3fcc4598fc791
- SHA512 34b78729403e16d5ac1032cbb85c5c68f61f2f35b6e57d6d5ea2bc372981e93a1425b46a2c2dd55ed2b2e0b8681f517103e30a86241aec037b1e1788c411252b
- SSDEEP 24576:cJ0P97FW0NnWpUBBgXRKQ7O7DVUY1V/IMHfyUO:c0PhFVNnWpUBB4i2o7O
- MD5 SHA1 SHA512 SSDEEP
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Password
2025
PE Signature issue
Digest
7a:39:f6:5c:c2:23:73:03:f5:52:42:36:57:71:16:80:fe:42:e6:ed
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=BugSplat LLC,O=BugSplat LLC,L=Henniker,ST=NH,C=US
Chains
Oct 28, 2014
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
Serial Number
03:01
Issuer
OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 16, 2006 - Nov 16, 2026
Subject
CN=BugSplat LLC,O=BugSplat LLC,L=Henniker,ST=NH,C=US
Serial Number
07:ff:9e:4e:18:62:cf
Issuer
SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 2, 2012 - May 29, 2015
Minor OS version
0
Major OS version
4
Entry point
442365
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
dbghelp.pdb
kernel32
SetFilePointer
CreateFileW
DeleteFileW
CreateDirectoryW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
UnmapViewOfFile
GetFullPathNameW
GetFileAttributesW
FindClose
CreateDirectoryA
VirtualProtect
VirtualAlloc
DuplicateHandle
MapViewOfFile
CreateFileMappingA
GetModuleHandleA
OpenProcess
GetCurrentProcessId
VirtualFree
OutputDebugStringA
WriteFile
OutputDebugStringW
ReadProcessMemory
SetErrorMode
GetFileAttributesA
GetSystemDirectoryW
GetProcessHeap
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetEnvironmentVariableW
IsDBCSLeadByte
HeapFree
HeapAlloc
HeapReAlloc
GetVersionExA
InitializeCriticalSection
FlushViewOfFile
MapViewOfFileEx
CreateFileMappingW
GetFileType
DeviceIoControl
InitializeCriticalSectionAndSpinCount
CopyFileA
SetFileAttributesA
CopyFileW
SetFileAttributesW
LCMapStringA
LCMapStringW
LocalFree
InterlockedIncrement
InterlockedDecrement
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
DeleteFileA
GetModuleFileNameA
FormatMessageW
FormatMessageA
GetThreadSelectorEntry
CreateThread
TerminateThread
LoadLibraryW
VirtualQueryEx
GetPriorityClass
GetThreadPriority
HeapCreate
DeleteCriticalSection
FreeLibrary
HeapDestroy
TlsFree
TlsAlloc
GetTickCount
TlsGetValue
TlsSetValue
GetLastError
CreateFileA
GetFileSize
ReadFile
CloseHandle
EnterCriticalSection
LeaveCriticalSection
FindNextFileW
LocalAlloc
SetLastError
FindFirstFileW
GetProcAddress
LoadLibraryA
GetSystemInfo
GetVersionExW
SuspendThread
ResumeThread
GetThreadContext
GetThreadTimes
msvcrt
__dllonexit
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
realloc
iswprint
_vsnwprintf
memmove
iswspace
calloc
_itoa
towlower
tolower
_wcslwr
time
_wctime
strncmp
_ltoa
_wcsnicmp
_stricmp
_purecall
isspace
ctime
malloc
_strlwr
free
strstr
_except_handler3
memcpy
_wcsicmp
_errno
_ismbblead
mbtowc
__mb_cur_max
isleadbyte
_snprintf
wctomb
_lseek
__badioinfo
__pioinfo
_onexit
_isatty
_iob
_fileno
atol
wcsncpy
sprintf
__CxxFrameHandler
fclose
_winminor
_winmajor
_osver
_wsplitpath
__unDName
isdigit
strncpy
_CxxThrowException
bsearch
_snwprintf
fread
fseek
_wfopen
fopen
wcstol
strchr
wcsrchr
_wmakepath
_fullpath
_wfullpath
_mbsicmp
_access
_splitpath
_wcsdup
_fsopen
_wfsopen
_get_osfhandle
_read
_lseeki64
_chsize
_close
_open_osfhandle
_wsopen
_sopen
wprintf
ftell
_wgetenv
_memicmp
_mbscmp
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_write
qsort
wcschr
wcsstr
wcsncmp
iswxdigit
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
advapi32
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
rpcrt4
UuidCreate
DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
SearchTreeForFileW
StackWalk
StackWalk64
SymAddSymbol
SymAddSymbolW
SymCleanup
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFindFileInPathW
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrW64
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileFromToken
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSearch
SymSearchW
SymSetContext
SymSetHomeDirectory
SymSetOptions
SymSetParentWindow
SymSetSearchPath
SymSetSearchPathW
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
UnmapDebugInformation
WinDbgExtensionDllInit
block
dbghelp
dh
fptr
homedir
lmi
lminfo
omap
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo
Name
.text
Size
890KB
Virtual Size
890KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=109, version=40401,
count=56, id=110, version=40401,
count=1, id=109, version=31008,
count=11, id=125, version=40816,
count=11, id=123, version=40816,
count=269, id=1, productName=Unmarked objects,
count=27, id=109, version=40816,
count=1, id=122, version=40816,
count=45, id=110, version=40816,
count=1, id=124, version=40816,
count=1, id=120, version=40816,
DVDSetting.dll
- IMPHASH b1ef5315be487f2c21eade374734763b
- SHA256 718cfb5195d0e43e795627c781fb3f427856f1cf29f33eedbbc6059b6f214549
- MD5 05c88530d48f20ec24dbc4df3470e57d
- SHA1 44cd6ee8ca8c0ffaf9313a0c24bb781dbc4f3849
- SHA512 e7654ee6a45ac5c150b9c1b98d530e2c9ca6e89a836408d1435826979b5e009bb6d630c9ab9b6ed124511449754c5ec67181d91c8f96c3e00c7f5179bf2a9675
- SSDEEP 768:/8qXvDbWzd3vbJEl6s1Tl4jxl01SGoMRuuwV:Eq6dfbJE1T2aSwRuuwV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2025
Minor OS version
0
Major OS version
5
Entry point
4704
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\Wondershare2018\DVDCreator\MediaAuthorLib\Trunk\Src\DVDCreator\SymbolTable\Release\DVDSetting.pdb
kernel32
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetDecoderMode
SetDecoderMode
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=16, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=72, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=73, id=1, productName=Unmarked objects,
count=3, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ExceptionHandler.dll
- IMPHASH cc439d98e7c816c876845ed90402d8ee
- SHA256 6036be1c9a8819998ad10879dff6c04edc787d34a142a3e0841c0fca36fb9c6e
- MD5 7c76e3100bd67c47f176a0edde3ef79a
- SHA1 bff22f39f3ba61cddd695b8a27b5139c5675afba
- SHA512 a9508ef760f5bba22aec0f2784258a364b372ff163bebf4fc59cb4d48c7ac6e68a96b7fd64dddb522dfa4c34f7ad652d8779232dd0db7609fb4b60cc1f4c2bbf
- SSDEEP 1536:ReLbWzby5i5Zqyt4Q1H9JFXHSFUNNRcZZ36mCcTSkb0EYsKK93BFZ2nQ+iFD+b7:8v+iNPQ1H9JFCsIdjWK9RFZB+iFD+b7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2025
Minor OS version
0
Major OS version
5
Entry point
44682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
I:\CompanySource\Plowshare\Src\Symbol\Release\ExceptionHandler.pdb
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
psapi
GetModuleFileNameExW
kernel32
WaitNamedPipeW
WriteFile
TransactNamedPipe
CreateFileW
GetLastError
ResetEvent
SetNamedPipeHandleState
WaitForMultipleObjects
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
UnregisterWait
CreateMutexW
GetCurrentProcess
ConnectNamedPipe
CreateNamedPipeW
Sleep
ReadFile
GetOverlappedResult
DisconnectNamedPipe
RegisterWaitForSingleObject
CreateEventW
DuplicateHandle
ReleaseMutex
UnregisterWaitEx
FreeLibrary
InitializeCriticalSection
LoadLibraryW
GetProcAddress
GetLocalTime
DeleteCriticalSection
SetEvent
OpenProcess
ReadProcessMemory
RtlCaptureContext
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
CreateSemaphoreW
GetProcessId
AddVectoredExceptionHandler
GetModuleFileNameW
CreateProcessW
AssignProcessToJobObject
TerminateProcess
ResumeThread
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
WriteConsoleA
GetConsoleOutputCP
GetProcessTimes
InterlockedExchange
UnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
ExitProcess
GetCommandLineA
LoadLibraryA
RaiseException
RtlUnwind
HeapAlloc
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetStdHandle
GetModuleFileNameA
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetModuleHandleA
FlushFileBuffers
CreateFileA
GetStringTypeA
GetStringTypeW
WriteConsoleW
advapi32
CreateProcessAsUserW
ole32
StringFromGUID2
CoCreateGuid
??0CCrashGenerationServer@exceptionpad@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@P6AXPAXPBVCRemoteClientInfo@1@@Z1P6AX12PBV23@@Z131P6AX1K@Z1_N4@Z
??0CRemoteClientInfo@exceptionpad@@QAE@PAVCCrashGenerationServer@1@KW4_MINIDUMP_TYPE@@PAKPAPAU_EXCEPTION_POINTERS@@ABUCustomClientInfo@@@Z
??1CCrashGenerationServer@exceptionpad@@QAE@XZ
??1CRemoteClientInfo@exceptionpad@@QAE@XZ
?AddClient@CCrashGenerationServer@exceptionpad@@AAE_NPAVCRemoteClientInfo@2@@Z
?CreateClientHandles@CCrashGenerationServer@exceptionpad@@ABE_NABVCRemoteClientInfo@2@PAUProtocolMessage@2@@Z
?EnterErrorState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?EnterStateImmediately@CCrashGenerationServer@exceptionpad@@AAEXW4IPCServerState@12@@Z
?EnterStateWhenSignaled@CCrashGenerationServer@exceptionpad@@AAEXW4IPCServerState@12@@Z
?GenerateDump@CCrashGenerationServer@exceptionpad@@AAE_NABVCRemoteClientInfo@2@PAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetClientExceptionInfo@CRemoteClientInfo@exceptionpad@@QBE_NPAPAU_EXCEPTION_POINTERS@@@Z
?GetClientProcessHandle@CRemoteClientInfo@exceptionpad@@QBEPAXXZ
?GetClientProcessID@CRemoteClientInfo@exceptionpad@@QBEKXZ
?GetClientThreadId@CRemoteClientInfo@exceptionpad@@QBE_NPAK@Z
?GetCrashID@CRemoteClientInfo@exceptionpad@@QBEKXZ
?GetCrashServer@CRemoteClientInfo@exceptionpad@@QBEPAVCCrashGenerationServer@2@XZ
?GetCustomInfo@CRemoteClientInfo@exceptionpad@@QBE?AUCustomClientInfo@@XZ
?GetDumpGeneratedHandle@CRemoteClientInfo@exceptionpad@@QBEPAXXZ
?GetDumpRequestedHandle@CRemoteClientInfo@exceptionpad@@QBEPAXXZ
?GetDumpType@CRemoteClientInfo@exceptionpad@@QBE?AW4_MINIDUMP_TYPE@@XZ
?GetExceptionInfo@CRemoteClientInfo@exceptionpad@@QBEPAPAU_EXCEPTION_POINTERS@@XZ
?GetRequsetThreadID@CRemoteClientInfo@exceptionpad@@QBEPAKXZ
?HandleClientProcessExit@CCrashGenerationServer@exceptionpad@@AAEXPAVCRemoteClientInfo@2@@Z
?HandleConnectedState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleConnectingState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleConnectionRequest@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleDisconnectingState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleDumpRequest@CCrashGenerationServer@exceptionpad@@AAEXABVCRemoteClientInfo@2@@Z
?HandleErrorState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleInitialState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleReadDoneState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleReadingAckState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleReadingState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleWriteDoneState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?HandleWritingState@CCrashGenerationServer@exceptionpad@@AAEXXZ
?Initialize@CRemoteClientInfo@exceptionpad@@QAE_NXZ
?OnClientEnd@CCrashGenerationServer@exceptionpad@@CGXPAXE@Z
?OnDumpRequest@CCrashGenerationServer@exceptionpad@@CGXPAXE@Z
?OnPipeConnected@CCrashGenerationServer@exceptionpad@@CGXPAXE@Z
?PopulateCustomInfo@CRemoteClientInfo@exceptionpad@@QAE_NXZ
?PrepareReply@CCrashGenerationServer@exceptionpad@@ABE_NABVCRemoteClientInfo@2@PAUProtocolMessage@2@@Z
?RespondToClient@CCrashGenerationServer@exceptionpad@@AAE_NPAVCRemoteClientInfo@2@@Z
?SetWaitDumpRequestHandle@CRemoteClientInfo@exceptionpad@@QAEXPAX@Z
?SetWaitProcessExitHandle@CRemoteClientInfo@exceptionpad@@QAEXPAX@Z
?Start@CCrashGenerationServer@exceptionpad@@QAE_NXZ
?UnregisterWaitDumpRequestAndBlockUntilNoPending@CRemoteClientInfo@exceptionpad@@QAEXXZ
?UnregisterWaitProcessExit@CRemoteClientInfo@exceptionpad@@QAEX_N@Z
?kCustomCallDll@switches@@3QB_WB
?kCustomFromTextLaunchProcess@switches@@3QB_WB
?kCustomLanchProcess@switches@@3QB_WB
?kDebugCrashService@switches@@3QB_WB
?kDumpPath@switches@@3QB_WB
?kServicePipe@switches@@3QB_WB
?kWaitServiceInit@switches@@3QB_WB
DumpProcessWithException
DumpProcessWithoutCrash
InitDumpCrash
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=55, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=137, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=145, id=1, productName=Unmarked objects,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=22, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Installer.exe
- IMPHASH dea7a8217b8283aa7e65f605380a5b0f
- SHA256 aa5168c20c885a7a7778246f9de51f279b04615b8feafba5bccc33cb9ffbf92f
- MD5 d4063c30c4af689cfc39f4f0a36bbb1b
- SHA1 3de063c41dcd58503a14bd1b3441b16cae717492
- SHA512 67be35c7f2d5a5d96d0a796a785459bbfbe2d8ce20fcd3a40bd0350b6a6113dd473e86feb9e9e1754ec15022c5469d4328f51dd849f43b6a45a66187a778f232
- SSDEEP 49152:PF/cxnIol/BiheVDSAPLqn0oehQUvFgQsVLWQiEIryw3tYq/CR3Pum8kjQv7q7Id:41HTVNPL0N3sl
- MD5 SHA1 SHA512 SSDEEP
-
Codesign digest Mismatch
File was altered after it was signed.
Password
2025
PE Signature issue
Digest
11:ed:2f:44:a4:5e:d2:d9:18:95:73:79:cc:be:42:11:54:41:13:35:86:42:b5:03:e1:0e:c4:9b:5e:14:c1:7a
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
Chains
Sep 2, 2025
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
PE Signature issue
Digest
5e:b5:90:5c:69:7a:b0:25:c0:c5:79:f1:69:f4:19:3d:c6:c5:6c:9d
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
Chains
Sep 2, 2025
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
Serial Number
62:f7:4e:68:b8:19:7a:cb:17:aa:18:42:39:28:b3:7f
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 19, 2023 - Sep 18, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
Serial Number
62:f7:4e:68:b8:19:7a:cb:17:aa:18:42:39:28:b3:7f
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 19, 2023 - Sep 18, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
5
Entry point
2211264
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\repos\main\SSH2\Release\pdbs\totermw.pdb
kernel32
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
ExitThread
FreeLibraryAndExitThread
HeapAlloc
HeapReAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetProcessHeap
FindClose
FindFirstFileExA
RtlUnwind
FindNextFileA
IsValidCodePage
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
SetFilePointerEx
FlushFileBuffers
InitializeSListHead
QueryPerformanceCounter
GetVersionExW
GetStartupInfoW
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
FormatMessageW
GetTickCount
MulDiv
CreateFileW
SetFilePointer
SetEndOfFile
CancelIo
GetOverlappedResult
Sleep
SwitchToFiber
DeleteFiber
CreateFiberEx
ConvertFiberToThread
ConvertThreadToFiber
Beep
TerminateThread
ResumeThread
GetModuleHandleA
LoadLibraryW
GetSystemDirectoryW
VerSetConditionMask
GetCurrentProcess
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureStackBackTrace
CreateFileA
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
GetModuleHandleW
ReadFile
ReadConsoleW
IsDBCSLeadByteEx
WriteFile
WriteConsoleW
GetFileSizeEx
GetThreadLocale
GetLocaleInfoW
GetCPInfoExW
GetOEMCP
GetACP
GetConsoleOutputCP
GetConsoleCP
SetLastError
WaitForMultipleObjects
ReleaseMutex
InterlockedExchange
CreateThread
CreateMutexW
CreateEventW
GetFileAttributesW
GetModuleFileNameW
GetModuleHandleExW
SwitchToThread
InterlockedCompareExchange
SetEvent
CloseHandle
CreateProcessW
ResetEvent
WaitForSingleObject
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
DebugBreak
OutputDebugStringW
LoadLibraryExW
IsDebuggerPresent
GetFileType
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetCommandLineW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
LocalFree
lstrlenW
InterlockedIncrement
WaitForMultipleObjectsEx
InterlockedExchangeAdd
QueryPerformanceFrequency
user32
LoadImageW
SetPropA
RemovePropA
GetPropA
IsWindowEnabled
DrawFrameControl
FrameRect
DrawFocusRect
GetMessageTime
RedrawWindow
IsWindowVisible
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
DialogBoxIndirectParamW
TrackPopupMenu
GetProcessWindowStation
GetUserObjectInformationW
GetWindowThreadProcessId
GetCursorPos
EnumWindows
SendMessageW
MonitorFromRect
GetMonitorInfoW
IntersectRect
SetWindowPos
GetWindowRect
GetParent
ScreenToClient
CallWindowProcW
PostMessageW
DrawTextW
InflateRect
GetClientRect
RemovePropW
GetPropW
SetPropW
GetClassInfoExW
SetFocus
GetDlgItem
EndDialog
CloseClipboard
SetScrollInfo
RegisterClassExW
SetWindowTextW
AdjustWindowRectEx
SetMenuDefaultItem
GetWindowPlacement
SetActiveWindow
CheckMenuItem
MonitorFromWindow
IsZoomed
GetDoubleClickTime
ClientToScreen
EnableWindow
SystemParametersInfoW
InvalidateRect
FillRect
SetMenuItemBitmaps
CreatePopupMenu
SetMenuItemInfoW
GetMenuItemInfoW
GetSystemMenu
AppendMenuW
CreateMenu
GetSysColorBrush
DrawIconEx
GetSystemMetrics
MessageBeep
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetKeyboardState
KillTimer
SetCursor
EndPaint
BeginPaint
ReleaseCapture
SetCapture
PostQuitMessage
DestroyWindow
DefWindowProcW
SetWindowLongW
SetTimer
ShowWindow
AdjustWindowRect
GetDC
ReleaseDC
GetMenuItemCount
RegisterWindowMessageW
CreateWindowExW
wsprintfW
DestroyIcon
GetSysColor
DestroyMenu
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
OpenClipboard
wsprintfA
AllowSetForegroundWindow
MessageBoxW
MessageBoxA
LoadIconW
GetWindowLongW
EnableMenuItem
LoadCursorW
shell32
CommandLineToArgvW
gdi32
DeleteObject
DeleteDC
CreateSolidBrush
SelectObject
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
SetBkMode
ExtTextOutW
SetBkColor
GetTextExtentPoint32W
TextOutW
GetTextColor
GetBkColor
GetBkMode
GetTextMetricsW
GetStockObject
EnumFontFamiliesExW
CreateBitmapIndirect
CreateFontIndirectW
BitBlt
CreateDIBSection
CreateBrushIndirect
comdlg32
CommDlgExtendedError
FindTextW
GetSaveFileNameW
ole32
CoCreateInstance
CoTaskMemFree
advapi32
CryptGenRandom
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
980KB
Virtual Size
979KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
153B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
488.7MB
Virtual Size
421KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=241, version=40116,
count=156, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=1, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=555, id=1, productName=Unmarked objects,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=278, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Library/AdobeXMP.dll
- IMPHASH 5e10b879ac2f4f8f72f95730ebb64b46
- SHA256 f6e584a509a991c3eb11a8d49b705def6bd43761a4b603a2b3b3703fad179a30
- MD5 e4599a47906608651c920f535fccb359
- SHA1 0e0a56b713c6c25c129c05511f7056676079fd8c
- SHA512 4bb9518e0f34417293a291370d4d5308b605df7134f924847b6be2abfa1060a6a81a47dae47135f7fe879762d563eba82ae18ff3e452e8f461bc40f55f4c7e58
- SSDEEP 24576:m4NrETP/kM19qqO/KFzl5lPxSsRivwKrfP5bsf+:m4NrETP/kM19qqO/KF5b/ivwKTP5bsf+
- MD5 SHA1 SHA512 SSDEEP
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Password
2025
PE Signature issue
Digest
68:51:fa:16:33:33:dc:83:52:77:19:39:dc:02:67:7c:35:07:2e:72
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 29, 2015
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jun 7, 2012 - Jun 6, 2022
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 14, 2014 - Jan 7, 2016
Minor OS version
0
Major OS version
6
Entry point
599236
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
AdobeXMP.pdb
kernel32
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
WaitForSingleObject
SetEvent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
CloseHandle
DisableThreadLibraryCalls
GetCurrentThreadId
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
ole32
CoCreateGuid
msvcp120
?_Xlength_error@std@@YAXPEBD@Z
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
?_BADOFF@std@@3_JB
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
msvcr120
?what@exception@std@@UEBAPEBDXZ
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@AEBV01@@Z
??8type_info@@QEBA_NAEBV0@@Z
strstr
strcmp
memcmp
memchr
memset
strncmp
_snprintf
?terminate@@YAXXZ
free
malloc
strtod
_mktime64
_gmtime64_s
sscanf
_localtime64_s
_errno
setlocale
_difftime64
_time64
rand
srand
realloc
??0exception@std@@QEAA@AEBQEBDH@Z
??0exception@std@@QEAA@XZ
__lconv_init
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
__clean_type_info_names_internal
?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
__CxxFrameHandler3
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_purecall
strlen
memmove
memcpy
_CxxThrowException
__RTDynamicCast
WXMPDocOps_BranchXMP_1
WXMPDocOps_CTor_1
WXMPDocOps_Clone_1
WXMPDocOps_CreateID_1
WXMPDocOps_DecrementRefCount_1
WXMPDocOps_EnsureIDsExist_1
WXMPDocOps_GetMetaRef_1
WXMPDocOps_GetPartChangeID_1
WXMPDocOps_HasPartChanged_1
WXMPDocOps_IncrementRefCount_1
WXMPDocOps_IsDirty_1
WXMPDocOps_NewXMP_1
WXMPDocOps_NoteChange_1
WXMPDocOps_OpenXMP_1
WXMPDocOps_PrepareForSave_1
WXMPDocOps_SetAppName_1
WXMPIterator_DecrementRefCount_1
WXMPIterator_IncrementRefCount_1
WXMPIterator_Next_1
WXMPIterator_PropCTor_1
WXMPIterator_Skip_1
WXMPIterator_TableCTor_1
WXMPMeta_AppendArrayItem_1
WXMPMeta_CTor_1
WXMPMeta_Clone_1
WXMPMeta_CountArrayItems_1
WXMPMeta_DecrementRefCount_1
WXMPMeta_DeleteArrayItem_1
WXMPMeta_DeleteLocalizedText_1
WXMPMeta_DeleteNamespace_1
WXMPMeta_DeleteProperty_1
WXMPMeta_DeleteQualifier_1
WXMPMeta_DeleteStructField_1
WXMPMeta_DoesArrayItemExist_1
WXMPMeta_DoesPropertyExist_1
WXMPMeta_DoesQualifierExist_1
WXMPMeta_DoesStructFieldExist_1
WXMPMeta_DumpNamespaces_1
WXMPMeta_DumpObject_1
WXMPMeta_DumpPropertyTraits_1
WXMPMeta_Erase_1
WXMPMeta_GetArrayItem_1
WXMPMeta_GetGlobalOptions_1
WXMPMeta_GetIXMPMetadata_1
WXMPMeta_GetLocalizedText_1
WXMPMeta_GetMemProcs_1
WXMPMeta_GetNamespacePrefix_1
WXMPMeta_GetNamespaceURI_1
WXMPMeta_GetObjectName_1
WXMPMeta_GetObjectOptions_1
WXMPMeta_GetProperty_1
WXMPMeta_GetProperty_Bool_1
WXMPMeta_GetProperty_Date_1
WXMPMeta_GetProperty_Float_1
WXMPMeta_GetProperty_Int64_1
WXMPMeta_GetProperty_Int_1
WXMPMeta_GetQualifier_1
WXMPMeta_GetStructField_1
WXMPMeta_GetVersionInfo_1
WXMPMeta_GetXMPDOMFactoryInstance_1
WXMPMeta_IncrementRefCount_1
WXMPMeta_Initialize_1
WXMPMeta_MarkStaleProperties_1
WXMPMeta_ParseFromBuffer_1
WXMPMeta_RegisterAssertNotify_1
WXMPMeta_RegisterNamespace_1
WXMPMeta_RegisterPropertyTraits_1
WXMPMeta_ResetErrorCallbackLimit_1
WXMPMeta_SerializeToBuffer_1
WXMPMeta_SetArrayItem_1
WXMPMeta_SetDefaultErrorCallback_1
WXMPMeta_SetErrorCallback_1
WXMPMeta_SetGlobalOptions_1
WXMPMeta_SetLocalizedText_1
WXMPMeta_SetObjectName_1
WXMPMeta_SetObjectOptions_1
WXMPMeta_SetProperty_1
WXMPMeta_SetProperty_Bool_1
WXMPMeta_SetProperty_Date_1
WXMPMeta_SetProperty_Float_1
WXMPMeta_SetProperty_Int64_1
WXMPMeta_SetProperty_Int_1
WXMPMeta_SetQualifier_1
WXMPMeta_SetStructField_1
WXMPMeta_Sort_1
WXMPMeta_Terminate_1
WXMPMeta_UnregisterAssertNotify_1
WXMPMeta_Use_CPP_DOM_APIs_1
WXMPUtils_AppendProperties_1
WXMPUtils_ApplyTemplate_1
WXMPUtils_CatenateArrayItems_1
WXMPUtils_CollectMultiFileXMP_1
WXMPUtils_CompareDateTime_1
WXMPUtils_ComposeArrayItemPath_1
WXMPUtils_ComposeFieldSelector_1
WXMPUtils_ComposeLangSelector_1
WXMPUtils_ComposeQualifierPath_1
WXMPUtils_ComposeStructFieldPath_1
WXMPUtils_ConvertFromBool_1
WXMPUtils_ConvertFromDate_1
WXMPUtils_ConvertFromFloat_1
WXMPUtils_ConvertFromInt64_1
WXMPUtils_ConvertFromInt_1
WXMPUtils_ConvertToBool_1
WXMPUtils_ConvertToDate_1
WXMPUtils_ConvertToFloat_1
WXMPUtils_ConvertToInt64_1
WXMPUtils_ConvertToInt_1
WXMPUtils_ConvertToLocalTime_1
WXMPUtils_ConvertToUTCTime_1
WXMPUtils_CurrentDateTime_1
WXMPUtils_DecodeFromBase64_1
WXMPUtils_DistributeMultiFileXMP_1
WXMPUtils_DuplicateSubtree_1
WXMPUtils_EncodeToBase64_1
WXMPUtils_GetBulkMarkers_1
WXMPUtils_GetDateRange_1
WXMPUtils_GetMergedListPath_1
WXMPUtils_IsPropertyMultiValued_1
WXMPUtils_MergeFromJPEG_1
WXMPUtils_PackageForJPEG_1
WXMPUtils_RemoveMultiValueInfo_1
WXMPUtils_RemoveProperties_1
WXMPUtils_SeparateArrayItems_1
WXMPUtils_SetBulkMarkers_1
WXMPUtils_SetTimeZone_1
XMP_GetAssertNotify
XMP_NewExpatAdapter
Name
.text
Size
653KB
Virtual Size
652KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
241KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=199, version=41118,
count=2, id=223, version=20806,
count=14, id=224, version=20806,
count=4, id=221, version=20806,
count=6, id=225, version=20806,
count=5, id=203, version=65501,
count=141, id=1, productName=Unmarked objects,
count=56, id=229, version=30723,
count=1, id=220, productName=VS2013 UPD3 build 30723, version=30723,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD3 build 30723, version=30723,
Library/AudioRenderer.dll
- IMPHASH a4c776c8c8aef2452297de4da7a8b846
- SHA256 63055ae72febd0b1a1fe9e9adc21e0201e1888b10da552690de14928374ab658
- MD5 93ee9ae6c6d823afb04cbe08ef1a1392
- SHA1 733fdf559ffedffa1194dce1bc0e9a20d8fe1cd0
- SHA512 e5cdae4b1f084c4a69dc4157038b3075fdc8a4ea2e9566bbcb29fd362c149bb26e87cf09815514ed597320a8ec8df7c522334312c97dbec260997fc82dd50b8d
- SSDEEP 6144:LmY+ze2VmiZEwH1ZaAE1f51mdXvI08TyT11xBjgycKmsrCFUGuXRzVB5O/PhrO9p:L36mxjAEd51U/X1rJgrj8BznPqrxQ
- MD5 SHA1 SHA512 SSDEEP
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Password
2025
PE Signature issue
Digest
23:ae:c0:7c:0a:5d:b2:9d:6c:ee:d9:27:81:40:e8:e7:00:e1:d1:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 29, 2015
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jun 7, 2012 - Jun 6, 2022
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 14, 2014 - Jan 7, 2016
Minor OS version
2
Major OS version
5
Entry point
459992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\DynamicLinkMediaServer8\releases\2014.03\dynamiclinkmediaserver\Targets\Win\Release\64\AudioRenderer.pdb
dvacore
??6?$basic_ostream@EU?$char_traits@E@std@@@std@@QEAAAEAV01@I@Z
?str@?$basic_ostringstream@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEBA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@2@XZ
??_DoUTF8StringStream@dvacore@@QEAAXXZ
??0iUTF8StringStream@dvacore@@QEAA@AEBV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@Z
??5?$basic_istream@EU?$char_traits@E@std@@@std@@QEAAAEAV01@AEAI@Z
??_DiUTF8StringStream@dvacore@@QEAAXXZ
??0RecursiveMutex@threads@dvacore@@QEAA@XZ
??1RecursiveMutex@threads@dvacore@@QEAA@XZ
?Unlock@RecursiveMutex@threads@dvacore@@QEBAXXZ
??0oUTF8StringStream@dvacore@@QEAA@XZ
?GetEntry@DebugDatabase@debug@dvacore@@QEBA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@AEBV45@0@Z
?Instance@DebugDatabase@debug@dvacore@@SAAEAV123@XZ
?AsciiToUTF16@utility@dvacore@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@PEBD_K@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV01@AEBV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV01@$$QEAV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@AEBV01@@Z
?Trace@debug@dvacore@@YAXPEBE@Z
?GetCurrentThreadID@threads@dvacore@@YAKXZ
?TraceEnabled@debug@dvacore@@YA_NPEBEJ_N@Z
?TraceChangeCount@debug@dvacore@@YAHXZ
?PassThrough@Gate@threads@dvacore@@QEBA_NH@Z
?Open@Gate@threads@dvacore@@QEAAXXZ
?Close@Gate@threads@dvacore@@QEAAXXZ
??0Gate@threads@dvacore@@QEAA@_N@Z
??1Gate@threads@dvacore@@QEAA@XZ
??0Guid@utility@dvacore@@QEAA@KGGEEEEEEEE@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
??1?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
?UTF8to16@utility@dvacore@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@4@PEAW4UnicodeErrorCode@12@PEA_K@Z
?Dispose@SmallBlockAllocator@utility@dvacore@@YAXPEAX_K@Z
?Allocate@SmallBlockAllocator@utility@dvacore@@YAPEAX_K@Z
??1ReplacementValue@config@dvacore@@QEAA@XZ
??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@PEBE@Z
?ThrowError@config@dvacore@@YAXW4ErrorLevel@12@PEBDKJ_NAEBVReplacementValue@12@333@Z
??0ReplacementValue@config@dvacore@@QEAA@XZ
?IsDebuggerAttached@debug@dvacore@@YA_NXZ
?BreakAfterContractDialog@debug@dvacore@@YA_NPEBD00J@Z
?sNullString@ImmutableString@utility@dvacore@@0QBEB
??1ImmutableString@utility@dvacore@@QEAA@XZ
??0ImmutableString@utility@dvacore@@QEAA@AEBV012@@Z
?CreateDynamic@ImmutableString@utility@dvacore@@SA?AV123@PEBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
?Lock@RecursiveMutex@threads@dvacore@@QEBAXPEBD@Z
dvamediatypes
??ZTickTime@dvamediatypes@@QEAAAEAV01@AEBV01@@Z
?kTime_Invalid@dvamediatypes@@3VTickTime@1@B
??KTickTime@dvamediatypes@@QEBANAEBV01@@Z
?kFrameRate_Zero@dvamediatypes@@3VFrameRate@1@B
??GTickTime@dvamediatypes@@QEBA?AV01@XZ
?kFrameRate_Audio48000@dvamediatypes@@3VFrameRate@1@B
?AlignToFrame@TickTime@dvamediatypes@@QEAAXAEBVFrameRate@2@@Z
?kTime_Min@dvamediatypes@@3VTickTime@1@B
?ToFrame64@TickTime@dvamediatypes@@QEBA_JAEBVFrameRate@2@@Z
?kTime_Max@dvamediatypes@@3VTickTime@1@B
??XTickTime@dvamediatypes@@QEAAAEAV01@N@Z
?kTime_Zero@dvamediatypes@@3VTickTime@1@B
?AddFrames@TickTime@dvamediatypes@@QEAAX_JAEBVFrameRate@2@@Z
?ToFrame32@TickTime@dvamediatypes@@QEBAJAEBVFrameRate@2@@Z
??DTickTime@dvamediatypes@@QEBA?AV01@N@Z
??GTickTime@dvamediatypes@@QEBA?AV01@AEBV01@@Z
??HTickTime@dvamediatypes@@QEBA?AV01@AEBV01@@Z
?CreateLegacy51ChannelLayout@dvamediatypes@@YA?AV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@XZ
?CreateStereoChannelLayout@dvamediatypes@@YA?AV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@XZ
?CreateMonoChannelLayout@dvamediatypes@@YA?AV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@XZ
?CreateMultichannelLayout@dvamediatypes@@YA?AV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@H@Z
??YTickTime@dvamediatypes@@QEAAAEAV01@AEBV01@@Z
kernel32
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapFree
HeapReAlloc
HeapAlloc
HeapCreate
DecodePointer
DisableThreadLibraryCalls
EncodePointer
GetSystemTimeAsFileTime
oleaut32
SysFreeString
aslfoundation
??1Impl@ASL@@UEAA@XZ
?MixInData@MixHash@ASL@@CAXAEAVHashValue@2@PEBE_K@Z
??0Exception@ASL@@QEAA@XZ
??1Exception@ASL@@UEAA@XZ
?Allocate@Allocator@ASL@@SAPEAX_K@Z
?Dispose@Allocator@ASL@@SAXPEAX_K@Z
?what@Exception@ASL@@UEBAPEBDXZ
??1MemoryRecycler@ASL@@QEAA@XZ
?RecycleBuffer@MemoryRecycler@ASL@@QEAAXAEAVMemoryBuffer@2@@Z
?Instance@MemoryRecycler@ASL@@SA?AV?$ObjectPtr@VMemoryRecycler@ASL@@VAtomicValue@2@@2@XZ
?AllocateBuffer@MemoryRecycler@ASL@@QEAA?AVMemoryBuffer@2@_K@Z
?Resume@ThreadedWorkQueue@ASL@@QEAAXXZ
?Pause@ThreadedWorkQueue@ASL@@QEAAXXZ
??0ThreadedWorkQueue@ASL@@QEAA@XZ
??1ConstString@ASL@@QEAA@XZ
?Initialize@ThreadedWorkQueue@ASL@@QEAA_NW4Type@ThreadPriorities@2@HVConstString@2@1@Z
?MakeStdString@ASL@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@3@@Z
