a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87
- SHA256 a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87
Overview
overview
3Static
static
3ARK Server...er.exe
windows10-2004-x64
3ARK Server...er.exe
windows11-21h2-x64
3ARKServerM...on.dll
windows10-2004-x64
1ARKServerM...on.dll
windows11-21h2-x64
1ArkData.dll
windows10-2004-x64
1ArkData.dll
windows11-21h2-x64
1Discord.Ne...ds.dll
windows10-2004-x64
1Discord.Ne...ds.dll
windows11-21h2-x64
1Discord.Net.Core.dll
windows10-2004-x64
1Discord.Net.Core.dll
windows11-21h2-x64
1Discord.Ne...ns.dll
windows10-2004-x64
1Discord.Ne...ns.dll
windows11-21h2-x64
1Discord.Ne...et.dll
windows10-2004-x64
1Discord.Ne...et.dll
windows11-21h2-x64
1Discord.Net.Rest.dll
windows10-2004-x64
1Discord.Net.Rest.dll
windows11-21h2-x64
1Discord.Ne...et.dll
windows10-2004-x64
1Discord.Ne...et.dll
windows11-21h2-x64
1Discord.Ne...ok.dll
windows10-2004-x64
1Discord.Ne...ok.dll
windows11-21h2-x64
1DotNetZip.dll
windows10-2004-x64
1DotNetZip.dll
windows11-21h2-x64
1EO.Wpf.dll
windows10-2004-x64
1EO.Wpf.dll
windows11-21h2-x64
1Hardcodet....pf.dll
windows10-2004-x64
1Hardcodet....pf.dll
windows11-21h2-x64
1Microsoft....es.dll
windows10-2004-x64
1Microsoft....es.dll
windows11-21h2-x64
1Microsoft....ns.dll
windows10-2004-x64
1Microsoft....ns.dll
windows11-21h2-x64
1Microsoft....er.dll
windows10-2004-x64
1Microsoft....er.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ARK Server Manager.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ARK Server Manager.exe
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ARKServerManager.Common.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
ARKServerManager.Common.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
ArkData.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
ArkData.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Discord.Net.Commands.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Discord.Net.Commands.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Discord.Net.Core.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Discord.Net.Core.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Discord.Net.Interactions.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Discord.Net.Interactions.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Discord.Net.Providers.WS4Net.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Discord.Net.Providers.WS4Net.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Discord.Net.Rest.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Discord.Net.Rest.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Discord.Net.WebSocket.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Discord.Net.WebSocket.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Discord.Net.Webhook.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Discord.Net.Webhook.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
DotNetZip.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
DotNetZip.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
EO.Wpf.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
EO.Wpf.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Hardcodet.NotifyIcon.Wpf.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Hardcodet.NotifyIcon.Wpf.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Microsoft.Extensions.Configuration.Binder.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Microsoft.Extensions.Configuration.Binder.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87
- Size 9.7MB
- Sample260415-e546csh17z
- SHA256 a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87
- MD5 bf5a3f91c7cd8980d94640a9f3406523
- SHA1 4bc1460542485507e7c4cfa0433b4758db84df41
- SHA512 483b70dd785b82a80ef1c33baf07de56bc6a569edcfd662d0d6881535857d7af945b24d21c52e59b78e07a6b60f7188962f7f8f80af25742a3047e4967575c09
- SSDEEP 196608:VePC3qpq4QNbOTMbwlgvlrzKvY0OAFTNA515JKRVrQr3EZhkPxO:4qxOMGwKgBmJk15JKVrQr3EZaZO
- TLSH T119A6334BD248DC7BD42BC7B6E88AB420FAB604D571F6EC5DE955DAA00881F4D43C278B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 37 IoCs
Checks for missing Authenticode signature.
resource unpack001/ARK Server Manager.exe unpack001/ARKServerManager.Common.dll unpack001/ArkData.dll unpack001/Discord.Net.Commands.dll unpack001/Discord.Net.Core.dll unpack001/Discord.Net.Interactions.dll unpack001/Discord.Net.Providers.WS4Net.dll unpack001/Discord.Net.Rest.dll unpack001/Discord.Net.WebSocket.dll unpack001/Discord.Net.Webhook.dll unpack001/DotNetZip.dll unpack001/EO.Wpf.dll unpack001/Hardcodet.NotifyIcon.Wpf.dll unpack001/Microsoft.Win32.TaskScheduler.dll unpack001/Microsoft.WindowsAPICodePack.Shell.dll unpack001/Microsoft.WindowsAPICodePack.dll unpack001/NLog.dll unpack001/NeXt.Vdf.dll unpack001/QueryMaster.dll unpack001/ServerManager.Common.dll unpack001/ServerManager.Discord.dll unpack001/ServerManager.Plugin.Common.dll unpack001/ServerManagerUpdater.exe unpack001/SuperSocket.ClientEngine.dll unpack001/TinyCsvParser.dll unpack001/WPFSharp.Globalizer.dll unpack001/WebSocket4Net.dll unpack001/WindowsFirewallHelper.dll unpack001/app.publish/ARK Server Manager.exe unpack001/de/Microsoft.Win32.TaskScheduler.resources.dll unpack001/es/Microsoft.Win32.TaskScheduler.resources.dll unpack001/fr/Microsoft.Win32.TaskScheduler.resources.dll unpack001/it/Microsoft.Win32.TaskScheduler.resources.dll unpack001/pl/Microsoft.Win32.TaskScheduler.resources.dll unpack001/ru/Microsoft.Win32.TaskScheduler.resources.dll unpack001/zh-CN/Microsoft.Win32.TaskScheduler.resources.dll unpack001/zh-Hant/Microsoft.Win32.TaskScheduler.resources.dll
File Explorer
-
a27015bc4b3b5f23eb9eb75a482dcb042233872ac87a0ac8639da29dfcb43c87.zip 9.7MB
-
ARK Server Manager.application2KB
-
ARK Server Manager.exe.exe 2.0MB
-
ARK Server Manager.exe.config.xml 44KB
-
ARK Server Manager.exe.manifest62KB
-
ARK Server Manager.pdb2.4MB
-
ARKServerManager.Common.dll.dll 43KB
-
ARKServerManager.Common.pdb5KB
-
ArkData.dll.dll 33KB
-
ArkData.pdb15KB
-
Discord.Net.Commands.dll.dll 129KB
-
Discord.Net.Core.dll.dll 643KB
-
Discord.Net.Interactions.dll.dll 226KB
-
Discord.Net.Providers.WS4Net.dll.dll 12KB
-
Discord.Net.Rest.dll.dll 1.2MB
-
Discord.Net.WebSocket.dll.dll 744KB
-
Discord.Net.Webhook.dll.dll 30KB
-
DotNetZip.dll.dll 461KB
-
DotNetZip.pdb607KB
-
EO.Wpf.dll.dll 1.7MB
-
GameData/Aberration.gamedata44KB
-
GameData/Astraeos.gamedata4KB
-
GameData/BobsMissions.gamedata44KB
-
GameData/CrystalIsles.gamedata9KB
-
GameData/Extinction.gamedata32KB
-
GameData/Fjordur.gamedata14KB
-
GameData/Genesis.gamedata39KB
-
GameData/Genesis2.gamedata66KB
-
GameData/LostColony.gamedata4KB
-
GameData/LostIsland.gamedata2KB
-
GameData/PGM.gamedata1KB
-
GameData/PrimitivePlus.gamedata82KB
-
GameData/Ragnarok.gamedata7KB
-
GameData/ScorchedEarth.gamedata37KB
-
GameData/SurvivalEvolved.gamedata378KB
-
GameData/Svartalfheim.gamedata361B
-
GameData/TheCenter.gamedata4KB
-
GameData/Valguero.gamedata5KB
-
Globalization/de-DE/de-DE.xaml540KB
-
Globalization/en-AU/en-AU.xaml492B
-
Globalization/en-US/en-US.xaml548KB
-
Globalization/es-ES/es-ES.xaml508KB
-
Globalization/fr-FR/fr-FR.xaml568KB
-
Globalization/pt-BR/pt-BR.xaml566KB
-
Globalization/ru-RU/ru-RU.xaml703KB
-
Globalization/tr-TR/tr-TR.xaml557KB
-
Globalization/zh-CN/zh-CN.xaml659KB
-
Hardcodet.NotifyIcon.Wpf.dll.dll 95KB
-
Microsoft.Bcl.AsyncInterfaces.dll.dll 21KB
-
Microsoft.Extensions.Configuration.Abstractions.dll.dll 24KB
-
Microsoft.Extensions.Configuration.Binder.dll.dll 33KB
-
Microsoft.Extensions.Configuration.dll.dll 37KB
-
Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 46KB
-
Microsoft.Extensions.DependencyInjection.dll.dll 82KB
-
Microsoft.Extensions.Primitives.dll.dll 42KB
-
Microsoft.Win32.TaskScheduler.dll.dll 326KB
-
Microsoft.WindowsAPICodePack.Shell.dll.dll 529KB
-
Microsoft.WindowsAPICodePack.dll.dll 96KB
-
NLog.config3KB
-
NLog.dll.dll 824KB
-
NeXt.Vdf.dll.dll 17KB
-
NeXt.Vdf.pdb8KB
-
Newtonsoft.Json.dll.dll 685KB
-
QueryMaster.dll.dll 69KB
-
QueryMaster.pdb30KB
-
ServerManager.Common.dll.dll 305KB
-
ServerManager.Common.dll.config.xml 3KB
-
ServerManager.Common.pdb107KB
-
ServerManager.Discord.dll.dll 58KB
-
ServerManager.Discord.pdb21KB
-
ServerManager.Plugin.Common.dll.dll 19KB
-
ServerManager.Plugin.Common.pdb8KB
-
ServerManagerUpdater.exe.exe 32KB
-
ServerManagerUpdater.exe.config.xml 176B
-
ServerManagerUpdater.pdb6KB
-
Styles/Default.xaml44KB
-
SuperSocket.ClientEngine.dll.dll 41KB
-
System.Buffers.dll.dll 20KB
-
System.Collections.Immutable.dll.dll 184KB
-
System.Data.Common.dll.dll 143KB
-
System.Diagnostics.StackTrace.dll.dll 22KB
-
System.Diagnostics.Tracing.dll.dll 30KB
-
System.Globalization.Extensions.dll.dll 23KB
-
System.IO.Compression.dll.dll 108KB
-
System.Interactive.Async.dll.dll 220KB
-
System.Linq.Async.dll.dll 1.0MB
-
System.Memory.dll.dll 137KB
-
System.Net.Http.dll.dll 193KB
-
System.Net.Sockets.dll.dll 22KB
-
System.Numerics.Vectors.dll.dll 113KB
-
System.Reactive.dll.dll 1.4MB
-
System.Runtime.CompilerServices.Unsafe.dll.dll 17KB
-
System.Runtime.Serialization.Primitives.dll.dll 26KB
-
System.Security.Cryptography.Algorithms.dll.dll 43KB
-
System.Security.SecureString.dll.dll 21KB
-
System.Threading.Overlapped.dll.dll 25KB
-
System.Threading.Tasks.Dataflow.dll.dll 174KB
-
System.Threading.Tasks.Extensions.dll.dll 25KB
-
System.ValueTuple.dll.dll 24KB
-
System.Windows.Interactivity.dll.dll 54KB
-
System.Xml.XPath.XDocument.dll.dll 22KB
-
TinyCsvParser.dll.dll 39KB
-
WPFSharp.Globalizer.dll.dll 25KB
-
WPFSharp.Globalizer.pdb12KB
-
WebSocket4Net.dll.dll 60KB
-
WindowsFirewallHelper.dll.dll 196KB
-
app.publish/ARK Server Manager.exe.exe 8.0MB
-
de/Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
es/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
fr/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
it/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
pl/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
ru/Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
zh-CN/Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
zh-Hant/Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
ARK Server Manager.application
- SHA256 99cd4130c611f5dd156e24933af20b704351dc65a313ff346ba2e5902cdbb5f3
- MD5 913c0f89804fb44ae577f9b350c86f30
- SHA1 19a653e03e48cf5b86341e82f84348d96366dabf
- SHA512 11f5903223b7761880f8972310632c75e625bfcba04208cb8cead9678ca082618285ed6d12196229e18c7184792de58efab733644bcc68c280d93e43b63fe45a
- TLSH T1BA41F385C288B846E32190D17AD2B413620977E304FC859DB9DC9D6F9F5BAC9C703273
- MD5 SHA1 SHA512 TLSH
ARK Server Manager.exe
- IMPHASH 32c5de998b5f069b26c94c8143b13c06
- SHA256 b751e1c7224638535d487fcb1777c9ab19d0353d598af4b0848f84ee185941bd
- MD5 7b8e07796e0393f1c39d138fd0c848c5
- SHA1 92bad736e15f64f63e43c6d44cbe4a60b93d2bc9
- SHA512 511f35bb793233eaa2fbdd147ba68afaf9c537a751f1659b49ca082da8d63d999643bc8f877456bbc1eb84fb3d61b20aab1491685db007b6811a4cf512b1ab1e
- SSDEEP 49152:tfPAUR7B2t7nYjVgrw5899JaBummXRtMWuR5jC1IhkW7h:BjczYhv5MCm8Wwwuh
