RatonRAT3.8.0.7z
- SHA256 1c779be5c40ddad47b5ea615d3b06c58b54ab573c4f990b09e1b4c7c75dba20a
Password
infected
Overview
overview
10Static
static
10v3.8.0 Del...nt.exe
windows10-2004-x64
10v3.8.0 Del...nt.exe
windows11-ltsc_2024-x64
10v3.8.0 Del...rs.exe
windows10-2004-x64
10v3.8.0 Del...rs.exe
windows11-ltsc_2024-x64
10v3.8.0 Del...ds.dll
windows10-2004-x64
1v3.8.0 Del...ds.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...PC.dll
windows10-2004-x64
1v3.8.0 Del...PC.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...er.dll
windows10-2004-x64
1v3.8.0 Del...er.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...rk.dll
windows10-2004-x64
1v3.8.0 Del...rk.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...ox.dll
windows10-2004-x64
1v3.8.0 Del...ox.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...re.dll
windows10-2004-x64
1v3.8.0 Del...re.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...on.dll
windows10-2004-x64
1v3.8.0 Del...on.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...ib.dll
windows10-2004-x64
1v3.8.0 Del...ib.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...es.dll
windows10-2004-x64
1v3.8.0 Del...es.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...ns.dll
windows10-2004-x64
1v3.8.0 Del...ns.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...ry.dll
windows10-2004-x64
1v3.8.0 Del...ry.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...db.dll
windows10-2004-x64
1v3.8.0 Del...db.dll
windows11-ltsc_2024-x64
8v3.8.0 Del...db.dll
windows10-2004-x64
1v3.8.0 Del...db.dll
windows11-ltsc_2024-x64
1v3.8.0 Del...ks.dll
windows10-2004-x64
1v3.8.0 Del...ks.dll
windows11-ltsc_2024-x64
8Behavioral task
behavioral1
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
16 signatures
150 seconds
Behavioral task
behavioral5
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/DONOTDELETE/Commands.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/DONOTDELETE/Commands.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/DiscordRPC.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/DiscordRPC.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.SqlServer.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.SqlServer.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/FastColoredTextBox.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/FastColoredTextBox.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.Core.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.WindowsPresentation.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.WindowsPresentation.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/MessagePackLib.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/MessagePackLib.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Toolkit.Uwp.Notifications.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Toolkit.Uwp.Notifications.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Win32.Registry.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Win32.Registry.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Mdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Mdb.dll
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral29
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Pdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Pdb.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Rocks.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Rocks.dll
Resource
win11ltsc2024-20260617-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
General
- Target RatonRAT3.8.0.7z
- Size 28.4MB
- Sample260624-wxedeaet3x
- SHA256 1c779be5c40ddad47b5ea615d3b06c58b54ab573c4f990b09e1b4c7c75dba20a
- MD5 496b64d6497d5b7444ff1756ad519071
- SHA1 a82cbbd4ca6c8f89ba07d23b63f10794efc9f9b3
- SHA512 c41c89bdcb3c2171eca2a2bf9bfe1b27093d4325113eb143825032b672baa728ccd94f51968cdbe8b1e5f492d676e09f2e9cab6c1aaaddf57284394fb86ad2aa
- SSDEEP 786432:SdBfTKQD6YXdrHytJYbsP8awE65pkQgA944MJaJ:SdNhtYoNjP9LG+
- TLSH T1C46733C7A4B9816F6077D326B9C05D2EF09D0F363868740C952DF92BBD763C1AE1A816
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
ratonrat
Version
-
v4.0.0
Mutex
-
silly1
Attributes
-
assist
silly11
-
box
silly8
-
box_icon
silly10
-
box_msg
silly9
-
box_title
silly17
-
defender
silly23
-
delay
silly5
-
hide_file
silly7
-
open_website
silly13
-
password
silly20
-
process_critical
silly6
-
raw
silly21
-
reconnect
silly22
-
startup
silly4
-
tag
silly16
-
uac
silly11
-
vm
silly15
-
website
silly14
Signatures
- Detects RatonRAT payload 2 IoCs
resource yara_rule static1/unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe family_ratonrat static1/unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe family_ratonrat - Costura .NET executable packer 2 IoCs
Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.
resource yara_rule static1/unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe costura static1/unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe costura - Insecure Codesign Algorithm 5 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.EF6.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.Linq.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/x64/SQLite.Interop.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/x86/SQLite.Interop.dll - Unsigned PE 34 IoCs
Checks for missing Authenticode signature.