?QueueRequest@ThreadedWorkQueue@ASL@@QEAA_NV?$InterfaceRef@UIThreadedQueueRequest@ASL@@U12@@2@@Z
?Stop@ThreadedWorkQueue@ASL@@QEAAXXZ
??0ConstString@ASL@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
aslmessaging
?RegisterUniqueStation@StationRegistry@ASL@@YA?AVImmutableString@utility@dvacore@@XZ
?DisposeStation@StationRegistry@ASL@@YAXAEBVImmutableString@utility@dvacore@@@Z
mediafoundation
?kPi@MF@@3MB
?kSqrt2Over264@MF@@3NB
msvcp100
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?good@ios_base@std@@QEBA_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?fail@ios_base@std@@QEBA_NXZ
?max@?$numeric_limits@I@std@@SAIXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_BADOFF@std@@3_JB
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
msvcr100
_purecall
_snprintf
__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_CxxThrowException
??0exception@std@@QEAA@AEBV01@@Z
__CxxFrameHandler3
__CppXcptFilter
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__C_specific_handler
sqrt
__RTDynamicCast
_time64
memcpy
??_V@YAXPEAX@Z
floor
memmove
memset
sqrtf
sinf
cosf
atan2f
sin
cos
??1exception@std@@UEAA@XZ
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBQEBD@Z
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
??0AudioBuffer@AR@@QEAA@AEBV01@@Z
??0AudioBuffer@AR@@QEAA@H_N@Z
??0AudioBufferChannel@AR@@QEAA@AEBV01@@Z
??0AudioBufferChannel@AR@@QEAA@XZ
??0AudioBufferShell@AR@@QEAA@XZ
??0AudioDelayBuffer@AR@@QEAA@AEBV01@@Z
??0AudioDelayBuffer@AR@@QEAA@H_N@Z
??0AudioFilterControl@AR@@QEAA@V?$InterfaceRef@UIAudioFilter@AR@@U12@@ASL@@I@Z
??0AudioSubBuffer@AR@@QEAA@XZ
??0AudioWaveformRequest@AR@@QEAA@XZ
??1AudioBuffer@AR@@UEAA@XZ
??1AudioBufferChannel@AR@@UEAA@XZ
??1AudioBufferShell@AR@@UEAA@XZ
??1AudioDelayBuffer@AR@@UEAA@XZ
??1AudioSubBuffer@AR@@UEAA@XZ
??4AudioBuffer@AR@@QEAAXAEBV01@@Z
??4AudioBuffer@AR@@QEAAXPEAPEBD@Z
??4AudioBuffer@AR@@QEAAXPEAPEBF@Z
??4AudioBuffer@AR@@QEAAXPEBD@Z
??4AudioBuffer@AR@@QEAAXPEBF@Z
??8AudioWaveformRequest@AR@@QEAA_NAEBV01@@Z
??AAudioBuffer@AR@@QEBAPEAMI@Z
??XAudioBuffer@AR@@QEAAXM@Z
??YAudioBuffer@AR@@QEAAXAEBV01@@Z
??_FAudioBuffer@AR@@QEAAXXZ
??_FAudioDelayBuffer@AR@@QEAAXXZ
?ACM16ChannelTo51@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM16ChannelToMono@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM16ChannelToStereo@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontLFEToMono@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontLFEToStereo@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontRearLFEToMono@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontRearLFEToStereo@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontRearToMono@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontRearToStereo@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontToMono@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACM51FrontToStereo@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACMMonoToStereoDefault@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACMSame@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?ACMStereoToMonoDefault@AudioChannelMix@AR@@YAXAEBVAudioBuffer@2@AEAV32@@Z
?Assign@AudioBufferChannel@AR@@QEAAXAEAVAudioBuffer@2@I@Z
?Assign@AudioBufferShell@AR@@QEAAXPEAPEAMI@Z
?Assign@AudioSubBuffer@AR@@QEAAXAEAVAudioBuffer@2@I@Z
?AudioMatrixToString@AR@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$map@_KV?$set@_KU?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@U?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@@Z
?CancelAllPendingPrefetchRequests@AR@@YAXXZ
?CancelAllPendingPrefetchRequests@AudioPrefetch@AR@@YAXXZ
?Cast@AudioBuffer@AR@@QEBAXPEAD@Z
?Cast@AudioBuffer@AR@@QEBAXPEAF@Z
?Cast@AudioBuffer@AR@@QEBAXPEAPEAD@Z
?Cast@AudioBuffer@AR@@QEBAXPEAPEAF@Z
?Clear@AudioWaveformQueue@AR@@YAXXZ
?Complete@AudioWaveformRequest@AR@@UEAAXH@Z
?ConvertInt32ToFloat32InPlace@AR@@YAXPEAJ_K@Z
?CopyCertainChannelsFrom@AudioBuffer@AR@@QEAAXAEBV12@IAEBV?$Flags@K@utility@dvacore@@@Z
?CopyChannel@AudioBuffer@AR@@QEAAXAEBV12@II@Z
?CopyChannel@AudioBuffer@AR@@QEAAXII@Z
?CopyFrom@AudioBuffer@AR@@QEAAXAEBV12@@Z
?CopyFrom@AudioBuffer@AR@@QEAAXAEBV12@I@Z
?CopyFrom@AudioBuffer@AR@@QEAAXAEBV12@II@Z
?CopyFromScale@AudioBuffer@AR@@QEAAXAEBV12@M@Z
?CreateAudioChannelMatrixRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$map@_KV?$set@_KU?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@U?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@PEAV?$InterfaceRef@UIAudioProcessor@AR@@U12@@4@@Z
?CreateAudioClipRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$map@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@V?$map@_K_KU?$less@_K@std@@V?$STLAllocator@U?$pair@$$CB_K_K@std@@@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@@4@V?$STLAllocator@U?$pair@$$CBV?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@V?$map@_K_KU?$less@_K@std@@V?$STLAllocator@U?$pair@$$CB_K_K@std@@@SmallBlockAllocator@utility@dvacore@@@std@@@std@@@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@8@AEBVTickTime@6@MNPEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioClipTrackRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$vector@V?$InterfaceRef@UIAudioTrackRenderableItem@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioTrackRenderableItem@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@V?$ObjectPtr@VAtomicValue@ASL@@V12@@4@AEBV?$vector@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@8@V?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@8@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioClipTrackRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$vector@V?$InterfaceRef@UIAudioTrackRenderableItem@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioTrackRenderableItem@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@V?$ObjectPtr@VAtomicValue@ASL@@V12@@4@AEBV?$vector@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@8@V?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@W4AudioChannelType@MF@@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@8@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioContentMulticamRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@1AEBV?$vector@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$ObjectPtr@VAtomicValue@ASL@@V12@@4@_NAEBVTickTime@6@5PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioContentRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@1V?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@_NAEBVTickTime@6@4V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@PEAV74@@Z
?CreateAudioFaderRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$vector@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@PEAV?$InterfaceRef@UIAudioProcessor@AR@@U12@@4@@Z
?CreateAudioFilterRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioFilter@AR@@U12@@4@2_NAEBV?$vector@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@9@PEAV?$InterfaceRef@UIAudioProcessor@AR@@U12@@4@@Z
?CreateAudioMeterRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioMeterSetter@AR@@U12@@4@PEAV?$InterfaceRef@UIAudioProcessor@AR@@U12@@4@@Z
?CreateAudioMixTrackRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@V?$ObjectPtr@VAtomicValue@ASL@@V12@@4@AEBV?$vector@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@PEAV74@@Z
?CreateAudioPanProcessorRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@W4PanProcessorType@2@_NAEBV?$vector@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@PEAV?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@@Z
?CreateAudioRenderContext@AudioRendererFactory@AR@@YAHI_N0AEBVTickTime@dvamediatypes@@11I1PEAUPrefetcher@2@AEBVImmutableString@utility@dvacore@@0000W4RenderQuality@4@PEAV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@@Z
?CreateAudioResampler@AudioResamplerFactory@AR@@YA?AV?$InterfaceRef@UIAudioResampler@AR@@U12@@ASL@@W4RenderQuality@dvamediatypes@@@Z
?CreateAudioSendRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@AEBV?$vector@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@PEAV?$InterfaceRef@UIAudioProcessor@AR@@U12@@4@@Z
?CreateAudioSourceRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIBufferedAudioSource@AR@@U12@@4@W4AudioChannelType@MF@@HNV?$InterfaceRef@UASLUnknown@ASL@@U12@@4@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioStreamRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioSource@AR@@U12@@4@HNV?$InterfaceRef@UASLUnknown@ASL@@U12@@4@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioTimeScaler@AudioTimeScalerFactory@AR@@UEAA?AV?$InterfaceRef@UIAudioTimeScaler@AR@@U12@@ASL@@W4RenderQuality@dvamediatypes@@@Z
?CreateAudioTrackGroupRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$vector@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$deque@V?$vector@UDelayDependency@AR@@V?$STLAllocator@UDelayDependency@AR@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$STLAllocator@V?$vector@UDelayDependency@AR@@V?$STLAllocator@UDelayDependency@AR@@@SmallBlockAllocator@utility@dvacore@@@std@@@SmallBlockAllocator@utility@dvacore@@@8@AEBV?$vector@VTickTime@dvamediatypes@@V?$allocator@VTickTime@dvamediatypes@@@std@@@8@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@8@V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioTrackGroupRendererViaCloning@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UASLUnknown@ASL@@U12@@4@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioTrackInletRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$vector@V?$InterfaceRef@UASLUnknown@ASL@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UASLUnknown@ASL@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@8@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@@Z
?CreateAudioTransitionRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioTransition@AR@@U12@@4@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@3AEBVTickTime@6@444PEAV84@@Z
?CreateAudioWaveformBuffer@AudioWaveformQueue@AR@@YA?AV?$InterfaceRef@UIAudioWaveformBuffer@AR@@U12@@ASL@@XZ
?CreateAudioWaveformRequest@AudioWaveformRequest@AR@@SA?AV?$InterfaceRef@VAudioWaveformRequest@AR@@UIThreadedQueueRequest@ASL@@@ASL@@V?$InterfaceRef@UIAudioWaveformGenerator@AR@@U12@@4@AEBVTickTime@dvamediatypes@@1_KV?$InterfaceRef@UIAudioWaveformBuffer@AR@@U12@@4@V?$InterfaceRef@UIAudioWaveformWaitableGateHolder@AR@@U12@@4@@Z
?CreateDefaultMultiChannelAudioPanProcessorRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@AEBV?$map@_KV?$set@_KU?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@U?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@_NAEBV?$vector@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@5PEAV?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@@Z
?CreateDirectAudioPanProcessorRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@W4PanProcessorType@2@HAEBV?$map@_KV?$set@_KU?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@U?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@_NAEBV?$vector@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIRenderableAudioComponentParam@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@PEAV?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@@Z
?CreateNoneAudioPanProcessorRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@PEAV?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@@Z
?CreateRealtimeAudioClipTrackItemRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@AEBV?$vector@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@N1V?$InterfaceRef@UITimeTransform@MF@@U12@@4@AEBVTickTime@6@PEAV74@@Z
?CreateSilentAudioTrackRenderableItem@AR@@YA?AV?$InterfaceRef@UIAudioTrackRenderableItem@AR@@U12@@ASL@@AEBVTickTime@dvamediatypes@@0AEBVFrameRate@5@@Z
?CreateSilentRenderer@AudioRendererFactory@AR@@YAHAEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@PEAV?$InterfaceRef@UIAudioGenerator@AR@@U12@@ASL@@@Z
?CreateSpecializedResampler@AudioResamplerFactory@AR@@YA?AV?$InterfaceRef@UIAudioResamplerSpecialized@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@0I@Z
?CreateTimeAlteredAudioClipTrackItemRenderer@AudioRendererFactory@AR@@YAHV?$InterfaceRef@UIAudioRenderContext@AR@@U12@@ASL@@AEBVFrameRate@dvamediatypes@@V?$InterfaceRef@UIAudioGenerator@AR@@U12@@4@AEBV?$vector@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@V?$STLAllocator@V?$InterfaceRef@UIAudioProcessor@AR@@U12@@ASL@@@SmallBlockAllocator@utility@dvacore@@@std@@V?$InterfaceRef@UIAudioPanProcessor@AR@@U12@@4@N_N5V?$InterfaceRef@UITimeTransform@MF@@U12@@4@AEBVTickTime@6@7N77PEAV74@@Z
?CreateWaitableGateHolder@AudioWaveformWaitableGateHolder@AR@@SA?AV?$InterfaceRef@UIAudioWaveformWaitableGateHolder@AR@@U12@@ASL@@XZ
?EnumerateInputChannels@AR@@YA?AV?$Flags@K@utility@dvacore@@AEBV?$map@_KV?$set@_KU?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@U?$less@_K@std@@@SmallBlockAllocator@34@@Z
?EnumerateOutputChannels@AR@@YA?AV?$Flags@K@utility@dvacore@@AEBV?$map@_KV?$set@_KU?$less@_K@std@@@SmallBlockAllocator@utility@dvacore@@U?$less@_K@std@@@SmallBlockAllocator@34@@Z
?GetAlignment@AudioBuffer@AR@@QEBAHXZ
?GetAllocatedSize@AudioBuffer@AR@@QEBAIXZ
?GetAudioTimeScalerFactory@AR@@YA?AV?$InterfaceRef@UIAudioTimeScalerFactory@AR@@U12@@ASL@@XZ
?GetBufferSize@AudioBuffer@AR@@QEBAIXZ
?GetDelay@AudioDelayBuffer@AR@@QEAAIXZ
?GetFloatBuffers@AudioBuffer@AR@@QEAAPEAPEAMXZ
?GetMaxNestableSequenceInstances@AR@@YAIXZ
?GetMixFunction@AudioChannelMix@AR@@YAP6AXAEBVAudioBuffer@2@AEAV32@@ZAEBV?$vector@UAudioChannelDescription@dvamediatypes@@V?$allocator@UAudioChannelDescription@dvamediatypes@@@std@@@std@@2@Z
?GetMixFunction@AudioChannelMix@AR@@YAP6AXAEBVAudioBuffer@2@AEAV32@@ZW4AudioChannelType@MF@@2@Z
?GetMixFunctionByChannels@AudioChannelMix@AR@@YAP6AXAEBVAudioBuffer@2@AEAV32@@ZIH@Z
?GetNumChannels@AudioBuffer@AR@@QEBAIXZ
?GetQueue@AudioWaveformQueue@AR@@YA?AV?$InterfaceRef@VThreadedWorkQueue@ASL@@UASLUnknown@2@@ASL@@XZ
?Init@AudioBuffer@AR@@QEAAXII@Z
?Init@AudioBufferShell@AR@@QEAAXI@Z
?Init@AudioDelayBuffer@AR@@QEAAXIII@Z
?Init@AudioSubBuffer@AR@@QEAAXI@Z
?Initialize@AR@@YAXXZ
?IsAborted@AudioWaveformQueue@AR@@YA_NXZ
?IsChannelZero@AudioBuffer@AR@@UEBA_NI@Z
?IsSIMDAligned@AudioBuffer@AR@@QEBA_NXZ
?IsSilentAudioTrackRenderableItem@AR@@YA_NAEBV?$InterfaceRef@UIAudioTrackRenderableItem@AR@@U12@@ASL@@@Z
?IsSpecializedResamplerAvailable@AudioResamplerFactory@AR@@YA_NAEBVFrameRate@dvamediatypes@@0@Z
?IsZero@AudioBuffer@AR@@UEBA_NXZ
?Mix@AudioBuffer@AR@@QEAAXAEBV12@@Z
?NoLongerZero@AudioBuffer@AR@@UEAAXXZ
?Pause@AudioWaveformQueue@AR@@YAX_N@Z
?PrefetchAudio@AudioPrefetch@AR@@YAXV?$InterfaceRef@UIAsyncAudioSource@AR@@U12@@ASL@@AEBVTickTime@dvamediatypes@@I_NV?$InterfaceRef@UIAudioPrefetchNotify@AR@@U12@@4@@Z
?Process@AudioWaveformRequest@AR@@UEAAXXZ
?Read@AudioDelayBuffer@AR@@QEAAXAEBVAudioBuffer@2@@Z
?Reset@AudioPrefetch@AR@@YAX_N@Z
?Reverse@AudioBuffer@AR@@QEAAXXZ
?Set51MixdownType@AudioChannelMix@AR@@YAXI@Z
?SetAudioTimeScalerFactory@AR@@YAXV?$InterfaceRef@UIAudioTimeScalerFactory@AR@@U12@@ASL@@@Z
?SetChannelNoLongerZero@AudioBuffer@AR@@UEAAXI@Z
?SetChannelZero@AudioBuffer@AR@@UEAAXI@Z
?SetChannelsNoLongerZero@AudioBuffer@AR@@UEAAXAEBV?$Flags@K@utility@dvacore@@@Z
?SetChannelsZero@AudioBuffer@AR@@UEAAXAEBV?$Flags@K@utility@dvacore@@@Z
?SetDelay@AudioDelayBuffer@AR@@QEAAXI@Z
?SetUseSize@AudioBuffer@AR@@QEAAXI@Z
?ShiftOffset@AudioSubBuffer@AR@@QEAAXI@Z
?Shutdown@AR@@YAXXZ
?Shutdown@AudioWaveformQueue@AR@@YAXXZ
?Write@AudioDelayBuffer@AR@@QEAAXAEAVAudioBuffer@2@@Z
?Zero@AudioBuffer@AR@@QEAAXXZ
?ZeroChannel@AudioBuffer@AR@@QEAAXI_K@Z
Name
.text
Size
535KB
Virtual Size
534KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
196KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=197, id=1, productName=Unmarked objects,
count=73, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Library/AuraLayerManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 13d6be93ec376cb7eaa7d585ddea23b0b46ea36a2ec99791d7b3c88cd4269c61
- MD5 fd72d9653eb08492a8221392cbc3a457
- SHA1 6f1026087e47f6e803044733348c1d1b1331f7be
- SHA512 4c61f2af22cd26a8a3344a236600cca22e844acaca9224c4ead917d5ec3f7912f4be07f32148584cdcf1948976c6652ec8bf608496318e6068d4ee3073ae23ed
- SSDEEP 3072:pRDB0CnYY/YY4YYHYYP8qFFr71Lw4GiZStOFLnSO9N4c6gdsEng8ZYG1yK:pRDB0kqFFtP0ibFD
- MD5 SHA1 SHA512 SSDEEP
Digest
3f:8c:a9:f5:c7:21:9f:79:33:e3:73:eb:70:0d:28:c0:0c:49:a5:24:36:c8:46:44:a2:6c:6f:fd:2a:2a:42:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,OU=Gaming BU-SW RD Ctr-SW RD Div2-SW RD Dept1,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
Chains
Apr 10, 2024
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,OU=Gaming BU-SW RD Ctr-SW RD Div2-SW RD Dept1,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,OU=Gaming BU-SW RD Ctr-SW RD Div2-SW RD Dept1,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,OU=Gaming BU-SW RD Ctr-SW RD Div2-SW RD Dept1,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
Serial Number
08:7f:ef:2c:05:6b:d0:54:66:3e:5e:d1:96:be:35:65
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 18, 2022 - May 16, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
159238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\icech\AppData\Local\Temp\vs65EE.tmp\x86\Release\AuraLayerManager.pdb
mscoree
_CorDllMain
Name
.text
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Azure.Identity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b3c7a521e3829de15bc8daf15c2cbf8e8cb5140f87f02834514d685b0a968956
- MD5 8b92e9cbc7e04e95dd5801b6ff1ad081
- SHA1 a8cf3357228b41402750d3e6aab2b4284e7889b6
- SHA512 5b608a54a813383ef83898e6c64ae26aa4799fd8f865eab092616fb0c4c3e599aa7785c4c92a5a628cb368aacdec71bb5daed2a12dd8378948181b2f4915688a
- SSDEEP 6144:SVW38Bydqdix/jsSuTvWW1fgcccHAO2z+5:H/jfCyQ5
- MD5 SHA1 SHA512 SSDEEP
Digest
2c:d0:ad:c4:a4:1f:c6:12:a3:77:da:d5:3e:b2:ba:8f:30:3e:18:97:75:fe:73:a2:d6:af:41:07:e3:d0:c4:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 9, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:7BF1-E3EA-B808,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:f9:b0:ee:67:ed:ea:6b:46:00:01:00:00:01:c8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
307410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Azure.Identity/Release/netstandard2.0/Azure.Identity.pdb
mscoree
_CorDllMain
Name
.text
Size
292KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/BoxService.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56a903cd854f65bb7d8f27498f147ef20842e6576012cffe50d49f005b913681
- MD5 72f06aa78ca77ac2094d3e564a017d3e
- SHA1 f4935beb781e2200b78721463923c33ed82e6844
- SHA512 5ebc5d527e8ac5228547ef275bc3ff6940931bd976b5d61080f1740257ba5e8dcc6aa3d9e3a0114f07617b5b2ef3240e75f805af6d06642fb29bda7ae8eb9974
- SSDEEP 3072:KdecfEn4ZHlDa/tcnzJ55Rf0fMMMii+PfhOqcGaUH2fjMe3XPhjXFBGZ14G:yM8lD9nN57fsSUHWN3ZVC
- MD5 SHA1 SHA512 SSDEEP
Digest
01:de:6b:ce:da:ef:9f:cc:e8:c0:51:90:80:56:5a:f1:1f:4a:4b:dd:21:81:e1:71:dc:be:c5:2c:79:6c:1a:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
7d:9c:f0:c2:4f:7a:df:4a:12:11:a5:0f:a3:a0:5c:8d:90:f1:af:be
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
336654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\NMC\CURRENT260IL1nightlyBuild15061_finalLOC\Libraries\WzWXF\Providers\WzWXFCloud\Dotfprod\BoxService.pdb
mscoree
_CorDllMain
Name
.text
Size
321KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/GRINTL32.DLL
- SHA256 1b7eacf041fce0ef4b48ea3aa8afe885fab0324c7de51e07144ab4d4ee82c36e
- MD5 f7f83d6f4e29b27a42744560a16a37cf
- SHA1 53283741fb7cc005813a6cbe1c6c0982f5250373
- SHA512 0a88fa0b6cd4bd053e65f5b013dae06cdf881796ad845d844a1638304ff6244a6bef073f90ce28ef691712fab8ae8fd6a553f3d7b25773c24b98e999bc872d65
- SSDEEP 1536:Tx0ZfnVlbZATCg7GJTgLkfNBO71zHFUSz0PYBCDUld/d9sqUIHseIyTJICKkT+dD:1vTJIMLqG9lmgfdHM/xB95
- MD5 SHA1 SHA512 SSDEEP
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
PE Signature issue
Digest
e3:af:a4:65:e9:b9:cb:cc:2c:67:d8:87:e3:a8:26:9c:20:e1:fd:32
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 13, 2010
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
2
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\office\Target\GRAPH\X64\ship\1033.pre\grintl32.PDB
Name
.text
Size
512B
Virtual Size
134B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Library/InkDiv.dll
- IMPHASH 292cfa24e089cd08a564443bf71e86e6
- SHA256 fd6636fe33a757689eba4c8ad56a5b56fd4a972c24d907442d9e2a7559b99b88
- MD5 8c5bf2b676e6777158cadc210474bc33
- SHA1 6c0d16cf95b9ca1344f423eef5e68a1f77cef6af
- SHA512 816aec0bc5418592150d0902b0749fc176907f7f34b2ffd686f7bb52a3f595df47e7c544294a66f434fa6bc2d5eebeb6867ac738540c0f1c659e56ffc5778fa1
- SSDEEP 6144:OJdYA7aF6pLqDKyDFxEXTcISEExItf5gojnC4rfhIrvGnQsjQDP:OAgUKWFiYIltfTT
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
195296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
InkDiv.pdb
msvcrt
tan
__dllonexit
_unlock
_lock
??0exception@@QEAA@XZ
_onexit
??1type_info@@UEAA@XZ
memmove_s
_XcptFilter
??0exception@@QEAA@AEBQEBD@Z
__C_specific_handler
_amsg_exit
_purecall
wcscat_s
wcscpy_s
?what@exception@@UEBAPEBDXZ
memcpy_s
??0exception@@QEAA@AEBV0@@Z
wcstod
_wtoi
qsort
free
malloc
realloc
_callnewh
__CxxFrameHandler3
?terminate@@YAXXZ
_CxxThrowException
_initterm
_beginthreadex
_vsnwprintf
??1exception@@UEAA@XZ
sqrt
sin
memset
memmove
_vsnprintf
strcpy_s
sprintf_s
atan2
cos
exp
fmod
memcmp
memcpy
wcscmp
api-ms-win-core-synch-l1-1-0
EnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ResetEvent
SetEvent
ReleaseMutex
DeleteCriticalSection
TryEnterCriticalSection
CreateMutexW
InitializeCriticalSection
WaitForSingleObject
CreateEventW
InitializeCriticalSectionAndSpinCount
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-sysinfo-l1-1-0
GetLocalTime
GetTickCount
GetSystemTime
GetSystemInfo
GetSystemTimeAsFileTime
api-ms-win-core-timezone-l1-1-0
SystemTimeToFileTime
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
api-ms-win-core-registry-l1-1-0
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
api-ms-win-core-libraryloader-l1-2-0
LoadResource
DisableThreadLibraryCalls
GetModuleHandleW
LoadLibraryExW
GetProcAddress
FreeLibrary
SizeofResource
GetModuleFileNameW
FindResourceExW
api-ms-win-core-string-l2-1-0
CharNextW
CharPrevW
api-ms-win-core-memory-l1-1-0
VirtualAlloc
VirtualQuery
VirtualProtect
api-ms-win-core-heap-l1-1-0
HeapDestroy
api-ms-win-core-synch-l1-2-0
Sleep
SleepConditionVariableSRW
WakeAllConditionVariable
api-ms-win-core-rtlsupport-l1-1-0
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
api-ms-win-core-debug-l1-1-0
OutputDebugStringA
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-file-l1-1-0
CompareFileTime
api-ms-win-core-heap-l2-1-0
GlobalFree
GlobalAlloc
api-ms-win-core-string-obsolete-l1-1-0
lstrlenA
lstrcmpiW
lstrcpynW
lstrcpyW
api-ms-win-core-heap-obsolete-l1-1-0
GlobalLock
GlobalUnlock
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
rtutils
TracePutsExA
TraceRegisterExA
TraceDeregisterW
AddOneStroke
CallDivide
CallDivideResults
CallDivideResultsStrokeIds
CreateInkDivider
DeleteInkDivider
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RecognizerContextSet
RemoveStrokes
SetLineHeight
SetLineRecoCallback
Name
.text
Size
196KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=44, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=260, version=26213,
count=162, id=1, productName=Unmarked objects,
count=5, id=257, version=26213,
count=4, id=259, version=26213,
count=1, id=256, version=26213,
count=68, id=265, version=26213,
count=8, id=261, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
Library/Microsoft.AspNetCore.Mvc.Abstractions.dll
- SHA256 9bb1201305a99fc6be9a2d90daed5b8b9e8db9c54a183eae9bccac14227a3ca1
- MD5 7bc25b7b712fd3cccf6b2e9c696e3797
- SHA1 80ce57df5f10c0f63eddc387cad9cae4e6992a05
- SHA512 daa142c823d23029005a05d60e4876545458c2790bd86286026a0f474077ea0c7d86fe2924601467788c174aceb7f3652be4646983ba6841c8a07bcb605dad77
- SSDEEP 3072:eVwCAhQ13ysRD+ZZPiJ91OWZfOJ+NaRg4IpXuWlkP7wowQFcjCQrwtzbmDoBn+Co:NFs1I0bZGUNaGGxwowGyy39o
- MD5 SHA1 SHA512 SSDEEP
Digest
56:ef:d4:82:b0:3d:78:6e:1c:6a:c3:3a:fb:81:49:13:0c:17:1b:01:21:f8:8c:0a:44:0f:ed:99:94:e0:56:b0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 30, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d7:9b:0d:1e:57:2e:8c:51:8e:00:01:00:00:01:d7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.AspNetCore.Mvc.Abstractions.ni.pdb
/_/artifacts/obj/Microsoft.AspNetCore.Mvc.Abstractions/Release/net7.0/Microsoft.AspNetCore.Mvc.Abstractions.pdb
Name
.text
Size
228KB
Virtual Size
224KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/Microsoft.Azure.Management.PrivateDns.Fluent.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f30b0bd929e83cc5009060f8e11e2d85a0bc3da6d7e4a055ef7a7c96e3381c16
- MD5 5fe3f4a36d695110d94b6b87ed5141b3
- SHA1 20780cb15251bc928b3085d3fa35d1015b3669e2
- SHA512 0a956e57cdea5c54e09147c43d8cf2c23be5f8d466a7fb47d0ae037c9941dd519cee6edcf84570b8e9842beaa4d122d60b9b5e8ac33d1a3526361c911846e35a
- SSDEEP 6144:hbgUrDBM+HGQa+bCXMRNkrLH+Mdp0nhDCFJus5tjD+UQKX+EV63JMJi:tgUrDBM+Jak
- MD5 SHA1 SHA512 SSDEEP
Digest
75:19:16:1e:9a:c4:ac:f0:34:be:e6:9b:21:ff:f7:91:92:d0:af:1a:9d:d7:59:88:0b:51:fc:01:b0:cb:70:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 6, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:5b:7c:b0:ba:34:67:37:c1:a7:00:00:00:00:01:5b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
267338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\ResourceManagement\PrivateDns\obj\Debug\net452\Microsoft.Azure.Management.PrivateDns.Fluent.pdb
mscoree
_CorDllMain
Name
.text
Size
253KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.Build.Tasks.CodeAnalysis.dll
- SHA256 458cd882687fa33df36ed423606c5422c903c39339d5ac708a82d2e3e2ac21c9
- MD5 96cd53799793171f96bc702948a229f0
- SHA1 44bac56d294457395606d73781d2076dd0dd7c2e
- SHA512 d063c0e823faa14e30fd99fe0a6c55570bc61e9b9de2b64cb38c3929e245fe9fc025eb04a08c6b29f3d49cfe13e247d2ccd668cb2b4d7e5f18c7d7b2c5df0e2f
- SSDEEP 3072:lgorgmIapjyPlLhzJ8LSyL6dMPv8i2WxTtzGLQ2dtkxj51L3KOW0I9J:CoapHJeSyQmc29GUJL3e0o
- MD5 SHA1 SHA512 SSDEEP
Digest
97:4c:ba:d4:0c:d3:d6:23:f3:82:ca:62:ad:e4:e3:04:8a:73:aa:aa:0a:1e:60:1e:03:91:28:87:63:68:2a:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 1, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d2:21:24:31:4a:58:bf:2d:11:00:01:00:00:01:d2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.Build.Tasks.CodeAnalysis.ni.pdb
/_/artifacts/obj/Microsoft.Build.Tasks.CodeAnalysis/Release/net6.0/Microsoft.Build.Tasks.CodeAnalysis.pdb
Name
.text
Size
212KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/Microsoft.CodeAnalysis.Remote.Workspaces.dll
- SHA256 e634ca4353d4a951bc136286ea2deb8fc73e435c4dc606fc3c29801734c4d29f
- MD5 70a5e9c1e08e935771ffa077ec80a0e4
- SHA1 4dac25f410c05b221d4085c442948ee4cabca0ff
- SHA512 6f04bffcb3895ca61ac48af17332559bd9d05a5702be7fa5783393a273131ec41f3a143256df8986f19a4fc2f3dbbcee588ab4fd0eeb4fc1e57f446bccd67494
- SSDEEP 12288:Dbsu0PHUlByTb3CH6O8cbkM2z53PEBdMxCOnh+Zoo:UorlA53PEByCOngZoo
- MD5 SHA1 SHA512 SSDEEP
Digest
32:9d:17:24:2c:92:72:71:b5:4d:7b:d0:25:5b:2c:d1:45:81:c4:0f:d3:2e:10:61:32:91:a6:ac:cd:35:c6:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 19, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:cd:55:07:2a:e7:ca:c1:99:1d:00:01:00:00:01:cd
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.CodeAnalysis.Remote.Workspaces/Release/net6.0/Microsoft.CodeAnalysis.Remote.Workspaces.pdb
Name
.text
Size
362KB
Virtual Size
361KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/Microsoft.Crm.Sdk.Proxy.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 874b9b05ba2b7c300bd06d96e52712f1a9fd37cd6672764942b716229c4d6af6
- MD5 3ed1f4f19a11e8f01534796fc5256f0f
- SHA1 7345a9f87e35942b18f91e83a35f0e26d35f9f0a
- SHA512 969416e6397670cb5415fa6a2ee791016a95f089335e411c32d59213e6c5303bff17c330e5e3d33197d12329d4f4094ab9def5850f17f5318f230406923d04da
- SSDEEP 6144:KS3bKCMfzrLLZrr4AWeeeeeuqbP4xl3ev3r4Pvw2LK:R7MnLLNRgxl84gsK
- MD5 SHA1 SHA512 SSDEEP
Digest
e8:a1:84:aa:bf:1e:3d:dd:bb:30:22:8c:02:f9:e4:4a:7d:a1:2d:de:46:65:86:f7:e4:6d:4e:f4:37:09:5f:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 1, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
e8:a1:84:aa:bf:1e:3d:dd:bb:30:22:8c:02:f9:e4:4a:7d:a1:2d:de:46:65:86:f7:e4:6d:4e:f4:37:09:5f:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 27, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b8:08:d4:c1:b8:79:e0:51:49:00:01:00:00:01:b8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cb:b7:75:39:fb:02:71:42:36:00:00:00:00:02:cb
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:fb:00:a0:4a:5b:f2:27:dc:00:01:00:00:01:c7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
369938
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\obj\CI\Microsoft.Crm.Sdk.Proxy\net6.0\Microsoft.Crm.Sdk.Proxy.pdb
mscoree
_CorDllMain
Name
.text
Size
353KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.NET.Build.Tasks.dll
- SHA256 996710ed9f0c7ba3719a1a965920d8f28f43b05e9649ef5751e6748d9d25f7ed
- MD5 2af5c29e8b284fe1d2e42659370fab37
- SHA1 ddc0bcc4c15e6e62dd8fe9176227213acb37c36f
- SHA512 22364c66a2c83cda4119ec4f22748ad0ad70d1d06f9af6aa754e08cee2d34d491f5c970ff3b7e83905aac95755f2af55e273cf64f7ba9c8bb0db544310f1bd01
- SSDEEP 12288:C2dELfLdROUmjj8V73dvJo/ZiecBz34BGXfenuFQ4tUNij5CZz0tVk4NpP+oUZLV:C2OLfLNvZ3BK/lwXGuFVAijcZ2ajOQD
- MD5 SHA1 SHA512 SSDEEP
Digest
e7:d9:68:23:80:4d:e4:95:ea:6a:53:b6:32:b9:51:10:9a:8b:8b:8e:d7:e6:39:88:b2:f3:3d:df:9b:5e:15:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 1, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ce:0f:18:f7:45:97:e7:c6:ff:00:01:00:00:01:ce
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.NET.Build.Tasks.ni.pdb
/_/artifacts/obj/Release/Sdks/Microsoft.NET.Sdk/tools/Release/net7.0/Microsoft.NET.Build.Tasks.pdb
Name
.text
Size
980KB
Virtual Size
976KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
88KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/Microsoft.ProgramSynthesis.Transformation.Text.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ad6fe5fa3a024776878e3caa0930228a5322524fce17d5efc3f8ba34f742d4b