- TLSH T14595238AEC640176D16779F0545260DCEEE00CE22A29C87A13F67784787627BEE761CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9172334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Name
.text
Size
1.2MB
Virtual Size
8.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sedata
Size
735KB
Virtual Size
736KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sedata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
ARK Server Manager.exe.config
- SHA256 a23a017fc862b45980ae94a09bc27d37644e63e83f5e7052568fbe334d299dba
- MD5 c60c349222b79ea03a4b5c4295f4b66d
- SHA1 5fafe12a816a605cdc3cfa9cddf88db386df8ca3
- SHA512 0ea99bfbb1da2d162ac2e330d1fab2311f78544a43f86d842a54a7b6c571c5c5bd437e284ae0a2be2699ca87e12442dab65fb22e85145c7f327914e611338718
- SSDEEP 384:LMR7a7FXd7M5MHCfr7wV46jfoysf8njOkXCIOOdGICP:45pfr8VHjfqf8njOw3OOzc
- TLSH T17B13D10CB1C1EFA916726635E73152D1EEA006331176A0F478ED31676FB0CDA4AB37A6
- MD5 SHA1 SHA512 SSDEEP TLSH
ARK Server Manager.exe.manifest
- SHA256 2b596f8306a999513e8cf705ef55ebc43370625974584a2cb08c7c7db5b5d6b1
- MD5 f4657e33c1613680a9459d3516901f8e
- SHA1 1e28e122b4c685cbe2f1d2d5439f001166a7e431
- SHA512 4f232ce387302c5da4bf401acd967f9e138bde6f46b4f06b10d6295e96714f83cdf7945ac0e0cf552d48ff2e10850ed5dadc22ce48e5a7bd19b63813127b937b
- SSDEEP 384:eO05tIeNx9Iv73IKmd7Gqyvb3+3dIt1LFE3UPTkYDgBcL95h7VY9FsKBOBNW007o:eO05tIeGxrcMHX2sUboZ
- TLSH T10053DB5688C0BE21433651D4FFE2DD24EE052B23457E158ABC8C1AEF9FA65489BC3277
- MD5 SHA1 SHA512 SSDEEP TLSH
ARK Server Manager.pdb
- SHA256 406d058b3222516535f0bc5350a57276f3bcb74d31074fb0f74d23ec36b30ef0
- MD5 ea78b28adcc8d9f990c4c94b393c749e
- SHA1 06eaa365387068a55cdf51942ff6b16845ce0b99
- SHA512 5b59cef09453e6ee311915674d9f679c3b9fb3c286ac4bcff70aa026c8783dd0caf2bf44731521caccbedea0874f7b518b424a752f5bbbf91feb5c0d191ed7cd
- SSDEEP 24576:LVUuM3SoQA0RUjLiEvqAlHIsO/A3a12wk2K:5t+vQSjLitA3a12m
- TLSH T17BB5A3937F98C932C41A867967EF4F2E4738D1980B4B978F6795A0BD3DC238A1E46350
- MD5 SHA1 SHA512 SSDEEP TLSH
ARKServerManager.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c198d3c47eac660c249d6f162acae725733bc8d7c2d809ffe150932d130e302d
- MD5 99e747b49d78b171198f772d81da97e1
- SHA1 db3600714c9286b1e3e33d6fe0d6615e6440b406
- SHA512 0b0d039f96e9ddb6810a502047bd22a31e6e634f2e2aca3c3b891b6cbe49ec3c9c3279fa98baebfc3819bf67c3ec8e9b7bacd5a9b015eb25f91bb6fd5c363825
- SSDEEP 384:iAvgaw+tQe3l8kTTs2vBkeYyJhP1YaBu4guV5E6mJVz/OTNgkJluirwYQ:iQg7yVSeQAIyJ5NWmQirwL
- TLSH T1D313774A92DA0DA5F4B70B7A6A7309700773BBA4293DD46DA5DCFC0D0FE35009960BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\ARKServerManager.Common\obj\Debug\net462\ARKServerManager.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ARKServerManager.Common.pdb
- SHA256 18a3f58f8f4b2568dde8639deed646a3da8b00437d1273274072ba22e9484de7
- MD5 84203147009d615a6052e554af393fcc
- SHA1 f93b4ab1ff6c7dea9d94ddb524a1e736d4c8b597
- SHA512 191a9d98a78f6306e69f44301985870779da1dc9d39271fc45d37ac90d2505abcc4a8b5c9a37f1d781dd9a0bd56dbf3d775690b33fa4ffe8e616eabc5fb89496
- SSDEEP 96:V4J9U//BB5Co6dkzuGJ4kRHahMkZclVqwUABWXstCmv5DTMufxE4k8o5/VyfW4yS:V8k/BB5Co6dkzuGJ4kRHahMkZclVqwU+
- TLSH T121C1A70BC3C08571D104073EE929431527B4C6127A509F68F28EB634FECEBB9C7795A8
- MD5 SHA1 SHA512 SSDEEP TLSH
ArkData.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5bdbadf417654c3552bb910dffdb64ce011b785c279b4576cf05282c07a03bf6
- MD5 3a9da36e946bf73c5c1a8bf24d76e962
- SHA1 451b4cd0b29c480fd3dd04c7a8523006369f823a
- SHA512 774f48016f5086c6799d6c06ac15c234319bb3834577e1a342b3b93254ec11db980244115a4bc67f1559e70e078e92b094cdc554c8cecc7afc2215eed2e77a5b
- SSDEEP 768:NlIEp5VqTT6j44tYuhXDHikjLebfXCh4v2Je9o1Hc5frWs:/e0rtYu5ekvebfXCK62oNc5frWs
- TLSH T179F2E708A7FDC236D56D07BCF4A08231127261263703FB599F98B4DE2E63358A954BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\ArkData\obj\Debug\net462\ArkData.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ArkData.pdb
- SHA256 27dd1571b978cde331dc46ce8e0edee6d75f62770865d54550ef1c28b6d9590d
- MD5 5226410558005673b27c9421f8f616e4
- SHA1 3c9f936eed67d6d7be01081fea0507d4d405a563
- SHA512 bd22046357625e7ab7d81a2a1a7586b6083a434355d420faf7ba5e265e549a6f6766f4c9cfc6fb66a32bee904b6112e9bf7dfd23f2d73f3de4c2cdf5871d3cee
- SSDEEP 384:NZ3pIjYUAPcsqZtV6cWq2H9adV0SVy92mojlGgTQhfd:yPZtZW+j0SiiMHhfd
- TLSH T12662D719C3418B1AD7554AB5A03783E07334E006AB5FEFA523647B7CFCAA7383E65194
- MD5 SHA1 SHA512 SSDEEP TLSH
Discord.Net.Commands.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 55e34240b43546f54404496fef1613778b9cb4bc078551a96e6ea413ef868e60
- MD5 24ba9d5efa9921a7ed6da07637fca69c
- SHA1 63e87f7925cc1c39108f35ea5a45f61eac25eeb4
- SHA512 bd086a563642778000d83df9966ce08a6edc8aec4e36175327a0b7fcefe79ee3b45de5b321c20b91e0fbde56de9effba8b2e190ff64ea16082bdc1d0c1b9f1f6
- SSDEEP 1536:aViLPgMOrqu1OTsmNfQKNlatAXo9ANb7Tqqx1L6oKo7dW4XvV+i9dbxSf6dQJv99:HLUJ8h/auHpooHdhIigZYp69LJhg6
- TLSH T1E0D33B34A3BC8B22C6AF7BB9B57042350BF7A606F0AAF7494D4CF8ED1A467405911367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
137862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.Commands\obj\Release\net461\Discord.Net.Commands.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Discord.Net.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 68cf9f25959b675a213d642fe2d6376bb057cc25c4d3e4093409761afc772e69
- MD5 994aa1bd3bad1290e7253f114f326ca8
- SHA1 9f03e859e65607ed894b6179a18e029886749a3f
- SHA512 83fa1db1a3c6467bdc0fd5ef0d5db55f7ac07d4a68e4d5f1bac719aa7bb1024d0e9732dbff0b9e41e06eb7984aad7cdaf151521a5cf66612adea155f0302ec1e
- SSDEEP 12288:78AS6nxBTMllk8NyO0cscwiYyAvgvu1Gh6FsfopiXIleEumWmq2MmkjEjyZ+I:BSQxBT6lkI
- TLSH T177E4CD4123F45969FBFBCF33667AA4512A3ABCEA1850D55E0AC4344D097EB8188E1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
664710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.Core\obj\Release\net461\Discord.Net.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
641KB
Virtual Size
641KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Discord.Net.Interactions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b44e3391c6e5c302ffcee97413e355add1c6a7b9c413ebdec4e504e4e66219c
- MD5 8fc4bb02fd8a3d384faabe389f086d79
- SHA1 6f3bd41da63b9f6210e8e5f1e8becffbeadd0f50
- SHA512 498ff9562789371e8b4dbd058a72733e8fd8c1cdcc1f0e1c324ab9d839c652434e666cd766ce81b82555cfd688ad29a168b8bd945d75c49feb5780657cb7b072
- SSDEEP 3072:4eWfuaV8HfQX3hxydDIxY/u1F4l5M+eT5FOUSHHNqoca4m1Ys3tSPisZD:4eLaV8HfQX3h4Pl++eTGR1Qmxei
- TLSH T15A344B2063FC4722DAAF9B76F0A0496A4BF6D605F47AE34D4E4CF9E9288775494403B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
237290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.Interactions\obj\Release\net461\Discord.Net.Interactions.pdb
mscoree
_CorDllMain
Name
.text
Size
224KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Discord.Net.Providers.WS4Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66b3549f2fabc89e30090fb900f846179677dc28e7b82ccfd1b2b5710dfa81d8
- MD5 75a697de77142859049ed61a9b983402
- SHA1 41f43551fc78de055dda9da47a3ddca7e03193d1
- SHA512 e02006957ca262ee01c1abfbe2312af01add592597355e3eee23a1301bae04a2070319c1c33390d92c924bfd9559e04a4c96c513b9fd2f1b1109ed9c35c328a1
- SSDEEP 192:Iqz15ddVA8bPjIixId1hccrFWlf4NoERAuCUEnvH7utPCrHppAZZL83:IqJD/QuI3hJolfUECNfg3
- TLSH T186420B16D79C8923EAAF077D9976620687B0AA10E703F79F1CDDA0E628933450C507DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18242
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.Providers.WS4Net\obj\Release\netstandard2.0\Discord.Net.Providers.WS4Net.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Discord.Net.Rest.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff9d22adbe079ca3594adc1d32149eb1fbe42656a8cccb68316672b60c94e399
- MD5 165817f45147dfbcc73c228a1593a1aa
- SHA1 cd8a600390423c9fee7fdff686d41bd0ebfbdd49
- SHA512 ddba255659b162b5bbbe0af36dfde7249cf2e187edc1f9f969b42c22efc5178ebf3dd0f654e5015eb4f830c6fa533228e2d12b5b050c7266a5a2b555b3b86a3a
- SSDEEP 24576:o3a9PlDcJgLCRvBO/3C77EPwvobfjTE37PtY:oK7YBO/3Q7EP9jAZY
- TLSH T16E552B55B354CB36C18F363BA477C31BABB2F540AB5AA78F064CFAED2D613504D091A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1258418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.Rest\obj\Release\net461\Discord.Net.Rest.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Discord.Net.WebSocket.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25046186a2998cad6719bb96fb52d96db234f85a971e48399da99607791c7a16
- MD5 9d97586c09a2822c7f49ffcfc455f97a
- SHA1 369250d9fb0363114780adde0d5662cb664861b4
- SHA512 65e4bd76515ab4a9ca029c3fa4d840e03a865e32fad2c39e88a8c545cc619aa79b8e658d80a861ce161f96c48f8f578888f30279d4881b51de51133df5ee2338
- SSDEEP 6144:tv6XovMrOeXpUqS3sqseBixafS2aZUW5vBOXyhmxTAhLO2GI71SApURRSahUXkRG:t6IMq8qseBiWJuUoZ+ZyqLRjxn0
- TLSH T199F44B8BA76C8E3AC2DF72BAF9944A5EC362E245975AE35F434CE5D43D523019D00B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
767234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.WebSocket\obj\Release\net461\Discord.Net.WebSocket.pdb
mscoree
_CorDllMain
Name
.text
Size
741KB
Virtual Size
741KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Discord.Net.Webhook.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 433670c11e65f53045647ba06e8ec17fc5257b1682992bde8b6a327e84250d54
- MD5 f37ff15f9627252dba28b3e074cb9a56
- SHA1 0adef763cadd9a916d8456b699ddf072dec8412b
- SHA512 502f59886b7a90688972f1fd9aa8006eb6584124450803185606f780830791b1fc077d25196f23916e233e3614b61c92054670b7945b45f544d972c09efb63bd
- SSDEEP 768:sy7SrrRO0nSa8qsZBAJ3+piaGXmt/P/ghUr:n7SrrRO0n+LByupiVyghUr
- TLSH T19CE21B39539CC72AE6EFBBFDE9B0124A5371E901A822FB0D494CA2F92C577515100BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\Discord.Net.Webhook\obj\Release\netstandard2.0\Discord.Net.Webhook.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DotNetZip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e9c0362e9bfb3c49af59e1b4d376d3e85b13aed0fbc3f5c0e1ebc99c07345f3
- MD5 a999d7f3807564cc816c16f862a60bbe
- SHA1 1ee724daaf70c6b0083bf589674b6f6d8427544f
- SHA512 6f1f73314d86ae324cc7f55d8e6352e90d4a47f0200671f7069daa98592daaceea34cf89b47defbecdda7d3b3e4682de70e80a5275567b82aa81b002958e4414
- SSDEEP 6144:DuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/W:3QL32ikCaUS4csRBse6sfW
- TLSH T180A4AE0427EC4B57E1EF5BB5D0B2A5A2C3B1B462693EEB8F5D4024EE2C17354C911BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
465934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb
mscoree
_CorDllMain
Name
.text
Size
459KB
Virtual Size
458KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DotNetZip.pdb
- SHA256 d4dbeedef2dcdeaa715b88d01c2892d7a5be368908013267958263cf9cdf6055
- MD5 99eb341a214403693aa20cd8b97d54e7
- SHA1 565babcbcd978af66fe1150cc58fdeafc9815822
- SHA512 e797ef990c0a60951ba4ad49467b24173192e71ae5cafbf006cd0e746b63a6f709b3ef70a6f46de3a849c8f5688910b0eced4b26b4f7879e1e53a4c2c5b72ebc
- SSDEEP 6144:rnuVJlDsS91SYAxY5MC/pWNue00vLpkQVHvCJ/lszBn/vPz2G:KQeMRtkJKBn/v
- TLSH T12BD47257BBC0CA33D429857866EB4F2E43B8D1C85B42D79F9385A06C3ED335A2D4A394
- MD5 SHA1 SHA512 SSDEEP TLSH