resource unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/DONOTDELETE/Commands.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/DiscordRPC.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/FastColoredTextBox.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.Core.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.WindowsPresentation.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/MessagePackLib.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Mdb.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Pdb.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Rocks.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Asio.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Core.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Midi.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Wasapi.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.WinForms.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.WinMM.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Mdb.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Pdb.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Rocks.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/QRCoder.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonBinder.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonImageToIcon.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonOutput.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonPortChecker.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonPumper.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonQRMaker.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonUpdater.exe unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/Vestris.ResourceLib.dll unpack001/v3.8.0 Deluxe Plugins (v4.0.0)/dnlib.dll
File Explorer
-
RatonRAT3.8.0.7z.7z 28.4MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord Ping Sound Effect.mp335KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord connected.mp348KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord disconnect.mp319KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord spam.mp395KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Door knock.mp3127KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Jigsaw.mp3361KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Moaning troll.mp351KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Mosquito.mp3370KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Niggers.mp3906KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Rake scream.mp332KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/raton_welcome.mp333KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe.exe 93KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe.exe 3.5MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/DONOTDELETE/Commands.dll.dll 3.4MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/DiscordRPC.dll.dll 90KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.SqlServer.dll.dll 577KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.dll.dll 4.8MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/FastColoredTextBox.dll.dll 323KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.Core.dll.dll 304KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.WindowsPresentation.dll.dll 55KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Chrome.ico112KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Edge.ico125KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Excel.ico361KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Firefox.ico131KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/OneDrive.ico100KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Outlook.ico108KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/PDF.ico97KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Player.ico9KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Power.ico361KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Skype.ico115KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Steam.ico264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Teams.ico106KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Winrar.ico164KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Word.ico361KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/clipboard.ico49KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/defender.ico294KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/desktop.ini216B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/installer.ico97KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/keys.ico63KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/notepad.ico294KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/nowifi.ico326KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/screens.ico45KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/windows.ico143KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/MessagePackLib.dll.dll 11KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Bcl.AsyncInterfaces.dll.dll 27KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Toolkit.Uwp.Notifications.dll.dll 158KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Win32.Registry.dll.dll 22KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Mdb.dll.dll 42KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Pdb.dll.dll 87KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Rocks.dll.dll 29KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.dll.dll 352KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Asio.dll.dll 33KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Core.dll.dll 183KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Midi.dll.dll 45KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Wasapi.dll.dll 175KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.WinForms.dll.dll 40KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.WinMM.dll.dll 56KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.dll.dll 7KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Newtonsoft.Json.dll.dll 704KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Notes/Raton_GowxuFtD_notes.txt13B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/.vs/TestPlugin/v16/.suo63KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/Networking/Class1.cs193B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/Networking/Networking.csproj.xml 2KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/Networking/Properties/AssemblyInfo.cs1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin.sln1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Bridge.cs880B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/CustomBinder.cs.js 1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Helpers.cs1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Pack.cs1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/PacketStuff.cs189B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Unpack.cs1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Zip.cs1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Plugin.cs2KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/PluginInformation.cs338B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Properties/AssemblyInfo.cs1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/TestPlugin.csproj2KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Ransomware.jpg.jpg 43KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.exe 24.3MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.10/manifest.json135B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.10/protocols.json3KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-69A205EC-4638.pma1.2MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/CertificateRevocation/6498.2025.9.4/crl-set22KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/CertificateRevocation/6498.2025.9.4/manifest.json113B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Crashpad/settings.dat288B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Crashpad/throttle_store.dat20B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/BookmarkMergedSurfaceOrdering6B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/BrowsingTopicsSiteData28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/BrowsingTopicsState649B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_044KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_21.0MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_34.0MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000139KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000247KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index512KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/No_Vary_Search/journal.baj4B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/No_Vary_Search/snapshot.baf20B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/js/index24B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index48B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/wasm/index24B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index48B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DIPS36KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DashTrackerDatabase10KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_08KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_38KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index256KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_08KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_38KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index256KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/000003.log38B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/LOG295B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log38B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/LOG299B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/000003.log114B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/LOG336B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/LOG.old336B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/ExtensionActivityEdge32KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Favicons20KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_044KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_21.0MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_38KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/index256KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/History200KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log49B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG348B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old348B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Login Data42KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Login Data For Account42KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network Action Predictor52KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Cookies20KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Network Persistent State495B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Reporting and