- MD5 856c41a58beae3d88d89ffde133d08bf
- SHA1 9c3580ee70d98ef879aeb336902661bdf77b0451
- SHA512 f0d7ae80cdb76ad479c07ed1a4cb500784be918caa4a8706536c6b38a0954e9c8e2dc69f45c1e51438a548db4d3a2d06419a7815e457923cb9953f93d8b7c537
- SSDEEP 12288:a8Mp5qqBuTnBmM2ST8Rxnhgd/7bhAf5NSIQDz2MhQRKBVh6eZP2XYm2axyEl8l5:V6S9z2MhlBPfPPIWl5
- MD5 SHA1 SHA512 SSDEEP
Digest
a7:6c:a1:01:e3:a6:57:ce:1d:5b:07:48:48:76:95:be:90:1c:d1:7c:9d:9c:5e:d5:4e:9f:41:05:79:2d:8d:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 6, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:08:7d:ff:45:59:70:45:fa:84:00:00:00:00:01:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
1382482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\_work\1\s\Transformation.Text\Transformation.Text\obj\Release\Net46\Microsoft.ProgramSynthesis.Transformation.Text.pdb
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.VisualStudio.ConnectedServices.Package2.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3ac060587495a7fcf969ce9680c862c944c92076acea9a92eb86c3dd66c429a9
- MD5 cc2150494d327af57eba1b169a48ed65
- SHA1 602a0516f298a96191e8e628be1a4b5fa3a0366d
- SHA512 9aab7c67c2041d97c776f3666af643eda507649d37b5e651f6a83df3a97fdac0efeddc625b46784cf27ce8b0bbcd5c4ec745fce5bbebb42cccbb678293aad937
- SSDEEP 3072:t74Nde0oleYxT2yoj9qkLK43MQmS01Hl2uhbsIEf4AUeq:Z4NdeN2yoj9LLK43MQmS0hl2uh9Ee
- MD5 SHA1 SHA512 SSDEEP
Digest
fc:c7:88:04:18:59:3f:a3:c2:c5:38:72:5f:06:05:9b:6c:91:3d:ba:29:bb:50:59:77:15:9b:0c:83:8b:77:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ba:1f:3f:19:f7:c1:75:bd:7c:00:01:00:00:01:ba
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
225758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.VisualStudio.Interactive.Editor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21e83e13c1bedcd1e956080124311e723e79ba9425a628a4982ecbce9cdf4540
- MD5 91d69e64472ca5deb07c7b657643c923
- SHA1 c94d643bb9e9d35e82eb60042da8e42f8106e06c
- SHA512 f8135f4a435190bd592dd09a583167c46c9e21a68454d8ededdf84f588a13766c28b1e9daf652fad87198f604107244e9435e0a9526e33437eb8aa2b971c1fbd
- SSDEEP 3072:2t8vI6vbc4C8EU+auCXDu3moPUU/XcYu2EjHycYaY6SCDeG6zuQk2MUBf384HGrS:2q5z28Ev9YefijYeKR
- MD5 SHA1 SHA512 SSDEEP
Digest
08:9e:23:fe:ff:e8:96:c8:12:d2:b0:b2:ad:89:cd:27:e4:17:1a:d4:e9:54:74:13:59:3b:14:0c:fe:6e:65:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 19, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d0:77:08:aa:ef:a3:17:c6:dd:00:01:00:00:01:d0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
311434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\Interactive.Editor\Release\net472\Microsoft.VisualStudio.Interactive.Editor.pdb
mscoree
_CorDllMain
Name
.text
Size
296KB
Virtual Size
296KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.VisualStudio.TeamFoundation.VersionControl.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b00692689159da2c3241dcedec4e26b92fa7fda301b2ac71f6e305f31cfb9ad4
- MD5 1edafaab49cdaffedde6979e4d561a33
- SHA1 61c9d174be7fad8045f579ebb5311054e68e93a3
- SHA512 f027627a3b04a9e3bd39c6523f4e94f0c21720a7849ea5c46a01fc2556cc6a23a7ee3d51e287dc438d67e940362cda8ff4726b2f7d7f7bb465c987b97caed868
- SSDEEP 3072:x9KXYJWc/Smvg0xmkhWb5kwW6wUhWu6ktfbvfIEUU2zkPxD/dB4TFyQuO7JBilu7:yW6wUhWuyOoMRI5Jhl/UP5EVYdS1
- MD5 SHA1 SHA512 SSDEEP
Digest
26:2e:33:00:7f:f2:6c:a0:bd:c9:fe:d8:54:e9:c3:62:ba:3a:b0:38:61:71:04:b2:0c:c1:2c:af:76:ff:ae:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 21, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:cf:52:36:be:71:4b:cd:48:ca:00:01:00:00:01:cf
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
303662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
289KB
Virtual Size
288KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.VisualStudio.TestTools.TestSettings.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e2a0507e86eba585c3d25d03ee99a4a98b41633751dbfecd45cdc19c5111f07
- MD5 6cad86e8f1a48fb928970dfbf4f6ed24
- SHA1 d9d72a045e48d61aa868358246140cffdc6f749d
- SHA512 07cf7caa68a98e4a578b42916fda656f89b3daaa8bde68dd33382bb4b0a87f2ccc01ba64dd1edd75c4169ba5f6fb026cd3cebf70b36b82fde1a4ef3a01a3969c
- SSDEEP 6144:QRVttVkgvqrDNSiu3ngvSl1vjrvvy/EvdRVb+SuxbZ9X6jf7tD+ipUy2OAX4o5zK:2VttVvqrDvKyMHIxqR
- MD5 SHA1 SHA512 SSDEEP
Digest
0a:3c:36:4d:35:8b:1e:4a:64:ad:aa:e2:9f:ef:d6:0b:eb:ab:5f:b2:fc:6b:36:0e:65:3d:db:ac:51:fe:63:d4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 6, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b2:6e:40:03:7f:6e:a9:94:92:00:01:00:00:01:b2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
640582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0706_100817\cmd\m\out\Intermediate\vset\testsettingsui.csproj_377D1F75\objr\x86\Microsoft.VisualStudio.TestTools.TestSettings.pdb
mscoree
_CorDllMain
Name
.text
Size
618KB
Virtual Size
617KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/Microsoft.WebTools.Languages.Shared.VS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cea1e6118eea9cfb75948977124dc073cd6900581a6b8a72433a8e3ef32625df
- MD5 78314c72a1fc86cb8b6dc3dd89adb4eb
- SHA1 d212dee48d83076ce65563bcdca16ea4c88908ab
- SHA512 0baa283c7c4153b409afd58eb75632567561a2f16093ab5c4e67e44b894cb386da281a5b162476fe803d297c841abc4079886a219991913e98499f6c8813a58a
- SSDEEP 3072:3Y9zls3pEbNcW4E+Cpxt5Ac2cKrOD6oND33G+NZZuRJh:3p8HD6oND3W+NZ+J
- MD5 SHA1 SHA512 SSDEEP
Digest
2c:ff:33:73:3f:13:d8:7b:86:70:47:37:f3:74:c7:f1:a3:56:d1:5f:6b:4c:7a:fe:20:5a:b2:a5:5f:a4:35:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
204622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\VS\Microsoft.WebTools.Languages.Shared.VS\Release\Microsoft.WebTools.Languages.Shared.VS.pdb
mscoree
_CorDllMain
Name
.text
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/NppShell_06.dll
- IMPHASH 5c0edb7e35310ff8f3aabe7a6043f076
- SHA256 c678471fc86fa3d91a15072f58474271193e09ba150400431b549605a8ddcc7d
- MD5 1fd3bee83f987dc33c05251a7738db0b
- SHA1 3afd7aed10c793244f9151dff2c9a75f7bbfc6b3
- SHA512 7ea43e454cbb57ecf929dadeb17a4150a116af320c8533bc703b18097fddd6e7be43ce2161ebfd6bcc5d36eb532ab84e60cda882f1750208c42fda43545e2ee8
- SSDEEP 3072:fWPJfOlPHzVB+mO1emLHhA46Xvx2CxwbD30aq2P5JcpgKn8G2e2FBgMM3ZxWB:fAfOlfzVQzB6fx2CxwXL/U8VFDt
- MD5 SHA1 SHA512 SSDEEP
-
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Digest
d2:d7:83:88:82:c2:c2:77:d6:d1:26:77:c8:05:bc:b0:d0:d9:dc:ae
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Chains
Jul 15, 2022
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Serial Number
03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 13, 2022 - May 14, 2025
Minor OS version
2
Major OS version
5
Entry point
6012
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
shell32
ShellExecuteW
DragQueryFileW
shlwapi
StrRChrW
PathFindExtensionW
msimg32
AlphaBlend
kernel32
GetLastError
lstrcatW
lstrlenW
GetModuleFileNameW
lstrcpynW
GetVersionExW
CreateProcessW
lstrcpynA
FindFirstFileW
GetProcAddress
LoadLibraryW
GetProcessHeap
HeapFree
HeapAlloc
FreeLibrary
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FindClose
user32
DestroyIcon
ReleaseDC
SetRect
GetDC
GetIconInfo
DrawIconEx
SetMenuItemInfoW
SendMessageW
SetDlgItemTextW
GetDlgItemTextW
GetSystemMetrics
MessageBoxW
InsertMenuW
SetMenuInfo
EndDialog
GetDlgItem
CreateIconIndirect
wsprintfW
DialogBoxParamW
DrawTextW
CharUpperBuffW
LoadImageW
PostMessageW
gdi32
CreateSolidBrush
RoundRect
CreatePen
DeleteDC
SetBkColor
CreateFontIndirectW
SetTextColor
GetTextExtentPoint32W
GetDIBits
DeleteObject
SelectObject
SetBkMode
CreateDIBSection
CreateCompatibleDC
advapi32
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx
msvcr90
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_onexit
_encoded_null
free
memset
_initterm
_malloc_crt
_encode_pointer
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
??_V@YAXPEAX@Z
memcmp
??_U@YAPEAX_K@Z
_decode_pointer
_initterm_e
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
780B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
185KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=150, version=20413,
count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=128, version=50727,
count=17, id=123, productName=VS2005 build 50727, version=50727,
count=97, id=1, productName=Unmarked objects,
count=2, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Library/NuGet.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 798dec805277e731117e74311b97641fdc9e6117e1bfbc686ff09dc9576ce117
- MD5 85f601d08c54cfd537344b69cfedca35
- SHA1 bdf63b654c7b093588443832e5eaa8c6b0ca0c3a
- SHA512 33926acdf21d3210e1b0726b2bc59392f031bafd83a31e1f4d2e1dd99f7d1896e93ac9dff0453b4710dc8c04c507b9115fcfa61bb4971ba95cb63bbc9af9ea54
- SSDEEP 3072:z6Wv0UsL9lzvXB4KNAwh9R7Nszr/9YqhNtUEU5OVXVhIQ6:uPtlz54KNAWps9YqhIV5OVXQ
- MD5 SHA1 SHA512 SSDEEP
Digest
d7:8f:34:87:9e:92:26:36:0d:d4:7a:fd:f2:37:af:70:8e:08:17:d4:e6:f1:ac:26:05:91:c4:25:3f:6b:d7:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 25, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:E5A6-E27C-592E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:be:f4:20:a2:ee:96:d6:20:d6:00:01:00:00:01:be
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
159002
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\NuGet.Console\obj\release\net472\NuGet.Console.pdb
mscoree
_CorDllMain
Name
.text
Size
147KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/OneDriveService.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e7d729030e05e5e58ccb8c594fa4d40414d61dfa5e941c8686b615662e4a3ece
- MD5 bdaf1413a04c1c3f8f9b063802428921
- SHA1 8a570608834b8eb65544d293115d0745ff52312b
- SHA512 2b63cb7490a42a6481c85d1b79d21ff003f1c16d81ac12d3570d598fdaa48e47da63c7155242874fa0462fc2ab95ab855e1a8eb9dd24ca3da4e5af3f3fe875a0
- SSDEEP 3072:9ArMepym2HfM83U/MMmnM8ck3LKggTrwh6aecDytTW6U1rJhorn:9m3pym2H08jMmM6Fh1DiyFlJg
- MD5 SHA1 SHA512 SSDEEP
Digest
a6:13:77:3b:ae:5e:65:f6:4c:94:5a:3f:e4:27:84:97:db:0c:fc:e8:01:35:15:8d:8a:40:3f:d7:1a:b4:48:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
b0:b6:a1:93:13:49:b3:9a:01:9b:c5:6e:53:89:cb:ac:51:60:c4:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
326110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\NMC\CURRENT260IL1nightlyBuild15061_finalLOC\Libraries\WzWXF\Providers\WzWXFCloud\Dotfprod\OneDriveService.pdb
mscoree
_CorDllMain
Name
.text
Size
310KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/PowerArgs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 81361e92cb03787bcc0465eda8c5fbed6d9d5f7483b17cb13ce2e4699a6434e5
- MD5 9831b7f78c0978e28d72aaf34398f99f
- SHA1 f864434131986d44294e6837f1bf2eb2b92f035b
- SHA512 92949bd47b48eef8b7aa5dc085c19c46aa496a0367c9c4f099c198714f436e44b030c9a361d44d6bdf9ad5acb747278008b74f0279dbc0347fd0a97f20976b38
- SSDEEP 12288:20gAN1P8ci9g5Na4hpDdFVjaDHgOT62goDakD:2s1EINa4hpdOMW6iDak
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
811626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\adama\Source\Repos\PowerArgs\PowerArgs\obj\Debug\netstandard2.0\PowerArgs.pdb
mscoree
_CorDllMain
Name
.text
Size
785KB
Virtual Size
784KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/PresentationFramework.Luna.dll
- SHA256 730208fdc3057f3a0645f85fb9655b5128584dffe5649045f660c4134bc68fbb
- MD5 50c35a63c245728e8f49a79ae95460d3
- SHA1 244289402b56abf66a9f8795d8b67c4cd215cbb9
- SHA512 bf573a11112e4e5b5702e378fa4976d376c5b2c629bd61067c116cc827f5b5ef236d369067e73b491e622787bea178899edace2c1529a0f1a876a9b1e26c37d7
- SSDEEP 6144:Rx/hfaM1AgqQB7YiOKyg1pury3j7SPgqfd77YubeLcchoKz+JSzY4G9aq2h:DJaMaS1OKy2d7SPNxeTSaQath
- MD5 SHA1 SHA512 SSDEEP
Digest
b3:73:9c:94:e8:74:ad:4d:82:1d:d5:fd:e7:a4:43:91:ff:89:71:8e:47:75:ba:fd:61:a1:66:6f:30:42:1f:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 19, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b1:ca:90:43:ee:0b:f0:03:ab:00:01:00:00:01:b1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
PresentationFramework.Luna.ni.pdb
/_/artifacts/obj/PresentationFramework.Luna/x64/Release/net7.0/PresentationFramework.Luna.pdb
Name
.text
Size
636KB
Virtual Size
632KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/ProtectionManagement.dll
- IMPHASH 36fcd43fa0e5aa199b18edcc58808544
- SHA256 d3af723624d6e8dc7356931ff94464909128345aafee8a127c1196659aa8bf61
- MD5 5f15eb30501117ea79813aabc13e548f
- SHA1 5479f2fbeca6b37eb3fbaa172725275d361ed6c0
- SHA512 a2f12ba8eddc908ce8aa914c9db0546b2c9a05fb2197e714844de36eeb043e501889b2e1c7ba2c9d0ecc5b33fcdeae6c4967a26bbad2d5d67eced02eaf51f502
- SSDEEP 6144:j0abTP1ro6FEJDSCVcf4DRKxd5G8JI1Z9VYz6KiQka9JVs:o+5ohoo85G91llGJa
- MD5 SHA1 SHA512 SSDEEP
Digest
bd:3e:2d:97:67:9e:5b:93:5c:38:13:95:93:e2:76:35:90:d5:ad:2a:8d:d6:5b:28:e7:62:3f:05:76:c9:ba:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 15, 2018
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 3, 2018 - Jul 26, 2019
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:e7:50:e9:25:9b:cf:e5:95:c4:00:00:00:00:00:e7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 23, 2018 - Nov 23, 2019
Minor OS version
0
Major OS version
10
Entry point
283792
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ProtectionManagement.pdb
msvcrt
memmove_s
memcpy_s
malloc
free
swprintf_s
swscanf_s
_vsnwprintf
wcsncmp
calloc
__C_specific_handler
wcscpy_s
_callnewh
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
_CxxThrowException
memcpy
memmove
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
_errno
__RTDynamicCast
_wcsicmp
??3@YAXPEAX@Z
_vsnprintf
_purecall
??0exception@@QEAA@AEBQEBDH@Z
??_V@YAXPEAX@Z
wcsstr
_wchmod
wcstoul
_vscwprintf
vswprintf_s
iswalpha
wcsrchr
wcschr
__CxxFrameHandler3
_beginthreadex
memset
kernel32
LoadLibraryExW
SizeofResource
LockResource
LoadResource
FindResourceExW
DisableThreadLibraryCalls
LeaveCriticalSection
CloseHandle
GetTimeZoneInformation
GetSystemTime
SetEvent
WaitForSingleObject
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
RaiseException
FreeLibrary
MultiByteToWideChar
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SleepConditionVariableSRW
WakeAllConditionVariable
InitializeCriticalSectionEx
GetLastError
GetSystemDirectoryW
GetProcAddress
EnterCriticalSection
CompareFileTime
GetSystemInfo
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryExA
VirtualProtect
VirtualQuery
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
FormatMessageW
CreateDirectoryW
GetTempPathW
GetTempFileNameW
GetModuleFileNameW
GetLocaleInfoW
CreateProcessW
CreateMutexW
ReleaseMutex
IsWow64Process
LocalFree
GetWindowsDirectoryW
GetDiskFreeSpaceExW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FreeResource
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
DeleteFileW
K32GetModuleFileNameExW
CreateFileW
ReadFile
WriteFile
GetFileSize
GetFileSizeEx
GetLongPathNameW
CreateThread
ResetEvent
GetExitCodeThread
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
ProcessIdToSessionId
SetLastError
GetNativeSystemInfo
SystemTimeToFileTime
GetLocalTime
GetModuleHandleW
GetVersionExW
GetDriveTypeW
GlobalFindAtomW
FileTimeToSystemTime
CreateEventW
GetExitCodeProcess
SwitchToThread
oleaut32
SafeArrayCreate
SysAllocStringLen
VarBstrCat
SysStringLen
SysAllocString
VariantInit
VariantClear
SysStringByteLen
SysFreeString
SysAllocStringByteLen
advapi32
TraceMessage
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
GetSidSubAuthorityCount
DuplicateTokenEx
GetSidSubAuthority
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
OpenSCManagerW
OpenServiceW
ChangeServiceConfigW
ControlService
QueryServiceStatus
LookupPrivilegeValueW
PrivilegeCheck
AdjustTokenPrivileges
InitiateSystemShutdownExW
CloseServiceHandle
LookupPrivilegeNameW
CreateProcessAsUserW
RegisterTraceGuidsW
UnregisterTraceGuids
ole32
StringFromGUID2
CoCreateGuid
CoCreateInstance
user32
UnregisterClassA
PostMessageW
GetLastActivePopup
SetWindowTextW
LoadImageW
DestroyIcon
CreateDialogParamW
LoadIconW
DestroyWindow
SendMessageW
ShowWindow
LoadStringW
AdjustWindowRectEx
GetSystemMetrics
FindWindowW
GetWindowThreadProcessId
MessageBoxW
SetForegroundWindow
SetTimer
KillTimer
IsDialogMessageW
PostThreadMessageW
mpclient
MpCleanStart
MpCleanOpen
MpConfigInitialize
MpConfigUninitialize
MpClientUtilExportFunctions
MpHandleClose
MpManagerOpen
MpUtilsExportFunctions
MpAllocMemory
MpElevateCleanHandle
MpGetCallistoDetections
MpNotificationRegister
MpManagerStatusQueryEx
MpThreatEnumerate
MpThreatQuery
MpThreatOpen
MpThreatRollup
MpDetectionEnumerate
MpConfigGetValue
MpConfigGetValueAlloc
MpConfigClose
MpConfigIteratorClose
MpConfigUnregisterNotifications
MpConfigRegisterForNotifications
MpConfigOpen
MpTriggerHeartbeatOnUninstall
MpFreeMemory
MpConfigIteratorOpen
MpConfigIteratorEnum
MpOfflineScanInstall
MpManagerVersionQuery
MpCreateComInstance
MpScanStartEx
MpUpdateStartEx
MpElevationHandleAcquire
api-ms-win-core-shlwapi-legacy-l1-1-0
PathRemoveFileSpecW
PathIsRelativeW
PathCombineW
PathMatchSpecW
PathAppendW
PathFileExistsW
PathFindFileNameW
api-ms-win-core-kernel32-legacy-l1-1-0
MoveFileW
CopyFileW
FindResourceW
api-ms-win-core-kernel32-legacy-l1-1-1
VerifyVersionInfoW
api-ms-win-core-registry-l2-1-0
RegDeleteKeyW
api-ms-win-eventlog-legacy-l1-1-0
RegisterEventSourceW
ReportEventW
DeregisterEventSource
api-ms-win-core-apiquery-l1-1-0
ApiSetQueryApiSetPresence
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
api-ms-win-core-version-l1-1-0
VerQueryValueW
api-ms-win-core-version-l1-1-1
GetFileVersionInfoSizeW
GetFileVersionInfoW
crypt32
CertVerifyCertificateChainPolicy
wintrust
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
CryptCATAdminEnumCatalogFromHash
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext
wtsapi32
WTSQuerySessionInformationW
WTSQueryUserToken
WTSEnumerateSessionsW
WTSFreeMemory
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
MI_Main
Name
.text
Size
299KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
189KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=26213,
count=423, id=1, productName=Unmarked objects,
count=19, id=257, version=26213,
count=16, id=261, version=26213,
count=17, id=260, version=26213,
count=1, id=256, version=26213,
count=134, id=265, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
Library/System.Collections.Concurrent.dll
- SHA256 e6a4f9378d6bc552c95ae730cdc72540a859f324f57ab12d33bb91340be97460
- MD5 7f4a788279433a80d56d83622d67aa2b
- SHA1 2c6d0a9b0aad606d8b619e8b78d23babf9a4b1d1
- SHA512 8eb9a9cac0ea0a8e08cac3a43d274d5d9af2bcbb785353ef9ed7d7e9fccfa417ac1d386bde20c28e3c73bee4d98996f4bcae3a7e1c68102fa62ab00025f29598
- SSDEEP 6144:FSlHnJEMgWPVZ9L09Y843UF2yO2kIG9d+HL6uSs:F2HnJZhPVs9Yo2D2kn9MHL6Zs
- MD5 SHA1 SHA512 SSDEEP
Digest
fa:a7:14:d4:10:77:45:fe:2d:2f:cc:a3:8f:53:df:73:19:54:be:d3:58:78:49:9d:df:fa:03:98:6f:fa:60:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 19, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:06:9c:9c:5d:25:e3:10:aa:47:00:00:00:00:03:06
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b2:6e:40:03:7f:6e:a9:94:92:00:01:00:00:01:b2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Collections.Concurrent.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Collections.Concurrent\Release\net7.0\System.Collections.Concurrent.pdb
Name
.text
Size
224KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/System.Data.SQLite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a7dc4a86fe7b16f330d02683589e4bfc79306b5ff08ebf40a9a8135bc2767986
- MD5 ce5a918d9ce213b5e84815733455ae32
- SHA1 69997baf4402069ca571a5b82188f7d628f08f49
- SHA512 71ed754e362f89914aca209ba67c9ac532f492f15931d88e4c232e940ed78bc68b2cb76fcc54528b91fa1e7044ae37986064e31f085a2dc654c0beb0b936a7ca
- SSDEEP 6144:I4xQyi31FNFaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cbc1czcl:rQZ31FNFaFeFOFwcGF6cmFWc0FWc8cIz
- MD5 SHA1 SHA512 SSDEEP
Digest
d2:92:97:d5:b2:bb:ba:ba:e1:2a:2b:f4:2c:54:15:2d:38:82:d8:22:50:ba:0f:d5:b3:e1:55:99:e2:36:66:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 2, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
ee:97:7e:bf:a0:ae:7e:3f:77:78:f8:d9:13:f2:4a:7b:43:67:de:99
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 2, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
366798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\dev\sqlite\dotnet\obj\2008\System.Data.SQLite.2008\Release\System.Data.SQLite.pdb
mscoree
_CorDllMain
Name
.text
Size
352KB
Virtual Size
350KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/System.IO.Pipelines.dll
- SHA256 1c84e28a57ed50ea4aa60863f162e89482ae50a6d7f5b8fe6ce1016c14718d2b
- MD5 1064a7f32322676fe83e7493646c81a0
- SHA1 831e5dedd556e8e16f4e9c4822d7dcb85b8931ed
- SHA512 6c76e3e7e4bbfe46f37373df05a81ea0280ef6ac10c4e830d0156defcb4cddf65d7b87fb02503e0f96c5955a99dae08bb2d86c949888403532a0caa155fcb1e9
- SSDEEP 3072:LEjHK0yMfvLPCIMhJFsvpzdsA/bM3oPNQhn71iZIkwju4b7hVdQ94bgN0xCR8evL:606vL92z++Ay4ky+RevGF+8U8W
- MD5 SHA1 SHA512 SSDEEP
Digest
7e:59:31:c3:5e:7d:bb:83:d2:8a:67:3a:78:e1:ff:8f:49:33:1f:26:22:72:c0:9a:66:65:46:66:28:c0:af:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 30, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d0:77:08:aa:ef:a3:17:c6:dd:00:01:00:00:01:d0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.Pipelines.ni.pdb
/_/artifacts/obj/System.IO.Pipelines/Release/net7.0/System.IO.Pipelines.pdb
Name
.text
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/TaskbarSetting.dll
- IMPHASH c9a18037f393dc55ecb1fc694ce65814
- SHA256 0dd14e6708a0b47e114a12c7c261049adbf284672fd0b9e72d7b94c0e0e32ad9
- MD5 d0a2f6073a2200c540e98a855442820a
- SHA1 5964afa17228ffdd51bb80b24c7d6d1831c00596
- SHA512 f6fc49765216958a33eb8ae82330e5295d0f3f3a95f35706db8b7cef40ab4845ef02e603b18f52f10bd851ad310653712581996a0c168cc39de725df5c009b65
- SSDEEP 3072:XwIVBUTPjvPZl//lhZLxWUEpQWZFPdBTNTjSCPQTX3w97QFpP/RYN2ppY/7U/Q:AYBIrvPZZ/3ZtnE/7VBTt7k6s6zUI
- MD5 SHA1 SHA512 SSDEEP
Digest
72:b1:6f:63:02:45:33:76:e7:6c:8b:e2:66:41:ee:dd:56:bf:dd:f3:20:b7:4e:22:39:9f:c9:a7:e1:b3:27:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Chains
Oct 12, 2024
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
3b:82:3a:1d:8e:6b:79:70:82:fd:49:5c:46:7f:34:25:4e:97:4e:78
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Chains
Oct 12, 2024
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 13, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Serial Number
0a:24:91:11:11:5a:ef:70:a2:80:0b:aa:92:17:ef:6d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2023 - Oct 26, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 13, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2770852,CN=ORANGE VIEW LIMITED,O=ORANGE VIEW LIMITED,L=Kowloon,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
Serial Number
0a:24:91:11:11:5a:ef:70:a2:80:0b:aa:92:17:ef:6d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2023 - Oct 26, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
58176
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
TaskbarSetting.pdb
ole32
HMONITOR_UserSize64
CoRevokeClassObject
CoRegisterPSClsid
CoRegisterClassObject
HMONITOR_UserFree
HMONITOR_UserMarshal
HMONITOR_UserFree64
HMONITOR_UserUnmarshal
CoCreateFreeThreadedMarshaler
HMONITOR_UserUnmarshal64
HMONITOR_UserMarshal64
HMONITOR_UserSize
oleaut32
RegisterActiveObject
RevokeActiveObject
SysFreeString
SetErrorInfo
GetErrorInfo
SysAllocString
GetActiveObject
SysStringLen
rpcrt4
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
user32
MonitorFromWindow
wsprintfW
kernel32
WriteConsoleW
CreateFileW
HeapReAlloc
HeapSize
GetConsoleMode
LCMapStringW
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileType
GetStdHandle
HeapFree
GetModuleFileNameW
GetCurrentThreadId
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
CloseHandle
HeapAlloc
GetProcAddress
GetCurrentProcessId
GetProcessHeap
FreeLibrary
WideCharToMultiByte
LoadLibraryExW
IsDebuggerPresent
SetLastError
CreateEventExW
OpenEventW
SetEvent
RegisterWaitForSingleObject
UnregisterWait
GetProcessId
OpenProcess
UnregisterWaitEx
GetExitCodeThread
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
DllCanUnloadNow
DllGetClassObject
InitStart
_ReturnTaskbarToDefaultAppearance
_SetTaskbarAppearance
_SetTaskbarBorderVisibility
_UninstallDLL
Name
.text
Size
145KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=138, id=261, version=30795,
count=11, id=260, version=30795,
count=14, id=260, version=32533,
count=9, id=259, version=32533,
count=50, id=261, version=32533,
count=11, id=257, version=30795,
count=179, id=1, productName=Unmarked objects,
count=12, id=265, version=32825,
count=1, id=256, version=32825,
count=1, id=255, version=32825,
count=1, id=151,
count=1, id=258, version=32825,
Library/UIAutomationClient.dll
- SHA256 4633011221cbc7e10db0ceee5c7e00f37b8025b82b4e331f53643fdc2005e012
- MD5 196497c2438a60b02cae2b8437a1e7e9
- SHA1 4dd62e4a923ea739f386ac8be94e2a5cfeb82b62
- SHA512 aa50c40718a23aa91dd01be87961fee7ae309328458bb122102d83f19b58abd292cc18ba2b2f2313ecc6cf7c136e2ae0f91465c2bda6d89e72f2a66eb9df7001
- SSDEEP 6144:Xm5iDuXdRqDs5B8/MWXZuM+dqSmm1wm0SNBpWJW:XhDubg7MWpHdE33
- MD5 SHA1 SHA512 SSDEEP
Digest
64:84:6e:0f:1e:37:d1:13:33:ec:cb:68:01:da:a9:b5:dc:08:0d:dc:e8:6a:81:88:e8:84:90:d5:cf:75:1f:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 19, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:06:9c:9c:5d:25:e3:10:aa:47:00:00:00:00:03:06
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
UIAutomationClient.ni.pdb
/_/artifacts/obj/UIAutomationClient/x64/Release/net7.0/UIAutomationClient.pdb
Name
.text
Size
364KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/WzBGTool.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8d61d71474b47c1ea5eecc73d8f14424089ce7a3f167ee1823c6bb5070f1a19b
- MD5 4d4b4413aa99dff42a842a91fe6a8328
- SHA1 38395c8237dbc33b370e3f3423250c41b460ab89
- SHA512 7ab46259ee34e028b5369a0ee9a6c4c743b6165be01e2a773cf8a6ec4bd57684bf9113094c575ef427058a11d57cd29050327adcf53defb1c8f9d0a6ac05b818
- SSDEEP 3072:oOzUoWT5IJBS+aua2euQ2suIgIAQUcKxbrmXaeHn/paKAf5C0zW0ZBAJevs4TxWd:jzYgbSaeHCB4iDxvtqGEF
- MD5 SHA1 SHA512 SSDEEP
Digest
e6:f3:eb:f9:db:27:66:4e:ef:f5:68:93:af:31:5c:e9:3d:6b:66:f1:33:57:56:6a:85:3c:59:a9:cd:e3:f8:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
41:10:8d:b6:1e:98:1e:34:01:e7:f4:43:fb:89:35:63:51:63:34:20
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
1312958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
F:\NMC\CURRENT260IL1nightlyBuild15061_finalLOC\Libraries\WzBGTools\Dotfprod\en-US\WzBGTool.resources.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/WzWXFlc64.dll
- IMPHASH 0c6a9ed55a7553efb3dc502e987440f9
- SHA256 6f4fbaf934f43db4556500d82521d19db539e5c8ae5cb5bce812af145d8b3261
- MD5 0240af87a82624fe412d7ffdd950a1f6
- SHA1 bb43c972c710486f6125a8714119bd825fbd82c9
- SHA512 d0b21798cdc98cfdeb6dfe76079dc82ac0b30e2cf6bd1dadf1c36906839209303a1fb08ccd783bff1150ad2fa5f049372368675f47a39709ece28c76dc579c95
- SSDEEP 6144:HREO0tuDxK/tAdvJRVWKXj+IV+cdLnVOlLSMcD:BnDxMtS7Vvz+i+cLnPD
- MD5 SHA1 SHA512 SSDEEP
Digest
d1:34:2a:e1:6e:d4:b2:7c:0a:ed:77:e6:c0:7c:51:1d:e7:9a:b9:68:e7:eb:a1:74:db:79:a1:b1:01:70:25:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
af:a1:cb:8c:89:ab:47:3e:2a:fb:1c:c0:b3:d0:ee:43:b9:8a:b4:eb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
2
Major OS version
5
Entry point
162984
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\NMC\CURRENT260IL1nightlyBuild15061_final\Libraries\WzWXF\Providers\WzWXFCloud\w64prod\WzWXFlc64.pdb
msvcr90
__FrameUnwindFilter
_cexit
swscanf_s
_wcsdup
wcsrchr
??3@YAXPEAX@Z
_wcsicmp
??2@YAPEAX_K@Z
__CxxQueryExceptionSize
__CxxDetectRethrow
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
wcscpy_s
__RTDynamicCast
wcsncpy_s
_encode_pointer
_malloc_crt
__CxxFrameHandler3
_initterm
_initterm_e
free
_wtoi
_wsplitpath_s
_wcslwr_s
_wmakepath_s
wcsstr
wcscat_s
_wcsnicmp
wcsncmp
_vsnwprintf
memcpy
memset
bsearch
__crt_debugger_hook
_encoded_null
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_purecall
kernel32
UnmapViewOfFile
CreateFileW
CreateFileMappingW
MapViewOfFile
CloseHandle
FindResourceExW
LoadResource
SetLastError
GetVersionExW
MultiByteToWideChar
GetUserDefaultUILanguage
VerifyVersionInfoW
GetLocaleInfoW
VerSetConditionMask
Sleep
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryExW
FindResourceW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
SearchPathW
GetSystemDefaultUILanguage
TerminateProcess
SetThreadUILanguage
RtlCaptureContext
GetModuleFileNameW
CreateActCtxW
VirtualProtect
VirtualAlloc
GetProcAddress
LoadLibraryW
VirtualFree
GetModuleHandleW
FreeLibrary
VirtualQuery
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCurrentProcess
user32
LoadBitmapW
IsWindow
ole32
StringFromGUID2
advapi32
RegOpenKeyExW
RegQueryValueExW
RegGetValueW
RegEnumValueW
RegCloseKey
shlwapi
PathFindFileNameW
msvcm90
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
mscoree
_CorDllMain
CreateWzWXFProvider
GetInterfaceVersion
SRCHPostSetScope
SRCHPreSetScope
Name
.text
Size
157KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
369KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=150, version=20413,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=129, version=50727,
count=12, id=123, productName=VS2005 build 50727, version=50727,
count=111, id=1, productName=Unmarked objects,
count=22, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Library/Xamarin.Forms.Platform.WPF.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 597f94b5fee1e0fc955c8cfa90ff90efdf339a71e18f6ec882718a10a6498edd
- MD5 bec9615acfed1d0be47bdf6b907180d4
- SHA1 0f310e1cccb38b706a5ed29671483e3c31609671
- SHA512 9a730eeff3495b34854decc1cf3e3e9802968ad1c0f69be7048edeb11d4e08f80cc5f05024f94afd7ed66651b27331028d0d2127706bfad62a882c972f317936
- SSDEEP 6144:suhC2Abi8Lp3TJZy2KVGvKO7EW0ttPmiLGKtpYxyIBQvC7:gjLtTJYAjEfFt8ylq7
- MD5 SHA1 SHA512 SSDEEP
Digest