EO.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3edbf00e3413725d476ba59aaf5f4d6b67ae6b446bc598aa3bfe37dd6114f033
- MD5 de87c8d36795f1f6652b5a855cd4b04b
- SHA1 7edb00a76cb5f3f9742a4f08c249dc51b07767e8
- SHA512 dfc85863ea69b72719d17bba1b66ca2b6e33b0c88049c37c428cc9de06bc60887d2225b4ade52519615d0b6c010c5ca7d150990dc2232c7292bf468351c02863
- SSDEEP 24576:nBtZa1hz8aCwbyKlubOU7SSR5Jl0VQcT55WlXDrt8k7K9ibtiB3Q7iAdSHjm:nBvaXzXhbrYbTIWlTrtM9wsB3zH
- TLSH T148858D4CEE99CF27CFAD0732C111261443B6C057F383FBAA96E9A5B45F427668C891C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1787502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\EO\Products\WpfControls\Build\Obfuscated\EO.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
GameData/Aberration.gamedata
- SHA256 3d5d9b7575352a25258975b797dd9d5a8e502a28b7968f761b51efbbe2338d15
- MD5 b7861d3b8c292bb339957eae2ec6cb8f
- SHA1 4ba11ee2d740c2949eb5ac4a06e4176112b3df7c
- SHA512 77e03a0af09bb431482841c7f24d3fe55797212475967fca2cf65ed961a297cba180167b486b7ca80826ecc94366bd53c66e7caa52713ddc36e5a9ea55be172a
- SSDEEP 384:mk/1mWz9psxxlWGqlbam7NUaj72cULjxpjcl52ynMJNdhmrN4kR1OgjMiUsvkfnQ:fGSNCxsKo
- TLSH T1A6134A98D8622DF7114B12661CADE9A120B0035B2D207D59BFEE6D0E2F4CA3F297271D
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Astraeos.gamedata
- SHA256 1bdaa20fe9ec1aa214980db5b394b24f25e1e348bd9493e41cab4cf7304e2fb5
- MD5 6a8f261399ffe656b97e28d36944abb3
- SHA1 ff4898c80c6e4941d55e2b87db551419ca519a19
- SHA512 88809e724836ee1239bf3b3dc77c6407a5b9e85bd21e28c49b85c1aba8c2e9775927c7dd449cfe7f6db707f4093246216f69f021a01442d92ec7fb89c18b6867
- SSDEEP 96:KK9yvD4BvD4ZvD4pLvD4RvD4UvD4fIaBdHUa/7/KkOSUcGCKk/jyhObOMOwOwO9V:9yvD4BvD4ZvD4pLvD4RvD4UvD4fIaBdQ
- TLSH T131B1BF14C8631E9B428B1A720A3FE84565A0539B9F587E18BBAD650F1F8E17F08713AC
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/BobsMissions.gamedata
- SHA256 4c34a2cb6435947943b642beb4e83f3f5c2208ba26a0f226a3195d76e5cfe781
- MD5 57d3ac8dab0b710613c799b12957f4ee
- SHA1 e1b63af8078ca6314b47267a52b799d4dbd4ca87
- SHA512 1bf30f4232cefbca32c4db40f505a1d1ab19a6cadc9d4c2c0ffef90e00583c641f611e432ddcf9a8acb2d99b8f3fc63af73732aadae4d5f15ebb810090464eae
- SSDEEP 384:mk/1mWz9psxxlWGqlbam7NUaj72cULjxpjcl52ynMJNdhmrN4kR1OgjMiUsvkfnI:fGSNCxsKw
- TLSH T19F134A98DC622DF7118B11661CADE9A120B0035B2D207D59BFEE6D0E2F4DA3F297271D
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/CrystalIsles.gamedata
- SHA256 1635a5a431558f60593a461f9b692e3bca7b1b80242c66d2e9eb01a2a40bb9cd
- MD5 64433f192a39f91c49efe8b8b525afb4
- SHA1 39e651cb56ea8f24b25c34787766d32e83ed2385
- SHA512 b540a7287287489dbe644179adddea7ec6db07ce1cd39c76a4a07fe113f446de82df7807f990a5c22b002e663160127a3b6c8bb6260a0dbd8863fc008319b225
- SSDEEP 192:OXVN3KQaiYiqshjx+sirV+LrPGikbdxPSI24gblbZ9tZJ8E5RFJvBKs1xp56pi/c:R2j88KiBuBD
- TLSH T176125B075D4E60EF024A962D2C6DE4E5457C03B64D90CED2D9FAAD99D8FCB34983AE30
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Extinction.gamedata
- SHA256 a110bb679e45571b070094c351c6d346c443eb49b0809e96da40e884beb8dc99
- MD5 ffb79dd66550e959d39b57c9bba24641
- SHA1 2e41dad1577404ddf0cb6820d54d8c4fd07e2252
- SHA512 3da4ad771650833be1d4509ab7d30a3e494973b3532a915315619e2479676210f7e1828d52da736c679f8ed519769b4e155c3ee472ed260c140b9675cd01fc94
- SSDEEP 384:xum1guKYX102IO0PTrOcut5XuXzzB4b4z/PluPsK67TflnHxTW:91gz5B4b4z/PQPw7TflnHxTW
- TLSH T120E21514ED616FAB018B22710ABFE94134B0075F6E043D65BF6C650E5FADA3E48B276C
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Fjordur.gamedata
- SHA256 114e63f6e8ab2139e3de05f73fb1ab3545a73e6213ef31a6d2ce06d6488f948a
- MD5 9d74f70a1c03b72ccdd9059e862e4454
- SHA1 8a99a47434fd5c315764de5125e31e9ce1a6df89
- SHA512 ef7995f423496694d71a3387bca4dba6be8e99a0d82a2348122a3d0ae679d5b978a4cf680fce1e60ea155168f32582c1cee70055cdbd241728123c5f0d85c7e1
- SSDEEP 192:yzgkKgkugkYgkHvjvvjAvjvvjYvjtvjrwvjGpvjuvjNvjsvjYvjZvjhvjXvj8vj3:Tb/fSSNSNCTwJSz
- TLSH T1B1621606A407DD8F02C74A310D2ED58A2976035B4F40AEA6FEAD750D6F9D67F982273C
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Genesis.gamedata
- SHA256 fa4bf7156c1d274a99cdf34f82a2124a44a1e8cb9e351f4bcb0fa54308029b02
- MD5 dfa3fbb3d6f929b4e53b84df4ad6e5a8
- SHA1 83cde4b5bc727ec4d9222ccb65ac2b5c0a07535c
- SHA512 d5073ca42169811c3505cc600ebc5dafa673a77c063231bf23aad161a6f8da7e0f5f6d1d2a5d6db7b905c4ce680d9d4dc64e19d3860450762fafe72fa0343ce6
- SSDEEP 192:JlD+uvB/Hb39O+s5ikTnk6Pb2sbH0EPcjIU5zL4Vb7Mrbr+rSrNrGrzrdrX3x2lF:w2X5v6up6/lEz/QVofD
- TLSH T1F4033A135C1EE8DB428B06590C7CFAC6D67C43B68A40C9F7DC7A7A85E85D771883AE24
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Genesis2.gamedata
- SHA256 f126cc91dec30b8d99c92251064a028267336e2a986a54f3c4340e88ed5074d7
- MD5 fb64be4bf047b8161837f0b97710f2fa
- SHA1 125dc4fb5ac994a493c63e1b2cf31b827f8cffce
- SHA512 ee01660e5a54f49b4292c2d91082fcd2aae9926992ef1b405c33554c618092fe2896cc69ce29249338aec1d08e8294f1a65bb92878a8707c3c6fb824185c21ef
- SSDEEP 384:fIvpt8hRk+qGFlZkpt8hRkieNdNANDSc9r:fI8qGFlZtKXgDT
- TLSH T1B163AE339E0EA09F428B095D5C6EF9D3D17C03B296409DF2ECBDB689E91D9308936E15
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/LostColony.gamedata
- SHA256 2c064ba52edfaec3227d90f3e4b5c24a5a1dce9797787b63c747ccae6cf820bc
- MD5 8c00e0f7c4a1a3871c1e464a2844f213
- SHA1 ac9a0d1f8b8a31a36ef581631c1b71b775a54fd1
- SHA512 b2159398d0380d3be71d630c9f25feb6ffc4c3bf617e6a81a3b67136696b63f2bb1a7bdf5dee059df47fdbff91abfcf35849018a3a44738518912a8e317293dc
- SSDEEP 96:KK9yvD4BvD4ZvD4pLvD4RvD4UvD4fIaBdHUa/7/KkOSUcGCKk/jyhObOMOwOwO9b:9yvD4BvD4ZvD4pLvD4RvD4UvD4fIaBda
- TLSH T14BB1BF14C8631E9B428F19720A3FE88565A0539B9F587E1CBBAD650F1F8E17F08713AC
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/LostIsland.gamedata
- SHA256 856ad3e08b4b1303abef011f92761852dbce396cdeca694c629d651b40896df9
- MD5 88990f70834359960b15f424ca2840c6
- SHA1 712a7777ca849c039f451d4bb658e7fa0d2d6a4a
- SHA512 4306ce7493f3c051cc5119b7b69c17d4040e080e3f7db2b4907a8369575e898e87810eb7ade6d468ec0bfa087dd023e72fd4ce70e380461cd39f60d4ac7af6ad
- TLSH T193512A071D6F24D7018E31B9C97CF6C5896C03FD87909ADBA4FE5909DC08A3286BDB98
- MD5 SHA1 SHA512 TLSH
GameData/PGM.gamedata
- SHA256 c6d8adc881c32f9bc1530d49c55fa00513ea9b8de8486ea5e3b888a2328f362d
- MD5 3bfb1da64d77e5c98210bdf8a5cf8891
- SHA1 73ca228f465fcd8869cfd887818810fcd10664a9
- SHA512 a5abfbf5c7566811a0eac50d23de19300f31b65096053076d5873d9fb626c84c4fb57d512cdc0d4900e61feece30260cc311e9ed5fb07064205f1f83341740ff
- TLSH T13D31370898B34E9E00DB17711939E8492A7A075F5E907E55BF6CA20D0F1E17F9AB273C
- MD5 SHA1 SHA512 TLSH
GameData/PrimitivePlus.gamedata
- SHA256 6de6c9a81bd247453eb24889efe7080f0cb0978f1d4c86d7ff80145f7888f686
- MD5 c4d30b6c426107eb99b3877c23f3f376
- SHA1 6a6e2a22a7660a5257d2819487bb638dab2540ed
- SHA512 042f3eb1dd6d791fd7f2885f26e6f463b8af2292673569f9718b4dea1dfe6b785c18089a0b4eaad6ef1f066d28bc14944c6e42d8af0fd3f49f6012730ecfbc35
- SSDEEP 768:i9id2lLSHFk3hXz77w4CnFG38ZEJdjWH4w8t:PHw/r0H4L
- TLSH T12C831A48E9791EB7018E616488FDE94122B0435F2E047C6A7B7C650E4F4EA3F18B6E5F
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Ragnarok.gamedata
- SHA256 3be293cd79a1d9d9ca7df010e9ec51e20b6c94f6b9acf84ce2ed61f129ffdc93
- MD5 dc5b7bc21e7d70070275be19780c6685
- SHA1 003dad8bfd74c923feb4d54104da7ada8a070e80
- SHA512 02b94f8a110726b6749ecc0c6c951d90688d82a2147f029e62cdd5090133aa486112bc2e2fdd033faaffd04765f7314aabd0666b255101b3fee4d53b84ecb189
- SSDEEP 192:Kzg64Ig647g5FXgD4avD4DvD4mvD4BvD4FvD49vD4zvD45vD4clfjjRqkRKq5PFr:PriRWUljjvb2
- TLSH T1EAF14124CC921E9F22AB1A71293DF84A24A8838B5E207D15BBBDA55F0F5C53F587077C
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/ScorchedEarth.gamedata
- SHA256 0061cd097d8c3531205b3585fb53357d5779389a6d86676d7f471d550cd2b6be
- MD5 b7cc2becbae58019a744358a4722055b
- SHA1 fa5badd588f0e0290c6f5a1627ea9f6070395d89
- SHA512 da959d2354db0e9c8f97b11e65049c242a4d49b47e318144acbc960a34323ce1f89d4e178f4a85a4d888cf9ffe5c5967a0ef544ccf14207cb862063806473d3d
- SSDEEP 384:0JZHGQSLdX3o2vD1h3WSPSHzgLeM6rCxzq0Qp1Jrf75tJPqJmkxboxGezfCqI0xW:0J9pI0xiin0d
- TLSH T170035C48DD612EAB098E22B408ADEC0761B043AF1E143E55BFAC650E8F4DE7F587175E
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/SurvivalEvolved.gamedata
- SHA256 7c759d5fda4bfd1f36bfbdade72e4276682dce09b89a76c1a59aa66c94616341
- MD5 635a68397352055ab209ce444aa947f5
- SHA1 0e6413be5150f276f0b6ee85c5ad8a5b894763a4
- SHA512 4cd21076163bad9fb5df7c6a370f3bcb5c68ce69a9ddf72c1f75ab3f8fa312ca68be67f142bcb37b3833c036de0ce384f46908de7a22a59c11e62437d83f0585
- SSDEEP 1536:2MYrFVmlAYUXm5U35xjhI8nbszn/TjefFs9lw+gauxbM47LkEsBo:2hrFQABX7E8ni/Tjeelw+Cbv8tBo
- TLSH T14B845B58ED615DE7018A21B849ADE84621F0039F1E143C56BBAD650F4F4EF3F0AB2B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Svartalfheim.gamedata
- SHA256 207198c0ec09c777b5b97bf9916624c988a6266d0849ef91db5ef4f365799da7
- MD5 306cd11c899d9107fb54bb7b70b79beb
- SHA1 dcc66838265acb223b79f34c586dae73c1ffd01c
- SHA512 aea363f9c82f35e5c75f9b36955cbe55a06dd5ff675928cca6e1a73ed9d9f6e808c7cbca8f22ebf805e9e8e52c19dcdef076ae58991006990e5b7373ca7c51a7
- TLSH T1CAE04F5144311C52A5CE2BB0001CE1825A90AABB4AD03E457B8F604D0F1C2760DB929C
- MD5 SHA1 SHA512 TLSH
GameData/TheCenter.gamedata
- SHA256 26a4d1c9a5e0cf0222ed04ec75b79c17bd077cb975ccf9524c41541c9a1bc99b
- MD5 40a7f9e1816f13cdc44ecd88a0fa93ba
- SHA1 1841252f6a2292cc6835d5a6de4695ca5024300f
- SHA512 3784a718206ed73fb79533abfc59fa1a7da3a295bac814ef925aeb027d55d46328878ba3f38d9cd4c0598daa39990ef0e9cf5af55923ff54a2f0807d6c73e4a0
- SSDEEP 96:KK9yvD4BvD4ZvD4pLvD4RvD4UvD4fIaBdHUa/7/KkOSUcGCKk/jyhObOMOwOwO9X:9yvD4BvD4ZvD4pLvD4RvD4UvD4fIaBdy
- TLSH T187B1C014C8631E9B428F19724A3FE88565A0539B9F587E1CBBAD650F1F8E17F08713AC
- MD5 SHA1 SHA512 SSDEEP TLSH
GameData/Valguero.gamedata
- SHA256 b040c4d99f8a6b0b33e932ee4337de39cd64a9d9605e2219be235d170e5544d7
- MD5 a96610801644836e4747150cfca329d6
- SHA1 8c2845b2a0d27a689b55e4e3d23facc9da57639f
- SHA512 b8d600b4265bc67a72abae06606da07559b055e7268e60d8ff6e3e693b46a0726682d45c46ed6ad743ab0ee201c46ff9dea850199dde3923e6675248a30fa257
- SSDEEP 96:C7jpwlpvZpv6reD5RJ8RSeRje4rk0Cx+Y0YktxJz9A31ogLYYuSaoF1EY6lnUZS7:O2L36reD5cTs4rkbx0YktxJzI1ogLYY6
- TLSH T1AEB1F42B5C0F509F035707B90C7CE9D9892C07769D418AEAD9B56C4AF88CB76883E6B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/de-DE/de-DE.xaml
- SHA256 998c1b41c1797bc8a379c4dd221fefe703ebab0b7acc87f049bb9ce8b2813ee8
- MD5 a1d8b5e7273499021a2868d601dbf56a
- SHA1 3fe674eb56d8d49c33c2acf84b3740d8db1d29a1
- SHA512 408c6f0a09077927f4e85d8c0612895cb727a43764aa897f17f5ec69d0991985891f01f60c0627999113331f2bfbdc1c8a607154ca3131db6c0bf83945f2e3b9
- SSDEEP 6144:dCn7oHTRg7gTT9DVkrVXCueZcWXDvmZ8AlXiMyNsVwkBlGS45f/iL8M:dq7oHag396VXCueZJXDvNd/o
- TLSH T1E0C49D9176FFFE75B18D231EB48C85931DA4428E03B499FDF9894BC71ACA86047B6360
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/en-AU/en-AU.xaml
- SHA256 b64094e302c55020f3e1be97c6e83633c71ba0c5117628effe16625dbad71053
- MD5 d7c9ee37b2554ad7f67df5e806041843
- SHA1 8568baaac98d5bd44b09f74d87b7d2d8552aed70
- SHA512 af9c8c17240c99095a75f6121e2c5d6b9d0525678a741e0e338e89a824fdabd6a170d495066692aed79850cb729ea4c3e4722a7496705af21d2c764ce56ae259