d1:aa:7e:2f:2d:c8:44:0a:25:b7:96:20:ba:bb:72:e2:37:0c:cf:ae:1c:ed:5d:8f:0f:61:89:5d:27:50:fd:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Andrey Borodin,O=Andrey Borodin,L=Voronezh,C=RU
Chains
Nov 3, 2023
CN=Andrey Borodin,O=Andrey Borodin,L=Voronezh,C=RU
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Andrey Borodin,O=Andrey Borodin,L=Voronezh,C=RU
Serial Number
07:82:0d:a5:4a:c2:a0:8d:f2:13:c8:77:d9:c4:0b:31
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 27, 2021 - Jul 26, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
469558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\Xamarin.Forms.Platform.WPF\obj\Release\net461\Xamarin.Forms.Platform.WPF.pdb
mscoree
_CorDllMain
Name
.text
Size
453KB
Virtual Size
452KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/XamlAnimatedGif.dll
- SHA256 923196136b83757fa29026363c3439b80384a95e0cfad3c52657f0a5e8dcf5a8
- MD5 f50c5b613dc0d5e65a9cb1c1795a6a1c
- SHA1 85431e998b5e42d2e5f71c5f113644cf7e90a33c
- SHA512 76bb8563661715232f91978c9df9357979852d6ce4fe36ccc8a34e52abf2f572bae2215683d4574d7cb032f43b61f72290f8f9ed0fb8a91c7b06133e22a63997
- SSDEEP 6144:OgppRd/oEajmc0J3t6fZquLcxOPIAUcUMF98Uy:OgppP/oEI0xzxObUcUsGL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\xamlanimatedgif\XamlAnimatedGif\obj\Release\net5.0-windows\XamlAnimatedGif.pdb
Name
.text
Size
208KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/cpfecl.Android.arm.dll
- IMPHASH c2e865e0eba8a382058217a2a2b11ad7
- SHA256 f6c5835139ed53501fe0c07bc8b51666301adca683e9015377c5289f6e39ae96
- MD5 e55928d5ab0435f210d993c5b07f9d4b
- SHA1 a05ed2dce624a47a3b47f7370d02c5296e902db2
- SHA512 ed710cdd814f593f1bb9b4646edb478dc3964f5a6374733c4ddeb82eca2391458561f1ea8b1b17fe9558e61fdb11f7e98071a6dee1e05406351b45f25afe83ac
- SSDEEP 6144:luAcmJ32U3bkph0lhSMXlBXBWn3dyoiFdT4Y29rjw5RDI:Enggph0lhSMXli3dyoFz
- MD5 SHA1 SHA512 SSDEEP
Digest
21:93:09:fe:6c:af:50:e2:df:94:d5:86:93:55:2a:6f:48:83:b3:3d:16:b3:a7:4f:51:ee:17:62:81:ec:68:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 23, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b9:f6:00:0d:65:54:4f:bc:03:00:01:00:00:01:b9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
95116
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\cpfecl.Android.arm.pdb
advapi32
CryptGenRandom
EventWriteTransfer
kernel32
FindFirstFileW
GetCurrentProcess
GetModuleFileNameW
GetEnvironmentVariableW
InitializeCriticalSectionEx
FindClose
GetCurrentThreadId
GetLastError
RaiseException
GetSystemInfo
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
FreeLibrary
VirtualQuery
LoadLibraryExW
FindNextFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WriteFile
GetCurrentProcessId
GetConsoleOutputCP
GetACP
GetConsoleMode
LoadResource
FindResourceW
WideCharToMultiByte
GetFileType
QueryPerformanceCounter
VirtualFree
VirtualAlloc
UnmapViewOfFile
MapViewOfFileEx
HeapFree
GetThreadPreferredUILanguages
HeapAlloc
GetProcessHeap
SetThreadPreferredUILanguages
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
OutputDebugStringW
vcruntime140
__C_specific_handler
_CxxThrowException
__std_exception_destroy
memcpy
memmove
__std_exception_copy
__std_type_info_destroy_list
memset
wcschr
wcsstr
wcsrchr
api-ms-win-crt-string-l1-1-0
wcsncpy_s
wcscat_s
wcscpy_s
iswdigit
wcscmp
wcsspn
iswspace
_wcsicmp
_wcsdup
wcsncat_s
_wcsupr_s
towlower
wcsncmp
api-ms-win-crt-runtime-l1-1-0
exit
_initterm_e
__doserrno
_invalid_parameter_noinfo
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initterm
_errno
_crt_atexit
_cexit
api-ms-win-crt-filesystem-l1-1-0
_wunlink
_wsplitpath_s
_wfullpath
_wmakepath_s
_waccess_s
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
api-ms-win-crt-stdio-l1-1-0
_wfsopen
puts
_write
_get_osfhandle
fclose
__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vfwprintf
fgetws
feof
api-ms-win-crt-convert-l1-1-0
_wtoi64
wcstoul
_wtoi
_itow_s
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
_wgetenv_s
api-ms-win-crt-math-l1-1-0
ceilf
api-ms-win-crt-conio-l1-1-0
_cputws
msvcp140
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?uncaught_exceptions@std@@YAHXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
vcruntime140_1
__CxxFrameHandler4
get_integer_kind
get_ptr_to_member_sizing_kind
get_supports_arm32
get_supports_arm64
get_supports_x86_64
get_target_sizes
translate_cpfe_args
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
298KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=32533,
count=8, id=260, version=32533,
count=4, id=259, version=32533,
count=36, id=261, version=32533,
count=9, id=257, version=29395,
count=373, id=1, productName=Unmarked objects,
count=18, id=265, version=32533,
count=1, id=256, version=32533,
count=1, id=255, version=32533,
count=1, id=258, version=32533,
Library/libaccess_output_shout_plugin.dll
- IMPHASH 5d9bb493931aa61e225f3e4df8dce6e3
- SHA256 9463a4262f19a996e08ccbc17a6c09b192b59ce0ed6b30a61f98a58ec11a35f7
- MD5 c68c065f157f8a8f8d929005a3d001fa
- SHA1 3a0d197ba8aa0da89d788b7ea92cf4fc16f1304a
- SHA512 556eec157a688fcb41725611584a096a60ea007d42ebf8c9aeaaaa864668c65231779b034140bf4665558156a2ddea6bacf7a7bcb603d13347c9989175002636
- SSDEEP 12288:4VL9JTLZmfoLkh3lo3CbsiKxd37Y+XfJ5:0L9JXZm8kXsCbsijwfJ5
- MD5 SHA1 SHA512 SSDEEP
Digest
92:70:ad:d9:88:4e:09:9a:22:c7:5d:d3:1b:b9:57:ad:e8:e8:5a:a4:c7:2a:d8:9a:84:e0:c0:ed:24:57:52:9e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Chains
Oct 30, 2023
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
17:79:37:1b:40:0e:7d:58:20:cb:e4:40:5d:76:17:2f:54:b8:f1:ac
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Chains
Oct 30, 2023
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Serial Number
04:07:ab:b6:4e:99:90:18:07:89:ea:cb:81:f5:f9:14
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 14, 2020 - Dec 18, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Serial Number
04:07:ab:b6:4e:99:90:18:07:89:ea:cb:81:f5:f9:14
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 14, 2020 - Dec 18, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
config_ChainParse
msleep
var_GetChecked
vlc_Log
vlc_UrlClean
vlc_UrlParse
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_stricmp
_unlock
abort
acos
atan
atoi
calloc
exit
fprintf
fputc
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
signal
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strstr
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen
_write
_strdup
_open
_getpid
_close
ws2_32
WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
recv
select
send
setsockopt
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
316KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
576B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/libdtv_plugin.dll
- IMPHASH 4617c8e1ce0f53f640f7bc316ef43ff8
- SHA256 6851a0bc1a53d80f5007757c2421a0e317a8b0c79a6ef3dad8c078db9b6d6fb4
- MD5 a137f71c6dde9f60cfca58f280feead8
- SHA1 f298d0231a4aeed11b21a9b14c4fe20e9db4714d
- SHA512 d37c16e9fce24a893d1c2d9c50a8972ae016e4fefe620db8d867e2b6f405cbc501868c88c914e77fbac03ded58bdda8f21296d10210327abeb64d377c3c6a63c
- SSDEEP 24576:bHSokFE000x2K6dIvNG40jEJ111STcYh1dddSdddvdddfddd3D:8E000QHdIFG40jXQb
- MD5 SHA1 SHA512 SSDEEP
Digest
ee:d1:02:b2:24:3e:90:44:71:6f:29:68:44:21:43:17:15:05:e8:7d:ef:00:df:77:d6:ad:dd:53:72:ae:86:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Chains
Oct 30, 2023
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
b6:61:e6:e5:d9:13:f2:e0:f0:75:78:d6:8c:da:94:f1:64:bf:1e:ac
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Chains
Oct 30, 2023
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Serial Number
04:07:ab:b6:4e:99:90:18:07:89:ea:cb:81:f5:f9:14
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 14, 2020 - Dec 18, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
Serial Number
04:07:ab:b6:4e:99:90:18:07:89:ea:cb:81:f5:f9:14
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 14, 2020 - Dec 18, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
mdate
var_GetChecked
var_Inherit
var_LocationParse
vlc_Log
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_timedwait
vlc_dialog_display_error
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_stricmp
_strnicmp
_unlock
abort
atoi
calloc
fopen
fputc
fputs
free
fwrite
getc
getenv
islower
isspace
isupper
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
setlocale
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strstr
strtol
strtoul
strxfrm
tolower
towlower
towupper
ungetc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
_snwprintf
_write
_strdup
_open
_lfind
_close
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateBindCtx
CreateItemMoniker
GetRunningObjectTable
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantInit
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
654KB
Virtual Size
653KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/microsoft.visualstudio.graphics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e30abd7d20980e6e5201a4ce5fb94f0492e0f31fc866627c7340c08b12ef2317
- MD5 3722b171bcaaa0dd245b45de546ea6a6
- SHA1 12de412117c3aef922b0c91bc8a147079ab45b8b
- SHA512 0d76f5b729a1e780e5e196a1cb6f96aae1fa655b0cfacce22ee1701765c8e90d0614fd8ab5e2f2a2ed530e69670f894627cbf4bf3d0301bb5992cb088df54d83
- SSDEEP 12288:SHMxjKstp6vYRhmNvBoYu15Xu6bqpoYV15XqQ:SOBtG0wNvBoVooKh
- MD5 SHA1 SHA512 SSDEEP
Digest
2a:af:80:6d:04:ee:41:fb:5c:df:06:a1:5e:08:fa:0b:c2:df:40:29:db:b9:80:96:94:84:3b:1f:f3:55:8a:26
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 6, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c0:55:a4:8d:c3:64:15:c5:4b:00:01:00:00:01:c0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
675850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0706_100817\cmd\1u\out\Intermediate\Graphics\microsoft.visualstudio.digit.csproj_121048A3\objr\x86\Microsoft.VisualStudio.Graphics.pdb
mscoree
_CorDllMain
Name
.text
Size
652KB
Virtual Size
652KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Library/mozwer.dll
- IMPHASH f640e72900950788d242839c56c20663
- SHA256 99bcbc6dd04b0add980a1b272e5ffa4cf0b017e65a65a3653e727be36594257e
- MD5 ed88025353ef136babc0b1030eddc0a4
- SHA1 dd433e935562034d61dbd06eda9b8e2193085e79
- SHA512 f9b210deab51e31036f3c03775df438f3f9152e8defd239a5d6d70b3b46fea8f3127410b174735656d5ca3f1c0c4e494764cffcf2b3422b79c40f0544b99d8ec
- SSDEEP 6144:WIsMVcLwWxNIH5itp0ZIJFnzSRiyou/88z3P95YF:Wf4GIZitpZHzSRiyN8w3V6
- MD5 SHA1 SHA512 SSDEEP
Digest
5b:8d:19:07:35:b2:b1:4a:dc:9e:d2:e1:46:b0:da:23:ea:f2:2c:82:6e:51:9d:f8:e2:e3:92:98:d7:68:62:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=San Francisco,ST=California,C=US
Chains
Nov 21, 2024
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=San Francisco,ST=California,C=US
Serial Number
07:37:b0:d0:dc:dc:ab:8d:78:d2:f4:0c:b1:22:f9:3f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 2, 2024 - Jun 18, 2027
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
10
Entry point
143744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mozwer.pdb
kernel32
CloseHandle
CreateDirectoryW
CreateFileW
CreateMutexA
CreateProcessW
CreateRemoteThread
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessId
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetThreadContext
GetThreadId
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
K32EnumProcessModules
K32GetModuleBaseNameW
K32GetModuleFileNameExW
K32GetModuleInformation
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
OpenProcess
OpenThread
QueryPerformanceCounter
RaiseException
ReadProcessMemory
ReleaseMutex
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFileInformationByHandle
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAllocEx
VirtualFreeEx
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteProcessMemory
lstrlenW
user32
EnumWindows
GetWindowThreadProcessId
IsHungAppWindow
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
dbghelp
MiniDumpWriteDump
ntdll
NtQueryInformationProcess
NtReadFile
NtWriteFile
RtlNtStatusToDosError
advapi32
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
IsTokenRestricted
OpenProcessToken
SystemFunction036
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
bcryptprimitives
ProcessPrng
bcrypt
BCryptGenRandom
DllMain
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
Name
.text
Size
214KB
Virtual Size
214KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
121B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/msemp.dll
- IMPHASH c754dbea55ac362c354a5c6de991ed6b
- SHA256 97dab22e35e8347749611bd4c1027e08ef577f0865039594dbc5bf813b3de5db
- MD5 912e3cd38d6db718c14110299a4670dc
- SHA1 2bb4ce8e88c48627cf73780f878595b86ec0d997
- SHA512 53335a2a4b710493b2091e4ac1656e735b53a9119a71160d6ddc7356ca5c3a8504a2c47d453d50f5c28680f154c35c396c772c023cb832c68bddfb646b60cd82
- SSDEEP 6144:hEkfPOLxDlhHBMbP83+Fv8viTexnZj8LKAm3oXwI2r3yRrKI2KHwW8+oLtsGAn5m:fHqnKP2K41LAHvD
- MD5 SHA1 SHA512 SSDEEP
Digest
fb:2c:21:89:0c:c1:ba:55:89:71:2b:b1:d2:1d:ff:4b:96:c8:43:7d:9e:b2:53:1c:0f:dd:3e:a0:e1:c3:01:16
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 1, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d7:9b:0d:1e:57:2e:8c:51:8e:00:01:00:00:01:d7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
276640
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\1001_131954\cmd\23\out\binaries\amd64ret\bin\amd64\msemp.pdb
advapi32
RegDeleteKeyA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyW
GetUserNameW
RegEnumKeyExA
kernel32
LoadLibraryExW
GetSystemDirectoryW
FormatMessageW
GetModuleFileNameW
GetFullPathNameW
GetFileAttributesW
FindResourceW
FindNextFileW
GetModuleFileNameA
lstrlenA
WaitForSingleObject
lstrcmpiA
LoadResource
IsDBCSLeadByte
LockResource
FindResourceA
GetUserDefaultUILanguage
LoadLibraryExA
SizeofResource
GetTickCount
CompareFileTime
InitializeCriticalSection
FreeLibrary
FindClose
WriteFile
lstrlenW
CloseHandle
WaitForMultipleObjects
RaiseException
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
EncodePointer
DecodePointer
DisableThreadLibraryCalls
LocalFree
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
FindFirstFileW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
__current_exception_context
memmove
strstr
wcschr
__std_exception_destroy
__std_exception_copy
wcsrchr
wcsstr
_CxxThrowException
__current_exception
__C_specific_handler
_purecall
__std_terminate
memcpy
memset
memcmp
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
_recalloc
api-ms-win-crt-runtime-l1-1-0
_cexit
_execute_onexit_table
terminate
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_resetstkoflw
_errno
_invalid_parameter_noinfo
_initialize_narrow_environment
api-ms-win-crt-string-l1-1-0
wcspbrk
_wcslwr_s
iswdigit
isalpha
wcsncat_s
wcscat_s
wcscpy_s
_wcsnicmp
strcat_s
strcpy_s
wcsncpy_s
_wcsicmp
wcsspn
wcsncmp
iswspace
api-ms-win-crt-convert-l1-1-0
_wtoi
oleaut32
VariantInit
GetErrorInfo
UnRegisterTypeLi
VarUI4FromStr
VariantCopy
CreateErrorInfo
SysStringByteLen
SysAllocStringByteLen
LoadTypeLi
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
SetErrorInfo
ole32
StringFromGUID2
CoRegisterMessageFilter
CoCreateInstance
OleRun
CoTaskMemFree
CoTaskMemAlloc
CoGetMalloc
CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
user32
PostThreadMessageA
LoadStringA
CharNextA
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-filesystem-l1-1-0
_wmakepath_s
_wsplitpath_s
api-ms-win-crt-multibyte-l1-1-0
_mbsstr
_mbsnbcpy_s
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Name
.text
Size
282KB
Virtual Size
282KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=206, version=65501,
count=8, id=260, version=31940,
count=11, id=261, version=31940,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=31823,
count=27, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=21, id=203, version=65501,
count=349, id=1, productName=Unmarked objects,
count=99, id=265, version=31940,
count=1, id=256, version=31940,
count=1, id=255, version=31940,
count=1, id=258, version=31940,
Library/msys-ksba-8.dll
- IMPHASH e88ca6745ea6057f0fb25739be84c59d
- SHA256 76c5398f7e3cb7cbd19f9e1c691af0cf76bde44339630e02732face57bc74a3f
- MD5 b4a5bbf2144f7c1b57587d2c15427159
- SHA1 9d01109da82ce15095d0ec3570961b1436470ece
- SHA512 82bdb5c80383049742e9ffba709f4937f2b2a84ef0c974e9e36daa54688dc9fd933cb411553e9d52c5d6b9a03a6f7d76ff7863ba92fbc08041ecd04687efea16
- SSDEEP 6144:7w+xyygOc4OZeMGMDCAkD7JVArSYfpjhZ+qmmFGnK:7wdygp5GMDCN//AOEjzmmFGnK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
163664
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
msys-gpg-error-0
gpg_err_code_from_errno
gpg_err_code_from_syserror
gpg_err_set_errno
gpg_strerror
msys-2.0
__assert_func
__cxa_atexit
__errno
__getreent
__locale_ctype_ptr
_impure_ptr
abort
calloc
cygwin_internal
dll_dllcrt0
exit
fclose
fgetc
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
gmtime_r
malloc
memcmp
memcpy
memmove
memset
msys_detach_dll
posix_memalign
putc
qsort
read
realloc
snprintf
sprintf
stpcpy
strchr
strcmp
strcpy
strlen
strncmp
strtol
strtoul
time
ungetc
kernel32
GetModuleHandleA
__gcc_deregister_frame
__gcc_register_frame
_ksba_ascii_memcasecmp
_ksba_asn1_yyparse
_ksba_asn_change_integer_value
_ksba_asn_check_identifier
_ksba_asn_create_tree
_ksba_asn_delete_structure
_ksba_asn_expand_object_id
_ksba_asn_expand_tree
_ksba_asn_find_node
_ksba_asn_find_type_value
_ksba_asn_insert_copy
_ksba_asn_is_primitive
_ksba_asn_lookup_table
_ksba_asn_new_node
_ksba_asn_node_dump
_ksba_asn_node_dump_all
_ksba_asn_parse_file
_ksba_asn_release_nodes
_ksba_asn_remove_node
_ksba_asn_set_default_tag
_ksba_asn_set_name
_ksba_asn_set_value
_ksba_asn_tree_dump
_ksba_asn_tree_release
_ksba_asn_type_set_config
_ksba_asn_walk_tree
_ksba_asn_walk_tree_up_right
_ksba_asntime_to_iso
_ksba_assert_time_format
_ksba_ber_count_tl
_ksba_ber_decoder_decode
_ksba_ber_decoder_dump
_ksba_ber_decoder_new
_ksba_ber_decoder_release
_ksba_ber_decoder_set_module
_ksba_ber_decoder_set_reader
_ksba_ber_encode_tl
_ksba_ber_parse_tl
_ksba_ber_read_tl
_ksba_ber_write_tl
_ksba_calloc
_ksba_cert_cmp
_ksba_cert_get_auth_key_id
_ksba_cert_get_authority_info_access
_ksba_cert_get_cert_policies
_ksba_cert_get_crl_dist_point
_ksba_cert_get_digest_algo
_ksba_cert_get_ext_key_usages
_ksba_cert_get_extension
_ksba_cert_get_image
_ksba_cert_get_issuer
_ksba_cert_get_issuer_dn_ptr
_ksba_cert_get_key_usage
_ksba_cert_get_public_key
_ksba_cert_get_public_key_ptr
_ksba_cert_get_serial
_ksba_cert_get_serial_ptr
_ksba_cert_get_sig_val
_ksba_cert_get_subj_key_id
_ksba_cert_get_subject
_ksba_cert_get_subject_dn_ptr
_ksba_cert_get_subject_info_access
_ksba_cert_get_user_data
_ksba_cert_get_validity
_ksba_cert_hash
_ksba_cert_init_from_mem
_ksba_cert_is_ca
_ksba_cert_new
_ksba_cert_read_der
_ksba_cert_ref
_ksba_cert_release
_ksba_cert_set_user_data
_ksba_certreq_add_extension
_ksba_certreq_add_subject
_ksba_certreq_build
_ksba_certreq_new
_ksba_certreq_release
_ksba_certreq_set_hash_function
_ksba_certreq_set_issuer
_ksba_certreq_set_public_key
_ksba_certreq_set_serial
_ksba_certreq_set_sig_val
_ksba_certreq_set_siginfo
_ksba_certreq_set_validity
_ksba_certreq_set_writer
_ksba_check_version
_ksba_cmp_time
_ksba_cms_add_cert
_ksba_cms_add_digest_algo
_ksba_cms_add_recipient
_ksba_cms_add_signer
_ksba_cms_add_smime_capability
_ksba_cms_build
_ksba_cms_get_cert
_ksba_cms_get_content_enc_iv
_ksba_cms_get_content_oid
_ksba_cms_get_content_type
_ksba_cms_get_digest_algo
_ksba_cms_get_digest_algo_list
_ksba_cms_get_enc_val
_ksba_cms_get_issuer_serial
_ksba_cms_get_message_digest
_ksba_cms_get_sig_val
_ksba_cms_get_sigattr_oids
_ksba_cms_get_signing_time
_ksba_cms_hash_signed_attrs
_ksba_cms_identify
_ksba_cms_new
_ksba_cms_parse
_ksba_cms_parse_content_info
_ksba_cms_parse_enveloped_data_part_1
_ksba_cms_parse_enveloped_data_part_2
_ksba_cms_parse_signed_data_part_1
_ksba_cms_parse_signed_data_part_2
_ksba_cms_release
_ksba_cms_set_content_enc_algo
_ksba_cms_set_content_type
_ksba_cms_set_enc_val
_ksba_cms_set_hash_function
_ksba_cms_set_message_digest
_ksba_cms_set_reader_writer
_ksba_cms_set_sig_val
_ksba_cms_set_signing_time
_ksba_copy_time
_ksba_crl_get_auth_key_id
_ksba_crl_get_crl_number
_ksba_crl_get_digest_algo
_ksba_crl_get_extension
_ksba_crl_get_issuer
_ksba_crl_get_item
_ksba_crl_get_sig_val
_ksba_crl_get_update_times
_ksba_crl_new
_ksba_crl_parse
_ksba_crl_release
_ksba_crl_set_hash_function
_ksba_crl_set_reader
_ksba_current_time
_ksba_der_add_bts
_ksba_der_add_der
_ksba_der_add_end
_ksba_der_add_int
_ksba_der_add_oid
_ksba_der_add_ptr
_ksba_der_add_tag
_ksba_der_add_val
_ksba_der_builder_get
_ksba_der_builder_new
_ksba_der_builder_reset
_ksba_der_copy_tree
_ksba_der_encode_tree
_ksba_der_encoder_new
_ksba_der_encoder_release
_ksba_der_encoder_set_module
_ksba_der_encoder_set_writer
_ksba_der_release
_ksba_der_store_integer
_ksba_der_store_null
_ksba_der_store_octet_string
_ksba_der_store_oid
_ksba_der_store_sequence
_ksba_der_store_string
_ksba_der_store_time
_ksba_der_write_algorithm_identifier
_ksba_derdn_to_str
_ksba_dn_der2str
_ksba_dn_from_str
_ksba_dn_str2der
_ksba_dn_teststr
_ksba_dn_to_str
_ksba_encval_kari_to_sexp
_ksba_encval_to_sexp
_ksba_free
_ksba_hash_buffer
_ksba_keyinfo_from_sexp
_ksba_keyinfo_get_pss_info
_ksba_keyinfo_to_sexp
_ksba_malloc
_ksba_name_enum
_ksba_name_get_uri
_ksba_name_new
_ksba_name_new_from_der
_ksba_name_ref
_ksba_name_release
_ksba_ocsp_add_cert
_ksba_ocsp_add_target
_ksba_ocsp_build_request
_ksba_ocsp_get_cert
_ksba_ocsp_get_digest_algo
_ksba_ocsp_get_extension
_ksba_ocsp_get_responder_id
_ksba_ocsp_get_sig_val
_ksba_ocsp_get_status
_ksba_ocsp_hash_request
_ksba_ocsp_hash_response
_ksba_ocsp_new
_ksba_ocsp_parse_response
_ksba_ocsp_prepare_request
_ksba_ocsp_release
_ksba_ocsp_set_digest_algo
_ksba_ocsp_set_nonce
_ksba_ocsp_set_requestor
_ksba_ocsp_set_sig_val
_ksba_oid_from_buf
_ksba_oid_from_str
_ksba_oid_node_to_str
_ksba_oid_to_str
_ksba_parse_algorithm_identifier
_ksba_parse_algorithm_identifier2
_ksba_parse_algorithm_identifier3
_ksba_parse_asntime_into_isotime
_ksba_parse_context_tag
_ksba_parse_enumerated
_ksba_parse_integer
_ksba_parse_object_id_into_str
_ksba_parse_octet_string
_ksba_parse_optional_boolean
_ksba_parse_optional_null
_ksba_parse_sequence
_ksba_reader_clear
_ksba_reader_error
_ksba_reader_new
_ksba_reader_read
_ksba_reader_release
_ksba_reader_set_cb
_ksba_reader_set_fd
_ksba_reader_set_file
_ksba_reader_set_mem
_ksba_reader_tell
_ksba_reader_unread
_ksba_realloc
_ksba_reallocarray
_ksba_set_hash_buffer_function
_ksba_set_malloc_hooks
_ksba_sigval_to_sexp
_ksba_strdup
_ksba_writer_error
_ksba_writer_get_mem
_ksba_writer_new
_ksba_writer_release
_ksba_writer_set_cb
_ksba_writer_set_fd
_ksba_writer_set_file
_ksba_writer_set_filter
_ksba_writer_set_mem
_ksba_writer_snatch_mem
_ksba_writer_tell
_ksba_writer_write
_ksba_writer_write_octet_string
_ksba_xcalloc
_ksba_xmalloc
_ksba_xrealloc
_ksba_xstrdup
ksba_asn_create_tree
ksba_asn_delete_structure
ksba_asn_parse_file
ksba_asn_tree_dump
ksba_asn_tree_release
ksba_calloc
ksba_cert_get_auth_key_id
ksba_cert_get_authority_info_access
ksba_cert_get_cert_policies
ksba_cert_get_crl_dist_point
ksba_cert_get_digest_algo
ksba_cert_get_ext_key_usages
ksba_cert_get_extension
ksba_cert_get_image
ksba_cert_get_issuer
ksba_cert_get_key_usage
ksba_cert_get_public_key
ksba_cert_get_serial
ksba_cert_get_sig_val
ksba_cert_get_subj_key_id
ksba_cert_get_subject
ksba_cert_get_subject_info_access
ksba_cert_get_user_data
ksba_cert_get_validity
ksba_cert_hash
ksba_cert_init_from_mem
ksba_cert_is_ca
ksba_cert_new
ksba_cert_read_der
ksba_cert_ref
ksba_cert_release
ksba_cert_set_user_data
ksba_certreq_add_extension
ksba_certreq_add_subject
ksba_certreq_build
ksba_certreq_new
ksba_certreq_release
ksba_certreq_set_hash_function
ksba_certreq_set_issuer
ksba_certreq_set_public_key
ksba_certreq_set_serial
ksba_certreq_set_sig_val
ksba_certreq_set_siginfo
ksba_certreq_set_validity
ksba_certreq_set_writer
ksba_check_version
ksba_cms_add_cert
ksba_cms_add_digest_algo
ksba_cms_add_recipient
ksba_cms_add_signer
ksba_cms_add_smime_capability
ksba_cms_build
ksba_cms_get_cert
ksba_cms_get_content_enc_iv
ksba_cms_get_content_oid
ksba_cms_get_content_type
ksba_cms_get_digest_algo
ksba_cms_get_digest_algo_list
ksba_cms_get_enc_val
ksba_cms_get_issuer_serial
ksba_cms_get_message_digest
ksba_cms_get_sig_val
ksba_cms_get_sigattr_oids
ksba_cms_get_signing_time
ksba_cms_hash_signed_attrs
ksba_cms_identify
ksba_cms_new
ksba_cms_parse
ksba_cms_release
ksba_cms_set_content_enc_algo
ksba_cms_set_content_type
ksba_cms_set_enc_val
ksba_cms_set_hash_function
ksba_cms_set_message_digest
ksba_cms_set_reader_writer
ksba_cms_set_sig_val
ksba_cms_set_signing_time
ksba_crl_get_auth_key_id
ksba_crl_get_crl_number
ksba_crl_get_digest_algo
ksba_crl_get_extension
ksba_crl_get_issuer
ksba_crl_get_item
ksba_crl_get_sig_val
ksba_crl_get_update_times
ksba_crl_new
ksba_crl_parse
ksba_crl_release
ksba_crl_set_hash_function
ksba_crl_set_reader
ksba_der_add_bts
ksba_der_add_der
ksba_der_add_end
ksba_der_add_int
ksba_der_add_oid
ksba_der_add_ptr
ksba_der_add_tag
ksba_der_add_val
ksba_der_builder_get
ksba_der_builder_new
ksba_der_builder_reset
ksba_der_release
ksba_dn_der2str
ksba_dn_str2der
ksba_dn_teststr
ksba_free
ksba_malloc
ksba_name_enum
ksba_name_get_uri
ksba_name_new
ksba_name_ref
ksba_name_release
ksba_ocsp_add_cert
ksba_ocsp_add_target
ksba_ocsp_build_request
ksba_ocsp_get_cert
ksba_ocsp_get_digest_algo
ksba_ocsp_get_extension
ksba_ocsp_get_responder_id
ksba_ocsp_get_sig_val
ksba_ocsp_get_status
ksba_ocsp_hash_request
ksba_ocsp_hash_response
ksba_ocsp_new
ksba_ocsp_parse_response
ksba_ocsp_prepare_request
ksba_ocsp_release
ksba_ocsp_set_digest_algo
ksba_ocsp_set_nonce
ksba_ocsp_set_requestor
ksba_ocsp_set_sig_val
ksba_oid_from_str
ksba_oid_to_str
ksba_reader_clear
ksba_reader_error
ksba_reader_new
ksba_reader_read
ksba_reader_release
ksba_reader_set_cb
ksba_reader_set_fd
ksba_reader_set_file
ksba_reader_set_mem
ksba_reader_set_release_notify
ksba_reader_tell
ksba_reader_unread
ksba_realloc
ksba_set_hash_buffer_function
ksba_set_malloc_hooks
ksba_strdup
ksba_writer_error
ksba_writer_get_mem
ksba_writer_new
ksba_writer_release
ksba_writer_set_cb
ksba_writer_set_fd
ksba_writer_set_file
ksba_writer_set_filter
ksba_writer_set_mem
ksba_writer_set_release_notify
ksba_writer_snatch_mem
ksba_writer_tell
ksba_writer_write
ksba_writer_write_octet_string
Name
.text
Size
157KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/msys-pcre2-8-0.dll
- IMPHASH aad5c97584c48a3a36bf1343121c3983
- SHA256 c7b8672a7008f5b06ca74b57ab1d986dde305f37d48fcb8efe2b9ef357068f61
- MD5 dc0012ae753d3ab013a5f92450d389f3
- SHA1 66f0fd0e78a39f7f663d20cbca6bc195dd7faf05
- SHA512 8aae9c6946a930ea5269d77639fae448a561c75805251a72874b972ecab0c4982859ced0a8a42f6fd674d9b5df26b202b933f2fc654e1785e1687071f1ed91c9
- SSDEEP 12288:KKvOzkf/KsC9H2Es+rWNU7d++5mS8McNFjfvnPw8S8KSoZP9Aj1aKF33K:KKv0kf/KsC9H2Es+rWNU7d++5l8McNB6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
470080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
msys-2.0
__cxa_atexit
__locale_ctype_ptr
_impure_ptr
calloc
cygwin_internal
dll_dllcrt0
free
malloc
memchr
memcmp
memcpy
memmove
memset
mmap
msys_detach_dll
munmap
posix_madvise
posix_memalign
pthread_mutex_lock
pthread_mutex_unlock
realloc
strchr
strlen
sysconf
tolower
toupper
kernel32
GetModuleHandleA
__gcc_deregister_frame
__gcc_register_frame
_pcre2_OP_lengths_8
_pcre2_auto_possessify_8
_pcre2_callout_end_delims_8
_pcre2_callout_start_delims_8
_pcre2_check_escape_8
_pcre2_default_compile_context_8
_pcre2_default_convert_context_8
_pcre2_default_match_context_8
_pcre2_default_tables_8
_pcre2_extuni_8
_pcre2_find_bracket_8
_pcre2_hspace_list_8
_pcre2_is_newline_8
_pcre2_jit_free_8
_pcre2_jit_free_rodata_8
_pcre2_jit_get_size_8
_pcre2_jit_get_target_8
_pcre2_memctl_malloc_8
_pcre2_ord2utf_8
_pcre2_script_run_8
_pcre2_strcmp_8
_pcre2_strcmp_c8_8
_pcre2_strcpy_c8_8
_pcre2_strlen_8
_pcre2_strncmp_8
_pcre2_strncmp_c8_8
_pcre2_study_8
_pcre2_ucd_boolprop_sets_8
_pcre2_ucd_caseless_sets_8
_pcre2_ucd_digit_sets_8
_pcre2_ucd_records_8
_pcre2_ucd_script_sets_8
_pcre2_ucd_stage1_8
_pcre2_ucd_stage2_8
_pcre2_ucp_gbtable_8
_pcre2_ucp_gentype_8
_pcre2_ucp_typerange_8
_pcre2_unicode_version_8
_pcre2_utf8_table1
_pcre2_utf8_table1_size
_pcre2_utf8_table2
_pcre2_utf8_table3
_pcre2_utf8_table4
_pcre2_utt_8
_pcre2_utt_names_8
_pcre2_utt_size_8
_pcre2_valid_utf_8
_pcre2_vspace_list_8
_pcre2_was_newline_8
_pcre2_xclass_8
pcre2_callout_enumerate_8
pcre2_code_copy_8
pcre2_code_copy_with_tables_8
pcre2_code_free_8
pcre2_compile_8
pcre2_compile_context_copy_8
pcre2_compile_context_create_8
pcre2_compile_context_free_8
pcre2_config_8
pcre2_convert_context_copy_8
pcre2_convert_context_create_8
pcre2_convert_context_free_8
pcre2_converted_pattern_free_8
pcre2_dfa_match_8
pcre2_general_context_copy_8
pcre2_general_context_create_8
pcre2_general_context_free_8
pcre2_get_error_message_8
pcre2_get_mark_8
pcre2_get_match_data_size_8
pcre2_get_ovector_count_8
pcre2_get_ovector_pointer_8
pcre2_get_startchar_8
pcre2_jit_compile_8
pcre2_jit_free_unused_memory_8
pcre2_jit_match_8
pcre2_jit_stack_assign_8
pcre2_jit_stack_create_8
pcre2_jit_stack_free_8
pcre2_maketables_8
pcre2_maketables_free_8
pcre2_match_8
pcre2_match_context_copy_8
pcre2_match_context_create_8
pcre2_match_context_free_8
pcre2_match_data_create_8
pcre2_match_data_create_from_pattern_8
pcre2_match_data_free_8
pcre2_pattern_convert_8
pcre2_pattern_info_8
pcre2_serialize_decode_8
pcre2_serialize_encode_8
pcre2_serialize_free_8
pcre2_serialize_get_number_of_codes_8
pcre2_set_bsr_8
pcre2_set_callout_8
pcre2_set_character_tables_8
pcre2_set_compile_extra_options_8
pcre2_set_compile_recursion_guard_8
pcre2_set_depth_limit_8
pcre2_set_glob_escape_8
pcre2_set_glob_separator_8
pcre2_set_heap_limit_8
pcre2_set_match_limit_8
pcre2_set_max_pattern_length_8
pcre2_set_newline_8
pcre2_set_offset_limit_8
pcre2_set_parens_nest_limit_8
pcre2_set_recursion_limit_8
pcre2_set_recursion_memory_management_8
pcre2_set_substitute_callout_8
pcre2_substitute_8
pcre2_substring_copy_byname_8
pcre2_substring_copy_bynumber_8
pcre2_substring_free_8
pcre2_substring_get_byname_8
pcre2_substring_get_bynumber_8
pcre2_substring_length_byname_8
pcre2_substring_length_bynumber_8
pcre2_substring_list_free_8
pcre2_substring_list_get_8
pcre2_substring_nametable_scan_8
pcre2_substring_number_from_name_8
Name
.text
Size
457KB
Virtual Size
456KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
146KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/msys-svn_ra_serf-1-0.dll
- IMPHASH 245f9bcbcabbc7b4b07778e8cf7a86f2
- SHA256 77f778884deb3b3ebf90b7303300124495b30d8b9fb626aa4b76a138c38cf97d
- MD5 b2e8c5623fc3aeb1d368cda160eb39fa
- SHA1 8436d3ec311cfde6c140f7f9a011b028763d0d3e
- SHA512 b07a530c36005c6af7c1895abf28311660ded2d8a05a0408c8646f49ecf8eced9eb742592e8f7c57277b61a1dd51048e0a5496a429a4925981befdc7cef35b9c
- SSDEEP 3072:3t2GzPTfqf/gm4+PYiL66QfVQwaB4MowCswCK4nmCVBmCVkUAUjqAGMAHSFDfDw1:3tDzPTfqXgm4+PYiL6TiAQMFqY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107696
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
msys-svn_delta-1-0
svn_compat_wrap_file_rev_handler
svn_delta_default_editor
svn_delta_depth_filter_editor
svn_delta_noop_window_handler
svn_delta_version
svn_editor__insert_shims
svn_txdelta_parse_svndiff
svn_txdelta_send_stream
svn_txdelta_to_svndiff3
svn_txdelta_to_svndiff_stream
msys-apr-1-0
apr_array_make
apr_array_push
apr_collapse_spaces
apr_file_buffer_set
apr_hash_clear
apr_hash_copy
apr_hash_count
apr_hash_first
apr_hash_get
apr_hash_make
apr_hash_next
apr_hash_pool_get
apr_hash_set
apr_hash_this
apr_hash_this_key
apr_hash_this_val
apr_ltoa
apr_palloc
apr_pmemdup
apr_pool_cleanup_null
apr_pool_cleanup_register
apr_pool_clear
apr_pool_destroy
apr_psprintf
apr_pstrcat
apr_pstrdup
apr_pstrmemdup
apr_pvsprintf
apr_sockaddr_info_get
apr_strerror
apr_strnatcasecmp
apr_strtoi64
apr_strtok
apr_time_now
msys-aprutil-1-0
apr_uri_parse
apr_uri_port_of_scheme
apr_uri_unparse
msys-intl-8
libintl_dgettext
msys-2.0
__assert_func
__cxa_atexit
_impure_ptr
abort
atol
calloc
cygwin_internal
dll_dllcrt0
free
malloc
memcpy
memset
msys_detach_dll
posix_memalign
realloc
strcasecmp
strchr
strcmp
strlen
strncasecmp
strncmp
strtol
msys-serf-1-0
serf_bucket_aggregate_append
serf_bucket_aggregate_create
serf_bucket_allocator_create
serf_bucket_barrier_create
serf_bucket_create
serf_bucket_file_create
serf_bucket_headers_do
serf_bucket_headers_get
serf_bucket_headers_set
serf_bucket_headers_setn
serf_bucket_mem_alloc
serf_bucket_mem_calloc
serf_bucket_request_get_headers
serf_bucket_request_set_CL
serf_bucket_response_create
serf_bucket_response_get_headers
serf_bucket_response_set_head
serf_bucket_response_status
serf_bucket_response_wait_for_headers
serf_bucket_simple_copy_create
serf_bucket_simple_create
serf_bucket_ssl_decrypt_create
serf_bucket_ssl_encrypt_context_get
serf_bucket_ssl_encrypt_create
serf_config_authn_types
serf_config_credentials_callback
serf_config_proxy
serf_connection_create2
serf_connection_get_latency
serf_connection_request_create
serf_connection_reset
serf_context_bucket_socket_create
serf_context_create
serf_context_run
serf_context_set_progress_cb
serf_databuf_init
serf_databuf_peek
serf_databuf_read
serf_databuf_readline
serf_debug__closed_conn
serf_default_destroy_and_data
serf_default_read_bucket
serf_default_read_for_sendfile
serf_default_read_iovec
serf_error_string
serf_lib_version
serf_request_bucket_request_create
serf_request_get_alloc
serf_request_get_conn
serf_ssl_cert_certificate
serf_ssl_cert_depth
serf_ssl_cert_export
serf_ssl_cert_issuer
serf_ssl_cert_subject
serf_ssl_client_cert_password_set
serf_ssl_client_cert_provider_set
serf_ssl_load_cert_file
serf_ssl_server_cert_callback_set
serf_ssl_set_hostname
serf_ssl_trust_cert
serf_ssl_use_default_certificates
kernel32
GetModuleHandleA
msys-svn_subr-1-0
svn_auth_first_credentials
svn_auth_get_parameter
svn_auth_next_credentials
svn_auth_save_credentials
svn_auth_set_parameter
svn_base64_decode
svn_base64_decode_string
svn_base64_encode_string2
svn_cert__match_dns_identity
svn_checksum_match
svn_checksum_mismatch_err
svn_checksum_parse_hex
svn_checksum_to_cstring
svn_compat_log_revprops_in
svn_compat_wrap_commit_callback
svn_compat_wrap_log_receiver
svn_config_copy_config
svn_config_get
svn_config_get_bool
svn_config_get_int64
svn_config_get_tristate
svn_create_commit_info
svn_cstring_atoi
svn_cstring_atoi64
svn_cstring_atoui
svn_cstring_casecmp
svn_cstring_join2
svn_cstring_match_glob_list
svn_cstring_match_list
svn_cstring_split
svn_cstring_strtoi64
svn_cstring_tokenize
svn_ctype_casecmp
svn_depth_to_word
svn_dirent_create
svn_dirent_local_style
svn_error__malfunction
svn_error_clear
svn_error_compose_create
svn_error_create
svn_error_createf
svn_error_dup
svn_error_find_cause
svn_error_quick_wrap
svn_fspath__canonicalize
svn_fspath__dirname
svn_fspath__skip_ancestor
svn_hash__get_bool
svn_hash__get_cstring
svn_inheritance_to_word
svn_io_file_close
svn_io_file_flush
svn_io_file_seek
svn_io_file_write_full
svn_io_open_unique_file3
svn_lock_create
svn_lock_dup
svn_log_changed_path2_create
svn_log_entry_create
svn_mergeinfo_parse
svn_node_kind_from_word
svn_path_component_count
svn_path_is_empty
svn_path_is_url
svn_path_remove_components
svn_path_uri_decode
svn_path_uri_encode
svn_path_url_add_component2
svn_pool_create_ex
svn_prop_get_value
svn_prop_hash_dup
svn_property_kind2
svn_relpath_basename
svn_relpath_dirname
svn_relpath_join
svn_relpath_skip_ancestor
svn_revnum_parse
svn_skel__make_empty_list
svn_skel__prepend
svn_skel__prepend_str
svn_skel__unparse
svn_skel__unparse_proplist
svn_sort__array_delete2
svn_sort__array_insert2
svn_spillbuf__create
svn_spillbuf__get_size
svn_spillbuf__read
svn_spillbuf__write
svn_stream_close
svn_stream_copy3
svn_stream_create
svn_stream_disown
svn_stream_read_full
svn_stream_set_close
svn_stream_set_write
svn_stream_write
svn_string_create
svn_string_create_from_buf
svn_string_dup
svn_stringbuf__morph_into_string
svn_stringbuf_appendbyte
svn_stringbuf_appendbytes
svn_stringbuf_appendcstr
svn_stringbuf_chop
svn_stringbuf_create
svn_stringbuf_create_empty
svn_stringbuf_set
svn_stringbuf_setempty
svn_stringbuf_strip_whitespace
svn_subr_version
svn_time_from_cstring
svn_time_to_cstring
svn_tristate__from_word
svn_uri__is_ancestor
svn_uri_canonicalize_safe
svn_uri_skip_ancestor
svn_urlpath__canonicalize
svn_utf_cstring_to_utf8
svn_uuid_generate
svn_ver_check_list2
svn_ver_equal
svn_xml_escape_cdata_cstring
svn_xml_escape_cdata_string
svn_xml_get_attr_value
svn_xml_is_xml_safe
svn_xml_make_close_tag
svn_xml_make_open_tag
svn_xml_make_parser
svn_xml_parse
svn_xml_signal_bailout
__gcc_deregister_frame
__gcc_register_frame
svn_ra_serf__add_cdata_len_buckets
svn_ra_serf__add_close_tag_buckets
svn_ra_serf__add_empty_tag_buckets
svn_ra_serf__add_open_tag_buckets
svn_ra_serf__add_tag_buckets
svn_ra_serf__add_xml_header_buckets
svn_ra_serf__blncache_create
svn_ra_serf__blncache_get_baseline_info
svn_ra_serf__blncache_get_bc_url
svn_ra_serf__blncache_set
svn_ra_serf__change_rev_prop
svn_ra_serf__check_path
svn_ra_serf__conn_closed
svn_ra_serf__conn_setup
svn_ra_serf__context_run
svn_ra_serf__context_run_one
svn_ra_serf__context_run_wait
svn_ra_serf__copy_into_spillbuf
svn_ra_serf__create_bucket_with_eagain
svn_ra_serf__create_expat_handler
svn_ra_serf__create_handler
svn_ra_serf__create_propfind_handler
svn_ra_serf__create_sb_bucket
svn_ra_serf__create_stream_bucket
svn_ra_serf__credentials_callback
svn_ra_serf__deliver_svn_props
svn_ra_serf__discover_vcc
svn_ra_serf__do_diff
svn_ra_serf__do_status
svn_ra_serf__do_switch
svn_ra_serf__do_update
svn_ra_serf__error_on_status
svn_ra_serf__exchange_capabilities
svn_ra_serf__expect_empty_body
svn_ra_serf__fetch_dav_prop
svn_ra_serf__fetch_node_props
svn_ra_serf__get_commit_editor
svn_ra_serf__get_dated_revision
svn_ra_serf__get_deleted_rev
svn_ra_serf__get_dir
svn_ra_serf__get_dirent_props
svn_ra_serf__get_file
svn_ra_serf__get_file_revs
svn_ra_serf__get_inherited_props
svn_ra_serf__get_location_segments
svn_ra_serf__get_locations
svn_ra_serf__get_lock
svn_ra_serf__get_locks
svn_ra_serf__get_log
svn_ra_serf__get_mergeinfo
svn_ra_serf__get_relative_path
svn_ra_serf__get_repos_root
svn_ra_serf__get_stable_url
svn_ra_serf__get_youngest_revnum
svn_ra_serf__handle_client_cert
svn_ra_serf__handle_client_cert_pw
svn_ra_serf__handle_discard_body
svn_ra_serf__handle_multistatus_only
svn_ra_serf__handle_server_error
svn_ra_serf__has_capability
svn_ra_serf__init
svn_ra_serf__is_low_latency_connection
svn_ra_serf__keep_only_regular_props
svn_ra_serf__list
svn_ra_serf__lock
svn_ra_serf__merge_lock_token_list
svn_ra_serf__probe_proxy
svn_ra_serf__register_editor_shim_callbacks
svn_ra_serf__reparent
svn_ra_serf__replay
svn_ra_serf__replay_range
svn_ra_serf__report_resource
svn_ra_serf__request_body_cleanup
svn_ra_serf__request_body_create
svn_ra_serf__request_body_get_delegate
svn_ra_serf__request_body_get_stream
svn_ra_serf__request_create
svn_ra_serf__response_discard_handler
svn_ra_serf__rev_prop
svn_ra_serf__run_merge
svn_ra_serf__server_error_create
svn_ra_serf__setup_error_parsing
svn_ra_serf__setup_svndiff_accept_encoding
svn_ra_serf__stat
svn_ra_serf__svnname_from_wirename
svn_ra_serf__unexpected_status
svn_ra_serf__unlock
svn_ra_serf__unschedule_handler
svn_ra_serf__uri_parse
svn_ra_serf__v1_get_activity_collection
svn_ra_serf__v2_get_youngest_revnum
svn_ra_serf__wrap_err
svn_ra_serf__xml_context_create
svn_ra_serf__xml_context_done
svn_ra_serf__xml_gather_since
svn_ra_serf__xml_note
svn_ra_serf__xml_state_pool
svn_ra_serf_init
Name
.text
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/msys-svn_wc-1-0.dll
- IMPHASH 4613a9aff4a31791558239fda27db33a
- SHA256 b6848271106fed2a089edde872f079cc45c386a84f2bf3fd50f4e44fdf7d3326
- MD5 261aa83984d9faa82e0af1782822f922
- SHA1 ff447ca734ce4c7e52114daa49d775990f0afb61
- SHA512 7d420483886a94abc77b2d5f61c72a94320c9e298cbb8f6de87e405ed064b25ca834814996a55012845cda8d79fe086a77f97f3384c5d0b5ae9a441d7f221afc
- SSDEEP 12288:myeZTZhsmwVrYEnliigcLpQCElipA9hmLdx26/nm1St1SpH:myeZTZ2mwVrnnN3pQCElipA9wdU6/nmR
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
514432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
msys-svn_delta-1-0
svn_delta_default_editor
svn_delta_get_cancellation_editor
svn_delta_noop_window_handler
svn_delta_shim_callbacks_default
svn_editor__insert_shims
svn_txdelta2
svn_txdelta_apply
msys-svn_diff-1-0
svn_diff__source_create
svn_diff__tree_processor_copy_as_changed_create
svn_diff__tree_processor_create
svn_diff__tree_processor_filter_create
svn_diff__tree_processor_reverse_create
svn_diff_contains_conflicts
svn_diff_file_diff3_2
svn_diff_file_options_create
svn_diff_file_options_parse
svn_diff_file_output_merge3
svn_diff_mem_string_diff3
svn_diff_mem_string_output_merge3
msys-apr-1-0
apr_array_make
apr_array_pop
apr_array_push
apr_hash_clear
apr_hash_copy
apr_hash_count
apr_hash_first
apr_hash_get
apr_hash_make
apr_hash_next
apr_hash_overlay
apr_hash_pool_get
apr_hash_set
apr_hash_this_key
apr_hash_this_val
apr_ltoa
apr_palloc
apr_pmemdup
apr_pool_cleanup_kill
apr_pool_cleanup_null
apr_pool_cleanup_register
apr_pool_cleanup_run
apr_pool_clear
apr_pool_destroy
apr_pool_parent_get
apr_psprintf
apr_pstrcat
apr_pstrdup
apr_pstrmemdup
apr_pstrndup
apr_strtoi64
apr_tokenize_to_argv
msys-aprutil-1-0
apr_uri_parse
apr_uri_unparse
msys-intl-8
libintl_dgettext
libintl_dngettext
msys-2.0
__assert_func
__cxa_atexit
_impure_ptr
abort
atol
calloc
cygwin_internal
dll_dllcrt0
free
malloc
memchr
msys_detach_dll
posix_memalign
realloc
strchr
strcmp
strlen
strncmp
strrchr
kernel32
GetModuleHandleA
msys-svn_subr-1-0
svn_categorize_props
svn_checksum__from_digest_md5
svn_checksum_dup
svn_checksum_match
svn_checksum_mismatch_err
svn_checksum_parse_hex
svn_checksum_to_cstring
svn_checksum_to_cstring_display
svn_config_get
svn_config_get_bool
svn_config_get_int64
svn_cstring_atoi64
svn_cstring_match_glob_list
svn_cstring_split
svn_cstring_split_append
svn_ctype_table
svn_depth_from_word
svn_depth_to_word
svn_dirent_basename
svn_dirent_canonicalize
svn_dirent_dirname
svn_dirent_get_absolute
svn_dirent_get_longest_ancestor
svn_dirent_internal_style
svn_dirent_is_absolute
svn_dirent_is_ancestor
svn_dirent_is_child
svn_dirent_is_root
svn_dirent_is_under_root
svn_dirent_join
svn_dirent_join_many
svn_dirent_local_style
svn_dirent_skip_ancestor
svn_dirent_split
svn_error__malfunction
svn_error_clear
svn_error_compose
svn_error_compose_create
svn_error_create
svn_error_createf
svn_error_dup
svn_error_find_cause
svn_error_quick_wrap
svn_error_quick_wrapf
svn_error_wrap_apr
svn_fspath__join
svn_hash_from_cstring_keys
svn_hash_read2
svn_io__is_finfo_executable
svn_io__is_finfo_read_only
svn_io_check_path
svn_io_check_resolved_path
svn_io_check_special_path
svn_io_copy_dir_recursively
svn_io_copy_file
svn_io_copy_link
svn_io_dir_make
svn_io_dir_make_hidden
svn_io_dir_remove_nonrecursive
svn_io_dirent2_dup
svn_io_file_checksum2
svn_io_file_close
svn_io_file_create
svn_io_file_move
svn_io_file_open
svn_io_file_rename2
svn_io_files_contents_same_p
svn_io_files_contents_three_same_p
svn_io_get_dirents3
svn_io_is_binary_data
svn_io_make_dir_recursively
svn_io_open_unique_file3
svn_io_open_uniquely_named
svn_io_read_link
svn_io_read_version_file
svn_io_remove_dir2
svn_io_remove_file
svn_io_remove_file2
svn_io_run_diff3_3
svn_io_set_file_affected_time
svn_io_set_file_executable
svn_io_set_file_read_only
svn_io_set_file_read_write
svn_io_stat
svn_io_stat_dirent2
svn_io_temp_dir
svn_io_write_atomic2
svn_io_write_unique
svn_lock_create
svn_lock_dup
svn_merge_range_dup
svn_mergeinfo__is_noninheritable
svn_mergeinfo_diff2
svn_mergeinfo_merge2
svn_mergeinfo_parse
svn_mergeinfo_remove2
svn_mergeinfo_to_string
svn_mime_type_is_binary
svn_mime_type_validate
svn_node_kind_from_word
svn_node_kind_to_word
svn_opt_parse_path
svn_opt_parse_revision
svn_opt_resolve_revisions
svn_path_check_valid
svn_path_compare_paths
svn_path_compose
svn_path_cstring_to_utf8
svn_path_decompose
svn_path_is_backpath_present
svn_path_is_empty
svn_path_is_url
svn_path_splitext
svn_path_uri_encode
svn_path_url_add_component2
svn_pool_create_ex
svn_prop__patch
svn_prop_array_to_hash
svn_prop_diffs
svn_prop_get_value
svn_prop_hash_dup
svn_prop_hash_to_array
svn_prop_is_boolean
svn_prop_is_known_svn_dir_prop
svn_prop_is_known_svn_file_prop
svn_prop_is_svn_prop
svn_property_kind2
svn_relpath_basename
svn_relpath_canonicalize
svn_relpath_dirname
svn_relpath_get_longest_ancestor
svn_relpath_is_canonical
svn_relpath_join
svn_relpath_prefix
svn_relpath_skip_ancestor
svn_relpath_split
svn_revnum_parse
svn_skel__append
svn_skel__list_length
svn_skel__make_empty_list
svn_skel__matches_atom
svn_skel__parse
svn_skel__parse_int
svn_skel__parse_proplist
svn_skel__prepend
svn_skel__prepend_int
svn_skel__prepend_str
svn_skel__str_atom
svn_skel__unparse
svn_skel__unparse_proplist
svn_sort__array
svn_sort__array_delete2
svn_sort__array_insert2
svn_sort__hash
svn_sort_compare_items_as_paths
svn_sort_compare_items_lexically
svn_sqlite__begin_immediate_transaction
svn_sqlite__begin_savepoint
svn_sqlite__bind_blob
svn_sqlite__bind_checksum
svn_sqlite__bind_int
svn_sqlite__bind_int64
svn_sqlite__bind_iprops
svn_sqlite__bind_properties
svn_sqlite__bind_revnum
svn_sqlite__bind_text
svn_sqlite__bind_token
svn_sqlite__bindf
svn_sqlite__close
svn_sqlite__column_blob
svn_sqlite__column_boolean
svn_sqlite__column_bytes
svn_sqlite__column_checksum
svn_sqlite__column_int
svn_sqlite__column_int64
svn_sqlite__column_iprops
svn_sqlite__column_is_null
svn_sqlite__column_properties
svn_sqlite__column_revnum
svn_sqlite__column_text
svn_sqlite__column_token
svn_sqlite__column_token_null
svn_sqlite__create_scalar_function
svn_sqlite__exec_statements
svn_sqlite__finish_savepoint
svn_sqlite__finish_transaction
svn_sqlite__get_statement
svn_sqlite__insert
svn_sqlite__open
svn_sqlite__read_schema_version
svn_sqlite__reset
svn_sqlite__result_int64
svn_sqlite__result_null
svn_sqlite__step
svn_sqlite__step_done
svn_sqlite__step_row
svn_sqlite__update
svn_sqlite__value_text
svn_sqlite__value_type
svn_sqlite__with_transaction
svn_stream__create_for_install
svn_stream__from_aprfile
svn_stream__install_delete
svn_stream__install_get_info
svn_stream__install_stream
svn_stream_checksummed2
svn_stream_close
svn_stream_contents_same2
svn_stream_copy3
svn_stream_create
svn_stream_disown
svn_stream_empty
svn_stream_from_aprfile2
svn_stream_from_stringbuf
svn_stream_lazyopen_create
svn_stream_open_readonly
svn_stream_open_unique
svn_stream_puts
svn_stream_read_full
svn_stream_readline
svn_stream_reset
svn_stream_set_close
svn_stream_set_read2
svn_stream_set_seek
svn_stream_skip
svn_stream_supports_reset
svn_stream_write
svn_string_compare
svn_string_create
svn_string_create_empty
svn_string_create_from_buf
svn_string_dup
svn_string_from_stream2
svn_string_ncreate
svn_stringbuf__morph_into_string
svn_stringbuf_appendbyte
svn_stringbuf_appendbytes
svn_stringbuf_appendcstr
svn_stringbuf_create
svn_stringbuf_create_from_string
svn_stringbuf_createf
svn_stringbuf_from_file2
svn_stringbuf_ncreate
svn_stringbuf_set
svn_stringbuf_strip_whitespace
svn_subst_build_keywords2
svn_subst_build_keywords3
svn_subst_copy_and_translate4
svn_subst_create_specialfile
svn_subst_eol_style_from_value
svn_subst_keywords_differ2
svn_subst_read_specialfile
svn_subst_stream_detranslated
svn_subst_stream_translated
svn_subst_translation_required
svn_time_from_cstring
svn_token__from_mem
svn_token__from_word_err
svn_token__to_word
svn_uri__is_ancestor
svn_uri_canonicalize
svn_uri_is_canonical
svn_uri_skip_ancestor
svn_utf_cstring_from_utf8_fuzzy
svn_xml_free_parser
svn_xml_make_att_hash
svn_xml_make_parser
svn_xml_parse
svn_xml_signal_bailout
__gcc_deregister_frame
__gcc_register_frame
svn_wc__acquire_write_lock
svn_wc__acquire_write_lock_for_resolve
svn_wc__add_tree_conflict
svn_wc__adm_access_abspath
svn_wc__adm_access_entries
svn_wc__adm_access_pool_internal
svn_wc__adm_access_set_entries
svn_wc__adm_area_exists
svn_wc__adm_child
svn_wc__adm_cleanup_tmp_area
svn_wc__adm_destroy
svn_wc__adm_get_db
svn_wc__adm_retrieve_internal2
svn_wc__ambient_depth_filter_editor
svn_wc__call_with_write_lock
svn_wc__canonicalize_props
svn_wc__cd2_to_cd
svn_wc__changelist_filter_tree_processor_create
svn_wc__changelist_match
svn_wc__check_for_obstructions
svn_wc__close_db
svn_wc__committable_externals_below
svn_wc__complete_directory_add
svn_wc__conflict_action_map
svn_wc__conflict_create_markers
svn_wc__conflict_description2_dup
svn_wc__conflict_invoke_resolver
svn_wc__conflict_prop_mark_resolved
svn_wc__conflict_read_info
svn_wc__conflict_read_markers
svn_wc__conflict_read_prop_conflict
svn_wc__conflict_read_text_conflict
svn_wc__conflict_read_tree_conflict
svn_wc__conflict_reason_map
svn_wc__conflict_skel_add_prop_conflict
svn_wc__conflict_skel_add_text_conflict
svn_wc__conflict_skel_add_tree_conflict
svn_wc__conflict_skel_create
svn_wc__conflict_skel_is_complete
svn_wc__conflict_skel_resolve
svn_wc__conflict_skel_set_op_merge
svn_wc__conflict_skel_set_op_switch
svn_wc__conflict_skel_set_op_update
svn_wc__conflict_text_mark_resolved
svn_wc__conflict_tree_update_break_moved_away
svn_wc__conflict_tree_update_incoming_move
svn_wc__conflict_tree_update_local_add
svn_wc__conflict_tree_update_moved_away_node
svn_wc__conflict_tree_update_raise_moved_away
svn_wc__conflicted_for_update_p
svn_wc__context_create_with_db
svn_wc__crawl_file_external
svn_wc__create_prejfile
svn_wc__db_base_add_directory
svn_wc__db_base_add_excluded_node
svn_wc__db_base_add_file
svn_wc__db_base_add_incomplete_directory
svn_wc__db_base_add_not_present_node
svn_wc__db_base_add_symlink
svn_wc__db_base_clear_dav_cache_recursive
svn_wc__db_base_get_children
svn_wc__db_base_get_children_info
svn_wc__db_base_get_dav_cache
svn_wc__db_base_get_info
svn_wc__db_base_get_info_internal
svn_wc__db_base_get_lock_tokens_recursive
svn_wc__db_base_get_props
svn_wc__db_base_moved_to
svn_wc__db_base_read_not_present_children
svn_wc__db_base_remove
svn_wc__db_base_set_dav_cache
svn_wc__db_bump_format
svn_wc__db_bump_moved_away
svn_wc__db_close
svn_wc__db_close_many_wcroots
svn_wc__db_commit_queue_add
svn_wc__db_committable_externals_below
svn_wc__db_create_commit_queue
svn_wc__db_depth_get_info
svn_wc__db_drop_root
svn_wc__db_external_add_dir
svn_wc__db_external_add_file
svn_wc__db_external_add_symlink
svn_wc__db_external_read
svn_wc__db_external_remove
svn_wc__db_externals_defined_below
svn_wc__db_externals_gather_definitions
svn_wc__db_fetch_repos_info
svn_wc__db_find_copies_of_repos_path
svn_wc__db_find_repos_node_in_wc
svn_wc__db_find_working_nodes_with_basename
svn_wc__db_follow_moved_to
svn_wc__db_from_relpath
svn_wc__db_get_children_with_cached_iprops
svn_wc__db_get_conflict_marker_files
svn_wc__db_get_excluded_subtrees
svn_wc__db_get_not_present_descendants
svn_wc__db_get_wcroot
svn_wc__db_global_commit
svn_wc__db_global_record_fileinfo
svn_wc__db_global_relocate
svn_wc__db_global_update
svn_wc__db_has_db_mods
svn_wc__db_has_switched_subtrees
svn_wc__db_info_below_working
svn_wc__db_init
svn_wc__db_install_schema_statistics
svn_wc__db_is_switched
svn_wc__db_is_wcroot
svn_wc__db_lock_add
svn_wc__db_lock_remove
svn_wc__db_mark_conflict_internal
svn_wc__db_min_max_revisions
svn_wc__db_node_check_replace
svn_wc__db_op_add_directory
svn_wc__db_op_add_file
svn_wc__db_op_add_symlink
svn_wc__db_op_break_move_internal
svn_wc__db_op_break_moved_away
svn_wc__db_op_bump_revisions_post_update
svn_wc__db_op_copy
svn_wc__db_op_copy_dir
svn_wc__db_op_copy_file
svn_wc__db_op_copy_layer_internal
svn_wc__db_op_copy_shadowed_layer
svn_wc__db_op_copy_symlink
svn_wc__db_op_delete
svn_wc__db_op_delete_many
svn_wc__db_op_depth_for_upgrade
svn_wc__db_op_handle_move_back
svn_wc__db_op_make_copy
svn_wc__db_op_make_copy_internal
svn_wc__db_op_mark_conflict
svn_wc__db_op_mark_resolved
svn_wc__db_op_mark_resolved_internal
svn_wc__db_op_modified
svn_wc__db_op_raise_moved_away
svn_wc__db_op_raise_moved_away_internal
svn_wc__db_op_remove_node
svn_wc__db_op_revert
svn_wc__db_op_set_base_depth
svn_wc__db_op_set_changelist
svn_wc__db_op_set_props
svn_wc__db_op_set_props_internal
svn_wc__db_open
svn_wc__db_pdh_create_wcroot
svn_wc__db_pristine_check
svn_wc__db_pristine_cleanup
svn_wc__db_pristine_get_future_path
svn_wc__db_pristine_get_md5
svn_wc__db_pristine_get_path
svn_wc__db_pristine_get_sha1
svn_wc__db_pristine_install
svn_wc__db_pristine_install_abort
svn_wc__db_pristine_prepare_install
svn_wc__db_pristine_read
svn_wc__db_pristine_remove
svn_wc__db_pristine_transfer
svn_wc__db_process_commit_queue
svn_wc__db_prop_retrieve_recursive
svn_wc__db_read_children
svn_wc__db_read_children_info
svn_wc__db_read_children_of_working_node
svn_wc__db_read_children_walker_info
svn_wc__db_read_conflict
svn_wc__db_read_conflict_internal
svn_wc__db_read_conflict_victims
svn_wc__db_read_info
svn_wc__db_read_info_internal
svn_wc__db_read_inherited_props
svn_wc__db_read_kind
svn_wc__db_read_node_install_info
svn_wc__db_read_pristine_info
svn_wc__db_read_pristine_props
svn_wc__db_read_props
svn_wc__db_read_props_internal
svn_wc__db_read_props_streamily
svn_wc__db_read_repos_info
svn_wc__db_read_single_info
svn_wc__db_revert_list_done
svn_wc__db_revert_list_notify
svn_wc__db_revert_list_read
svn_wc__db_revert_list_read_copied_children
svn_wc__db_revision_status
svn_wc__db_scan_addition
svn_wc__db_scan_addition_internal
svn_wc__db_scan_deletion
svn_wc__db_scan_deletion_internal
svn_wc__db_scan_moved
svn_wc__db_scan_moved_to_internal
svn_wc__db_temp_borrow_sdb
svn_wc__db_temp_clear_access
svn_wc__db_temp_close_access
svn_wc__db_temp_get_access
svn_wc__db_temp_get_all_access
svn_wc__db_temp_get_format
svn_wc__db_temp_op_end_directory_update
svn_wc__db_temp_op_start_directory_update
svn_wc__db_temp_set_access
svn_wc__db_temp_wcroot_tempdir
svn_wc__db_to_relpath
svn_wc__db_update_incoming_move
svn_wc__db_update_local_add
svn_wc__db_update_move_list_notify
svn_wc__db_update_moved_away_conflict_victim
svn_wc__db_upgrade_begin
svn_wc__db_upgrade_insert_external
svn_wc__db_util_fetch_wc_id
svn_wc__db_util_open_db
svn_wc__db_vacuum
svn_wc__db_verify
svn_wc__db_verify_db_full
svn_wc__db_verify_db_full_internal
svn_wc__db_verify_no_work
svn_wc__db_wclock_find_root
svn_wc__db_wclock_obtain
svn_wc__db_wclock_owns_lock
svn_wc__db_wclock_owns_lock_internal
svn_wc__db_wclock_release
svn_wc__db_wclocked
svn_wc__db_wcroot_parse_local_abspath
svn_wc__db_wq_add
svn_wc__db_wq_add_internal
svn_wc__db_wq_fetch_next
svn_wc__db_wq_record_and_fetch_next
svn_wc__del_tree_conflict
svn_wc__delete_many
svn_wc__deserialize_conflict
svn_wc__diff7
svn_wc__diff_base_only_dir
svn_wc__diff_base_only_file
svn_wc__diff_base_working_diff
svn_wc__diff_local_only_dir
svn_wc__diff_local_only_file
svn_wc__ensure_directory
svn_wc__entries_read_internal
svn_wc__entry_is_hidden
svn_wc__eol_value_from_string
svn_wc__expand_keywords
svn_wc__external_register
svn_wc__external_remove
svn_wc__externals_defined_below
svn_wc__externals_find_target_dups
svn_wc__externals_gather_definitions
svn_wc__fetch_base_func
svn_wc__fetch_kind_func
svn_wc__fetch_props_func
svn_wc__find_copies_of_repos_path
svn_wc__find_working_nodes_with_basename
svn_wc__get_actual_props
svn_wc__get_cached_iprop_children
svn_wc__get_committed_queue_pool
svn_wc__get_diff_editor
svn_wc__get_entry
svn_wc__get_excluded_subtrees
svn_wc__get_experimental_dir
svn_wc__get_file_external_editor
svn_wc__get_info
svn_wc__get_iprops
svn_wc__get_not_present_descendants
svn_wc__get_pristine_contents
svn_wc__get_pristine_contents_by_checksum
svn_wc__get_status_editor
svn_wc__get_switch_editor
svn_wc__get_tmpdir
svn_wc__get_translate_info
svn_wc__get_tree_conflict
svn_wc__get_update_editor
svn_wc__get_wcroot
svn_wc__guess_incoming_move_target_nodes
svn_wc__has_local_mods
svn_wc__has_magic_property
svn_wc__has_switched_subtrees
svn_wc__internal_changelist_match
svn_wc__internal_check_wc
svn_wc__internal_conflicted_p
svn_wc__internal_ensure_adm
svn_wc__internal_file_modified_p
svn_wc__internal_get_origin
svn_wc__internal_merge
svn_wc__internal_propdiff
svn_wc__internal_propget
svn_wc__internal_remove_from_revision_control
svn_wc__internal_translated_file
svn_wc__internal_translated_stream
svn_wc__internal_transmit_prop_deltas
svn_wc__internal_transmit_text_deltas
svn_wc__internal_walk_children
svn_wc__internal_walk_status
svn_wc__is_wcroot
svn_wc__mark_resolved_prop_conflicts
svn_wc__mark_resolved_text_conflict
svn_wc__merge_props
svn_wc__min_max_revisions
svn_wc__move2
svn_wc__node_clear_dav_cache_recursive
svn_wc__node_get_base
svn_wc__node_get_changed_info
svn_wc__node_get_children_of_working_node
svn_wc__node_get_commit_status
svn_wc__node_get_lock_tokens_recursive
svn_wc__node_get_md5_from_sha1
svn_wc__node_get_not_present_children
svn_wc__node_get_origin
svn_wc__node_get_pre_ng_status_data
svn_wc__node_get_repos_info
svn_wc__node_get_url
svn_wc__node_has_local_mods
svn_wc__node_has_working
svn_wc__node_is_added
svn_wc__node_is_not_present
svn_wc__node_was_moved_away
svn_wc__node_was_moved_here
svn_wc__open_adm_stream
svn_wc__operation_map
svn_wc__parse_externals_description
svn_wc__perform_file_merge
svn_wc__prop_array_to_hash
svn_wc__prop_list_recursive
svn_wc__prop_retrieve_recursive
svn_wc__props_modified
svn_wc__read_conflict_descriptions2_t
svn_wc__read_conflicts
svn_wc__read_entries_old
svn_wc__read_external_info
svn_wc__release_write_lock
svn_wc__rename_wc
svn_wc__required_lock_for_resolve
svn_wc__resolve_conflicts
svn_wc__resolve_relative_external_url
svn_wc__serialize_conflict
svn_wc__serialize_file_external
svn_wc__status2_from_3
svn_wc__sync_flags_with_props
svn_wc__text_base_path_to_read
svn_wc__translated_stream
svn_wc__unserialize_file_external
svn_wc__upgrade_add_external_info
svn_wc__upgrade_conflict_skel_from_raw
svn_wc__upgrade_sdb
svn_wc__version_string_from_format
svn_wc__walker_default_error_handler
svn_wc__wipe_postupgrade
svn_wc__wq_build_dir_install
svn_wc__wq_build_dir_remove
svn_wc__wq_build_file_commit
svn_wc__wq_build_file_copy_translated
svn_wc__wq_build_file_install
svn_wc__wq_build_file_move
svn_wc__wq_build_file_remove
svn_wc__wq_build_postupgrade
svn_wc__wq_build_prej_install
svn_wc__wq_build_sync_file_flags
svn_wc__wq_merge
svn_wc__wq_run
svn_wc__wrap_diff_callbacks
svn_wc__write_check
svn_wc__write_upgraded_entries
svn_wc_add
svn_wc_add2
svn_wc_add3
svn_wc_add4
svn_wc_add_from_disk
svn_wc_add_from_disk2
svn_wc_add_from_disk3
svn_wc_add_lock
svn_wc_add_lock2
svn_wc_add_repos_file
svn_wc_add_repos_file2
svn_wc_add_repos_file3
svn_wc_add_repos_file4
svn_wc_adm_access_path
svn_wc_adm_access_pool
svn_wc_adm_close
svn_wc_adm_close2
svn_wc_adm_locked
svn_wc_adm_open
svn_wc_adm_open2
svn_wc_adm_open3
svn_wc_adm_open_anchor
svn_wc_adm_probe_open
svn_wc_adm_probe_open2
svn_wc_adm_probe_open3
svn_wc_adm_probe_retrieve
svn_wc_adm_probe_try
svn_wc_adm_probe_try2
svn_wc_adm_probe_try3
svn_wc_adm_retrieve
svn_wc_canonicalize_svn_prop
svn_wc_check_root
svn_wc_check_wc
svn_wc_check_wc2
svn_wc_cleanup
svn_wc_cleanup2
svn_wc_cleanup3
svn_wc_cleanup4
svn_wc_committed_queue_create
svn_wc_conflict_description2_dup
svn_wc_conflict_description_create_prop
svn_wc_conflict_description_create_prop2
svn_wc_conflict_description_create_text
svn_wc_conflict_description_create_text2
svn_wc_conflict_description_create_tree
svn_wc_conflict_description_create_tree2
svn_wc_conflict_version_create
svn_wc_conflict_version_create2
svn_wc_conflict_version_dup
svn_wc_conflicted_p
svn_wc_conflicted_p2
svn_wc_conflicted_p3
svn_wc_context_create
svn_wc_context_destroy
svn_wc_copy
svn_wc_copy2
svn_wc_copy3
svn_wc_crawl_revisions
svn_wc_crawl_revisions2
svn_wc_crawl_revisions3
svn_wc_crawl_revisions4
svn_wc_crawl_revisions5