- TLSH T1CFF027C1E41DE854699BD67B2CD5E08228A485DB85EDD9FFF49505883E023C20B1BF65
- MD5 SHA1 SHA512 TLSH
Globalization/en-US/en-US.xaml
- SHA256 e3a6190116ff00e7cfed308be933a236f375e3b913a6fdec83156775f97af320
- MD5 94a17d20f20f5f1d144ff53b5bef5e55
- SHA1 cef86151d742efe8e254678c857094451f372a80
- SHA512 ec0607c3e3be98204118f7207269e842abe6a0f8771e03ade4f095167c76f9c5d3578456d3ca64e3b5929b60d79f565782a9716d57cfc09aa7736c53fb3356b9
- SSDEEP 6144:I68YilXVZL1Rhz9Stckkanf6bH5C1kXiZCN3bjZwLeZpBQFCUD8DLD:wrSJZCNHk8z
- TLSH T112C48A9537FEFE76B08D131EF49C42831E95428E03B099FDF9894AD61ACD86047B63A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/es-ES/es-ES.xaml
- SHA256 ff57710017e4f74854316751832147f5ba778864b9586a225d9ab168e53d8d51
- MD5 8bba15c7b30b29e3dee44303720c30fd
- SHA1 d5a057c4b17f2cb1e66388602e3bf5a063ac64dc
- SHA512 f8e2d0732216f6502bed62ac22d82e3aa42d78b20d704c97721b661deca8c0b6b1e946629d69b2f412b3d5415a6ba095c9a5a6fa0725679323b3e529ef7b32db
- SSDEEP 6144:kL78lzwK+lNjC8lQ83yv9bLlZpBQFCUD8DLW:kL78WjC8MA8m
- TLSH T1BAB4C09136FEFE76B08D231EF0CD81835D94418E13B4D9F9F9864BC61ADD8A486B2760
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/fr-FR/fr-FR.xaml
- SHA256 2eb2f6d68ec5fb7a948b638e3a25f1b245c335647299c5351ec230c4b2ee9dba
- MD5 00f7cd38490022cd28bdfba72080ebe6
- SHA1 f814a99430d767c8389390e6d9b9f003f355718c
- SHA512 387b01f635a1cd4cc8d2c2e350879aaac5ac5647ffd186ab1abef31c5f98914ccb60bc7b563bf870ed2fefcfc0f9151f4f30209295fa3f9feb13603f82f4efb6
- SSDEEP 6144:TZ3+X77M83zLEC77izwnjSohMPTUi6sox6oDZgfdyeKW6ZSh:EXHM83z9m+SohIBR
- TLSH T18DC4BD9536FEBE76B0CC131FF49D81935DA4428E13B499F9F9890BC21ACD8A447B6360
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/pt-BR/pt-BR.xaml
- SHA256 9622ea93f69ff10846f47368fbff2b0bd143773a196a1302919fc4b147b760d1
- MD5 9a5324ebb20076f95e73967e7139abd7
- SHA1 c9bbbbad1f0dd222c63149701fd64a1dc140addc
- SHA512 342b06a86568be4635eadd4df039bbe46eed1074c35635f197c652abe5962df6210e04abf4641cdf71e2b7f065fdb6ca39badfb7059706158c4a615da67e98f0
- SSDEEP 6144:o68Z1pY75VfHMA8HqVfXvXVfDobb4lR7dQvPtgr3O56UIbbh4sAiB6W15OyWijnf:YgovqDaTz8R
- TLSH T121C4BE9536FEBE75B09D131EF49D82831D94428E03B499FEF98A4FC61ACD85087B2361
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/ru-RU/ru-RU.xaml
- SHA256 fd57d06059fe277c0a41269a9300f2f47390d807af2c6d129e0ee08c5ecfbcd9
- MD5 56e614149927556f7cb8a5885444c9bf
- SHA1 b0983803c769f6acd29080fc53d2ffff125050a6
- SHA512 37ba45788488e8c23299dcb09f0352392da837ed508b5f461385d2a440a175044b2f19315da381e8285b7744bd311170baa378b3de6993223fa5ff67a192a9f1
- SSDEEP 12288:XpuQIkEIOogW+UzYfPWieCEziod62c+fFtlIDwt0FcyhscbNtaJzLgVb:5R+IWod6GfFtkj7
- TLSH T117E4799032FEBCAA714C630FF44C5A472CA541BE27B65AF9F9841EDB29E74208776311
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/tr-TR/tr-TR.xaml
- SHA256 9d4510597352b977841302a7d087c8a60898913cf804ecbe46fd1c40bb48b051
- MD5 60de156afc287b5f33dd797ba5fe7ab0
- SHA1 2fcca5eacc7671ba101c94ef4f708476ed3643ba
- SHA512 600c6b9774c00b7746653f5b64d389c2393e4f61f787dae33bab07e5f8ae4a0a385bb5bcf7ffe2922d77808728c6515ca9b0466ac27e3dc342a0e29ac3ce0a49
- SSDEEP 6144:MZo6n0zoJkKKsMWAkgr2zIURdkzs/PYbjZwLeZpBQFCUD8DLb:Y0rslsURdYk8L
- TLSH T1B5C4AAD136FEFE75B09C231EF49C46935D95428E13B0A9FDF98A0BC21ACD86146B6360
- MD5 SHA1 SHA512 SSDEEP TLSH
Globalization/zh-CN/zh-CN.xaml
- SHA256 2dd5b75d501cf252782271044d4589426813db3f006bb0b61b7a275df07ad1a7
- MD5 33621c6707a25c293913d8891c1158bc
- SHA1 ffb4625f9f460c2e06f691161338c04ecc361844
- SHA512 837d1250ee0b0300892f4986363187f9315b4e09373461ce151328f5efed4cbde65270c4713e9f056a9856c6ecab85548e554905486c25faa59207ab0420320d
- SSDEEP 6144:QdRUkjhdydp/8DDjvrzrpLjrHLjEaB/EzuJXf73hLDUUKG/:QdtdnpLjoa1373hLHKG/
- TLSH T15FE47AD136FFFE76B08D131EB1DC41934CA4468E07B598FAF9860FC61ADA96006B6760
- MD5 SHA1 SHA512 SSDEEP TLSH
Hardcodet.NotifyIcon.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b7a81f9a501f36fe050d94e57dc7456b1c63c58bfb214863fe9748a2a22d146
- MD5 c37391572efad4b7df720123d7a35ea6
- SHA1 512b4ef31601998e3749223e067a96c95e3e3f78
- SHA512 6866d4995499acf40d6102b2bdab27b951879523b2fcdc61c40793811b1ced7130dac2c9cb5b865268e8c4b2fa28ac5f92e4b4aea81833a7aa262de75b4ae68d
- SSDEEP 1536:en5VJM3T5szyxa9PKIKfgAxyzN5xNVkvVFrSc0H0cfNbQSuksKHqocaFT34:eWsEa9CAAQpNVkdlqUKcksKHqojFT34
- TLSH T19E93BF4133FC823AD5FE5634B9B233218334A942BB62DBD949C0516C5AF7BC95A903DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Hardcodet.NotifyIcon.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 295af2142d9214f3fd84eafe4778dca119be7e0229f14b6ba8d5269c2f1e2e78
- MD5 48efe61d6ca3054309907b532d576d2a
- SHA1 f36403aabb16540c93fb35245ec0b4e435628aae
- SHA512 778e7c4675d8fde9e083230213d2efa19aa6924fe892ed74fa1ea2ec16743bb14b99b51856e75eaef632d57be7f36dd1bc7ce39a7c2b0435b2f3211bb19836a3
- SSDEEP 384:O/9b512C4dABe070VJI0Ftdalemxxf34wqsWeb/WjR/uPHRN7Y5slu6o:O/f1IDjV9UPPpWRMkT
- TLSH T189A26B11D7AC4317EEAB3FB19679D1062E34E7D6A821E32E108CE2652CD73859731739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
82:11:ea:7c:5c:6c:f6:d8:98:91:57:78:8d:42:43:17:c8:8e:9d:92:b0:d0:16:ba:2e:c7:fd:02:5e:79:f7:5b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:41:af:7f:52:97:5c:f2:dc:45:00:00:00:00:01:41
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
17838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/net461-Release/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.Configuration.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4891b08c0157568e97b003936391841fb08684e96339c9ab6e9b060c0b2cc46c
- MD5 700a883d56bb05b55ae1a7e80f4187a5
- SHA1 4957c67dcddc2a143d5fc9717516594d0d71d7c8
- SHA512 b61e0287c56b976a0cb0e1b354bded2dec15de05fdde89a63105ac59c04327d6f31403858e519a83014cd451b03cd6f1504a714c9f69f25c6b591cb362f395c6
- SSDEEP 384:sm++Js0AtZ7WuzF/R9iaTG/0wEzRjz6qMvJsOhAWM86WsrNW0/uPHRN7LmG24rlK:LlsFfypvi8yZML7CL
- TLSH T1F0B25B1A97AC4733D8BB1F71E9F5C8052E3AD7A66821D71A5C9DB1090CB77C08722739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3c:88:78:9c:f3:05:bb:2c:68:87:46:c9:d0:8b:28:12:6c:bb:a9:5d:d0:14:31:13:c1:4f:4c:ec:a4:58:bd:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:59:9f:fc:7e:5f:2c:ea:f2:43:00:00:00:00:01:59
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
20978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Configuration.Abstractions/net461-Release/Microsoft.Extensions.Configuration.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.Configuration.Binder.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ae8a3884e65a8a036b30f9fee071271090de347b9fe18f592716199194033480
- MD5 244a31f1347f473a666e9029bd2cd8cd
- SHA1 c5581b7ee7b4aecc2dbe5c93df01613c2e95d765
- SHA512 fe8d7541a5235fd4be2073b54c32fc8b57ea417941a0e556da696efa4c0f63dd1ff99577ff1089fa677f1b741903f7db3a272506b4fe92ef36c5c719650ff798
- SSDEEP 768:hRnQyuN61yltpytwu4ma4GAizm841KP4fMnXc:hdgA1yl/yqu/5i68/P4fMs
- TLSH T10BF26C0A93EC8B26D9FE1B7068B1E4615F32F595B422A3085D4DA02D1C777E0D76233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
76:5d:54:b9:5f:5f:f5:3d:3c:66:01:71:5f:90:52:ad:70:dd:d2:04:e8:02:b3:6c:20:34:5c:a5:91:3f:0d:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:41:af:7f:52:97:5c:f2:dc:45:00:00:00:00:01:41
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
30254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Configuration.Binder/net461-Release/Microsoft.Extensions.Configuration.Binder.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d868de91ffe300e1b1bdef2b8f7a7beff4df0f2de633e05a964af954f5d00b9
- MD5 b28e3affc6cdc9952cc2655e9d4d5486
- SHA1 e05402b619eddd399fbe2c2045f63782e1a3c7d8
- SHA512 36667168da70ab86551ccd12e1b5b6ffbcc21b810718ef87c920da918955f2373b33cb5f6c8ec06d9d1b1b1c0b66c9345690c5648b0144e361e8ec4b01e833dc
- SSDEEP 384:gAapQT4FtFhd8p0UJ2aCEJxOsv/00v4DxACI40zHACtizgbLAgQMLlBa+C5Zji2e:Oi4Dd8pn5TaDuqgF/+5D1qj7YQj
- TLSH T19A035B66977C0323C6AF0A76B9E09A821F3AD7176412F71D5C5EF08908B77C14B5263B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b8:d8:c2:60:d0:b6:8e:8e:d7:48:d3:a6:f7:be:d2:e0:77:55:be:ef:11:1d:f1:c6:ca:b3:36:ce:c7:98:31:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 26, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F77F-E356-5BAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:5e:9d:29:c7:5f:87:05:a1:ea:00:00:00:00:01:5e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
34282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Configuration/net461-Release/Microsoft.Extensions.Configuration.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95a7c66abd60ba45a2020ac3d42702fd9823f7b6db2ceec6a37c9e9b0602fed1
- MD5 405bf969e7e50ef47422e54fa33605c8
- SHA1 4f3c5c8803212719ee74c60813b9ae08604684b3
- SHA512 d04978227453e3341fbdc6a8730da193f1c5e19a2635e02cb5d6eb6fef7c3ea53cf7df5df16230c12693cdaaccc90add812c5ad0a6ed0749e8de75c03602502a
- SSDEEP 768:6YZDH2djgFb+XickQGU+Zf5nNw0woRmLmrM/5:pU8FqXdTPGf5NfBoKrMx
- TLSH T1C0234A45B7FC8392CBEE1A76657552045F39FAC73411EB0B2944E0391AB3FC86A81BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0e:dd:03:04:bf:bd:21:0e:7e:07:39:e3:29:7f:43:cc:7b:bf:ce:14:3a:8e:4b:c0:a0:18:55:0e:96:24:50:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C4BD-E37F-5FFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:57:44:07:62:dc:6f:e8:be:2a:00:00:00:00:01:57
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
42682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/net461-Release/Microsoft.Extensions.DependencyInjection.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.DependencyInjection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d6de20035b25367a82da6180c45511d9077374c5f96f6cc5fedd2107d61efb9c
- MD5 f2a9c263e730b94057d26d8e6562e342
- SHA1 e36e4c8100585db5c7dbd07ff66f4adad8ccd37f
- SHA512 976fff499e641484a176801ca904221270220d07a1ffe14c03a9b3f32372a264ebe25e704dc63ec18f1bc2a430afa6a098847c327d695a3d19359422a300d4e9
- SSDEEP 1536:X72PnxNXZZSsufa/8CGJbQiKhMckeWABd6BnEetiMh:NBy/PYQiKhMc1WABdkria
- TLSH T1FD836D3053EC8B67CAAF2A75583550024F79EACA3407E35D1D89E4AA2BE7FC10761772
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
72:98:20:9a:99:4b:57:2c:ba:27:c1:fd:d7:0b:aa:2f:3e:6a:2b:96:e9:d6:b5:14:b3:fa:d2:81:01:be:62:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:23:19:d6:5e:de:95:24:31:00:00:00:00:01:40
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
80838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/net461-Release/Microsoft.Extensions.DependencyInjection.pdb
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 60df37bef5b47e822c02cf8547de3b2a836973e517efbaf090f14086d5155c9b
- MD5 4360e5ddde76b62461762f72f85b1d79
- SHA1 26f641b14e70ed7fc51e32590b65623ed2cdef6f
- SHA512 5b2b345f1468094f050d8ace375a13ef1c44f3c3e5a1644c7395a9518bed9e965b4b511d650299b1ff844d9062e342998245c7de308b5252b5c875b3ea4e97be
- SSDEEP 768:xKOg6fZr3r15Cpw4iI+OPGWcf9CRui0zbf1JPM2:Hg6txCLiI+OPGbf8Rui0zbrPM2
- TLSH T133133A4467DC4333DBEE8A7460A1D1524B3DD3AA7422FB5F548CA16809A3BD09B713BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