svn_wc_create_conflict_result
svn_wc_create_notify
svn_wc_create_notify_url
svn_wc_create_tmp_file
svn_wc_create_tmp_file2
svn_wc_crop_tree
svn_wc_crop_tree2
svn_wc_delete
svn_wc_delete2
svn_wc_delete3
svn_wc_delete4
svn_wc_diff
svn_wc_diff2
svn_wc_diff3
svn_wc_diff4
svn_wc_diff5
svn_wc_diff6
svn_wc_dup_notify
svn_wc_dup_status
svn_wc_dup_status2
svn_wc_dup_status3
svn_wc_edited_externals
svn_wc_ensure_adm
svn_wc_ensure_adm2
svn_wc_ensure_adm3
svn_wc_ensure_adm4
svn_wc_entries_read
svn_wc_entry
svn_wc_entry_dup
svn_wc_exclude
svn_wc_external_item2_create
svn_wc_external_item2_dup
svn_wc_external_item_create
svn_wc_external_item_dup
svn_wc_get_actual_target
svn_wc_get_actual_target2
svn_wc_get_adm_dir
svn_wc_get_ancestry
svn_wc_get_changelists
svn_wc_get_default_ignores
svn_wc_get_diff_editor
svn_wc_get_diff_editor2
svn_wc_get_diff_editor3
svn_wc_get_diff_editor4
svn_wc_get_diff_editor5
svn_wc_get_diff_editor6
svn_wc_get_ignores
svn_wc_get_ignores2
svn_wc_get_pristine_contents
svn_wc_get_pristine_contents2
svn_wc_get_pristine_copy_path
svn_wc_get_pristine_props
svn_wc_get_prop_diffs
svn_wc_get_prop_diffs2
svn_wc_get_status_editor
svn_wc_get_status_editor2
svn_wc_get_status_editor3
svn_wc_get_status_editor4
svn_wc_get_status_editor5
svn_wc_get_switch_editor
svn_wc_get_switch_editor2
svn_wc_get_switch_editor3
svn_wc_get_switch_editor4
svn_wc_get_update_editor
svn_wc_get_update_editor2
svn_wc_get_update_editor3
svn_wc_get_update_editor4
svn_wc_has_binary_prop
svn_wc_info_dup
svn_wc_init_traversal_info
svn_wc_is_adm_dir
svn_wc_is_entry_prop
svn_wc_is_normal_prop
svn_wc_is_wc_prop
svn_wc_is_wc_root
svn_wc_is_wc_root2
svn_wc_locked
svn_wc_locked2
svn_wc_mark_missing_deleted
svn_wc_match_ignore_list
svn_wc_maybe_set_repos_root
svn_wc_merge
svn_wc_merge2
svn_wc_merge3
svn_wc_merge4
svn_wc_merge5
svn_wc_merge_prop_diffs
svn_wc_merge_props
svn_wc_merge_props2
svn_wc_merge_props3
svn_wc_move
svn_wc_parse_externals_description
svn_wc_parse_externals_description2
svn_wc_parse_externals_description3
svn_wc_process_committed
svn_wc_process_committed2
svn_wc_process_committed3
svn_wc_process_committed4
svn_wc_process_committed_queue
svn_wc_process_committed_queue2
svn_wc_prop_get
svn_wc_prop_get2
svn_wc_prop_list
svn_wc_prop_list2
svn_wc_prop_set
svn_wc_prop_set2
svn_wc_prop_set3
svn_wc_prop_set4
svn_wc_props_modified_p
svn_wc_props_modified_p2
svn_wc_queue_committed
svn_wc_queue_committed2
svn_wc_queue_committed3
svn_wc_queue_committed4
svn_wc_read_kind
svn_wc_read_kind2
svn_wc_relocate
svn_wc_relocate2
svn_wc_relocate3
svn_wc_relocate4
svn_wc_remove_from_revision_control
svn_wc_remove_from_revision_control2
svn_wc_remove_lock
svn_wc_remove_lock2
svn_wc_resolved_conflict
svn_wc_resolved_conflict2
svn_wc_resolved_conflict3
svn_wc_resolved_conflict4
svn_wc_resolved_conflict5
svn_wc_restore
svn_wc_revert
svn_wc_revert2
svn_wc_revert3
svn_wc_revert4
svn_wc_revert5
svn_wc_revert6
svn_wc_revision_status
svn_wc_revision_status2
svn_wc_set_adm_dir
svn_wc_set_changelist
svn_wc_set_changelist2
svn_wc_status
svn_wc_status2
svn_wc_status3
svn_wc_status_set_repos_locks
svn_wc_text_modified_p
svn_wc_text_modified_p2
svn_wc_translated_file
svn_wc_translated_file2
svn_wc_translated_stream
svn_wc_transmit_prop_deltas
svn_wc_transmit_prop_deltas2
svn_wc_transmit_text_deltas
svn_wc_transmit_text_deltas2
svn_wc_transmit_text_deltas3
svn_wc_traversed_depths
svn_wc_upgrade
svn_wc_version
svn_wc_walk_entries
svn_wc_walk_entries2
svn_wc_walk_entries3
svn_wc_walk_status
Name
.text
Size
500KB
Virtual Size
499KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Library/ogalegit.dll
- IMPHASH 00ebb90722b960dfc4b5e59ad5fb3e38
- SHA256 1618ea1b3aa65950fe82d1981ede0a9d0da9b74e94f80d730e4564c31ef69f83
- MD5 56a3287be7cba153367c35f7567b879d
- SHA1 e0964dd5d4ee0e1500f0aa1e53d789f13143ca91
- SHA512 5a033a579489abf4a08c1943aa8d554468d6ad49eacfe05a98193b940c7d80743d5e5b1d592e1f8316a87666ed04a0d4bb3c506062cc8a7b4ce810ec2e0fe5da
- SSDEEP 12288:Ebpfft8pXUgKC/oY/BQE3T8grVZnAnh7Hs3Ir0r:EJt8pzGY/BddrVZnAnhtu
- MD5 SHA1 SHA512 SSDEEP
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
PE Signature issue
Digest
c7:e9:01:ee:49:64:cf:14:cb:16:56:7e:8d:cf:76:be:9c:a2:55:4b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 4, 2025
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2006 - Apr 26, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:46:9e:cb:00:04:00:00:00:65
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2006 - Oct 4, 2007
Minor OS version
0
Major OS version
6
Entry point
503423
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\bt\21\src\client\office\obfuscate\obj\i386\oOGALegit.pdb
kernel32
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
IsDebuggerPresent
HeapSize
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
CreateFileA
CloseHandle
FlushFileBuffers
GetStartupInfoA
ReadProcessMemory
GlobalFree
GlobalAlloc
FindClose
FindFirstFileA
GetSystemDirectoryA
GetDriveTypeA
CreateDirectoryW
GetCurrentDirectoryW
CreateDirectoryA
LocalFree
LocalAlloc
TryEnterCriticalSection
GetVolumeInformationA
GetComputerNameW
CompareFileTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetSystemTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileW
FindNextFileA
ReadFile
lstrlenA
lstrlenW
GetSystemInfo
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
DeviceIoControl
WaitForSingleObject
ResumeThread
SetThreadAffinityMask
CreateThread
GetProcessAffinityMask
GetExitCodeThread
GetLogicalDriveStringsA
GlobalMemoryStatus
SetEndOfFile
RaiseException
GetFileType
GetStdHandle
SetHandleCount
Sleep
GetCurrentThread
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetVersionExA
GetCommandLineA
GetSystemDefaultLangID
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcAddress
FreeLibrary
HeapAlloc
GetFileAttributesA
GetModuleFileNameA
GetLastError
GetProcessHeap
HeapFree
GetVersion
InitializeCriticalSectionAndSpinCount
VirtualProtect
ntdll
RtlUnwind
advapi32
RegEnumKeyExW
RegSetValueExA
RegCreateKeyExA
LookupAccountNameW
CopySid
GetLengthSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
CryptReleaseContext
CryptDestroyKey
GetCurrentHwProfileW
RegQueryValueExW
RegEnumKeyA
CryptImportKey
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetCurrentHwProfileA
RegEnumKeyExA
RegOpenKeyExW
CryptDecrypt
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptAcquireContextA
ole32
CoSetProxyBlanket
IIDFromString
CoInitialize
CoUninitialize
CoCreateInstance
StringFromGUID2
CLSIDFromProgID
CoCreateGuid
oleaut32
VariantClear
VariantInit
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
user32
GetSystemMetrics
BroadcastSystemMessageA
GetDesktopWindow
wsprintfA
crypt32
CertOpenStore
CertComparePublicKeyInfo
CertCloseStore
CertCreateCertificateContext
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindExtension
CryptExportPublicKeyInfo
CertVerifySubjectCertificateContext
CertGetIssuerCertificateFromStore
CertFreeCertificateContext
wininet
InternetOpenA
InternetQueryOptionA
HttpSendRequestA
InternetErrorDlg
HttpOpenRequestA
InternetConnectA
InternetReadFile
HttpQueryInfoA
InternetSetOptionA
InternetAutodial
InternetGetConnectedState
InternetCloseHandle
setupapi
SetupDiGetClassDevsA
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetLastErrors
GetNonGenuineProductList
LegitCheck
LegitCheckCA
SetPartnerID
Name
.text
Size
569KB
Virtual Size
568KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=4, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=9, id=109, version=41204,
count=4, id=125, version=41204,
count=2, id=25, version=9210,
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=148, id=109, productName=VS2005 build 50727, version=50727,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=243, id=1, productName=Unmarked objects,
count=73, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=121, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=69, version=9111,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Library/qtquickcontrols2materialstyleplugin.dll
- IMPHASH 1c8b1e525a0c3c25cfb6a47622d1bc7d
- SHA256 2eabb8e5f3b57e42c6f29db645edc4bac17910b1ac0d8d0083c66b152f8878b8
- MD5 b7d862f5f15e86b73c670913684fa8e4
- SHA1 8266952e8e14d04b5e710563935791d1dd90a2ae
- SHA512 e68e6298f557cb92eb2aaa9d334621eb1b29ab1186a4f25e22f28667b5ebc4732639827c5ce136360525f0ee300ff37ed424dd311626af3fd5c36710fbf0ff23
- SSDEEP 12288:6+pIreBgpxprwppphpVphp/pnp/pNp6pQpQpxpVpApB3p/p4pWpcpgpCpopipmp+:5geUJ
- MD5 SHA1 SHA512 SSDEEP
Digest
0b:22:c1:ad:15:84:ce:dc:d3:57:d7:54:61:92:28:7f:0a:ed:8e:22:f4:2e:54:1a:44:6a:f0:48:88:a0:56:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
Chains
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
Serial Number
07:e2:ef:84:3d:0d:6f:58:cb:bb:06:e3:e8:b3:d3:20
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 6, 2020 - Dec 31, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
45556
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\qt\work\qt\qtquickcontrols2\qml\QtQuick\Controls.2\Material\qtquickcontrols2materialstyleplugin.pdb
qt5quick
?qt_metacast@QQuickItem@@UEAAPEAXPEBD@Z
?staticMetaObject@QQuickItem@@2UQMetaObject@@B
?isSubtreeBlocked@QSGOpacityNode@@UEBA_NXZ
?clipNode@QQuickItemPrivate@@QEBAPEAVQQuickDefaultClipNode@@XZ
?setRect@QQuickDefaultClipNode@@QEAAXAEBVQRectF@@@Z
?setOpacity@QSGOpacityNode@@QEAAXN@Z
??1QSGOpacityNode@@UEAA@XZ
??0QSGOpacityNode@@QEAA@XZ
??0QQuickItem@@QEAA@PEAV0@@Z
??1QSGNode@@UEAA@XZ
??0QSGNode@@QEAA@XZ
?mapFromItem@QQuickItem@@QEBA?AVQPointF@@PEBV1@AEBV2@@Z
?isEnabled@QQuickItem@@QEBA_NXZ
?setClip@QQuickItem@@QEAAX_N@Z
?sceneGraphContext@QQuickItemPrivate@@QEBAPEAVQSGContext@@XZ
?get@QQuickItemPrivate@@SAPEAV1@PEAVQQuickItem@@@Z
?createRectangleNode@QQuickWindow@@QEBAPEAVQSGRectangleNode@@XZ
?setMatrix@QSGTransformNode@@QEAAXAEBVQMatrix4x4@@@Z
??0QSGTransformNode@@QEAA@XZ
?implicitHeight@QQuickItem@@QEBANXZ
?windowDeactivateEvent@QQuickItem@@MEAAXXZ
?wheelEvent@QQuickItem@@MEAAXPEAVQWheelEvent@@@Z
?updatePolish@QQuickItem@@MEAAXXZ
?touchUngrabEvent@QQuickItem@@MEAAXXZ
?touchEvent@QQuickItem@@MEAAXPEAVQTouchEvent@@@Z
?textureProvider@QQuickItem@@UEBAPEAVQSGTextureProvider@@XZ
?releaseResources@QQuickItem@@MEAAXXZ
?preprocess@QSGNode@@UEAAXXZ
?mouseUngrabEvent@QQuickItem@@MEAAXXZ
?mouseReleaseEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?mousePressEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?mouseMoveEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QQuickItem@@MEAAXPEAVQMouseEvent@@@Z
?keyReleaseEvent@QQuickItem@@MEAAXPEAVQKeyEvent@@@Z
?keyPressEvent@QQuickItem@@MEAAXPEAVQKeyEvent@@@Z
?isTextureProvider@QQuickItem@@UEBA_NXZ
?isSubtreeBlocked@QSGNode@@UEBA_NXZ
?inputMethodQuery@QQuickItem@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QQuickItem@@MEAAXPEAVQInputMethodEvent@@@Z
?hoverMoveEvent@QQuickItem@@MEAAXPEAVQHoverEvent@@@Z
?hoverLeaveEvent@QQuickItem@@MEAAXPEAVQHoverEvent@@@Z
?hoverEnterEvent@QQuickItem@@MEAAXPEAVQHoverEvent@@@Z
?geometryChanged@QQuickItem@@MEAAXAEBVQRectF@@0@Z
?focusOutEvent@QQuickItem@@MEAAXPEAVQFocusEvent@@@Z
?qt_metacall@QQuickItem@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?focusInEvent@QQuickItem@@MEAAXPEAVQFocusEvent@@@Z
?event@QQuickItem@@MEAA_NPEAVQEvent@@@Z
?dropEvent@QQuickItem@@MEAAXPEAVQDropEvent@@@Z
?dragMoveEvent@QQuickItem@@MEAAXPEAVQDragMoveEvent@@@Z
?dragLeaveEvent@QQuickItem@@MEAAXPEAVQDragLeaveEvent@@@Z
?dragEnterEvent@QQuickItem@@MEAAXPEAVQDragEnterEvent@@@Z
?contains@QQuickItem@@UEBA_NAEBVQPointF@@@Z
?componentComplete@QQuickItem@@MEAAXXZ
?clipRect@QQuickItem@@UEBA?AVQRectF@@XZ
?classBegin@QQuickItem@@MEAAXXZ
?childMouseEventFilter@QQuickItem@@MEAA_NPEAV1@PEAVQEvent@@@Z
?boundingRect@QQuickItem@@UEBA?AVQRectF@@XZ
?createImageNode@QQuickWindow@@QEBAPEAVQSGImageNode@@XZ
?effectiveDevicePixelRatio@QQuickWindow@@QEBANXZ
?createTextureFromImage@QQuickWindow@@QEBAPEAVQSGTexture@@AEBVQImage@@@Z
??1QSGTransformNode@@UEAA@XZ
?appendChildNode@QSGNode@@QEAAXPEAV1@@Z
?itemChange@QQuickItem@@MEAAXW4ItemChange@1@AEBTItemChangeData@1@@Z
?update@QQuickItem@@QEAAXXZ
?setFlag@QQuickItem@@QEAAXW4Flag@1@_N@Z
?setVisible@QQuickItem@@QEAAX_N@Z
?isVisible@QQuickItem@@QEBA_NXZ
?height@QQuickItem@@QEBANXZ
?width@QQuickItem@@QEBANXZ
?window@QQuickItem@@QEBAPEAVQQuickWindow@@XZ
??1QQuickItem@@UEAA@XZ
?childCount@QSGNode@@QEBAHXZ
qt5gui
??1QFontInfo@@QEAA@XZ
?family@QFontInfo@@QEBA?AVQString@@XZ
??0QColor@@QEAA@W4GlobalColor@Qt@@@Z
??4QColor@@QEAAAEAV0@AEBV0@@Z
??8QColor@@QEBA_NAEBV0@@Z
??0QImage@@QEAA@HHW4Format@0@@Z
?setCapitalization@QFont@@QEAAXW4Capitalization@1@@Z
??1QImage@@UEAA@XZ
?fill@QImage@@QEAAXW4GlobalColor@Qt@@@Z
??0QPen@@QEAA@XZ
??1QPen@@QEAA@XZ
?width@QPen@@QEBAHXZ
??0QFontInfo@@QEAA@AEBVQFont@@@Z
?setWeight@QFont@@QEAAXH@Z
?setPixelSize@QFont@@QEAAXH@Z
?setFamily@QFont@@QEAAXAEBVQString@@@Z
??1QFont@@QEAA@XZ
??0QFont@@QEAA@XZ
??BQColor@@QEBA?AVQVariant@@XZ
?fromRgba@QColor@@SA?AV1@I@Z
?convertTo@QColor@@QEBA?AV1@W4Spec@1@@Z
?toHsl@QColor@@QEBA?AV1@XZ
?setHslF@QColor@@QEAAXNNNN@Z
?lightnessF@QColor@@QEBANXZ
?saturationF@QColor@@QEBANXZ
?hueF@QColor@@QEBANXZ
?rgba@QColor@@QEBAIXZ
?setAlphaF@QColor@@QEAAXN@Z
?alphaF@QColor@@QEBANXZ
?setAlpha@QColor@@QEAAXH@Z
??0QColor@@QEAA@PEBD@Z
??0QColor@@QEAA@AEBVQString@@@Z
??0QColor@@QEAA@I@Z
?translate@QMatrix4x4@@QEAAXMM@Z
?setToIdentity@QMatrix4x4@@QEAAXXZ
?setRenderHint@QPainter@@QEAAXW4RenderHint@1@_N@Z
?drawArc@QPainter@@QEAAXAEBVQRectF@@HH@Z
?setPen@QPainter@@QEAAXAEBVQPen@@@Z
?end@QPainter@@QEAA_NXZ
??1QPainter@@QEAA@XZ
??0QPainter@@QEAA@PEAVQPaintDevice@@@Z
?setWidth@QPen@@QEAAXH@Z
?setColor@QPen@@QEAAXAEBVQColor@@@Z
??0QColor@@QEAA@XZ
qt5qml
?qmlRegisterModule@@YAXPEBDHH@Z
?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PEAX@Z
?qmlunregister@QQmlPrivate@@YAXW4RegistrationType@1@_K@Z
??6QQmlInfo@@QEAAAEAV0@PEBD@Z
??1QQmlInfo@@QEAA@XZ
?qmlWarning@QtQml@@YA?AVQQmlInfo@@PEBVQObject@@@Z
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPEAVQObject@@@Z
?initializeEngine@QQmlExtensionPlugin@@UEAAXPEAVQQmlEngine@@PEBD@Z
??6QQmlInfo@@QEAAAEAV0@AEBVQString@@@Z
qt5core
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?qResourceFeatureZlib@@YAEXZ
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?shared_null@QHashData@@2U1@B
?cleanPath@QDir@@SA?AVQString@@AEBV2@@Z
?path@QUrl@@QEBA?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
?scheme@QUrl@@QEBA?AVQString@@XZ
??4QVariant@@QEAAAEAV0@$$QEAV0@@Z
?rehash@QHashData@@QEAAXH@Z
?detach_helper@QHashData@@QEAAPEAU1@P6AXPEAUNode@1@PEAX@ZP6AX0@ZHH@Z
?allocateNode@QHashData@@QEAAPEAXH@Z
?qHash@@YAIAEBVQString@@I@Z
??8@YA_NAEBVQString@@0@Z
?insert@QString@@QEAAAEAV1@HVQChar@@@Z
?startsWith@QString@@QEBA_NVQChar@@W4CaseSensitivity@Qt@@@Z
??0QChar@@QEAA@UQLatin1Char@@@Z
?isRelative@QUrl@@QEBA_NXZ
??1QUrl@@QEAA@XZ
??0QUrl@@QEAA@AEBV0@@Z
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPEAU12@PEBVQObject@@@Z
?registerNormalizedTypedef@QMetaType@@SAHAEBVQByteArray@@H@Z
?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@XZ
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?append@QByteArray@@QEAAAEAV1@D@Z
?reserve@QByteArray@@QEAAXH@Z
??0QByteArray@@QEAA@AEBV0@@Z
??0QByteArray@@QEAA@XZ
?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z
?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z
?className@QMetaObject@@QEBAPEBDXZ
?warning@QMessageLogger@@QEBAXPEBDZZ
??8QString@@QEBA_NVQLatin1String@@@Z
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??0QString@@QEAA@VQLatin1String@@@Z
?value@QSettings@@QEBA?AVQVariant@@AEBVQString@@AEBV2@@Z
??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@H@Z
?noquote@QDebug@@QEAAAEAV1@XZ
??1QDebug@@QEAA@XZ
?keyToValue@QMetaEnum@@QEBAHPEBDPEA_N@Z
?free_helper@QHashData@@QEAAXP6AXPEAUNode@1@@Z@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?toByteArray@QVariant@@QEBA?AVQByteArray@@XZ
?toInt@QVariant@@QEBAHPEA_N@Z
?type@QVariant@@QEBA?AW4Type@1@XZ
??1QVariant@@QEAA@XZ
??0QVariant@@QEAA@XZ
?parent@QObject@@QEBAPEAV1@XZ
?enumerator@QMetaObject@@QEBA?AVQMetaEnum@@H@Z
?indexOfEnumerator@QMetaObject@@QEBAHPEBD@Z
?dispose@QListData@@SAXPEAUData@1@@Z
?isNull@QByteArray@@QEBA_NXZ
?constData@QByteArray@@QEBAPEBDXZ
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@PEBDH@Z
?warning@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?qgetenv@@YA?AVQByteArray@@PEBD@Z
?length@QLineF@@QEBANXZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?deleteLater@QObject@@QEAAXXZ
?killTimer@QObject@@QEAAXH@Z
?startTimer@QObject@@QEAAHHW4TimerType@Qt@@@Z
?setObjectName@QObject@@QEAAXAEBVQString@@@Z
?objectName@QObject@@QEBA?AVQString@@XZ
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
??1QString@@QEAA@XZ
??1Connection@QMetaObject@@QEAA@XZ
?cast@QMetaObject@@QEBAPEAVQObject@@PEAV2@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?valueForProgress@QEasingCurve@@QEBANN@Z
??1QEasingCurve@@QEAA@XZ
??0QEasingCurve@@QEAA@W4Type@0@@Z
??1QObject@@UEAA@XZ
??BQByteArray@@QEBAPEBDXZ
qt5quicktemplates2
?setFont@QQuickTheme@@QEAAXW4Scope@1@AEBVQFont@@@Z
?staticMetaObject@QQuickAbstractButton@@2UQMetaObject@@B
?get@QQuickAbstractButtonPrivate@@SAPEAV1@PEAVQQuickAbstractButton@@@Z
qt5quickcontrols2
?qt_metacall@QQuickStylePlugin@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QQuickStylePlugin@@QEAA@PEAVQObject@@@Z
??1QQuickStylePlugin@@UEAA@XZ
?resolvedUrl@QQuickStylePlugin@@QEBA?AVQUrl@@AEBVQString@@@Z
?staticMetaObject@QQuickAttachedObject@@2UQMetaObject@@B
?qt_metacast@QQuickAttachedObject@@UEAAPEAXPEBD@Z
?qt_metacall@QQuickAttachedObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
??0QQuickAnimatedNode@@QEAA@PEAVQQuickItem@@@Z
?staticMetaObject@QQuickStylePlugin@@2UQMetaObject@@B
?isDarkSystemTheme@QQuickStylePrivate@@SA_NXZ
?settings@QQuickStylePrivate@@SA?AV?$QSharedPointer@VQSettings@@@@AEBVQString@@@Z
?init@QQuickAttachedObject@@IEAAXXZ
?attachedParent@QQuickAttachedObject@@QEBAPEAV1@XZ
?attachedChildren@QQuickAttachedObject@@QEBA?AV?$QList@PEAVQQuickAttachedObject@@@@XZ
??1QQuickAttachedObject@@UEAA@XZ
??0QQuickAttachedObject@@QEAA@PEAVQObject@@@Z
?stopped@QQuickAnimatedNode@@QEAAXXZ
?restart@QQuickAnimatedNode@@QEAAXXZ
?duration@QQuickAnimatedNode@@QEBAHXZ
?staticMetaObject@QQuickAnimatedNode@@2UQMetaObject@@B
?stop@QQuickAnimatedNode@@QEAAXXZ
?qt_metacast@QQuickAnimatedNode@@UEAAPEAXPEBD@Z
?qt_metacall@QQuickAnimatedNode@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?metaObject@QQuickAnimatedNode@@UEBAPEBUQMetaObject@@XZ
?start@QQuickAnimatedNode@@QEAAXH@Z
?window@QQuickAnimatedNode@@QEBAPEAVQQuickWindow@@XZ
?setLoopCount@QQuickAnimatedNode@@QEAAXH@Z
?setDuration@QQuickAnimatedNode@@QEAAXH@Z
?setCurrentTime@QQuickAnimatedNode@@QEAAXH@Z
?currentTime@QQuickAnimatedNode@@QEBAHXZ
?qt_metacast@QQuickStylePlugin@@UEAAPEAXPEBD@Z
kernel32
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
vcruntime140
memcpy
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list
api-ms-win-crt-math-l1-1-0
sqrt
cos
atan2
ceil
sin
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_configure_narrow_argv
_register_onexit_function
qt_plugin_instance
qt_plugin_query_metadata
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
659KB
Virtual Size
659KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmetad
Size
512B
Virtual Size
137B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=19, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=13, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=301, id=1, productName=Unmarked objects,
count=71, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Library/scintilla.dll
- IMPHASH b8e37f1bf9eef355f0a91bc945fbc947
- SHA256 76bb9249bbfd9d053ec03d0cbae2f20656e0f75b7a882b12d141cbbcf9a98153
- MD5 e8baaff43abf29a45e9793f1b8298fc9
- SHA1 10ba728ef99f3b701dfef4c88b6000114eca7334
- SHA512 06145adb66558c38787ed596729654e8897671629a0f75e3b88d3603c1acfc07a9ebf9b0ac9c414a97b41f6f72c99c5221f4b770389b8f5b12cfb94c76fc72cb
- SSDEEP 12288:nMlAN+JHuB9FwneXt+AXUd5RHsGEW1bSnUsRun7sE1LXeh1+sE:nYHuB9FweXtgRHsGEWsUyu7s+j
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
460560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
CreateFileW
WriteConsoleW
GetLocaleInfoA
GetCPInfo
IsValidCodePage
WideCharToMultiByte
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetTickCount
IsDBCSLeadByteEx
GetACP
MultiByteToWideChar
MulDiv
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
TlsSetValue
user32
SetScrollInfo
ScreenToClient
ClientToScreen
GetScrollInfo
SystemParametersInfoA
SendMessageA
DefWindowProcA
CallWindowProcA
GetDoubleClickTime
UnregisterClassA
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
ScrollWindow
GetUpdateRgn
UpdateWindow
AppendMenuA
IsWindowUnicode
KillTimer
SetTimer
MsgWaitForMultipleObjects
SetFocus
IsClipboardFormatAvailable
EmptyClipboard
RegisterClipboardFormatA
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetDlgCtrlID
IsChild
RegisterClassExW
PostMessageA
GetMessageTime
GetKeyboardLayout
LoadCursorA
GetParent
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
GetWindowLongA
InflateRect
FrameRect
FillRect
DrawFocusRect
GetSysColor
MapWindowPoints
GetCursorPos
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DrawTextW
DrawTextA
TrackPopupMenu
DestroyMenu
CreatePopupMenu
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassExA
gdi32
GetDeviceCaps
CreateCompatibleBitmap
TranslateCharsetInfo
CreateRectRgn
CreateBitmap
CombineRgn
Polygon
ExtTextOutW
ExtTextOutA
MoveToEx
GetObjectA
CreateDIBSection
GetTextMetricsA
SetTextAlign
SetTextColor
SetBkMode
SetBkColor
SelectPalette
SelectObject
RoundRect
RealizePalette
Rectangle
LineTo
IntersectClipRect
GetTextExtentExPointW
GetTextExtentExPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetStockObject
GetNearestColor
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreatePatternBrush
CreatePen
CreatePalette
CreateFontIndirectA
CreateCompatibleDC
BitBlt
imm32
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionFontA
ImmNotifyIME
ImmSetCompositionWindow
ImmGetContext
ole32
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
DoDragDrop
Scintilla_DirectFunction
Name
.text
Size
514KB
Virtual Size
513KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=27412,
count=138, id=261, version=27412,
count=14, id=260, version=27412,
count=34, id=261, version=30034,
count=15, id=260, version=30034,
count=9, id=259, version=30034,
count=11, id=257, version=27412,
count=227, id=1, productName=Unmarked objects,
count=96, id=261, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Library/symsrv.dll
- IMPHASH cc1c69c793f1399c1a01889d339ecfc1
- SHA256 3ba985197a1dedc2c63de0a2b272971edcb39bb6ee35e10c4fe36fc664caa26a
- MD5 3cc4ddd705333741363b1e81af777203
- SHA1 267a2e07731f7b80af7cb789ac26fb2db985c186
- SHA512 bc64022f72a148f0a417781cd45c9fcb78a98c57b761ee734cbf70fc716405fe59f0c1ec5861476ea8d81b7722f1eb869d015e0201ced72dbaa51544c652734c
- SSDEEP 12288:nCTyy0PX2AquNmgttsqtYT9cY4bYssQxe:Cg/xDs4YT9cYXssQg
- MD5 SHA1 SHA512 SSDEEP
Digest
c3:12:33:ee:92:53:8c:3b:09:c9:02:fd:18:68:02:25:6a:5d:50:08:6f:8d:d7:ef:b5:19:28:08:c6:e3:fa:34
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 1, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ba:1f:3f:19:f7:c1:75:bd:7c:00:01:00:00:01:ba
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
7600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
symsrv.pdb
msvcrt
_wtoi64
getenv
strnlen
swprintf_s
_vscwprintf
wcsnlen
_callnewh
_vscprintf
_stricmp
_vsnwprintf_s
vswprintf_s
??0exception@@QEAA@AEBQEBDH@Z
?what@exception@@UEBAPEBDXZ
_CxxThrowException
memcpy
tolower
_wmakepath_s
memmove
iswspace
_wcsdup
_XcptFilter
_amsg_exit
_wcsicmp
??_V@YAXPEAX@Z
__C_specific_handler
fclose
_wcsnicmp
wcschr
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
_errno
_initterm
_lock
??0exception@@QEAA@XZ
_unlock
__dllonexit
_onexit
??1exception@@UEAA@XZ
_purecall
??3@YAXPEAX@Z
free
__CxxFrameHandler3
_wcslwr_s
wcsrchr
fgetws
wcsstr
swscanf_s
_wfopen
strpbrk
strstr
realloc
iswprint
??0exception@@QEAA@AEBQEBD@Z
memcpy_s
towlower
wcsncmp
strcpy_s
_wcsupr
malloc
strcat_s
isspace
_wcslwr
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_vsnwprintf
wcscat_s
strrchr
memcmp
memset
wcsncpy_s
wcscpy_s
calloc
wcscmp
api-ms-win-core-libraryloader-l1-1-0
GetModuleHandleExW
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
GetModuleFileNameA
GetModuleHandleW
LoadLibraryExA
api-ms-win-core-heap-l1-1-0
HeapAlloc
HeapFree
GetProcessHeap
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
CreateThread
TerminateProcess
OpenProcessToken
GetCurrentProcessId
GetExitCodeThread
GetCurrentProcess
api-ms-win-core-misc-l1-1-0
FormatMessageW
LocalFree
LocalAlloc
Sleep
GlobalFree
LocalReAlloc
api-ms-win-core-debug-l1-1-0
OutputDebugStringW
DebugBreak
IsDebuggerPresent
api-ms-win-security-base-l1-1-0
AllocateAndInitializeSid
EqualSid
GetTokenInformation
FreeSid
api-ms-win-core-file-l1-1-0
CreateFileW
GetFileTime
GetFileSizeEx
CreateDirectoryW
SetFilePointerEx
DeleteFileW
GetDriveTypeW
RemoveDirectoryW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileAttributesW
GetFileAttributesExW
GetFileSize
FileTimeToLocalFileTime
DeleteFileA
CreateFileA
LocalFileTimeToFileTime
GetFileInformationByHandle
SetFilePointer
SetFileTime
ReadFile
WriteFile
api-ms-win-core-errorhandling-l1-1-0
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetLastError
SetErrorMode
api-ms-win-core-processenvironment-l1-1-0
GetEnvironmentVariableW
ExpandEnvironmentStringsW
api-ms-win-core-sysinfo-l1-1-0
GetVersionExW
GetSystemDirectoryW
GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount64
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
MultiByteToWideChar
api-ms-win-core-synch-l1-1-0
EnterCriticalSection
WaitForSingleObject
SetWaitableTimer
AcquireSRWLockShared
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
DeleteCriticalSection
ReleaseMutex
ReleaseSRWLockShared
ReleaseSemaphore
InitializeCriticalSection
CreateSemaphoreExW
TryAcquireSRWLockExclusive
SetEvent
OpenMutexW
LeaveCriticalSection
ResetEvent
InitializeCriticalSectionAndSpinCount
AcquireSRWLockExclusive
InitializeSRWLock
ReleaseSRWLockExclusive
CreateEventW
api-ms-win-core-handle-l1-1-0
CloseHandle
rpcrt4
UuidCreate
api-ms-win-core-localregistry-l1-1-0
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ws2_32
GetAddrInfoW
WSAStartup
FreeAddrInfoW
WSACleanup
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
oleaut32
SysFreeString
shlwapi
PathFindFileNameW
kernel32
WaitForMultipleObjects
IsProcessorFeaturePresent
CancelSynchronousIo
ntdll
RtlRunOnceExecuteOnce
RtlUTF8ToUnicodeN
crypt32
CryptStringToBinaryW
CryptBinaryToStringW
bcrypt
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
api-ms-win-core-memory-l1-1-0
VirtualProtect
VirtualQuery
api-ms-win-core-threadpool-l1-1-0
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
EulaDlgProc
RunDllEntry
SymbolServer
SymbolServerByIndex
SymbolServerByIndexAndChecksumsW
SymbolServerByIndexW
SymbolServerClose
SymbolServerDeltaName
SymbolServerDeltaNameW
SymbolServerGetIndexString
SymbolServerGetIndexStringW
SymbolServerGetOptionData
SymbolServerGetOptions
SymbolServerGetSupplement
SymbolServerGetSupplementW
SymbolServerGetVersion
SymbolServerIsStore
SymbolServerIsStoreW
SymbolServerPing
SymbolServerPingW
SymbolServerPingWEx
SymbolServerSetHttpAuthHeader
SymbolServerSetOptions
SymbolServerSetOptionsW
SymbolServerStoreFile
SymbolServerStoreFileW
SymbolServerStoreSupplement
SymbolServerStoreSupplementW
SymbolServerW
SymbolServerWEx
SymbolServerWithChecksumsW
httpCloseHandle
httpOpenFileHandle
httpOpenFileHandleW
httpQueryDataAvailable
httpReadFile
Name
.text
Size
220KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
4KB
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.mrdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=48, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=32595,
count=25, id=260, version=32595,
count=296, id=1, productName=Unmarked objects,
count=9, id=257, version=32595,
count=14, id=261, version=32595,
count=1, id=256, version=32595,
count=49, id=264, version=32595,
count=1, id=255, version=32595,
count=1, id=258, version=32595,
Resource/ChromeSetup.exe
- IMPHASH e6c02629d6c5d6362089bd2e1e7bded8
- SHA256 7a9416a603cbb0de9991f9c408bd6b31a29ef555e220a7d0408092e8e5349243
- MD5 fb255bdad5235134276fe22e08a51fef
- SHA1 01916c35c4021c6fe6c4053a6c0ae8e0d281bc06
- SHA512 81aa6060ca6ea050c1004e5973fc691a200f97c1cacd26561a20d0514a029d76596d35508179e7fded95285efb69ca6628635d2b0318e06f83d0a23a3bdf4c7c
- SSDEEP 196608:YiZs+irLhOHX8XJKtO8H9eyw2fgUheFt7oO0qdezXJI7c+d71xk4YVa2:YiZU/hO38XJKt79eyw2fgz/MOhdezXJf
- MD5 SHA1 SHA512 SSDEEP
Digest
01:4c:cf:f2:a7:a8:8a:d4:b6:d6:6c:93:62:bb:44:1c:93:77:7f:eb:7e:96:04:9f:97:2f:5c:17:06:ac:f2:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 15, 2025
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 8, 2024 - Apr 10, 2027
Subject
CN=Dummy certificate
Serial Number
01
Issuer
CN=Dummy issuer
Timespan
Jan 1, 2013 - Apr 1, 2013
Minor OS version
0
Major OS version
10
Entry point
1939552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
UpdaterSetup.exe.pdb
advapi32
AddAce
AdjustTokenPrivileges
AllocateAndInitializeSid
BuildTrusteeWithSidW
ChangeServiceConfig2W
ChangeServiceConfigW
CheckTokenMembership
CloseServiceHandle
ConvertSidToStringSidW
ConvertStringSidToSidW
CopySid
CreateProcessAsUserW
CreateProcessWithTokenW
CreateServiceW
DeleteService
DuplicateTokenEx
EqualSid
FreeSid
GetAce
GetAclInformation
GetLengthSid
GetNamedSecurityInfoW
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
GetSecurityInfo
GetSidIdentifierAuthority
GetSidLengthRequired
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
ImpersonateLoggedOnUser
InitializeAcl
InitializeSecurityDescriptor
InitializeSid
IsValidAcl
IsValidSecurityDescriptor
IsValidSid
LookupAccountSidW
LookupPrivilegeValueW
MakeAbsoluteSD
MakeSelfRelativeSD
OpenProcessToken
OpenSCManagerW
OpenServiceW
OpenThreadToken
QueryServiceConfigW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
RevertToSelf
SetEntriesInAclW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityInfo
TraceEvent
UnregisterTraceGuids
dbghelp
SymCleanup
SymFromAddr
SymGetLineFromAddr64
SymGetSearchPathW
SymInitialize
SymSetOptions
SymSetSearchPathW
oleaut32
LoadTypeLi
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayUnaccessData
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SystemTimeToVariantTime
VariantClear
shell32
CommandLineToArgvW
ord680
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteExW
shlwapi
ord437
PathMatchSpecW
user32
AllowSetForegroundWindow
CharUpperW
CreateDialogParamW
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageW
GetActiveWindow
GetClientRect
GetMessageW
GetMonitorInfoW
GetParent
GetQueueStatus
GetShellWindow
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
GetWindowThreadProcessId
KillTimer
LoadImageW
MapWindowPoints
MessageBoxExW
MonitorFromWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExW
SendMessageW
SetForegroundWindow
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TranslateMessage
UnregisterClassW
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AssignProcessToJobObject
CloseHandle
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMutexW
CreateNamedPipeW
CreatePipe
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DecodePointer
DeleteCriticalSection
DeleteFileW
DeleteProcThreadAttributeList
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FindResourceW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessId
GetProcessMitigationPolicy
GetProcessTimes
GetProductInfo
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetTempPathW
GetThreadId
GetThreadPreferredUILanguages
GetThreadPriority
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserPreferredUILanguages
GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSetInformation
HeapSize
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeProcThreadAttributeList
InitializeSListHead
InitializeSRWLock
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
K32GetModuleInformation
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
Process32FirstW
Process32NextW
ProcessIdToSessionId
QueryFullProcessImageNameW
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
RemoveDirectoryW
ReplaceFileW
ResetEvent
RtlCaptureStackBackTrace
RtlUnwind
SetCurrentDirectoryW
SetDefaultDllDirectories
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetThreadInformation
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableSRW
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TzSpecificLocalTimeToSystemTime
UnhandledExceptionFilter
UnmapViewOfFile
UnregisterWaitEx
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpiW
ole32
CoAddRefServerProcess
CoCreateInstance
CoGetCallContext
CoInitializeEx
CoRegisterClassObject
CoRegisterInitializeSpy
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRevokeInitializeSpy
CoTaskMemFree
CoUninitialize
IIDFromString
StringFromGUID2
ntdll
NtDeleteKey
NtQueryObject
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
EnterCriticalPolicySection
LeaveCriticalPolicySection
UnloadUserProfile
secur32
GetUserNameExW
wtsapi32
WTSEnumerateSessionsW
WTSFreeMemory
WTSQuerySessionInformationW
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoUninitialize
winhttp
WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpSetStatusCallback
GetHandleVerifier
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
612KB
Virtual Size
612KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
385B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
CPADinfo
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
malloc_h
Size
1024B
Virtual Size
697B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6.3MB
Virtual Size
6.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Resource/DateInterval_serialize-003.phpt
- SHA256 12aeb29d17c47bb7ed2094283e5b50ccfafa29e2c7236e42893eb8097c121813
- MD5 ec27ab2bd79a21a4d862044f45279a23
- SHA1 72defb0648dc8a506f4b4125feb0d95d11179eb1
- SHA512 fda6409032efa414298b1f689a9cd84e5f3528f7451e558326b20df16df3a4e1b58b2e20d50aef6f70587ae14c86a162464b9ade7d83dbc651f3586596a76c94
- MD5 SHA1 SHA512
Resource/DateTime_clone_basic4.phpt
- SHA256 8878de3ee086a73d961f57a8ec40df7d220a413162b3df32e85930733f8b1feb
- MD5 bc84de28fcffa36d62e58286d3c01c33
- SHA1 26221a05cb41320c28292cae00a554abf50b1bef
- SHA512 54c80b33ecc92a29ab1e65dfaf2d86dcd47ae1dca9dd0dc6e46e02821cbff54c8a9ef3e6aeff1bd0f88146fb2fba21463d946ae1a45272572d45ecf4061adf2a
- MD5 SHA1 SHA512
Resource/GlobIterator_internal_null_pointer.phpt
- SHA256 6310e7d6b7888dd34acc1fda43f0ead5fb4b7ae32ec4dfd34aa8c300c9f977a0
- MD5 7108b76631e54952fc91649ef5326585
- SHA1 f57d9c9bac2d1233b5464dc8d459cc96455d3f09
- SHA512 f6534814be25819203887b99eec9b836d4299d6bf58e098a5432d51411b4b29b6aa051cbb6eaebc4ec0f1d508103be95550f9e6c4a9f0edb66626613075b6c19
- MD5 SHA1 SHA512
Resource/LICENSE
- SHA256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a
- MD5 fd469cce1a919f0cc95bab7afb28d19d
- SHA1 9209181c6f76f87abbd26a94032a77dba0d5b0b2
- SHA512 fba028dcc9428d3b8bd6883b58c1f92b2bfab9dca1aef38492db99ec28ca9e4699831d75b3ec15ebd8a7a503e3fa23a5f2bfb451f950fa1fd46e1e41a8bd2a4d
- MD5 SHA1 SHA512
Resource/ReflectionMethod_hasPrototype_basic.phpt
- SHA256 69a20143f3830d0c8366dbe2dce600f2ffba695be128a79f8c34e93cb838057a
- MD5 2446d1090533284db888e62181254ac8
- SHA1 44044083d47ef9de7daae5c36977901c2c517631
- SHA512 764d274c6a8421d404303023f65017cac911c9988df9bee760f02bcf48639b4225c789bea3179a136e9fa7febab15696b80ed5eec795d0228704b355d540434c
- MD5 SHA1 SHA512
Resource/anb.c
- SHA256 bcb6067729bc8cf59e4392a79b9e0ab0b22e47d075af6f8e92e597452a912244
- MD5 fb14e8815725b967f20cce03405714b6
- SHA1 4703dc8f0b82d695bd4ba7909753869c39e05b46
- SHA512 223c8ca40648d8a200834ba9c1decfce280bf7ac0de588f05f175c04a4e5de42c85b5d31fbeea89c4fc350add7ca82881a91026142d5a94240ea07c369ce2f2c
- SSDEEP 192:/7gT+pCwryq2+LuwdtS6LltscCd6DXCwkFOTJcz91htcthwK58pdn:+3gZLF9pXOOlW
- MD5 SHA1 SHA512 SSDEEP
Resource/array_chunk_variation15.phpt
- SHA256 9b528955c7c6056d182355a9def6b3b2f84452368582f5d30a80c160fd101817
- MD5 0e7cf82a2e49d94a70bf4925b8fa1966
- SHA1 863c4dec6b20563f37d663b20f164f81dd4f89fc
- SHA512 354af1498baf68b0933c0fc51fb1bbec8326277d5b00f0e6a064fc8625bf480df4b057b2fef3f54405ecf25ac8d764692de24d59b6d0a34bdf31aee4149b0eaf
- MD5 SHA1 SHA512
Resource/array_push_variation2.phpt
- SHA256 b90b7b9c30bc30703051dfc2838e4a7f0c8738978b0ddc25a74ca8b3342fa4d3
- MD5 a25fd59ba40356d74a501212f12b2bd3
- SHA1 af5fc1264183a93e76538c5ec5a83587e72eb65c
- SHA512 66ad82eb3f75092b0d65eba3acdc5f2ebec289a13e4526b90001939975cf053dc99fd86c0baa7b3cacb739f15cb924ab28a1cc6a1d08c216ccac222972b039e4
- MD5 SHA1 SHA512
Resource/bug13213.jpg
- SHA256 705174d1a2c11f8eb53206339f7c64421e94fb326b6201ad6bc54a8894866c73
- MD5 0e6bad7195ecd72ce70e1fdcdd33cacf
- SHA1 618757b45b2366775bb427537e2d8d470992bdd5
- SHA512 3a5e20e77dc84ba1652afba8c27575da4f373032ee765f20b16d2d4c4d6c0c94b1814bc3be2f457bf62ee8b833e8c6894201dcc1639443421fc9c0b9b9471c78
- MD5 SHA1 SHA512
Resource/bug24499.phpt
- SHA256 ee8d73e63ad7b4d32fbe7d194d6101bef191a5861d86d670c88148ad5b62b979
- MD5 ee007f0617c7277d5bc2d7fc355d8d72
- SHA1 bb0d38ed9343c493a68449d1398af6a0b569583d
- SHA512 0eb7abc84bd4ff79c3104093959f903048c468eaae75858b1d777ea6094fb67218331c4dd8e597ad0f3d13f619db8b773e4a46482342797d3218fbd415287438
- MD5 SHA1 SHA512
Resource/bug43450.phpt
- SHA256 e4accf4439ce5a9513ca5f1600298d2ba50572eaf44fa6e8bf769023d23035f0
- MD5 fbab3ba30708080adadf3e92c97d9ab6
- SHA1 309b5989d995b87975949583eb56bd3b8d56b874
- SHA512 d774f7780b72798037c2e53e885e33e89f77a9a6ad85cfa9f886431f33651c73151737850a83b961ca6e9ffa0c0490e39e24b807dcab56c367d112bc5aef84f7
- MD5 SHA1 SHA512
Resource/bug44144.phpt
- SHA256 2c3d76daf55a617ead518eff662e867212035d08f55f8c98f692103596264bda
- MD5 0ee04bd2d04a80a401552bb75f6dd8e9
- SHA1 1758ffd6067965becf9d303ddd5aa10b03f7a0ab
- SHA512 0dceee01e5d98a0f170a6dbae778506f049f76ce1300a55e1dc51f1b86f24f9926a58e90c02cdd3023b527de3ae086cc4b304699838389699c4b0e234f9fea55
- MD5 SHA1 SHA512
Resource/bug60160.phpt
- SHA256 7d549e35827a3384ca39df48ea85d73098060018087e206a36e5f2669d9d7b27
- MD5 24ed557937be2ae379b4f4e32cf1b1f9
- SHA1 cefb4705e4839085d16e64bd55f9365a7ac7c9c2
- SHA512 cfa1318b69fc479abc34e8e9b0152a9589892e453121577b19d5cfa301f891db9787311d312b41f6b121026b74f09ebd7ad4a24c4ff4ee20024591cb50afdd40
- MD5 SHA1 SHA512
Resource/bug72731.phpt
- SHA256 ee70d3dcb99278a9e65c6ff6c87a8e5c72adfea83d1eb3619b5284cc95988823
- MD5 7ff1b2574d45317af24833f485b25a21
- SHA1 32ac409a564e88b97570d7381ce13ed3417a0f4c
- SHA512 d7e1c60fa7d34d8f8d066f8e6b8383881b4a1cbaf5d9b6686e72480e8affeda9bd86966f1ea8920e246cec0c3de95e99f3b0fcf079fb54ffeafa0c26419af5ca
- MD5 SHA1 SHA512
Resource/bug73333.phpt
- SHA256 af976b3d6d27174e48523225e63b68ebe1cea8ecca4538c1808d791743901d78
- MD5 e451bf025e7d0b6fc9ecb3db40d7dbb5
- SHA1 4e0494e4aebf26d40d35fefa37f2b5025785e562
- SHA512 278162e7172bd7fe84238f9362b25c9fce55ec34b843b32336f3e43f7addb2a028112ff4aba2f7f8c970109cb6cf0155d25eb16f2b2340a6f0fb9790c7db51bd
- MD5 SHA1 SHA512
Resource/bug79467.phpt
- SHA256 9714f73c64bf317ff7cf5222fc91f74776af44a650f2f4af8378bc4152f0ce6f
- MD5 bd4c5d1cab51f63d61c7faf3cdad6fa4
- SHA1 b3c3b18fbea12d26a1be9793882372f1f95543be
- SHA512 a3aabbb8e102523792f043ed8b3293395b623a06e81dabea246233a8f3417b9d54d0a2ba70f580a23379ba3d6cefdd087a0f5d3e40a3977bb2dbc37b7e626dbc
- MD5 SHA1 SHA512
Resource/bug80745.phpt
- SHA256 0effdde3f24a3f4a783491d400dab566d0e042e0f3e1ea5329cf56187d60a420
- MD5 ed865f446db595b57f6d36c82da294d6
- SHA1 6b585b065a4e2f7974e256e96eb1835ef297ac11
- SHA512 d43924f6b2a54fa7d08b7b867ed11e78d8b8a54d8aaa39fa4b7cbd616ac8fd7fede3834616be62b0584083666a7c127c166edf6dcd1907db3e4425d5c0c1dc67
- MD5 SHA1 SHA512
Resource/closedir_basic.phpt
- SHA256 b3eb2bf2178c34e5003833b134c97d82401d5b3358b5c3f1cafd670d8ebc538a
- MD5 26935f9e4ccd4849ebf6c517342587e5
- SHA1 000b23cdf5bd32fd8ebcb7a488ba0ffa902bbc96
- SHA512 80c47728a6a51005eb7a92f256c17b6487ea35940ee59799c447bbc5c7ada78403770b0a5a151f188adff8f042a0c56a806270195ce3c57cf4bcfb53476546c8
- MD5 SHA1 SHA512
Resource/copyonwrite22.phar.phpt
- SHA256 81b7ba98ec29720123c936889dd5f25cf949c53dc1d4277b66158a414bfc4c0a
- MD5 2361eb4b1fe4d141daeecef9e3d990e5
- SHA1 a43c06753183ea24c489faee0b6900956f728851
- SHA512 ed6fe0ac9566a3a8a9ec500c8848a62e8e66b76e8ae85242370fc7d067326add31a96ff476c0ddb16313dbb435e64e2684969de8aa932118814e09f24245b37d
- MD5 SHA1 SHA512
Resource/driver_booster_setup.exe
- IMPHASH 20dd26497880c05caed9305b3c8b9109
- SHA256 65c5b929d9490779e8b88d92aa13634ca53a9ae67a6a98f7f1e69190ee92867b
- MD5 fe7361b4406b2a2833737ae7cb715b06
- SHA1 ecc765b0afe8a8f9593ccc683a7c99036b1dcee5
- SHA512 78dc937c09b91ac243d8d82e7c0521dbf3490c9daf867c769cbe46df755c080b832119f9e13f05e0c9e991fe85c16d40324c0cd153a5295a95379c301cc0c86b
- SSDEEP 786432:xxokpDoNN8Ubq/6zaClgdNuNC5zWBPvYeyO0IDBKCj3v:xxbDoN/bvaCydNk6WtY8Ks3v
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
71708
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep
comctl32
InitCommonControls
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Resource/dtor_not_called_if_not_init.phpt
- SHA256 7b0632cf1dac876402ab53c67e3d86e2ab6b373f8ffbd6df9da590932353a7d6
- MD5 c4dcbf669b435f3c4674480e8887d525
- SHA1 8ec537cacb6b8202775ec4039e540654338179b9
- SHA512 735beea319dcd8166b76aef90529324ca5154a59266a322ca3a2cb53036ee1e31460c541e8239bc0415d8757dca7f36b5a7147cb358dd936e15f571e87ffe57f
- MD5 SHA1 SHA512
Resource/fe_fetch_op2_live_range.phpt
- SHA256 09ec16b09790f28897c9c7c554f3b71a6878d459e6649a7d8e4007005335c852
- MD5 41a5b3c401424e772d37a0c16921219d
- SHA1 25c51a06fbe4ccd125d64227020fdee8393329d0
- SHA512 0cd385654a435d7a415dcaf133c898d19ad0cd2a184e3206f6a845e8d1dc5e156e9b31d6240ffa72d381a79dc87f27bd2623816823061e3c4a19c35c64c60d49
- MD5 SHA1 SHA512
Resource/file_get_contents_variation9.phpt
- SHA256 e72f0a4fb1bd71584f63454c9ef23259ed522db0ccac6b5a2714eb843d7f2a10
- MD5 1e4149c757b782fedfe4d10532f4bac5
- SHA1 b65da5b2c2422f169d001410aa02ff99509e2065
- SHA512 a2ae71054790db1b15cb92ce79344f8672cfcbabe8da22d07cef8a5884d050bdb276e1defa94afd637b3c6616da9597e78b856f55035e788e2fd184a1a0f440d
- MD5 SHA1 SHA512
Resource/font_element.h
- SHA256 865bb13fc11e3396b217844093c6c4e22de07d57a9693d78327239b69c6f18a1
- MD5 240864fb36a6a1bdc8547736af567d7c
- SHA1 3217ba0633149ea038e16eff4b0c80943336fd7a
- SHA512 dc5ef2e26e95bfa42e1682a70d8abf0ec006e154903cd76cfcd7c4700aa7dbda6a1780ae46c3481dab4a50e787a1bc4944a7fc5636fd520b82f25e27c1faa556
- MD5 SHA1 SHA512
Resource/fopen_edgecases2.phpt
- SHA256 6e7cac1d3e59a9436aa07e099f126653bbdc388e3e17e47747e6374ccf913466
- MD5 d5742b54831362acf312fac3add7c420
- SHA1 87c9eb182708ff308184220cd70b56f1ef8ee4e0
- SHA512 c9432a655e0ff7f7e1a9aea22ef5c44513450e6e853f3b47cec2d865aa32edb795b76c5c37384eb3713a2ee1bbeb521c68a850f600f8dcb083d25b58d1cba913
- MD5 SHA1 SHA512
Resource/gc_002.phpt
- SHA256 634e356a4a8d6ab4873cb2675016abd0967d8f48a202248c2fd57782a0a2fb44
- MD5 5ece096e46e9a0388d094eb7b7dfbd2c
- SHA1 be51d42f9ba83c5dc6c80c0e1b12817cd01da6d6
- SHA512 ebaffaefe889cd9db43c9d63a9c3702874d5271d2a0b7ca46473412288b22880f6aa038dcc0ac145559b58a253287e6cc1082bf9a61382ad6d0e8ba72011707e
- MD5 SHA1 SHA512
Resource/getalias.phpt
- SHA256 79ee22008362f32c67c005380a708fd7f7a214d0d987e401bffab23437723bdb
- MD5 14956301b76008f50b98639efca08072
- SHA1 0df7294f2f0807c0ee87c09e21d36048f1df12a8
- SHA512 b53270b6ae27ea5f48b4641f45a07a00cb296c67f9eb134e74b5286f4b6041237b31d41b9b98fc9c964688a021f017f2851c0525d327ab352acdaee5da2fe0fa
- MD5 SHA1 SHA512
Resource/gh10187.phpt
- SHA256 6b9d779390592e3e6ab685eae7a51e305c3023061b6017658ad15241a030d776
- MD5 25d99fd581e13f2e18257b56298c2808
- SHA1 87fa7b4a89eb70cac4ee2704e2af58b457d12604
- SHA512 733c6f5e3daa2638d849ee041c088149603535d147fc8fb8ddc36b1f25c9ec520503c96c37cef5e39fd547925e2c2ccf5cd3dfdea4d851cb0401ddd1b54b01c1
- MD5 SHA1 SHA512
Resource/import_of_namepace_conflicting_attributes.phpt
- SHA256 507604c4edb443d922d4eedb93e23dc47b55be7830398b6785d3d2a7336706d9
- MD5 50719091b0e8c38fc34490373de8debc
- SHA1 5e51b35a5ec56f361c2aa39a3aee19df8248ab05
- SHA512 b72c6ad61bdbfebb238e905eeb5314ec46a7a9b51eabf98f517bc34fce516a74ab3ac2ae922b1a3f51859d2ea2bb225571c0d1be4b1541d1ff25fe44f043abc4
- MD5 SHA1 SHA512
Resource/json_decode_exceptions.phpt
- SHA256 6ec5035790075d9c2fc5ab14ea7c4df242a137d43daaea9b4ece596b04c5367c
- MD5 ff423f56048c99160a97875545cbf253
- SHA1 5872064cd2b4357d2c45397597ff25966d70b52d
- SHA512 87a9d03796ad7906b7825cdf66cddda7433e8e1988a0853d75d20a6be02a440e57e114ef56a1d8cf9a98ba850512d8920cea31c01265f7cfaf440e1d12bf0092
- MD5 SHA1 SHA512
Resource/ns_end_resets_seen_symbols_2.phpt
- SHA256 226b8c47d98a3c03218313e24406066810d251bd59e7b449bd518d0684a98f6f
- MD5 0ce916739fa6347313a9441dcf9f4344
- SHA1 daeec7ad106f2fcb9cefda171fbd6119b01388d8
- SHA512 895b1581a2fda3503c8b2218e44239116dfc62deed76f9e25103e6e6ed816c212fb7ea558b1ce4ed93c0202194b13ce62f93e6496d669a819eedc0d9bd8e041a
- MD5 SHA1 SHA512
Resource/odbc_field_name_001.phpt
- SHA256 3adfd12813988d6d3d8bdd734fc634d698cea8ff89aafce4ec2cffbe0b87a8c5
- MD5 bfee62f6c9aea89cc9cf4d94553bc080
- SHA1 499a964d69a10b39fdfdf4d280c3579bf6811d4e
- SHA512 b077ddbe8324ccfd25a04425d1aa95ae99ff2c0207e016e1a0dd9f5f14c21a803a8cb28ef250278a4a11e4cae02d01029bb412968632580a909e36d8aec052f5
- MD5 SHA1 SHA512
Resource/oss-fuzz-65498.phpt
- SHA256 13296380782791fc918df365ec440d2e42effcb5fed2dfce05c1400b8f9aaeaa
- MD5 f59e88c2cbf09129c651b0ccd919f377
- SHA1 4f90eda70d0e051e8bd77aba0e5483129ae6d975
- SHA512 dcc64b69469cafc44b65dbd79291c7e7381ee8d531e52fb9f55a667724f83442ac6cf1e309d738141cdcfa1cb0f75232db969c524fbe566b39d4c5c61c202108
- MD5 SHA1 SHA512
Resource/parse_url_basic_007.phpt
- SHA256 b8bc6349a7c0e6397800ab8dc35696be2c5cd4d789e9df262521fbecfcac278a
- MD5 a5140fb4ef539ce0a11c28d7cac8b4b1
- SHA1 adb9a69f43bf08861141ff6e56183b053c649f7d
- SHA512 cc5f9cce3d7d638e087e97cd892f0287ee2772083b5d86c93398dd69990f7951bbf313669ee57ec38b4d37c8225e17a5a37ce74fbf07acd5c3c6314832b05f64
- SSDEEP 96:EHNF0AKooOa8A9F9OgDZYDihoi7xNOJTATv5nlXn0xwYfb9cBzjtaH73aQywDA:hh77PrjtaH7hA
- MD5 SHA1 SHA512 SSDEEP
Resource/pcgoneseq128xslrr64_seed.phpt
- SHA256 7ada175d06856298362c3ef8204beb35c827cc66fc971c9e550779c42552098a
- MD5 e610f8823ce4da44b119b28768251968
- SHA1 59c90bdd8a696c04f851fa4675fd636dcc616a8b
- SHA512 7cbb946b596fde346ed070fe5b1c6f5e924cff9d0c24e73399cf398380a0d5fb035deaff2fb6f64d7794f68dbe0188cc4b41ce07c5f7855c47cd5a4993a83a93
- MD5 SHA1 SHA512
Resource/pdo_sqlite_open_basedir.phpt
- SHA256 9dff5a68db5111e2004f408b765e86709e708fa99ff45ce14ac46954abaf39a2
- MD5 3c97bcd67d08994102fe7506beded172
- SHA1 6155266e774ce4b7b22e76bfd41624d46095b768
- SHA512 f08eed7a3ba091a279da601eac831be1bc713eedd2b44d23f2535a8fec64ef24e704e667aa82c8164cf6035ae3a1a3d4f3107e4a09a3fa065dc6eac6ab7ed91f
- MD5 SHA1 SHA512
Resource/phar_copy.phpt
- SHA256 109fc2fc4218404c533529b64f738e07ae617f6965a544d65e407b6355c98d9c
- MD5 712107a695d46c464741724bf9544e06
- SHA1 23776d0a3bba5199aecfa44730fe90593032c84d
- SHA512 1528bb891ab81e332bedccc11274a8c069ac16baa8e7aadfa75406dd53d531d131fcf77f984b1d43e4f14cf17480687f3617388531bd973dd4c3314c53f29bee
- MD5 SHA1 SHA512
Resource/phar_gzip.phpt
- SHA256 0279c40a260347adf4158c62b3c88eafb704ea9c098a1173163e312387738ac5
- MD5 311033937a7cf9e1ffac8d3e80f7ae0f
- SHA1 b848d4497a0f5e4c948f4f59206bdb29d4ea5169
- SHA512 2b4edb017a7c834507498c73af6a30ce539eb79d2f4377d3da52f969e7be4a8df5f7bf99471844fa99b5f5b1c58526bbb132dcba2ac8b33702e7e07539490bf0
- MD5 SHA1 SHA512
Resource/preload_ind.inc
- SHA256 178da1094cd2d01ef60495be4d81e79c5c4d9d52f33b4a39c1c1e1048b3360ca
- MD5 8e4c94c417fbef4fcc176b85bca3ecd6
- SHA1 68e0d3260a268260d2315a9f805b4c4127874f78
- SHA512 636353533048944b3e2d2b433d3fc44d7332e7ddc4bb7ea9becfb0dd199974395ad60c55dd381cc975923262305bb23f45dea7619f34a4a58bfa6fb44757f6b7
- MD5 SHA1 SHA512
Resource/private_members.phpt
- SHA256 12780c0542b07b2bd5273b4a4f59cdde41ab8e789d7de1b7e73e16cc2be62250
- MD5 1e62d07026e2aee3d2e0fef50c7f2d8c
- SHA1 60b044f1f1d600047208ad44ffbfadb401d6f384
- SHA512 eac38dea8ac2843c94674b9106c4f1612b56305bd6d619fdbca2584a87cd6acdb00f98c8360f53a59f010321259f43fc2af4540de04250c4bf21cc74cb70ed49
- MD5 SHA1 SHA512
Resource/property_override_private_private.phpt
- SHA256 135ee22590096012abddb11ac12fdff890c304aaa6c7d38f3cfefa7b85ab8ad1
- MD5 5c5b9a742277ce031feb2976e7bb8f42
- SHA1 c813e45ba0efad6f73388662170aff82af2c6ee7
- SHA512 350e7b9e66c6ec0c7a1b4747c9f272d1fe40d4da53abb43815058ced8c69d1692824ed9e7f8e4c9a3ee11ab4ae29d31d79509f5c1e579059ca31e83393ec13f2
- MD5 SHA1 SHA512
Resource/r2_base_005s.phpt
- SHA256 7833715828973e79f0dc795a6980cefc8da80f7c0e0a03e4e4c490d15eef9889
- MD5 6607855e9af2a71c30b224d677d70891
- SHA1 b58e1b52d56b9646b16699a63ba44bad7b43cb1a
- SHA512 12a0f1d912ec0af295f70b8ac7a70d9562423bc5f003ca46b25a6ad60928dd78fc6feb582ae595ec6b0f47ff2ce88336df104f86b58ea15c19c19876e72a3843
- MD5 SHA1 SHA512
Resource/reconcile_reused_namespace.phpt
- SHA256 fa9d6ca8ce93efbac4aca247c17eaf0439040511ca8ac39512086ac01701ba0a
- MD5 79cb1f046853c73edc2123d328ec21a1
- SHA1 e710417e973717cdff3347730d43d8c75a555176
- SHA512 c68a9321e09cf59c37f0179e33cb42c44f8a2fefa1b088bcb9619e0ed0964c09847ef2e2270c33dfd118422385c359cbb8aafdcc76e21b421769afff4cf7dac9
- MD5 SHA1 SHA512
Resource/sni_server_cs.pem
- SHA256 44b2807a51462f4cfa54b131fa78c0b7d3c4246030d2aa4d7f0191239af2a42b
- MD5 2a466556595e0d9d8c102e92110a4b9c
- SHA1 f2f8525d228ba54d7e7e0588a45979cde2b84649
- SHA512 877822b109fb283b357a7e1760432e636355a2cb69fc5cf9df7ccdf4c80ae6a3147b512ca45cba12a9eda584d5eb2bffe73c5bf1735934b8ab9858302c83da39
- MD5 SHA1 SHA512
Resource/spoofchecker_class.h
- SHA256 f3a66af2c1fefe82a1dc4d4b4d0a57fd1df9b1a4bdfc95ad6b215236b9f6858f
- MD5 0b37b3ca1c9a369689e448397135c36e
- SHA1 20e51cb5a5605f2d168a87224dd1b3edd3f19639
- SHA512 7f3c8a56302b0e9e0b584a333f2fa771f5b5310fd427fff30be4f75761a87a6333b394c4a8c9ec1a19b51dfbbdda2b0601af23746e15b01647921b37cc440579
- MD5 SHA1 SHA512
Resource/strspn_variation5.phpt
- SHA256 47ea27a9d63c522693dd3e51ae0ca286b7f9a0c4949795267d269f8fbecb8f29
- MD5 3439910669d0ea0c415ba355af590920
- SHA1 45412ed19f728bb4508e818a002b7138e9317824
- SHA512 8eea4066038bdecf236cd036dea63502ee28c23e7e9414a443f4104f22ebdf2da0012036a2448413855569a55d6f3a76383deba0a60639c2618485d2d155885c
- MD5 SHA1 SHA512
Resource/throw_into_yield_from_array.phpt
- SHA256 9ae2c7839b7650d27c02511b0775269a071100614fb461d6e88e25fe336f93a1
- MD5 ee1656ad2a911383f49cf3ba92dc9e80
- SHA1 1d18e8385a236aa348bd39ed797920d4181543ad
- SHA512 08ab7276499b0bb627a82a64247a5dca5f3c2d6ec28d3b7506d1fa202b454c378a1efcc5a16915f10ba8f731821bb1701ebf0602796c92394eb704cbcf1c1f9e
- MD5 SHA1 SHA512
Resource/value_edge_cases.phpt
- SHA256 027e0781cee245ce1c52a65cff44592230f1abfeeaa99d2bbbbac52c6fe82af0
- MD5 9203d5774b8e10f8dc13b2154de73452
- SHA1 fae30c6aae008c511b9583f54b2ca66295c14667
- SHA512 8b533af6e97a1d105baca4e17e3b13963867a78ee401600c0caaadbc134c3bf6d978e1129b6def236df80b43659537e7e063625c533ef5722c8f506dafdb3f18
- MD5 SHA1 SHA512
Resource/zend_accelerator_debug.h
- SHA256 2efd9f78b2cda47604199c2c3eadccf8016c7cbdee4b7d171758061183ef74a6
- MD5 ddb9efe5bd681ca3f4eb389b683b2e44
- SHA1 2edcda4f263da2766ffe93806ccd6727837cfc05
- SHA512 165db2f956b154b45e5ebd0285c42b8f78618e916445561fc205c68e40e028aa8192e396726a02c946414c2dd1b6c3461b5d1814336a4636327e53e0adb7f6c1
- MD5 SHA1 SHA512
UpdateLogs/DisplayLanguageNames.ar_LB.txt
- SHA256 0e018c63407cda60b1f4c1a8ecf3b93349c0caa3952b50ab6cbd6777adce4495
- MD5 5e594bf69810971fdf2e3d2063149048
- SHA1 4363e75c5c264453704ecde36ac960ce8bd5534a
- SHA512 10f7ea4cf8609b3780fce18349435b8dc054a58b1f8366350783dd861f686bd6207cdf3ff4ea163b5a13982bb2bb72bc5f6cfaacfe27000620928036f1149e96
- SSDEEP 192:8tPp3KKrBPn8YN9fhhbvQkzlD4MJ+xCyi29VC7UWJf5CQCb1y6mx22NNeP:rKd8YPrvQkzlD9ofp9LWJf5CQCbSeP
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/DisplayLanguageNames.en_BE_PREEURO.txt
- SHA256 6b7884673a6381ef470660585cb406595d8d898f6ee6b5e92aa180bab92b521a
- MD5 c6762a82d75c68a93d7f0c15cf1c23e3
- SHA1 89740b6ec2467b83ba8d667e89165c666c5831fd
- SHA512 d6c7eb56eaa35a44fb11d8a4cd978f76a4c3d2774ae6d4646650f4404c3e26888ee2ed85688190bae9c8c718c5b829c7b708f2102b24cc417094e44800944b97
- SSDEEP 768:A7N7PeR1lIYYISB1hMYBXVWu7EfrQlHVyE:AJEfklHVj
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/DisplayLanguageNames.hy_AM.txt
- SHA256 a8b83864f8b89d47aba205aced953c3d57722ecb93462948b79707020e520ff0
- MD5 60cca6ade351f7275521d624e23e44e0
- SHA1 382e8688f61850b1590a33227e4a076323bccc90
- SHA512 d2c7531de021e94e4d70a0763875f38cef5e128945d18003c08936f302de5b02a741a64afab09d7e31116c06afbe83dc073bcff9332ef6e45d96526cda80f51f
- SSDEEP 192:w63GIYdCpbzd/ej23tyFZAUWqWXhD/oi56mx22NNeP:h2IYKzdq2EFZ5WqWXl/oeeP
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/NETCoreSdkRuntimeIdentifierChain.txt
- SHA256 c8376a7b24ab109ad59eb5e070c904959ea3c27121ed4662eee3cfcb8222000b
- MD5 8c42426dd89fb85da5b93365ec80bcc3
- SHA1 290900065e7e97c7dcc94c0a1ef1d897265f64d0
- SHA512 b1c5ebb7b2c217bec181546389e1960073f897706bdff9981e131965c54a98263e27bccce3c1d59e9b8ce3489813f3e7169693296dcb14cc56971706d1c97f12
- MD5 SHA1 SHA512
UpdateLogs/README_el_GR.txt
- SHA256 41e26cc87cac54962d9e0d435e78265c68a6a8fe2ad41b00f25e38a547d367a9
- MD5 3044fccf3ff98d81996eff736401cfac
- SHA1 637553a85fdbb5f64fffbe28783487fcaa2b59de
- SHA512 f7e9130457d6ad63b2374d8f1531b7494e242d710e0eac80a05b8a953b7a1e5417c3e63aa58068ff96db1dfb00d6984193f2ca135ef1411b29c5cc7f43a06658
- MD5 SHA1 SHA512
UpdateLogs/SYMBOL.TXT
- SHA256 9c1b5818d187d44b7fb19d0e6be435ff12c0a0be2a6a03a1f8bf478f12dec557
- MD5 1b6006569d886b513a1a8b0b51927033
- SHA1 8f779c0c4d7ae83ba9fc8a85eff94d90aa56df6c
- SHA512 493c358a2369dac70aff8136554dea23de2fa2428168f60b6ba5551e6d8d0b4fdd914ce52c304541551938c2b6c87134c1d8c6f3ebb27d80ffc68730e31aa5c2
- SSDEEP 384:9DsinsKkRUJXEe3fLMxtASwgzWgfL3SR14oLLQQU0Kp9b:9Y/wufLiR9LLQQUjp9b
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/cover_cgo_xtest.txt
- SHA256 bed5431394eb6c5333653c20a32906b2e715819a4cd9bdf654a472274aea2a9c
- MD5 0a56b02ce716e23097e7df11ef0b8183
- SHA1 8df22beee96b4bba442b11ebaca704f8e889a21b
- SHA512 9eab104bc124f4601b153b6f21080597cf055cba98c55df4e16ad923563f15994225f3831ac8065843071b1906acffa20689cef983c30e56693b9cc0f268123b
- MD5 SHA1 SHA512
UpdateLogs/cover_runs.txt
- SHA256 8baf6141c53680793d5d2148f1c9ccbaa8cc9f707353b7cff39edceb72c72055
- MD5 a028f466f417316413965a997a90bd07
- SHA1 1528c907c64c15b0fb063cbb5ad7c41ca5913c26
- SHA512 65472d6ffaa4553c685020aa87f3fc6bf5c02c1f5175516c348f4b00d8638a436e27d7a0b517e86bb2a0046de9deea2556d3243d8676f7ee6d958feda25bd27b
- MD5 SHA1 SHA512
UpdateLogs/example.com_retract_ambiguous_nested_v1.9.0-bad.txt
- SHA256 2753abce1429b374351636fb13a8448256db3c2386030edcc3aa4ed0e262e708
- MD5 7a80c973ab024e6d5d2156be439f53ea
- SHA1 40b74c1e7340609378d96e3d6199f530692af35f
- SHA512 6461f1d319ccef66db56d2075608255e9c6bc78d1c65a5a7a8ebea1359d1542d91ac5abad7774a65be5188af6faead40ca41ab3b61fdd8456d091ecb66c25fd3
- MD5 SHA1 SHA512
UpdateLogs/gopath_install.txt
- SHA256 61192e33018db388b9a3fb52e3e79a0dbca40edb08ab9d5eb9df52b38580bf75
- MD5 3525e4e6cec030e02c8db17887095f29
- SHA1 4237d98c01ec57333f0d4c245866c8f9d4d27cbd
- SHA512 63bec15a1668e5470fc5ac1d2430527af427928840cf345d5596a5260e7eade7c116a167cf6d70b10a51643aad7e999aa5d60d351e3c1290088e8953008a7d3a
- MD5 SHA1 SHA512
UpdateLogs/import_unix_tag.txt
- SHA256 f79f239fd99f29fc2b2bb891fc8b5f4172f09cc69204573e02ae5a50f5b39cca
- MD5 a5e5db2e8ea2ca598feb45e90a958cae
- SHA1 bba0d62ad529af1361f8f944bc67d0318139a781
- SHA512 514c0ee12ede2dd8676e231b6fe2970954da17174dcb543e82f3c8a8a4ff30b432f384c2e5ae2e05a21b07a54a76ea96413e5e2b8c10c96399779342ee22ae47
- MD5 SHA1 SHA512
UpdateLogs/isodate.license.txt
- SHA256 d179933ed291e906b1e5ad84d5e49fed15adad84ef5a14644eab2fb1788bbd51
- MD5 d877f991bcf8a844128bc0763f38f809
- SHA1 f07972271d15f07ace259c19782e2f6f05cbd332
- SHA512 b94307dbf61963558e2a8de6962b48772224d86da4dc0f2ecaf143cf83064c2cfb89e1fad41517d00fecc6e9a7ca63f4ea611d25b2bfa444bc2fe619505d3ab3
- MD5 SHA1 SHA512
UpdateLogs/list_replace_absolute_windows.txt
- SHA256 3e1fc3419ab2e4e278080f52495a13c198a53bd350c60e452661ebc24fd7d298
- MD5 f31b2404b1879f7fb63e301914f7c5c6
- SHA1 46af22dd9a9455ac1f1eb92f394f886d392954fd
- SHA512 0320a3af865d77b09118b0ff21d0383b31dda71a1826fbcf15dc448d14b25137474670b384bd732e0c373f32b9464885430a08683e9a3829a7c80a5135e6c56b
- MD5 SHA1 SHA512
UpdateLogs/mod_dot.txt
- SHA256 f6a2b296b50d1023a647bddf7b65f3b9023e2b30104526e9719e4471119e7d2f
- MD5 e463c3e9e03cd311197f35a660e48149
- SHA1 1c345e3166db7a529eeb2bdeca75bec49f2b4cf7
- SHA512 7526a4c7e3cae998a227fd474985e76d5825a00446b1cf74fdcb81e9b06fa5bec338758265e560d2df0eae4b88c0fdbddcc5c0f03c0529e8d85abce9cc1f92b2
- SSDEEP 96:iDEVxXx31YI0V+b0/8urUgnxviuxHQ/ZwgcKA:7XcI0V+b0/8u/ouWwR9
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/mod_nomod.txt
- SHA256 2bb5a6567006d3c0243bc999a85f4f00feb3754fc5673a092be94e472ac8d55a
- MD5 cfe51440592ada7c565cb0dfd61551f9
- SHA1 070f0b6560fed94d386d8de645b8b3e74762b290
- SHA512 276ab99e4a8a3e2045d761cbde7b5138805d7be942e29d3bd67cada3da27676f9357247db14095a8d73fc94ae6761d0131c358039bc68e971c136994ca8446bb
- MD5 SHA1 SHA512
UpdateLogs/mod_string_alias.txt
- SHA256 6b8a3dc1219355f7c151a9da6d3fc5be4bb4e27edf85de470c6a6f22d1255a80
- MD5 0b50524b8d7739ab3704e68d24d79e81
- SHA1 115d7943eb14904e58d6acd409eb71de7f76bba8
- SHA512 240b3766939334e2a22cac7d921a0d49deaba2fda92eef49e17537d80eda3a095812b439fd77ed77e6b099d05e212cad6132019dcbec6155b88ca79c013458b3
- MD5 SHA1 SHA512
UpdateLogs/rsc.io_quote_v0.0.0-20180709162918-a91498bed0a7.txt
- SHA256 eebcb86c56167c35f47682e3228f413558d6a19ec5af7c64c5bb2267e8911215
- MD5 61418723fca7915c0c1592df910c415c
- SHA1 51e311b34f73d30820e50e64c63fa5d08ff5192d
- SHA512 ff3e44e0e022a120d3dbe7807d5acb782e63e2b02d8f7bb13d50febd8e6e5907c632caf218536726cf60162e9e9c07417d1da0fd036001c602313b9b505d0b65
- MD5 SHA1 SHA512
UpdateLogs/test_compile_binary.txt
- SHA256 ebfd40e35a3ecf802a194ff2ee5d08943c7552c7bcf09a4b5af5fda29d4f5230
- MD5 b222151f2a921994a7f55ed249f24f7e
- SHA1 cdadcb983ca27c885280cae32a65b0aa99f387bb
- SHA512 6c38b41125e8032a735ed3cdbb14a56dda13d17738da8aab0d54aa39b73da38ab5e5884194fd010fe187237b03779a400eb9d7c366777c92d4e89756198798b9
- MD5 SHA1 SHA512
UpdateLogs/test_doctest4.txt
- SHA256 dc4cd077da8b17ab75fb50c8cf8df6e4b868e51557ab60dff3e2705c1434f0df
- MD5 5527c818b331b9b7e7a8b74fd8f7111a
- SHA1 41edcbea9422e6face7906542fcab255c6cd1b9b
- SHA512 8d04dabc84557357a7793b7dcc3480d30a122eaaea7beb51ff4e6da91c217230e66668bd5c08a725aa15507eb77b2d126ba05f7e84e9dc72b22bafef620be662
- MD5 SHA1 SHA512
UpdateLogs/test_race_install_cgo.txt
- SHA256 1ce68948150b312bd41a2d218b3f86babd6246d15b03ed10c040e62343200d5b
- MD5 310d2d15737083249b866a76ed3aecde
- SHA1 2e6a6962db7044bf972b3fb1940bcc8fc16919a9
- SHA512 079483085cc94ee8bd43966375385a8547144e1d59734be260efa25f8940c415d75fe5827957e4bc70253d44c30daa35d0ba42d8a04bee218c671d3229fe9e73
- MD5 SHA1 SHA512
UpdateLogs/testfp.txt
- SHA256 d8e2eed3dac3ae0b757d092ad1c3f5fc04e3428ab422971206549304a8e81ea9
- MD5 dc1ca447fa01cae0bb5de6427d6aa4ae
- SHA1 44d60f762fe842de55b412c7354b151df1f1b7fd
- SHA512 3d5342e1e886c2c99a8ca4fa9fb51c5a57042b4ff1281ef8f7838aa2501d61b78dccfdfa275eb1ab46ab4d13ef3dabe3b05bcbaab456555c28ee9b6df24ecca0
- SSDEEP 192:K5erMneKwZF6njr2E/wx9fF5Noxz7QTphD6UAe66rM2+Qbe8c:NrMnexZFEmESfF5Nox3Oh0Kr9K
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/ug.txt
- SHA256 9d0268d1eeb8dfdebbb8ea1033c2b99cd667a244c9859085be5d54c9e5ced369
- MD5 ef3e8d61d03e42a3b40d6f0b12535adb
- SHA1 569360bcfeb39c102a3dd78ed96204b5d733ffbe
- SHA512 6e9afeb0a96da6d8bf63f06de421b8d4ddbf4d750e1bdf861fbbdc0268cbeb19068d08787f0f1655b40ebdc603d888251dae188c3547f32b970c7f927754066a
- SSDEEP 192:iDIm9xflePh286zK/bnZ6U4EeBVDeZTyUZirOCsiCjcY8VFDZ:iNMPhhrBNeBVSTTZUwiCuDZ