00:9e:40:7c:65:40:32:a6:41:c3:09:b2:0d:90:73:84:d4:83:96:f9:ff:d8:98:69:2b:00:57:8c:6a:a7:bd:b5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:5a:2c:b9:6e:44:34:cb:6f:28:00:00:00:00:01:5a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
38758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Primitives/net461-Release/Microsoft.Extensions.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Win32.TaskScheduler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 74fe1a6a1e36be7d893e31bbb4d4bd83bf4b927e715276cd5607982139818ebd
- MD5 a844ac745a4005fbd3f51d79ff88583c
- SHA1 92671774fd4be9781a77d2788a8dddbf8981ead5
- SHA512 5f0734058d9146ffeb552abf443df5097cf134a4737bed499467830e08d97f5d1996c1f1647c5c12289ca4d4209effd480010afebc59d50290d4ca7d45bb41f8
- SSDEEP 3072:o1sSJApTSnQU/x0ImhuDzHfs4zbYOjujDRfygDgKQINXLLHIaKlay8weCycJ5Dfm:o1sSmRIt/xhtsOju1DH5NXnIKAc
- TLSH T102645A5167FCC32ADABF0B39E471021187B9F846A46FFB4DA980D59B5C237809922773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
339330
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net452\Microsoft.Win32.TaskScheduler.pdb
mscoree
_CorDllMain
Name
.text
Size
323KB
Virtual Size
323KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.WindowsAPICodePack.Shell.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672
- MD5 54fe9a2748c4a0f282d4ec91e3cadc16
- SHA1 970b783a697d893ecd4916dd86b5ff7574896c9e
- SHA512 c7d567e3c039f98f3a99249b2d9bc2186c34efd73eec421331732d2307a8af940911381e27b015f58d0f65871bb4b038cc0f27d3fa495acd08994226bb033b7f
- SSDEEP 6144:KRAFnp++R1yj124hKX97kANqQHlWBwn9dgPan1W86b8c3v6n9c6KwZErn+LYHtA:iApI2D97kANVFWBwn9iPIL9Mwh
- TLSH T19AB429207BBA811BE19F477CE5F61721D7B58602B213EF0D0E8462AE2DC275645839FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
547486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdb
mscoree
_CorDllMain
Name
.text
Size
527KB
Virtual Size
526KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.WindowsAPICodePack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 808e96f59e7dd2212eace049079d25545f6c9c3f05244ec9cdc539fda18d34d6
- MD5 0d661949ebc172dfb3c3b98566bdf0fe
- SHA1 c400a3d279b9b2ed8f5cfca0b3a8c342ea64d9e1
- SHA512 7baf43c4ae7709d91cdd2f70dfceb1db881d0d7c89c673fb166294d56a0eafff056128b605be20e0ad304f9392235403441a3b17a3c2f785a4e81931b40e0abd
- SSDEEP 1536:dCrMf4QNZsVFCnmaDAtfMR1C7KGLnZOzIaxGIA/JtyzV/liTiA70hiuD:dWY7DyymCR1CfNXaxGIA/JwzFliTiFhF
- TLSH T117A35A61B7BC89A9F6FF0B79F6310510CB71FD462A16EBAB2540A5CD14A3BC04666333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
103774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Aybe\Documents\GitHub\Windows-API-Code-Pack-1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NLog.config
- SHA256 83985b55145cbc18bf525d49d310a02e1d46a2b267100b57c1d40da84b1d40c0
- MD5 af2b112338cde407120a648788c96b9f
- SHA1 370e8beccbd42d4274e1ed5eeac14a9a3730ad1b
- SHA512 3ddc67d451a51298ab2f662e63405ed36e5936724ed4a07f597941c5054e220b922b567472f816c45b2d90f7a7ebe60bcec3b6e99b594599e41e8417552f3b89
- TLSH T16161E0869E0C9CD9654E153A9EB9758B0EC142EFD940F9D8F0EC33663FA3C0A0796245
- MD5 SHA1 SHA512 TLSH
NLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 68936e2536bc04e0815fb9bee4c702adb989447d80b186a769fd68ee9899e13d
- MD5 81f18db21793dd155835019b49b75152
- SHA1 629c4ae17f7ef1a849254f21d3f13ccc14228051
- SHA512 3a705c5a2078c9f76019f2af7a61f44efd20d4493964e88d960b4f8d0416f73025f8aeda100cb51a73a75b7139cf1b8ecab3468b01ab5a7f9a04551160900f56
- SSDEEP 24576:Zshy5K52JG5KRe/uNrktKywwEVFQpj+Ib8yD5VyT5:2hy5K52JG5KRe/H0wLLyT5
- TLSH T1B1054B5133F8AB2BD09EA739E430271C07B4E61D7A66D75F0929E6A52E537808E413F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
834490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/NLog/obj/Release/net46/NLog.pdb
mscoree
_CorDllMain
Name
.text
Size
807KB
Virtual Size
807KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NeXt.Vdf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 770e96c0c952566164511c94065a5b0625654a4a9895fb612c2db765088785da
- MD5 c67a652c87d718332ec5083621b52866
- SHA1 d8d08ee07a31a3d2738c6d6ed0a5edb224a2a1c9
- SHA512 ed2fdefec42a294884be5e5f58fba789414e2c48a7907a87be51446d417a377f3278539e2ee578c6a8871b5d82f8f02514c67a2f23efac8a17c5c39982734df6
- SSDEEP 384:5ZnKujNP/Y398HAbfdhQe81Qdvli8YEUWwt:PKkNjGw1WdYb
- TLSH T10E822929F6F8C736C9FA1B7AE4B217210734F541A413DB1E0E8C71AA5C637809A90F63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\NeXtVdf\obj\Debug\net462\NeXt.Vdf.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
NeXt.Vdf.pdb
- SHA256 ef2d85cc8e7f5c4a58aea43e5e0d48834a2763fc624e8aacbba17c16ed8559fe
- MD5 569e2189de657224549455efbbf11f70
- SHA1 a1d362e923a6cac360840f478d123dec2e870a4b
- SHA512 33873affc052767b05cba4e9a3d9839ccfa4de0ea38fe99111ffcb270208d3b51efe8d79f336b473a206946101f269e060fe8bf000f52815281824768cde16ae
- SSDEEP 96:uh6k83wYwPo422I7wlDRscFMGlgDNdno1g4Noje6+7PZ/sz5fHECuLlcaTQZeufh:lp3IPoBg9s4Mit1nojG7SNHOLlcgkRVp
- TLSH T16712C615E7410528C342127AC9B3837553B18D2E8A09CFE93198EB7EECEB7691F75358
- MD5 SHA1 SHA512 SSDEEP TLSH
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
675KB
Virtual Size
675KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QueryMaster.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12bd3b0f5fcd63ef1ab530be901cb5f68f18045f3d1bb243fa79f68b16ed1d75
- MD5 4167dce757eda3b93645ef81830f7f05
- SHA1 a2031642821d42ad2559a4e16850d15f3ab4ba69
- SHA512 469c17704959d82d6bab2b7f7432bd7247a6911dc3eb75d56d94b1b0a10204d79967181bac9960d08c7a86706f16dd3ee605253365e725f5a5284c63d2d64a6e
- SSDEEP 1536:sjsafY3gdwJ7c/jkNF+HBI0p20G9UdJSkguaeQ:OfY3gb7o+htpVG9UdFguaeQ
- TLSH T1C663E83607AC8B65D6BF06BDA0A1411A17F0A2479112F7DE7F40F4EB2E737260912A77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
76194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\QueryMaster\obj\Debug\netstandard20\QueryMaster.pdb
mscoree
_CorDllMain
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
956B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
QueryMaster.pdb
- SHA256 e5ca17c9de58b0a714989a27986796df3dafde0e65dba1cd65eee2f913dec4b8
- MD5 7cbf4b89c4697f93c3699e6217f35e2e
- SHA1 9eeb988e537fe2baa8fc500a2de2343cb4b33803
- SHA512 25077c46a28157de7f4fb8353e39f6137f6c544c6a3e9f254b4ffa9b725aa36b55dcba17200c06998b2cb07945ecd9ff621426fbb122280769b59967e43c4b2e
- SSDEEP 768:PTjJ/sgVTVJToOwu6uWgW0s/vPGouAoFv8l:P5djWgxp9u
- TLSH T12BE2622FE3848316C651127250738368A7B5C612AA54DF62B3E5B728ECAF3D44F772B4
- MD5 SHA1 SHA512 SSDEEP TLSH
ServerManager.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 11bf05d28bc01352db2ca4afc32170caab006eba09cb411d954e68fa0ceb2476
- MD5 078afb530a154a177029ce5877afdf93
- SHA1 a363faf19ae25517f7516b4d617e5e123d715fe4
- SHA512 3a9501c165b5ca1da5ba2d8252232f313381a187aa923523b71cf50416bfacbd20c67d4cdfeb3f84142f67f080d02587f7995dfb6f4cb8186fa983678f779a67
- SSDEEP 6144:orVWidfYklOZ5TMFyVs86DKl9ibe6+RloT9pQLwslElYll5:zqsnQK9E+RloT9pQU
- TLSH T151643B9433E85755D27F0B77E0B4C1048339A807E9EFE70A6AC9A49E6CD778089817E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
317430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\ServerManager.Common\obj\Debug\net462\ServerManager.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
302KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ServerManager.Common.dll.config
- SHA256 3e96f1765430edea6fcc21dd9aee9d1f83d204da25b0ca17319ec7a3727f779a
- MD5 b7b4124497d1f9594658bc0b6a7c088d
- SHA1 08ed8fe233c596e31877269da6e8a2a7af4c075d
- SHA512 b6d4d8e408a31510335158a6e9f735cfd826b7bf548d03aa31138f837cd6da63c960e36c3f977aa6790b74fdf6b617f955e39deda778d96eb3735ea219f2cd95
- TLSH T111615A0C71C4AEAF15236B32E6315282DFB1467711A674E4B8FE31675F34C8A07A37A9
- MD5 SHA1 SHA512 TLSH
ServerManager.Common.pdb
- SHA256 8ff03d73881055c021610ea095f57af525d91b27b3f04e26cf27af71358dc7ec
- MD5 8f58a95243fb5a65c095c656db986413
- SHA1 344d8b360d10b12cc8524aa1a2fc60c6b726a9e5
- SHA512 b54d4d059426d0ef739f036385e3cf0a2f655f092cc10aca782dc87fa18ecf720ed77dfbafe60dabbde8e334763bf8bde476e2a938d96781b94e379375d8480e
- SSDEEP 1536:oOs7cM2KMAxSZJIkB5j2lYUcOq5+5UKCmxP6DG9SMU7qqK3butlQ5OGwk2:ocvBZJIkBIaZ6TDqkJOZ
- TLSH T126B31948E78C463BC36226768073831173B4CA5EB725CF8662A4BB3DF89A7341F97159
- MD5 SHA1 SHA512 SSDEEP TLSH
ServerManager.Discord.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 42f1f868e34375790a0185f746d23ea0582c9821a384f4833b3b18f4655a4630
- MD5 877140804f0b03cb88e2830226f4760f
- SHA1 908b1c6168a5a2b5172681bc94cf222c47024b48
- SHA512 655719a71e8f1d2fee23bdb6b00b6727fac56d49ed2749976cf3758edd9a1fd38f13bd5f31613034a92b02a2f7d690bd476952f51f4baea2648fa8c1cdd43f75
- SSDEEP 1536:cUnzRXMDSR/qexJyE8yoX1nNVVuBwZ/TVzT9/amrgnQCruXS4cmJ0uSO5tRlJdhB:cUnzRcDSR/qexJyE8yoPVVuBwZ/ZzT9v
- TLSH T13A43D78A42BC8FA3FA5F6BBD94D046961FF0963BC518F64E4DCC68ED2AD23004A41757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\ServerManager.Discord\obj\Debug\net462\ServerManager.Discord.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ServerManager.Discord.pdb
- SHA256 8d85fb3d45845873f9e966a8b2fe216e07d3cd2e393de941a7cfb5fcc0d4f245
- MD5 203a047ddf02435a0ba7e6c4192b1cf8
- SHA1 8de11bf2c91f61a41113d02bed9cbe6194d9c9ec
- SHA512 6d4a50a0306227b2a062e2296e24eb3bba64ea9d9a33533ee9c83696e00a3d6171f167fd83c478cb246695365e192bba33e237ff36d85aff7acf3c2a6af3cae8
- SSDEEP 384:N9pnEOTMnFKzcN7XPayf2jYDy3KczsVx4l3pHdckpMpLmoRLc2KqsJKShyKqE4EF:NxgFKz1vsPgQzcJKShyKqEwo
- TLSH T153A2B6BAC7848B22C3452272553A83593B748610B348DF66F9C8365BEDDFB288F76125
- MD5 SHA1 SHA512 SSDEEP TLSH
ServerManager.Plugin.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 44d94f0d62bf63efc73e1b06c817e82f32dafd3b069c1777d1ba946b0c23ebd5
- MD5 4b0e515674ce9ae683a8d4459b851df3
- SHA1 8c46746596adc8740bc73915e297054db329d77d
- SHA512 a3eb673d9022fd94438127e682bb14c56f83420f60c5f3248935cca883f3ba0de5f4634b37c117347b22e8619be81969aa8f447cd1f1c1b2bdd51b41fbc1b912
- SSDEEP 384:mJiL7JF/DZd/xv8aRqPCnL1KtpJ2i2lRyF8xYzNyn1/YPnhpz2z1paezxm23:JJF/DZd/xEakppJ8lam9Uhoz1cezj
- TLSH T1EF923B4A5798CB26D8BE8F7DB8360E5527B1BB827823D74D1F8C60D62DB3B50091077A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\Plugin.Common\obj\Debug\net462\ServerManager.Plugin.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ServerManager.Plugin.Common.pdb
- SHA256 08edef0c9f42b4ffb1cb7b8d0dc66d3ba0a827bf5af6e44c70a3010671b295ee
- MD5 14e5a9dbc1ca801b39ca8d574641b754
- SHA1 9d9b44c8d14669535a180e4dd86bf982526d2b49
- SHA512 384e44f0a49f94a667d78c31b67cc481b5f2ddf6675c53634cbe6c97f5b1500992833416d94e4b40016091469fd1aa827a481a187d9ab99e5b19b2e4a02b6ec5
- SSDEEP 192:CNk3jKXKf5YM6r5QX0c6G7eJIFG8BSsqiUvsmPxw+:C6u6f5YvteQIF3B5qiUvsmJw+
- TLSH T12A12D611E3C11D26C76D0775A477C70993748E09E614CF9EA288793DDC973255F2B2A8
- MD5 SHA1 SHA512 SSDEEP TLSH
ServerManagerUpdater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 df52456d24fb3bb5174da9478e528ba9139b59aec89dd1f6636e356b1ad94d37
- MD5 a680a2ff6e3d33040b0e76e9498f7364
- SHA1 9c20c6bd6ebe25b65abf38642940155e234f8766
- SHA512 086066900a3197ee4901ab11df54a47428f95755f13d9a0014da24ee2b1f350ba35fbc495add884814a3febf523df01e071ad77aae3db17fdb429cfd7230828a
- SSDEEP 384:GIsDkmpJWYNZ+W3x6p9roWysr2U85zlUxEueJ72K0KJ44KKKKKqKZWWWWWWWWWWJ:FsDk6t2BEbbR2eJKUBKKKKKqKa
- TLSH T17EE2280A73D88A24E5FFAB79ED3252100BB87D57BC30CA4E1995290D2D33B944B417E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\ServerManager.Updater\obj\Debug\net462\ServerManagerUpdater.pdb
mscoree
_CorExeMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ServerManagerUpdater.exe.config
- SHA256 8305f905b29a9202d59bc06753ac1acc00b3b4c8b951d820ca7ac850e7a4f7cc
- MD5 07c7bd25442b92d5e654d2b47ea63ec0
- SHA1 4c1a65c73edf4dac58f7c6d1e0094ced79647736
- SHA512 6204fb64c90537dab7f64b8d99430e8bfa7d4759bd22b2bfe7959f59beffc001cfce1e3ea80fff21deeda91cede3c48726aff7433e6a9b9e32c1f239f53b909b
- TLSH T1D1C080154098BD275D334F176361C915EBB072566464040CF41F9557073104D4247367
- MD5 SHA1 SHA512 TLSH
ServerManagerUpdater.pdb
- SHA256 b72d7e0e37afdceb71630a4bfb000828afef8ca051fd14df0bb1c610b0202457
- MD5 0373539d8b8992f104c82e4965877c20
- SHA1 b89af10c4902fc58f701e2c098e558bf35c15cf9
- SHA512 c20476f479a1c404d0d0f35c2ea0c0b2fe62d2345e76c0229df103eed98b3f060652cd5244992bbdeb7465a6cd28c9af76bce8f74ba47cbb11bbd7ff8be5097b
- SSDEEP 96:EC0UPi7myhCDNHdng31TKMCD4o42CLze6+7hoZ/iTNKXKl0TrkpDorhJl0eeIGu8:E8FyhwglTKMLACLzG7R5KX7Hl/OY1w
- TLSH T1BBD1B502D3C45612DB562337A8B2C3152734EA02A602DF9E71F4BA3DED9B3780E711A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Styles/Default.xaml
- SHA256 50b0b03d834b8132ad4e0bf6f4e1c8b06f6b4690bd73bdd388de73d91c77766b
- MD5 594c8123abece07d0643c1b9b7e912f1
- SHA1 9efbea2719f9d2e208f2c9e176bf8856ae43fbba
- SHA512 58f62239d131c640a1c0f00a50c7464bf6eac242e2761e660ac1a2ea906a6cbd6c9b77e57095b39a12771fdadbf3d72f226f45c5b38036af900655836529c9a0
- SSDEEP 768:xPnC0RCMUvpCyRCMUvxC0RCMUvrChRCMUv1q:ZnC0RCMUvpCyRCMUvxC0RCMUvrChRCMd
- TLSH T1F123102582FD0E34C29A4568A760BE50FE0102FB43786044B3BE5F7F0FE695915B3AE6
- MD5 SHA1 SHA512 SSDEEP TLSH
SuperSocket.ClientEngine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9863a8ca0fd55fdf1de8d64cb89d034fc009a58220d45c5f4f83c6cdd0c5cbfd
- MD5 bbea7769de6a008c3156141c52fdc18e
- SHA1 7d9f90e8da62f9834f532e9a0aba54969c14ec28
- SHA512 f7a58cbc5a6bc964d2af1a654a5eaee19bbc818352a9a3547a99952c027dbc67307ccb0987ff1ff6c88850ad322fbea1530bb0172a95636afdf9ff34ab340420
- SSDEEP 768:nDGXmBiIOJv2IIXs4UOPhbY+m/rihAt5A8o4/aBS8XpTt/yO0y:nDGXmBiXanx+zehk/WpB/yO0y
- TLSH T19013E51123F8433AEBBD1778E4B4429406F6F959B732DFA94D85219A3C53B918B243B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\WorkShop\SuperSocket.ClientEngine\obj\Release\SuperSocket.ClientEngine.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FF06-4BC3-B9DA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:14:35:27:45:ea:b6:c8:6c:4f:00:00:00:00:01:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
17218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 646d3b52a4898078f46534727bdb06ff23b72523441458b9f49ecc315bf3ef5c
- MD5 c598080fa777d6e63dfd0370e97ec8f3
- SHA1 9d1236dcfb3caa07278a6d4ec751798d67d73cc2
- SHA512 8a5b4afb4363732008c97d53f13ee430401e4a17677af37123da035f15f9e9409a2aeb74ae238379291fd5de07c3cd4e3de2778da5edf83a42649fa5b281cb32
- SSDEEP 3072:MHutEkGE0frJeOAY1tn/DuunP0F9QFg3QuxvkaHFckod:eu501WY9/DuOP0F9QFgwkm
- TLSH T129042705778CAB36CEBF4E77B49590DB8A71C217A096F3AAA1EDF7F14483351AC94018
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
98:8f:44:12:30:cf:31:ed:27:16:41:d2:78:2e:f3:09:50:2a:22:c5:36:ca:10:cd:e8:24:5f:e6:84:12:10:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 20, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F77F-E356-5BAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2a:e8:17:96:f8:86:a7:ef:a3:00:00:00:00:01:2a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
185462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Collections.Immutable/net461-Release/System.Collections.Immutable.pdb
mscoree
_CorDllMain
Name
.text
Size
173KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Data.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4fe23dd147813c0b724b62fcfc0ce419e9a4ad36f3da4cc43e5da97d796e289e
- MD5 4ec7c87d3c8820c20e8c2ef80d80d363
- SHA1 1feabebf78539d5e7316bc4352b4383d239fd438
- SHA512 2504dfed8dcf4f5c1cc56cb9ebcb03833cfb6837d0592f82dbdbc28899b6f1aae2e007e0175ad7544ff13b017f3063145e1826267a5dfaea91be182acca3c5bb
- SSDEEP 1536:6HOdYYWm6xNUw/1/jb3fx0vLBblQ6NdkaZbyYSI4Zki+BReD4pK/uYx0BekV7813:NdY3x6oxjLx0vBzZbDSzZ8B0uA0BeIA
- TLSH T142E375432BF8113CF2F71FB07AB995314A3BBD952B60C55E142898DE2430E51DAB2B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:97:34:3d:75:20:bc:a7:bc:31:3b:ba:f3:5d:e7:3d:48:be:69:a9:e3:dd:04:85:08:39:e1:d2:ff:7a:80:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
20:69:18:b2:a8:3c:3e:24:cc:97:1b:d6:b0:8c:18:e9:ee:6b:b5:82
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a9:54:70:d9:79:c0:84:65:e2:00:00:00:00:00:a9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
134978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Data.Common/net471\System.Data.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.StackTrace.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e932b25f50e3b09dd7759ff5b9e9abfa8fc115ea171b768164ae21387feac7e8
- MD5 c20c268eabdcc95da38ad646a0aa0310
- SHA1 3760e870dfcfa41071e5b39cca59265657b3715b
- SHA512 422f8f7a50f457eb979652b14a6c06a51a6a94c7eb9f56045a4b944acbe3026580465aefffd9f30a4334a556fa1eed8488db0766c16d637023e72b579a26dfcf
- SSDEEP 384:y3FfF4YVxWfOWqWWOWS3szm0GftpBjBvYsaQHRN7CblUaaTJcYq:yVfFGCi8zViD3LCmN0
- TLSH T10CA219918BBC4243ECA35E7026B8DD837C38EBC29D219A291195E59D2C527D5EB30B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:bb:a7:a2:f1:0e:68:ce:b4:66:a6:10:e6:5f:52:29:4e:84:93:b5:3a:03:b2:65:93:40:f1:be:75:98:c8:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
34:9e:07:1f:8d:1c:cc:15:a4:25:ca:94:d1:91:9e:cf:ec:f0:87:cd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:aa:b7:a9:88:ff:ea:57:c3:0a:00:00:00:00:00:aa
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
11306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Diagnostics.StackTrace/net471\System.Diagnostics.StackTrace.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.Tracing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d4a59fb62d8a7a138a49911110f8b2ab416196df95f4cfc599abb6ec61629e5e
- MD5 482573cb18b537a7415dcc00c906611d
- SHA1 4377161fbd9644953471a94021df437f21fe83e6
- SHA512 aa96e1544fd0286fb1d6a77b8ace8745f69ec4835cf0957c457aa3026b4ad5ec02e953c7bc106d80205109a85512d1df99ab3de7d41300e96858298ae5767fe5
- SSDEEP 384:AlQnCMi33333333kj8xe+5PTYM3zUy+CezHjzgwj0uzWOdWmWJdWD3szm0GftpBO:uQq33333333kX+Trk8o8zVi6wLtuCq
- TLSH T143E24A158BAC4307ECD75F7063A4C6436D3AEBD76C21C61D05A8E9D51D63B80DA22B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
11:ef:a9:82:e7:1c:4e:e6:e2:80:4e:6f:a2:5c:09:79:00:c1:55:42:50:5a:96:9f:85:e9:9e:99:29:10:d6:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
c2:b7:ee:20:dc:8f:01:d2:4e:47:9e:a5:7c:ca:68:ec:11:73:f4:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b7:f8:22:14:7d:03:22:fe:fa:00:00:00:00:00:b7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Minor OS version
0
Major OS version
4
Entry point
19794
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.Diagnostics.Tracing/net471\System.Diagnostics.Tracing.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Globalization.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f690794a0296d8dad4f30d626a8a89121df51b5909e440da08707b09518d040e
- MD5 8de05921a38c0ff54e6d4b4ed0c32235
- SHA1 5ba1692964f8732d2caafa6a8d1009dfb8b4a764
- SHA512 b7dae61979760224eddc28c717b78aabdcde2c9acd3659958041d08b44cda12e9d62f15b436691213771a4b32714bd78d54d2ba4c90471fc7bff4bf274c66c07
- SSDEEP 384:ne3E7jRb4HFg1RPWYR1Rw0R9WYRPWYRDRj0R9W13Em0GftpBjTjRlaQHRN78JRjT:naMFUgzNzwu/NljusUViDlL8f9Lx
- TLSH T17EB22B91CBBC9103ECA7AE3076A8D6C33D39EBC26D2196791499E18D1C937C5D720B39
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:b3:bb:38:1a:d4:71:04:1d:7f:6e:fb:4c:aa:18:5d:27:62:65:86:6a:3a:b6:ec:7e:6d:47:7d:9b:87:b1:a9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
21:60:36:57:5a:db:06:d5:b3:58:fa:0f:af:37:49:dc:cd:15:67:85
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b6:8b:47:43:b2:cc:ad:1f:04:00:00:00:00:00:b6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Minor OS version
0
Major OS version
4
Entry point
12706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.Globalization.Extensions/net471\System.Globalization.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Compression.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 76fcaccf84313bf78f523b3bc8198c2d040dabdc04a5dc863b46c8af7ac10a88
- MD5 b2ce49c37351d7a7471cd20c9e02b6e9
- SHA1 44eb7732131b4b1b25ea8d023c3d2f544e017f24
- SHA512 40980b050861f7c4f1ed5b71f7f7fd91052fcfc1c49b7b3490d9a4fd68fec8fd3c95af38d113aba8e7f1ce2b4ceadd1b6d66c5d1ea68064ec6265c266be1afc5
- SSDEEP 1536:rvc/U5yNq2oS4Zd0LE3YigSFvhoZONK3aAYHtTfXmNoJXRVnwmk1:Lgk1tiLMYiDFvEqrNDWNoJXLRY
- TLSH T17DB39D6427FC468BE6DB8BB8653489520374B3726A03DB9E2C04F4EE2C577D496213B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
52:f3:62:9d:41:3c:ce:ea:53:cd:f8:cd:03:35:f6:d0:5d:04:7b:f7:6b:a9:fc:be:c1:62:17:75:ab:fd:72:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
46:36:d3:f2:fc:6e:79:0a:22:e3:e0:1f:f7:c8:41:cc:81:1c:d8:63
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ad:80:23:37:65:c4:5a:23:6a:00:00:00:00:00:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
87946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.IO.Compression/net471\System.IO.Compression.pdb
mscoree
_CorDllMain
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Interactive.Async.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5aabdd77a1644ce4ca9a8549e4bcf75db7c2d80118c1b8c332478a5f9af9905
- MD5 e76c0e501d0fe2e3b313126800c5e323
- SHA1 1a012882fe364c6e943b863be31707f9d6f3f011
- SHA512 32c0993675c37b7062d453b429e45efb2bee0825661cf48ac89937e03d292f6d7d94ab092aef2239a9f1f0d471747582b53aa7ee405922498a854cd46c6bda56
- SSDEEP 3072:uWbe4gO00KKT882tgO9CVW7fxsOWe6OM8tY7bbCr2f3PAQtHE:uiS0APtv962jr0AQtk
- TLSH T1B8242802B3DCFF27D0AF5ABF6551806B8B95C612F0E9A74E2C5DE2E82CC2391BC94455
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d1:9d:a5:f1:7c:fe:8d:6c:e5:e5:a9:3f:2f:d5:64:08:c2:9e:fc:c7:ee:16:0b:88:ce:80:33:6c:45:7a:99:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 4, 2018 - Jun 8, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
222982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Interactive.Async.pdb
mscoree
_CorDllMain
Name
.text
Size
210KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Linq.Async.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4defb87bbfc27dae51c09a89e461d56dd62588923e6f9a1fc6572cd2891e2b6
- MD5 242679cd4b3e50804ba3f1b86067347f
- SHA1 cb0786eed3aeb43c9e3899b3b42be3f32fc38ba1
- SHA512 2a48e3a34d3c9b1fcded64df8346cf91e48c85be8f1caaa4733e64eac4b55fac26319692d08116ca7263337a4d3e2166bb73ad0b0d52317cf6362ebe1293d580
- SSDEEP 24576:SGGbaJuBxixHF7GVVwuxGHuxEcSZwNVuavEh5+/iez9E47qaYRvf5xoYZsVoI/aW:SGGwOSx8