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/usr_50.txt
- SHA256 25d9107ed00aec5a4da19ce7f2e9dea852dd6291bf656cb3728fcf7c74b10166
- MD5 0e03da6407bf85d16875ccdacd56d3e0
- SHA1 763a54ff71784148061009590f3573684d969f0b
- SHA512 f2caf6a3d859bd1fae38dd00a0e135d0004f7f50c657c270a761d596b62fd0cdb495d120b81a6d7390038f9677fa65a7aedb7e74fb7a96b90b78f14197e03e0f
- SSDEEP 48:/S8+hsiNmbYfc/PbRMSh6Dvi8DQXzfi8OVoUR05mEMGiqxA4C0ypG8RtKmJJP84s:DiCr3bRn6Li8T8opR05mt47eKms3ki
- MD5 SHA1 SHA512 SSDEEP
UpdateLogs/vet_internal.txt
- SHA256 5f5523f3372b361aeb5b5ae6d1b7fe2f72deaf8954a0a1070257ff1c0a82fae9
- MD5 69793826e12366cac11f50d66647a7ab
- SHA1 4fa657d59ae6604aab6db1f88e0d3b0bb34c65e1
- SHA512 b202b3e6e350aa992c1306bdebbc93abe51cdd190024469a23304a16b1da1996e7f89a983c1d3269599994dbcd6e5e852800898cc2991d08f5b467ce50beea53
- MD5 SHA1 SHA512
Updates/CppCoreCheck.dll
- IMPHASH 43947dc3ca8f58f11590edb774b4b945
- SHA256 ef998eddb3706dd037f0d39203b633b9b9a4adb89ad8e3d2fd719771a0d79c80
- MD5 2d17974166b15d0868f2d360f75b9058
- SHA1 0231c085cbe2a09eac6133cbb5017e3361005b9c
- SHA512 4241dc480bb17ae49dbdca6a2fca40e0f896e0e56ce05a290e2b601810ca76d6a1a5bcb2b8c7e8bb8f1a5ef7c71d0c963120260364be9d55a7e022edf726eefa
- SSDEEP 24576:sd41sdAjuw+lP1FZ7JvBn+U2CPr8h0lhSMXlWtOAaGYBd6:sd41sd1nltFv24dGMPY
- MD5 SHA1 SHA512 SSDEEP
Digest
48:ff:8e:29:2d:9e:74:fb:5f:e5:be:00:0b:54:60:74:e2:85:8b:98:ce:8d:74:10:64:5f:71:92:50:6d:b6:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 23, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b2:6e:40:03:7f:6e:a9:94:92:00:01:00:00:01:b2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
641452
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\CppCoreCheck.pdb
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualUnlock
GetLargePageMinimum
VirtualQuery
VirtualFree
VirtualAlloc
GetSystemInfo
GetCurrentProcessorNumber
GetNumaNodeProcessorMask
GetProcessTimes
QueryPerformanceFrequency
QueryPerformanceCounter
FlsFree
FlsSetValue
FlsAlloc
CloseHandle
WriteFile
GetEnvironmentVariableA
GetStdHandle
WriteConsoleA
GetConsoleScreenBufferInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
GetNumaHighestNodeNumber
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleExW
FindClose
FindNextFileW
FindFirstFileW
HeapFree
GetProcessHeap
HeapAlloc
GetThreadPreferredUILanguages
SetThreadPreferredUILanguages
LoadLibraryExW
GetEnvironmentVariableW
GetLastError
GetCurrentProcess
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcmp
__std_type_info_destroy_list
__RTDynamicCast
__current_exception_context
__std_terminate
__std_exception_destroy
__std_exception_copy
_purecall
strchr
_CxxThrowException
memcpy
memset
strstr
__C_specific_handler
__current_exception
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_invalid_parameter_noinfo_noreturn
_errno
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-string-l1-1-0
toupper
wcscpy_s
wcsncat_s
strncmp
towlower
towupper
isupper
isalpha
wcsncpy_s
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_s
fputs
api-ms-win-crt-heap-l1-1-0
realloc
calloc
free
api-ms-win-crt-convert-l1-1-0
strtol
wcstoul
atol
_itow_s
api-ms-win-crt-filesystem-l1-1-0
_wmakepath_s
_wsplitpath_s
api-ms-win-crt-math-l1-1-0
_dclass
_dsign
_ldclass
ceilf
_fdclass
_fdsign
_ldsign
msvcp140
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@G@std@@2V0locale@2@A
?widen@?$ctype@G@std@@QEBAGD@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAGG@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z
?_Incref@facet@locale@std@@UEAAXXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?id@?$numpunct@G@std@@2V0locale@2@A
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?is@?$ctype@G@std@@QEBA_NFG@Z
?id@?$collate@G@std@@2V0locale@2@A
_Wcsxfrm
_Wcscoll
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
_Thrd_yield
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?uncaught_exceptions@std@@YAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?good@ios_base@std@@QEBA_NXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z
user32
LoadStringW
espxengine
?Minus@IntegerExpr@Logic@Esp@@QEBA?AV123@AEBV123@PEA_N1@Z
?Multiply@IntegerExpr@Logic@Esp@@QEBA?AV123@_JPEA_N@Z
?Divide@IntegerExpr@Logic@Esp@@QEBA?AV123@_JPEA_N@Z
?ExprToLoc@Espx@Esp@@YA_NPEBVExpression@IR@2@PEAVPathExpr@12@@Z
?IsExact@PathExpr@Espx@Esp@@QEBA_NXZ
?GetFirstNormalIndex@Espx@Esp@@YAHAEBVCfgNode@IR@2@@Z
?ToString@PathExpr@Espx@Esp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?IsVariable@PathExpr@Espx@Esp@@QEBA_NXZ
?Root@PathExpr@Espx@Esp@@QEBAPEBVSymbol@IR@3@XZ
?ExprToLoc@Espx@Esp@@YA?AVPathExpr@12@PEBVExpression@IR@2@@Z
?GetVariable@PathExpr@Espx@Esp@@QEBAPEBVSymbol@IR@3@XZ
?IsAddressOf@PathExpr@Espx@Esp@@QEBA_NXZ
?GetNewProviderId@KeyEvent@Espx@Esp@@SAIXZ
?GetAllowDoubling@IntegerExpr@Logic@Esp@@SA_NXZ
?Type@PathExpr@Espx@Esp@@QEBAPEBV0IR@3@XZ
?IsPrefixOf@PathExpr@Espx@Esp@@QEBA_NAEBV123@@Z
?ToString@IntegerExpr@Logic@Esp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?Deref@PathExpr@Espx@Esp@@QEBA?AV123@PEBVType@IR@3@_N@Z
?Deref@PathExpr@Espx@Esp@@QEBA?AV123@_N@Z
?SelectField@PathExpr@Espx@Esp@@QEBA?AV123@V?$not_null@PEBVSymbol@IR@Esp@@@gsl@@PEBVType@IR@3@@Z
??0PathExpr@Espx@Esp@@QEAA@PEBVSymbol@IR@2@@Z
?GetAddress@PathExpr@Espx@Esp@@QEBA?AV123@XZ
?ScanForLocations@Espx@Esp@@YAXPEBVExpression@IR@2@_N1AEAV?$PSet@VPathExpr@Espx@Esp@@U?$word_encoding_traits@VPathExpr@Espx@Esp@@@Utility@3@@Utility@2@@Z
?IsAddressOf@PathExpr@Espx@Esp@@QEBA_NAEBV123@@Z
?SubstitutePrefix@PathExpr@Espx@Esp@@QEBA_NAEBV123@0PEAV123@@Z
?Allocate@Allocator@Esp@@SAPEAX_K@Z
?Deallocate@Allocator@Esp@@SAXPEAX_K@Z
?Add@IntegerExpr@Logic@Esp@@QEBA?AV123@AEBV123@PEA_N1@Z
?IsField@PathExpr@Espx@Esp@@QEBA_NXZ
?GetFieldSymbol@PathExpr@Espx@Esp@@QEBAPEBVSymbol@IR@3@XZ
?GetInternalizer@IntegerExpr@Logic@Esp@@SAAEAV?$StableInternalizer@U?$IExprContent@_J@Logic@Esp@@U?$less@U?$IExprContent@_J@Logic@Esp@@@std@@@Utility@3@XZ
?GetParent@PathExpr@Espx@Esp@@QEBA?AV123@XZ
?IsDeref@PathExpr@Espx@Esp@@QEBA_NXZ
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
SystemFunction036
??0PathExpr@Espx@Esp@@AEAA@_K@Z
??0PathExpr@Espx@Esp@@QEAA@$$QEAV012@@Z
??0PathExpr@Espx@Esp@@QEAA@AEBV012@@Z
??0PathExpr@Espx@Esp@@QEAA@XZ
??4PathExpr@Espx@Esp@@QEAAAEAV012@$$QEAV012@@Z
??4PathExpr@Espx@Esp@@QEAAAEAV012@AEBV012@@Z
??8IntegerExpr@Logic@Esp@@QEBA_NAEBV012@@Z
??DIntegerExpr@Logic@Esp@@QEBA?AV012@_J@Z
??GIntegerExpr@Logic@Esp@@QEBA?AV012@AEBV012@@Z
??HIntegerExpr@Logic@Esp@@QEBA?AV012@AEBV012@@Z
??HIntegerExpr@Logic@Esp@@QEBA?AV012@_J@Z
??KIntegerExpr@Logic@Esp@@QEBA?AV012@_J@Z
??MIntegerExpr@Logic@Esp@@QEBA_NAEBV012@@Z
?IsConstant@IntegerExpr@Logic@Esp@@QEBA_NXZ
?IsValid@PathExpr@Espx@Esp@@QEBA_NXZ
?Negate@IntegerExpr@Logic@Esp@@QEBA?AV123@XZ
GetAnalysisContainer
Name
.text
Size
640KB
Virtual Size
639KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
260KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
381KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=257, version=32533,
count=8, id=260, version=32533,
count=4, id=259, version=32533,
count=40, id=261, version=32533,
count=7, id=257, version=29395,
count=256, id=1, productName=Unmarked objects,
count=32, id=265, version=32533,
count=1, id=256, version=32533,
count=1, id=255, version=32533,
count=2, id=151,
count=1, id=258, version=32533,
Updates/Microsoft.Build.Engine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a9dcb081cea11b01dbbbbb24b82781ff2394313c49410ba2a9d5f508446b52c3
- MD5 7ddeea4b969afca6c75bdbcb9554f371
- SHA1 7f39a7e7fb6dca403e539da1da94fcc8cdd735d6
- SHA512 a842b32b68a6065e37464744d187567d445668cca489cec85aa5d1a42de71c11091e9481b8e9d9c0496cd10f0f36ea654a31659ad241ace2cc2e0af568e0ce08
- SSDEEP 12288:/LShyRRkZqFs8TK0sa/mRSrde4nUbvXje3+PFfuPAgbRrSdHB2iZWq:/2wsFT4nUba3+dRg9rSR
- MD5 SHA1 SHA512 SSDEEP
Digest
de:59:e8:9a:58:4a:bf:1e:3f:48:35:0d:df:56:d0:14:f7:27:7e:89:06:5f:0a:c7:b7:3f:50:e2:01:77:18:3f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c5:03:cd:cd:21:a1:f4:ef:39:00:01:00:00:01:c5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
652950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Build.Engine/Release/net472/Microsoft.Build.Engine.pdb
mscoree
_CorDllMain
Name
.text
Size
630KB
Virtual Size
629KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/Microsoft.VisualStudio.CppSvc.Internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a310a3c03fecfe4933e56ecf8bfbebecebad10898d7c9a784d41654f7f5944d4
- MD5 862869d2c58ce32858142acbf5474973
- SHA1 8a27868bb9767e8891a2212ded3ec744359ba2df
- SHA512 4431ae901a503517c7929f878ed62c3c2de45752bfb1232116ab10eba6b3d9247aad72d80d863552f5ff1664d74b76ca372edaac1e0b47591902e1873571859f
- SSDEEP 6144:guz8bL7lWTDQHCUi+7j+oVrhSlGvPKzkiMk:guz8vO8iUi+7j+gSlGvLk
- MD5 SHA1 SHA512 SSDEEP
Digest
02:d1:85:e9:86:24:00:d1:68:22:90:25:02:67:a9:4a:98:5d:6a:6b:9c:f9:99:56:a1:d8:67:8b:75:17:53:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 3, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:cc:86:a5:dc:37:eb:d9:61:2d:00:01:00:00:01:cc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
201230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\1002_165500_0\cmd\i\out\binaries\amd64ret\bin\amd64\designtimeidl\Microsoft.VisualStudio.CppSvc.Internal.pdb
mscoree
_CorDllMain
Name
.text
Size
189KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a7ef749bc217369cccb2a43cb77faa45818747fc9b2c53c91ee6056990b2e4b3
- MD5 597bdec2b9eb96188a10fc85a6b99c0d
- SHA1 ea1c1780f44d9882a6c5d03376d1788c6a236e6a
- SHA512 8bd9e0b4b33b288be30aa4b0163595cd5a33df64142290c2b0535874720daf9cb3da9b342df04f4ab057563d22293ef2c2bcdbf8941c9401e169d268cc543945
- SSDEEP 6144:B/COWrbn+ZXmCfzcSJgWmRIQ9Jmr+osWXCPDmkkluspFJDaNQZ1efpAfp/w3/d3Q:lCZbiNIJJmGVeuspudndm
- MD5 SHA1 SHA512 SSDEEP
Digest
c2:23:08:ea:a2:9a:b4:b0:eb:24:cc:22:0e:05:29:28:1b:23:e7:29:8a:16:ae:da:7b:05:e5:bc:42:35:6e:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 30, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c6:30:cd:2e:d6:d3:a1:c0:f4:00:01:00:00:01:c6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
552310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\Release\Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost\Release\net472\Microsoft.VisualStudio.Debugger.VSCodeDebuggerHost.pdb
mscoree
_CorDllMain
Name
.text
Size
531KB
Virtual Size
531KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/Microsoft.VisualStudio.DesignTools.XamlLanguageService.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 300da86b70c6cd9a17f398bd05502d2cae428a4b79b303404e2250b68615c4ee
- MD5 d4addbe2a89c1eaff4aa6ac29894783c
- SHA1 606c08cc7a5d87cc7d32dbb9be2fe52047dbb7ad
- SHA512 02132e781fcba4d846103dee4f144950bd86d0fe0d9c2893dc603cfa95cbdc56e23bdac2d36fe806da7044b2031633d9d428472f01bb0fe1d793597284147f96
- SSDEEP 12288:RFc/hnTSxT+MJO5xjA/KsJ9Wj912ebPRRAAZGdVFQ:RA8TIjA/RrWigaAZCFQ
- MD5 SHA1 SHA512 SSDEEP
Digest
69:d9:fd:3e:d3:c7:9e:18:6b:b4:92:4f:82:e2:89:af:25:4f:ac:0d:88:81:d8:16:50:84:47:90:ef:5a:0c:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 3, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b9:f6:00:0d:65:54:4f:bc:03:00:01:00:00:01:b9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
1110462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\1002_165500_0\cmd\1z\out\Intermediate\Xaml\xamllanguageservice_x86retail_18E67264\Release\net472\Microsoft.VisualStudio.DesignTools.XamlLanguageService.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/Microsoft.VisualStudio.TestPlatform.Common.dll
- SHA256 f835b26ce32e850b98c40902d2cd7c25f89a895b4af90985d6f20cdc61402b05
- MD5 f86558319b0886a685747be60317467f
- SHA1 7bcffa75c511136de7ab0236cd6b1874efa96b93
- SHA512 2adc50744fd51c05d6ffbd3ea8ac3baf1c9172016b534edb97a5b9e9298b49a34dfab58bfeed2a742b654f6fc8c021430116ceb124379b7083a1a666632c9796
- SSDEEP 6144:uIHNtllJdJw1hHVC3+EZWhtI7hUee0fN8JiUUujri/g6w1MZRyEqrMuNKwWJ:15dJghHV++jGfqb8wWJ
- MD5 SHA1 SHA512 SSDEEP
Digest
cf:c0:83:97:c6:4a:f8:07:d1:7b:65:d1:ba:1c:1d:9a:03:17:e8:96:68:d0:0b:47:2e:7e:27:e4:c0:f1:c8:bb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 1, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b1:ca:90:43:ee:0b:f0:03:ab:00:01:00:00:01:b1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.VisualStudio.TestPlatform.Common.ni.pdb
Microsoft.VisualStudio.TestPlatform.Common.pdb
Name
.text
Size
428KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Updates/Microsoft.VisualStudio.VisualC.Utilities.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 98af01cb023c78deaf2e4acdaf54371d05860f4d15fd8b4199e37fdbda602db3
- MD5 35bef154e0c3526bde8ca3622e8c3044
- SHA1 5dd4be9ee6a337458ce2407dce3a5d14c650f273
- SHA512 a2f8fa63345999aea97875357c3fe7886c6b63077d1b3c3268f03e522542d77f2bf181d50ae184efdd5a111406867f8e953f1d319286f8dbb1695f0650221e42
- SSDEEP 6144:jCziTz2QBySc7PlIBKakEubc96OTuKUgjdCj:jKoz2Q6IBKB1c91SKUEc
- MD5 SHA1 SHA512 SSDEEP
Digest
84:fb:d2:36:df:a3:39:c9:18:b1:d7:95:a8:4a:a5:a7:93:50:6c:f6:ba:50:49:f0:3e:6b:95:26:bc:db:bf:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 19, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d5:a9:02:cf:c5:a7:c9:e9:5a:00:01:00:00:01:d5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
213406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0818_204058\cmd\o\out\Intermediate\vc\microsoft.visualstudio.visualc.utilities_x86retail_207E352F\Release\net472\Microsoft.VisualStudio.VisualC.Utilities.pdb
mscoree
_CorDllMain
Name
.text
Size
200KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/Microsoft.WebTools.Languages.Html.VS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b225880f0aee5d11803d58b67866596376ad95922f1dc196ad880f9f5d68fe14
- MD5 67239ab806e8d911da4bcc0182dcceaf
- SHA1 7f128001984c420255a3c020f91c744d00476084
- SHA512 58c68d21036374ef9187a166f780d64d43982d3fd0af51370d636dfa98a65fcfe78ee8a3abc93800e2f3c5b0518c76e5a9124f455ba76fd29f075e03430972a6
- SSDEEP 6144:N+ZHTxGdpQcgsp5CIAMe2DRcLWvxj7C5Qbo5fJhLKJQvHb:NilcFpMIBnXhC5Jnhmq
- MD5 SHA1 SHA512 SSDEEP
Digest
20:8b:94:31:d3:64:86:7c:f9:53:6f:15:84:9d:18:48:b0:d8:ee:2b:1a:8d:96:6f:e7:5c:9f:08:d1:4b:d9:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
337170
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\VS\Microsoft.WebTools.Languages.Html.VS\Release\Microsoft.WebTools.Languages.Html.VS.pdb
mscoree
_CorDllMain
Name
.text
Size
321KB
Virtual Size
321KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/Setup.exe
- IMPHASH 4e60a0b1f9c6e0773f5b6a153c403e0d
- SHA256 c924dcf0b11acf90f268ce5baf415dc25f07a680ce7691afe07a0a2f996a8dc3
- MD5 b94ce9a4c4630bd89bc1755216eb3e9e
- SHA1 e957f674ac78d27304a493ba9795dd2fa4056e32
- SHA512 f924becc38ef2897a2035e5ce09b41e6b825a69f01fc96dabffa760ad33ef77a4651b5bed6565a3a785e1b50ddd777510802dbfb84be3cfee24edbd845b87d3c
- SSDEEP 384:ipkiKQkgJ9NGxRYKrnk5TwWlHOOV+2HI8frqOtEeSXkEgmuqqhlZ3CRqbk:ipUdR1zk5TNZVo6tEeSXU4I/Cqbk
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler
msvcrt
__iob_func
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
setlocale
signal
strlen
strncmp
vfprintf
wcslen
tcl86
Tcl_CreateInterp
Tcl_Init
Tcl_MainExW
Tcl_NewStringObj
Tcl_ObjSetVar2
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
540B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
408B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Updates/System.Windows.Forms.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ed19c003d983bdeed54cb59da2a43c7ec8a97450fba5a3979ddebc9fb3811498
- MD5 83b94c9fd813e2aa4a3fc53bf97c2a36
- SHA1 c8a4fedfc40baa5fc5c72a2002f1d4aa580424d6
- SHA512 5e7ffd19792e940b2d05e574b337ebe6240f36cd75f4a1e0fec48997bf7e41af5c09c8a77dc892ac178dcfaa57dc1d240d75f6ee88d008c669a6e5fcd0552aaf
- SSDEEP 12288:tqAdzWGTrnnKkAxXaBuh5QHSYxIrAAr2r651YaTq5D1xKHc1N1lvTx1Rp0KkjFIA:nKGHS
- MD5 SHA1 SHA512 SSDEEP
Digest
35:fd:6a:46:a9:70:b1:b9:f1:a8:39:69:13:1e:01:68:84:27:1a:12:e2:4d:aa:66:d4:29:1b:1b:5c:c1:57:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 28, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d3:1d:32:9a:17:3b:40:30:73:00:01:00:00:01:d3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
470962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
452KB
Virtual Size
451KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Updates/WzWXFll64.dll
- IMPHASH cc58a1270838c251ea844add925b0a69
- SHA256 afc3132d046895526c82e3c29d06e636f059927a9fb57c3bf1a6558ccb9cf1a0
- MD5 2a3864fc92d04501f150356ff842a4d4
- SHA1 2c2130252f1d1500a4a1af6b1ad80cad80565989
- SHA512 ea582de7f755aa6ad39f3e60e14580899a2e67b3de88d85cfb4c543f15009a36baf77ceec5b8a056c10dd9af4b68ffe5ee1fd44acb0c62d1463691a51b0649f1
- SSDEEP 6144:VkyKKdDuLgrwOxc6Nx6/ksrRJJ0Y4nm1OlfRf:VbKKdw16NEM1
- MD5 SHA1 SHA512 SSDEEP
Digest
69:d2:77:9b:1a:58:58:09:1a:91:83:ce:f9:94:e5:46:58:05:9c:92:b2:f4:34:d4:83:7f:34:6e:da:89:86:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
20:6e:df:0d:4b:b4:6a:3c:c4:b8:b2:4f:da:a4:25:ee:24:7e:ee:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Chains
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
Serial Number
f3:03:07:6f:06:2a:78:d8:c6:1b:51:16:a4:9d:36
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 14, 2019 - May 23, 2022
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
2
Major OS version
5
Entry point
157208
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\NMC\CURRENT260IL1nightlyBuild15061_final\Libraries\WzWXF\Providers\WzWXFCloud\w64prod\WzWXFll64.pdb
msvcr90
??2@YAPEAX_K@Z
wcsrchr
_wcsdup
swscanf_s
_cexit
__FrameUnwindFilter
__CxxQueryExceptionSize
__CxxDetectRethrow
__CxxUnregisterExceptionObject
__CxxExceptionFilter
__CxxRegisterExceptionObject
wcscpy_s
__RTDynamicCast
wcsncpy_s
__CxxFrameHandler3
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_wtoi
_wsplitpath_s
_wcslwr_s
_wmakepath_s
wcsstr
wcscat_s
_wcsnicmp
wcsncmp
_vsnwprintf
memcpy
memset
bsearch
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
_encode_pointer
??3@YAXPEAX@Z
_wcsicmp
_purecall
kernel32
SetLastError
GetVersionExW
MultiByteToWideChar
GetUserDefaultUILanguage
VerifyVersionInfoW
SetThreadUILanguage
VerSetConditionMask
LoadLibraryExW
FreeLibrary
LoadResource
GetProcAddress
DeactivateActCtx
ActivateActCtx
FindResourceExW
ReleaseActCtx
Sleep
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetSystemDefaultUILanguage
SearchPathW
FindResourceW
GetModuleFileNameW
CloseHandle
MapViewOfFile
GetModuleHandleW
GetCurrentProcess
GetLocaleInfoW
UnmapViewOfFile
CreateActCtxW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
CreateFileW
RtlLookupFunctionEntry
RtlCaptureContext
CreateFileMappingW
user32
LoadBitmapW
IsWindow
ole32
StringFromGUID2
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
shlwapi
PathFindFileNameW
msvcm90
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z
mscoree
_CorDllMain
CreateWzWXFProvider
GetInterfaceVersion
Name
.text
Size
151KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
364KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=150, version=20413,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=129, version=50727,
count=12, id=123, productName=VS2005 build 50727, version=50727,
count=105, id=1, productName=Unmarked objects,
count=20, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Updates/bin/Setup.exe
- IMPHASH 1e4c3119e67fd8eda0019576136c4119
- SHA256 1dd9397a6e8cb0ba68a445fc819c2b22fc62e812dc27077e57820c90a8252ab6
- MD5 d5bad5ad44448ee5d25c2f8f7d3382c9
- SHA1 931e437a8c4a95ef580b0799860839de87eb790e
- SHA512 1a35bd6db469e97ceb9b860175047bf3e5e7d573769cef59a93bcc662f796a9c397aca44664109cf4ff6ca3a2fa1c0ab2b694012e196755bd3f871dca1c5a085
- SSDEEP 24576:bq5kn59QVg8q6ZeNVTIklN33VA33333V3333333A333333333333+3:bQug
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Digest
a2:a6:51:56:22:ea:2b:60:96:44:13:e8:8e:3c:31:a9:bf:eb:b2:9a:f4:77:da:98:09:24:e9:87:e1:c2:0b:0d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=23638777,CN=ASUSTeK Computer Inc.,O=ASUSTeK Computer Inc.,L=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
Chains
May 10, 2021
SERIALNUMBER=23638777,CN=ASUSTeK Computer Inc.,O=ASUSTeK Computer Inc.,L=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
61:20:4d:b4:00:00:00:00:00:27
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
SERIALNUMBER=23638777,CN=ASUSTeK Computer Inc.,O=ASUSTeK Computer Inc.,L=Taipei City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457
Serial Number
0c:64:96:2e:44:67:ed:cc:15:79:64:6b:73:37:ec:8c
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 1, 2019 - Jan 11, 2022
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Minor OS version
0
Major OS version
4
Entry point
5148
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
RegCloseKey
RegFlushKey
RegOpenKeyExW
RegQueryValueExW
kernel32
CloseHandle
CompareStringW
CreateEventW
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoW
ExitProcess
ExitThread
FindClose
FindFirstFileW
FindResourceW
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceW
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemInfo
GetThreadLocale
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVersionExW
GlobalAddAtomW
GlobalDeleteAtom
GlobalFindAtomW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LockResource
MulDiv
MultiByteToWideChar
OutputDebugStringW
RaiseException
ReadFile
ResetEvent
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
SignalObjectAndWait
SizeofResource
Sleep
SwitchToThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringW
lstrcpyW
lstrcpynW
lstrlenW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
comctl32
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_Write
InitializeFlatSB
_TrackMouseEvent
gdi32
BitBlt
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
FrameRgn
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32W
GetTextMetricsW
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
RealizePalette
RectVisible
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
UnrealizeObject
msimg32
AlphaBlend
user32
ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
CharLowerW
CharNextW
CharUpperBuffW
CheckMenuItem
ClientToScreen
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextExW
DrawTextW
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumChildWindows
EnumThreadWindows
EnumWindows
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetCapture
GetClassInfoW
GetClassLongW
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessagePos
GetParent
GetPropW
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadKeyboardLayoutW
LoadStringW
MapVirtualKeyW
MapWindowPoints
MessageBoxA
MessageBoxW
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OffsetRect
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
WaitMessage
WindowFromPoint
wsprintfA
wsprintfW
ole32
CoInitialize
CoUninitialize
OleInitialize
OleUninitialize
oleaut32
GetErrorInfo
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit
gdiplus
GdiplusStartup
GdiplusShutdown
GdipReleaseDC
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipGetImageWidth
GdipGetImageHeight
GdipGetGenericFontFamilySansSerif
GdipFree
GdipDrawString
GdipDrawImageRectI
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteFontFamily
GdipDeleteFont
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipCreateFont
GdipCloneImage
GdipCloneBrush
GdipAlloc
@@Main@Finalize
@@Main@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook
Name
.text
Size
546KB
Virtual Size
548KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
11KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
495KB
Virtual Size
496KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Updates/bin/trust.exe
- IMPHASH ba65616f5a64c0c9421212e43a21c2d1
- SHA256 95a65f1203e444c80fde62f10d3b6f24ff7ca2ab14a253cbdbccce1e2ac58462
- MD5 f825cf140156703f5b0119dd32f13fe3
- SHA1 927e207d484ffe3271f98e7a91d5d2250e690357
- SHA512 c96f77e13b8ef53a48cc6021b4408ba7d558589aaab1d39db617d5d9c93f28863df44e32f53d6d8bb800d32edab5564c305f59bb5e921eaa8a2307edc387d88b
- SSDEEP 6144:SkKkDol2hRzlT2pR0RQGQQU7k1TAH1OobTrLPvfVYpm3xj8vp:Rol2h9V2AQ9PvfVcm3xj8vp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
libp11-kit-0
p11_kit_iter_add_callback
p11_kit_iter_add_filter
p11_kit_iter_begin
p11_kit_iter_begin_with
p11_kit_iter_destroy_object
p11_kit_iter_free
p11_kit_iter_get_module
p11_kit_iter_get_object
p11_kit_iter_get_session
p11_kit_iter_get_token
p11_kit_iter_load_attributes
p11_kit_iter_new
p11_kit_iter_next
p11_kit_iter_set_uri
p11_kit_message
p11_kit_module_finalize
p11_kit_module_get_name
p11_kit_module_initialize
p11_kit_module_release
p11_kit_modules_finalize_and_release
p11_kit_modules_load
p11_kit_modules_load_and_initialize
p11_kit_strerror
p11_kit_uri_any_unrecognized
p11_kit_uri_format
p11_kit_uri_free
p11_kit_uri_get_token_info
p11_kit_uri_new
p11_kit_uri_parse
p11_kit_uri_set_attribute
libintl-8
__printf__
libintl_asprintf
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_snprintf
libintl_textdomain
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
CreateThread
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
FreeLibrary
GetCurrentProcess
GetEnvironmentVariableW
GetFileAttributesA
GetFileSizeEx
GetLastError
GetModuleFileNameA
GetModuleHandleExA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MapViewOfFile
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_cexit
_commode
_close
_errno
_execv
_findclose
_findfirst64
_findnext64
_fmode
_fullpath
_getpid
_gmtime64
_initterm
_lock
_mkdir
_onexit
_open
_putenv_s
_stat64
_strdup
_stricmp
_strtoui64
_time64
_umask
_unlink
_unlock
_vscprintf
_vsnprintf
_write
abort
bsearch
calloc
exit
fprintf
fputc
free
fwrite
getenv
isalpha
isspace
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
rand
realloc
rename
signal
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtoul
vfprintf
wcslen
shell32
SHGetSpecialFolderPathA
libtasn1-6
asn1_array2tree
asn1_create_element
asn1_delete_structure
asn1_der_coding
asn1_der_decoding
asn1_der_decoding_startEnd
asn1_get_length_der
asn1_get_tag_der
asn1_length_der
asn1_number_of_elements
asn1_octet_der
asn1_read_value
asn1_strerror
asn1_write_value
Name
.text
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Updates/bin/x86_64-w64-mingw32-agrep.exe
- IMPHASH 004f13bd51ff3992934e82b81105725d
- SHA256 436d6e9f1198a443c5512ec9ecec1b7d6b60261ab1d62271f7ee74528353604e
- MD5 309825299f0622a8e48d43760af89d65
- SHA1 28135ae828b93b4f0fc981c5cfbe46ad00bb6be5
- SHA512 f9200b79bb3ef4e50ccb3c45b79dfdfcccfbf6e692266e0298c46493a6bb07c854c5c99fa5d3f7d11f7224b77f5e04ecb195f186f038e98a476947084328d519
- SSDEEP 384:92SfNCAndLmmBFTqKmwLBEaTbTh0Q2Nk6H8faklAOLu9CWv33nKZe:9lN3Smv+ivPTQvH8o0Wf3KZe
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5344
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
libtre-5
tre_config
tre_reganexec
tre_regaparams_default
tre_regcomp
tre_regerror
tre_regexec
tre_regnexec
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__C_specific_handler
__argv
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_close
_errno
_fmode
_initterm
_onexit
_open
_read
abort
atoi
calloc
exit
fprintf
fputc
free
fwrite
getenv
malloc
memcpy
memmove
realloc
signal
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
vfprintf
libintl-8
__printf__
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_setlocale
libintl_textdomain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
288B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Updates/trust.exe
- IMPHASH ba65616f5a64c0c9421212e43a21c2d1
- SHA256 95a65f1203e444c80fde62f10d3b6f24ff7ca2ab14a253cbdbccce1e2ac58462
- MD5 f825cf140156703f5b0119dd32f13fe3
- SHA1 927e207d484ffe3271f98e7a91d5d2250e690357
- SHA512 c96f77e13b8ef53a48cc6021b4408ba7d558589aaab1d39db617d5d9c93f28863df44e32f53d6d8bb800d32edab5564c305f59bb5e921eaa8a2307edc387d88b
- SSDEEP 6144:SkKkDol2hRzlT2pR0RQGQQU7k1TAH1OobTrLPvfVYpm3xj8vp:Rol2h9V2AQ9PvfVcm3xj8vp
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
libp11-kit-0
p11_kit_iter_add_callback
p11_kit_iter_add_filter
p11_kit_iter_begin
p11_kit_iter_begin_with
p11_kit_iter_destroy_object
p11_kit_iter_free
p11_kit_iter_get_module
p11_kit_iter_get_object
p11_kit_iter_get_session
p11_kit_iter_get_token
p11_kit_iter_load_attributes
p11_kit_iter_new
p11_kit_iter_next
p11_kit_iter_set_uri
p11_kit_message
p11_kit_module_finalize
p11_kit_module_get_name
p11_kit_module_initialize
p11_kit_module_release
p11_kit_modules_finalize_and_release
p11_kit_modules_load
p11_kit_modules_load_and_initialize
p11_kit_strerror
p11_kit_uri_any_unrecognized
p11_kit_uri_format
p11_kit_uri_free
p11_kit_uri_get_token_info
p11_kit_uri_new
p11_kit_uri_parse
p11_kit_uri_set_attribute
libintl-8
__printf__
libintl_asprintf
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_snprintf
libintl_textdomain
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
CreateThread
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
FreeLibrary
GetCurrentProcess
GetEnvironmentVariableW
GetFileAttributesA
GetFileSizeEx
GetLastError
GetModuleFileNameA
GetModuleHandleExA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MapViewOfFile
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_cexit
_commode
_close
_errno
_execv
_findclose
_findfirst64
_findnext64
_fmode
_fullpath
_getpid
_gmtime64
_initterm
_lock
_mkdir
_onexit
_open
_putenv_s
_stat64
_strdup
_stricmp
_strtoui64
_time64
_umask
_unlink
_unlock
_vscprintf
_vsnprintf
_write
abort
bsearch
calloc
exit
fprintf
fputc
free
fwrite
getenv
isalpha
isspace
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
rand
realloc
rename
signal
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtoul
vfprintf
wcslen
shell32
SHGetSpecialFolderPathA
libtasn1-6
asn1_array2tree
asn1_create_element
asn1_delete_structure
asn1_der_coding
asn1_der_decoding
asn1_der_decoding_startEnd
asn1_get_length_der
asn1_get_tag_der
asn1_length_der
asn1_number_of_elements
asn1_octet_der
asn1_read_value
asn1_strerror
asn1_write_value
Name
.text
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