- TLSH T14C35F724A791BF23C6DFA97E9A50C2194765C55BC7AAFFDE208D9EF43C453200E8C4A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:21:08:d3:6c:72:eb:38:36:41:65:e4:bc:0d:02:ec:03:87:65:ea:c5:ed:f4:f2:b0:33:91:db:2f:3a:05:12
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 4, 2018 - Jun 8, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
1083142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Linq.Async.pdb
mscoree
_CorDllMain
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e76318e8b06692abf7dab1169d27d15557f7f0a34d36af6463eff0fe21213c7
- MD5 6fb95a357a3f7e88ade5c1629e2801f8
- SHA1 19bf79600b716523b5317b9a7b68760ae5d55741
- SHA512 293d8c709bc68d2c980a0df423741ce06d05ff757077e63986d34cb6459f9623a024d12ef35a280f50d3d516d98abe193213b9ca71bfde2a9fe8753b1a6de2f0
- SSDEEP 3072:IUGrszKKLBFa9DvrJGeesIf3afNs2AldfI:jBFd3/aFs2
- TLSH T136D37D6857C6DE56DB5FEC70E02062056631C52F5742BBEE1DC8B8F036923DA29093FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:b0:3b:7a:83:84:ef:83:06:3f:da:91:51:13:f8:7d:32:fc:46:43:1c:0f:b6:cd:f7:db:87:4b:17:93:f7:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
136106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8646a26a64928866bbe8746f3323a1f446c5a28c10b6b81df9bf4a08336b8c02
- MD5 5a5e18c377228fdb1d3db74f1140c1bf
- SHA1 e36366d2ccb64aebcc9df8fd7fadc7a9bb562af7
- SHA512 0c308b29febfb5d4cb52bd3b7b0c61a5844ebf1bdf305be2b89fb0f5040f52abd8557e9c4245a4f35c527a23674f1ae97bb12cc3a02a7dd7c8387208fcc73152
- SSDEEP 3072:reruQlNGOhYq0AQcTvankc+8lbKta4FUPAT8xpRI454I/1v6RpZ8dwPS1TIm:WW60VcTvakcXcApVh
- TLSH T13B145C14A7E88A2EE79F5B75F038466086BAF7837902E76E1C54A4FD1443B90C6523E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ce:d9:1b:4e:74:bf:9c:a7:d1:08:41:3c:49:7f:c2:2a:f3:c0:f5:56:2a:ff:21:d9:2e:b2:41:2e:59:71:79:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ad:ca:cf:3d:4e:c6:dc:e3:7d:8c:75:53:20:1f:5d:87:91:03:c0:6b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ad:80:23:37:65:c4:5a:23:6a:00:00:00:00:00:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
187422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin\obj\Windows_NT.AnyCPU.Release\System.Net.Http\net471\System.Net.Http.pdb
mscoree
_CorDllMain
Name
.text
Size
175KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Sockets.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4b4bb8b9be478600f48e43ae8571e6c123f8130923067f10fc92546d0900fb6
- MD5 b59af5cbddafdc5dc5ff3e34533d6857
- SHA1 dede511b5270d55e306e1a744e4bc0384a35c8be
- SHA512 4e0104c8a650943d8680f0bd449d4b953b25ff909bf50be19772e88295f9ce7542f29211528e20b4ad798d26251a50211eeea8685e3d81fab72df1380ca6b984
- SSDEEP 384:Wjt4Yn8fcWS9sWPW8YsWA3szm0GftpBjEKTPcaQHRN7ilPLM:UuoMK8zVi66ELOg
- TLSH T172A23A81C7BC8253ECA39F7066B8DA877D3CE7C2AD21D62A1199F5991C433C1D720B28
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
90:42:c3:96:5b:1c:38:74:ea:69:56:73:89:28:92:ab:6e:18:ab:19:9a:32:f7:b1:4e:6f:d2:24:c9:54:e7:0b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
11:74:2c:ad:8b:32:08:1a:bd:bb:65:4c:4a:8d:b3:4d:9c:36:75:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:70DD-4B5B-4568,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:d8:e4:75:f9:45:6f:48:f7:ae:00:00:00:00:00:d8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a7:64:5d:c5:28:0f:01:3d:44:00:00:00:00:00:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
11658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.Net.Sockets/net471\System.Net.Sockets.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ae:0e:d6:4e:96:89:db:00:f5:00:00:00:00:00:ae
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
103866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Reactive.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eafa9a048b8f5d0cc13098b3f078a29b49090d9b24ebe69021c78b9ae5bc077a
- MD5 0099c6e7ac47455a8661516d2f18c2cd
- SHA1 1836c64a831f6c882ddcaed2f91d6efdc0b956ed
- SHA512 98e966032736e0c857133a8cec2fb84d2a3d7d23161ee87e6ce7fd7bc468d9842bffae5fe4ede091e07e5a668d5034d0e211be577da406b2a5caeed1a52c87f5
- SSDEEP 12288:ogLZGSNKw0cM1PWq2Nw7MyJHAAlpt7hGj5LG+3USQrzLvHoipC6bbsw5a7iabomA:z989VFAAlpt7hSVSowlaMmA
- TLSH T13E654A497A844915C8FD8B3BA9706F11D335C4931F83579B5A89ABB03C92B8E1F4D3B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:fc:dd:67:bb:a3:8d:c8:dd:f3:35:f6:b3:b1:26:db:7b:70:85:65:11:7c:4b:cc:4a:df:00:26:af:6a:6f:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 4, 2018 - Jun 8, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
1453694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Reactive.pdb
mscoree
_CorDllMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- TLSH T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:48:a2:88:45:56:bc:2f:80:bf:00:00:00:00:01:48
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
14030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.Serialization.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a576d1609cc08c46a46ce708b7fdae33452a3befb701128a5bc9d6ff1f1b6dfd
- MD5 a84b438dbd4df29560eeb5765e03723a
- SHA1 37de951f703687cf061556b1a52c6f548cbf779e
- SHA512 ee6855bca6ee6ff8ac7ce5c0565ccc77c35e5f1b3096f1ede2c018d3364683bc289c6c520472ba46e174fdbd821ea673bffa7dabc9358ce4c86d26f0c08fcc7c
- SSDEEP 384:qO/Ll27yzDVfHWFgQBVWeHWFyTBVW4XRm0GftpBjCYP0aQHRN7Dy9l4aRIS0:lh+ypqgQBfqyTBVViYYsLDnA0
- TLSH T10DC21965C7EC9213FCE75E309AB5D6C36C39E7868C31862D3499E05A1DA33C48731B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:02:10:d9:79:33:1f:8f:bc:25:e6:cf:32:d3:4a:6c:17:d1:96:5d:77:e4:c4:d6:fe:9d:d7:81:4d:bb:85:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
df:5c:77:32:21:6d:21:b0:fd:60:70:de:a6:95:66:bd:d1:7f:6d:dc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ad:80:23:37:65:c4:5a:23:6a:00:00:00:00:00:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
14426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.Runtime.Serialization.Primitives/net471\System.Runtime.Serialization.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Cryptography.Algorithms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a83ca72a33172e977d7fff1e96fa6cbac6befe86dca21d651c04578210325225
- MD5 79c6fa92dba0c34db2c412bfa62e48a3
- SHA1 583a3e0f870ece6419350a8656d7d4ac21746f1b
- SHA512 386ab22aa5299c5d4fb3d8b551f97c916129f05fa87d4d3d90b58be1cc304ffd3431b0b5402a0a77f2db64b713f31ba60b3d006d0f01eb5a5195a4307ed7f590
- SSDEEP 384:57EsZ/sfMlkvhXQiOk5jpemwgRAkQnMQCbeCoa6IsLr4mF72r2KOfWmzYcroOhve:p/pkomj7qjeaWKs0SSF++VigLcLf
- TLSH T1EC13D506BBF8405CF9F78AB0ABB5E952187EF6C17D23D90D1604A2DD2872794877072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
18:cd:72:09:e6:30:2a:76:2e:28:3b:9a:15:74:ed:4c:6e:e5:84:e2:ec:06:46:79:d7:2c:f7:46:83:d3:6e:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
4d:47:de:54:52:4a:e8:87:56:07:38:94:05:42:27:eb:fe:13:f8:73
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b6:8b:47:43:b2:cc:ad:1f:04:00:00:00:00:00:b6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 2, 2017 - Jan 2, 2019
Minor OS version
0
Major OS version
4
Entry point
32470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.Security.Cryptography.Algorithms/net471\System.Security.Cryptography.Algorithms.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.SecureString.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9239de3543ea4dcf71ad86f16aa23eeb760566bc69078925900d0e41eec859ac
- MD5 a6de3093ffb397af3e4d2a91fa46b738
- SHA1 fb9ff696f96bb574ebd40c2ac9c980fe45ab0f84
- SHA512 3ec05a1de21ec4c96d6137788a868342aade033b2d6e9ed7972c8fbef3503cd03dd4728ba34e37c577ac301c056bb8c142516332c31d2f131599021a307da86b
- SSDEEP 384:zbdbvWApWmWTpW4sngm0GftpBjKaQHRN7bsZlPLnI:zFrykngVi4L4U
- TLSH T140A20785C7BC4243FDD39E7096B8DA877C3DE7C29C20866A1599E1992C937C4DB20A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
39:08:f7:93:b2:be:f1:51:b1:96:bb:20:ac:b4:79:2d:9d:24:ad:10:5a:95:bd:be:75:bf:f9:5f:4b:ed:d1:85
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
86:6e:2d:e0:88:5f:68:29:74:27:85:99:98:4b:b4:1a:8b:e4:40:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a7:64:5d:c5:28:0f:01:3d:44:00:00:00:00:00:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
10330
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Security.SecureString/net471\System.Security.SecureString.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Overlapped.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a74a34e69b5226f0ee4882f7ac1fc0a88602139ed439202c5fc5c8ed489bfa11
- MD5 c8ce5a96458742641ab9752b5b564039
- SHA1 b3315e3657442f82b9a84e9ade610846d183cad1
- SHA512 16d4c5180ed313c10886c1e411bf38b5b664d5d3e1b9cb1cde2d6ddf9efe39367a792e818636b5e12f90a027c68347a546bf43b386195f50904bd9b5882a005e
- SSDEEP 384:1V7z0MHKyOHsHb7AQH0gPsWHQHjWJZWaWsZW3KDzDm0GftpBjSgaQHRN7wl4aRIt:1V/Fhoq5VViMgLdAO
- TLSH T1B0C21A52A7FC8102FDA36E707AB4DA873D3DB7D25D21962D0099E18A1CA37D59B10F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:c3:25:87:fb:f7:d3:09:a0:55:af:b7:f5:f3:06:32:cf:30:d4:35:1f:22:40:9d:7e:30:2d:96:41:1b:10:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
8d:77:b1:69:f8:e3:14:cc:f2:3e:c7:ee:ce:6a:ca:9b:11:d3:89:72
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ad:80:23:37:65:c4:5a:23:6a:00:00:00:00:00:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
14206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/Windows_NT.AnyCPU.Release/System.Threading.Overlapped/net471\System.Threading.Overlapped.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Tasks.Dataflow.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 61213ff924139a7425ccd675f39acfc2f44cca6a90f13ed7a5a1095e74588ca0
- MD5 a0833479b572b28466a4bc1c6444c321
- SHA1 f360f5cf06efcca50e064a1c21198d335e9c099e
- SHA512 5157b0bcc7c25fac46764247a9cdac967307009dbeb223a157e6ae8c43e87a4c8666b8b71719991358a555d3b2116c352138a715428da820026b60c0a357abb1
- SSDEEP 3072:JxWRgjzvc1+sh1X/+CeVjnAbsANSpoA8oEuSeDuB5vDTeCRXYw3QYeMSgD8k:7WRUGnX/XKjnAbsf6A89uSeDm5vDKiX1
- TLSH T1FE044981B39C021BE1BF85B7BA7475AA87B3E552A5D3E3895CDCF2E41887B004F40676
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
42:47:3c:4a:a1:2d:5d:72:01:66:23:88:9d:e7:4c:ce:74:4b:b6:b8:5a:25:69:4e:e0:41:a1:a1:43:18:38:57
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:23:19:d6:5e:de:95:24:31:00:00:00:00:01:40
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
173014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Threading.Tasks.Dataflow/net461-Release/System.Threading.Tasks.Dataflow.pdb
mscoree
_CorDllMain
Name
.text
Size
161KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- TLSH T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a9:54:70:d9:79:c0:84:65:e2:00:00:00:00:00:a9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
12898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Windows.Interactivity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93fbc59e4880afc9f136c3ac0976ada7f3faa7cacedce5c824b337cbca9d2ebf
- MD5 580244bc805220253a87196913eb3e5e
- SHA1 ce6c4c18cf638f980905b9cb6710ee1fa73bb397
- SHA512 2666b594f13ce9df2352d10a3d8836bf447eaf6a08da528b027436bb4affaad9cd5466b4337a3eaf7b41d3021016b53c5448c7a52c037708cae9501db89a73f0
- SSDEEP 1536:BYQaIZaEmaOQxn6JxKjtlMZAnuETAV+w4:aIhOQcSLAj4
- TLSH T143435B5063FC422BCAEF0E78B578E2111939FBD67912C35D8D99E0ED08937D09A6067B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:ee:d8:f6:58:e3:82:0a:29:a6:0d:4d:da:4f:ed:6b:c4:34:50:1b:a8:8c:42:82:1a:79:91:a0:3a:90:87:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 18, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
12:e5:b0:a2:ba:03:46:7f:56:92:05:89:ed:0e:65:b2:33:e9:07:1f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 18, 2013
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 4, 2012 - Mar 4, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:02:8e:42:00:00:00:00:00:1f
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2012 - Apr 9, 2013
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:e2:88:00:00:00:00:00:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 20, 2012 - May 20, 2013
Minor OS version
0
Major OS version
4
Entry point
45262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\System.Windows.Interactivity.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Xml.XPath.XDocument.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 05df614f3252b522d2aa078585dcddd502a25bdb06ca3a44b1c0d24c1adb85a2
- MD5 54a0ae378c4d20f237e8b01b29e907f2
- SHA1 08fd364458b935c82eccca43ac53ea182da4ea45
- SHA512 12ea4ffbcd243f3db5fec4d4901f5550f044e49478a909416e7b588eb15e9c6dd005d8255ed8235e803c76b57fbeeba6fc9b0b85a8155787c1d885537eb87611
- SSDEEP 384:N4YTzW+wW8WpwW4am0GftpBjPXaQHRN7MlUaaTJQi:NH5JVidXLvND
- TLSH T167A22A61C7BC4203DDD3AE7067A8EA877C3DF7C29D21962A1195F0992D927C5CB30A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:e2:52:d6:72:fb:63:70:cc:fa:de:dd:97:73:85:be:0a:f2:43:6a:3f:a5:91:87:9a:00:be:52:7d:4f:54:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
8f:b2:4f:24:b0:8a:4e:6e:be:20:ce:e0:d5:e3:ed:87:6e:28:5d:ce
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:aa:b7:a9:88:ff:ea:57:c3:0a:00:00:00:00:00:aa
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
10822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\1795\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Xml.XPath.XDocument/net471\System.Xml.XPath.XDocument.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
TinyCsvParser.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5560a1d5382b04581757dceb65d062b9494e466a175fbbd4676d7dc2649fec65
- MD5 59e268ca10d0d1eeae86724f6c9ec06a
- SHA1 2243fef5184cc0e76bbdf3764b36c801cdadb5ba
- SHA512 e81d98daec9640c6fa680df4e1cabde96851df43c23e976da1e1a8703cb9823f5b9686747ae2675b3c763868bfb032374a4887514d91808a978f7cbace7b8af4
- SSDEEP 768:hnUmr7UkXLwC1hzvOlPelAlQz1Ks8Bnlo76vilHKU/qiqOPrhPeD:dUmr7UkXLwC1hzvOlGcQz1nUDvil7/iz
- TLSH T1CB030AD563DC4777D7FF9AB6B0B42A904334D49BB233E34E4E886196AC06B812961373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\philipp\source\repos\bytefish\TinyCsvParser\TinyCsvParser\TinyCsvParser\obj\Release\netstandard2.0\TinyCsvParser.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WPFSharp.Globalizer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cefd25503f8d95595de4dab9331fab8a14274f652b71ea7186b7a20c05adf0c2
- MD5 6d290245ac805112c48fd5fdd8736cbd
- SHA1 697d4ccc509f495b9594153a18f608640f4fb265
- SHA512 7678aee8e772d3deb82c356d584e017c4652748312fd8067613ac3984cfa4c133192a59c92bbfeb3c2e11fac9f993d03eaeb0180c847420e37ca8fbc38d9605a
- SSDEEP 384:3stn3x+hPV2WlW2GN79Dq01SHqPM65XwjaGrsdQsQstvjAdRnaR9Noba6gy:8chkigr1SHqPM65EaHx07aRW
- TLSH T1B1B23A59236CE621D8FF037EB872006903F1D289A112EB4D4F9874D618737905B75BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\WPFSharp.Globalizer\obj\Debug\net462\WPFSharp.Globalizer.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WPFSharp.Globalizer.pdb
- SHA256 3f0baa2afcada02b5e50b2a27f1de995fdf1514dce7bba9b0cb3e004cb0aecf9
- MD5 5e0e40bde12f48812ab9c26f93047894
- SHA1 31163dc5e20e5e584709dcc186b2d8994fbe8180
- SHA512 a7fe4821d2f531c367e7d0e2a2708779e0ef3b40f5688d5583064b91cb673fa2716b444ef7335308179b6f348e4e96095979dbc2b85291bdce34381118a2c6d2
- SSDEEP 384:S4Hx+/xsAX8ZJeSFEFeA0844tFhV+zF/f9y:H+/x/i4D4uFhO8
- TLSH T1D242C826E3845521C75712B7E433C30543B08A15FA19CF8A31A8B6ADFCDA7341F776AA
- MD5 SHA1 SHA512 SSDEEP TLSH
WebSocket4Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8550b9c7b6895c18e73b903064511b99982bd9928c7dcefaac14b592d201b73
- MD5 a47b0ee354a56cd82040b17e4edb0329
- SHA1 16835813a4bc3339d4b8044460fa646369e32c19
- SHA512 525a9dd7af9eb5a32363854c59f705c231f6f3c68c702ba108460935caef45c979683227a713eccb9498aee95bf4578da8851e699b320cdbce6f835f7236dbbd
- SSDEEP 1536:oXSaVnItYw1N0tUUTAz/kI5JIol/NkIgJ4W:o5VnqzNaNE4IvIolSIgJj
- TLSH T10453293867FC8B67C6AE0A75E034452007F6D15A7613E34BAE98BC6E28537C179346E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\WorkShop\WebSocket4Net\WebSocket4Net\obj\Release\WebSocket4Net.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
WindowsFirewallHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee82486413d69f4e69c75d6ffe11e0c764ad62f2ad7ded04f56028e5307f4ab6
- MD5 2c7275909c302836a3ceb14372bd73bf
- SHA1 c9f10b4756e4c1a1c962a1eec56eaddc8f167d4c
- SHA512 f65403d471175ec92abb83407496237edc0d2874907cb74bd586cf2187935ed04f13a8a846b85dd6991fec117f6aa753e2844cd38644624455a3516bbe465699
- SSDEEP 3072:RKXEvgsJI4ewDrk8T5MlqC0LTu6TODYvCfLSjI2dBBc0R7ysoFz+8khwJa7CJfCh:RKkgnZmFMlqPL3OSCEVROsg5a
- TLSH T1EB14BE2823BD8F6AD5EF6B7DF8612A1006F0ED463176EF465D4C50EA5E833D24D423A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
205826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WindowsFirewallHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
193KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
app.publish/ARK Server Manager.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 3145bc742a0723be8c8c2414cc6b36244e7cb9bb7b1d4c4003c3bf2234dfda8e
- MD5 b3af0996c9b5310a90f0f9e0bbc91f43
- SHA1 5eb3b928358d3fdea05222803b3b0dc858a03776
- SHA512 d56daf0edc086805003c7234b75e501fde14309306f0c5e0d98fda4b1f15248a5c055953123b010822d884dbdb0037396ee7e354f8b4f3f2968b3e7eede8a2ae
- SSDEEP 98304:WZfRUCBf+NXP8X8MP8cFXWHIPIsIIfIIIW/7qjiefcZm7WT:cByGWHIPIsIIfIIIW/Pm7WT
- TLSH T11586C6DEA6C4CC6DE6EC4AB1F611C4F4D722AF01C1B8425B27A9FE363C7624394D6906
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8388402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\asaAPI\ServerManagers-2.1.449.2\src\ARKServerManager\obj\Debug\ARK Server Manager.pdb
mscoree
_CorExeMain
Name
.text
Size
8.0MB
Virtual Size
8.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
de/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6909a1c134d0285fba2422a40ea0e65c1f0ca3c3ef2b94a1166015af2a87780f
- MD5 f83d720b236576c7d1f9f55d3bb988f9
- SHA1 105a4993e92646b5dbb50518187abe07ca473276
- SHA512 fd8a464f2bc9d5b6c2efa80348c3a9362f7473d4d632b2addad8c272e8874e7e67c15b99b67e6515906b86d01d57cd42f9f0f1e9251c0af93a9391ccc30e3202
- SSDEEP 192:0MiWWNv/jzSENtqcadVl8PandjJUf7ZJSqSi/ufP/1S5rxg0XWr:0D1Nvb5adVl8P2djJMZJSGu3A5rxg0Xq
- TLSH T10B122F499BF8063DF1F62FB9E9B68A35B43AFD968D32C52D0240814D4930641CAF1B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
es/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e893c6907da8d68c03b1a10e68b554ad5a8c0533f15912106f32e925f2beabf0
- MD5 15db634b70d6d9d6cd41baae3f02eb14
- SHA1 1456ffe09df896271a746f9cb40a230f188ad397
- SHA512 1230e5368d4dab9776d57056993669327e95fe72e262efa541ed5d43abc1bcd3618db13b6bd6b3a27da053c103e3fb647eae759ccaeb443f7d9ffd1ecaa1122b
- SSDEEP 192:r0WWNv/jzSEStoC1vxx6hUltfxx+BE00cUnAP9115rxg0XWr:r01NvbGVxx6hUltfxgE00cLF5rxg0XWr
- TLSH T1B2221009ABF8463EF4F22FB9E9768032F43AFD959C32C66D4244824D1430695DAE1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
fr/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3ee50e08124a7603be7d996dcf596eb0d3f9c603768e86e003f7b942d7097f3
- MD5 3b4621370addcf4306669c9e7e45c865
- SHA1 ea1ab3c499e946e152c1fc4a63fa99e1f9be94b4
- SHA512 586755f32d16afd937bfc1fe3c52210ab815d5d4c904de101150fa052a94babfcbdc465669ff8c2537b782474658d7912037ddb76d8c9a8fd34715d1fe7b2857
- SSDEEP 192:YWWNv/jzSEYtPpmKJiDjgmlRFI0HYZDKz/VP81g5rxg0XWr:Y1NvbdKJiDjgmlRi0HYZDMp5rxg0XWr
- TLSH T18A22230EA7F8062DF5F22FB9E9768422F536FDD59C32C56D0644814D0571A81D6E2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
it/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d0493e38d8b3fcc7efa4916fea1eea69ee6449bf435e1869c1bc3f54d4090c5
- MD5 1c331da4bce2809e16913c02e385576e
- SHA1 cf8e71e030347749596a53d1b13b9e9583ec0527
- SHA512 2871119690f3df0f244384a3f5f65ffe7cf17f1f00f6b530512aedeb8397c9e357079e8fba76d2a5bf6be4e2b18e4ac1ac104ea2d29f8f40cef6f30a905ecf83
- SSDEEP 192:vOiWWNv/jzSE5tyT1TNgr1nJIhZAf/07mPD1q5rxg0XWr:v11NvbGTNgr1nJI3+07MM5rxg0XWr
- TLSH T1FD222D09ABFC422DF4F32FB8EA768161B97AFD959C32C66D0644824D4570A81D9F1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
pl/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e58d86c42b61226dd7af35d7c9432ce6f0982d1d0d5a2f4120e8abc5c787a02
- MD5 b60817a69e314b22f746917c826da53e
- SHA1 7d2785a6d1a53a0717c986b959af67de6f9300e4
- SHA512 9a8f029329ce105b3f72fee623e3ab8c88e1af45f86fab61f81be418b2d70f83e4c0466010d312240a01e1ef8f9b9926ebf43e25bdc3c364c2d28ab9b0e5f6fc
- SSDEEP 192:haWWNv/jzSEYtq2dE1cxy8ON0Qsk96sPb1V5rxg0XWr:g1NvbaG1cxy8ONHskdD5rxg0XWr
- TLSH T1AE221F0DA7F8062EF5F22FB8E9B79132B97EFC958D22C65E0644811D4930641CAE1B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ru/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a1d5fdac027144bcaa0e8110f4de717e80944420c59708b3dd8e2bd31bc7ed4
- MD5 dade13e423762bdae745d57ca3dc86ef
- SHA1 7b4122cbef771c5548a7cb5641b6db6743c8c3f6
- SHA512 77f5050ba87e8abeb92298d16897d6cec087ffb7b4c38442c854a0993b398de529c15b5674adaacfb3e39ce05165f05a38337b2dbd41e8a7d806751542f6e8d3
- SSDEEP 192:phbWWNv/jzSEfthb7O9JKggIOrCPPzm394in3fwB/CZPlAg1O5rxg0XWr:pN1NvbH7O9JKgglrCPChnYVC5A5rxg06
- TLSH T1E2223F199BF8053DF4F26FB9F9769924B87AFDBA5E22C22D2500455E1871900C6F2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
zh-CN/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 aafbe48966dbc5372a308ab9501245ce261d2715f336ad1908c799d354c981a2
- MD5 3cefec17baac089c54c8102a4cfd160c
- SHA1 a54cd9bd4181a591937a99be88beb006279837de
- SHA512 2d45193662c7ce2854ce2d3ee53ae199e094d09bc76d8d8a8e36b24ea60400a5f064ca16ce0078fe6cbdf4117c22565c04e47b99cd99868254c915db6d18700f
- SSDEEP 192:HWWNv/jzSEhtiBbSEmfO2mdqeCtzEc6yCPVDA1L5rxg0XWr:H1NvbcbSEm22mdqet+wh25rxg0XWr
- TLSH T1E712F04EA7FC0A2DF4F62FB8EAB68121B97AFDA68C31C56D1510815C4971A41C9F1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
zh-Hant/Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8c769a357e6cd27452835e5288fe515fb50bfeec83ef3969975171174b467e5
- MD5 833f269ba6f0c34f49273da7fbd7dce7
- SHA1 d0253d322dcdf7f54e37c7e8911a8b77670d2967
- SHA512 4fa315e23d985affb46f6536cdf2ddc1b882f47098ee2d5a4b954ddeeb8904d1c83182b1598e4948a59728339945307b699a147ecd813c0f91986d95bdc57184
- SSDEEP 192:JWWNv/jzSEhtimYtEq40uI7Sr2fqmxkNeo7R7L7c7xM757odHK9nPol1f5rxg0Xq:J1NvbOtEq40uYSatEdHwWloA9Pk5rxgJ
- TLSH T146121149A7FC092DF4F22FB8EAB68171B93AFDA58C31C16D1544811D5931A41CAF1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