NEL36KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports2B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries40B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/TransportSecurity189B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Trust Tokens36KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Preferences10KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/README182B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies20KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Secure Preferences9KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/ServerCertificate20KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/000003.log771B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/LOG336B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/LOG.old336B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index24B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index48B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Shared Dictionary/db44KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/SharedStorage4KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log40B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG364B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old364B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log65B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG340B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old340B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Top Sites20KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Vpn Tokens28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Web Data212KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/favorites_diagnostic.log806B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log4KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/LOG336B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old336B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log2KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT16B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG354B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old354B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-00000141B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Domain Actions/3.0.0.16/domain_actions.dll.dll 64KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Domain Actions/3.0.0.16/manifest.json165B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_044KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_38.0MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000116KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000224KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000316KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000416KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000517KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000616KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000716KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000816KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000924KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000a16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000b16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000c17KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000d18KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000e17KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000f20KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001016KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001116KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001216KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001316KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001416KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001516KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001616KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001716KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001816KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001918KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001a16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001b16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001c16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001d16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001e16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001f18KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002016KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002116KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002216KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002316KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002416KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002518KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002616KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002716KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002819KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002916KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002a16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002b16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002c16KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/index256KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_08KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_38KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/index256KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Last Version13B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Local State12KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.json43B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_08KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_1264KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_28KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_38KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/index256KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings47B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A1435B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings18B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-03KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/LICENSE1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/_metadata/verified_contents.json1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/keys.json8KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/manifest.json79B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Variations85B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/000ac7dc9366969db9d1e41810a3a27c747a7623535d856eecc2de86cfed80c7.zip 1KB
-
manifest.json135B
-
protocols.json3KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/89f43cb3df807293de2772d5f01ac2fc1482b38ccc8fdaee859b80642b7a0487.zip 51KB
-
domain_actions.dll.dll 64KB
-
manifest.json165B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/95fd9d48e4fc245a3f3a99a3a16ecd1355050ba3f4afc555f19a97c7f9b49677.zip 1KB
-
manifest.json43B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/fa29a6d5775ff340900a65b39b02fc8b4b77d403c048d8debf22f2f5d09c61a0.zip 22KB
-
crl-set22KB
-
manifest.json113B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/fbb2c0f4fad3b34b3ac7116d98f83638cf6f55a47992026a7abf944a759aa0ea.zip 8KB
-
LICENSE1KB
-
_metadata/verified_contents.json1KB
-
keys.json8KB
-
manifest.json79B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/metadata.json572B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/extensions_crx_cache/metadata.json13B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.config.xml 2KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Buffers.dll.dll 23KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.EF6.dll.dll 196KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.Linq.dll.dll 196KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.dll.dll 384KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SqlClient.dll.dll 217KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.IO.Pipelines.dll.dll 83KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Memory.dll.dll 141KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Numerics.Vectors.dll.dll 107KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Runtime.CompilerServices.Unsafe.dll.dll 18KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Security.AccessControl.dll.dll 30KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Security.Principal.Windows.dll.dll 17KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Text.Encodings.Web.dll.dll 85KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Text.Json.dll.dll 760KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.Threading.Tasks.Extensions.dll.dll 27KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/System.ValueTuple.dll.dll 24KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Mdb.dll.dll 42KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Pdb.dll.dll 88KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Rocks.dll.dll 29KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.dll.dll 354KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/QRCoder.dll.dll 184KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonBinder.exe.exe 270KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonImageToIcon.exe.exe 329KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonOutput.exe.exe 241KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonPortChecker.exe.exe 211KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonPumper.exe.exe 62KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonQRMaker.exe.exe 51KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonUpdater.exe.exe 60KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Stub/Stub.cs3KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Watchdog/watchdog.cs554B
-
v3.8.0 Deluxe Plugins (v4.0.0)/Vestris.ResourceLib.dll.dll 78KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/dll.png.png 13KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/dnlib.dll.dll 1.1MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/ezcracked/SSLRaton.pfx2KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/loader.bat1KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/runtimes/win-x64/native/WebView2Loader.dll.dll 156KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/runtimes/win-x86/native/WebView2Loader.dll.dll 118KB
-
v3.8.0 Deluxe Plugins (v4.0.0)/x64/SQLite.Interop.dll.dll 1.7MB
-
v3.8.0 Deluxe Plugins (v4.0.0)/x86/SQLite.Interop.dll.dll 1.3MB
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord Ping Sound Effect.mp3
- SHA256 dfff2fd5c5060a31c1334916df224d688e0afc9ff9a36b7f013035b7c2bb3d65
- MD5 708f770ee70623b8eba3d951e348983f
- SHA1 78f7ff0b92ea3eaeca24f9e3b8bf816da82a3299
- SHA512 3d82d3adafe3d709bdb686c88ffa7336df6cf6132c018228ee5dfae0c412e56cb8a444c19c440ae568674c3daedb6b0f1e3825e91ed435f82abbba26e3e19d17
- SSDEEP 768:I++HRGRensddtg1B42c3NUrJMMiNnE8wf:I0Renudta6eiNnEv
- TLSH T1DAF2E15F0B9790EFD25A5134E89FB42417423D3534A4EEC842BDED41C8B07F59ADA19C
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord connected.mp3
- SHA256 116c199b62b141583254a3123ccadf8a3f6e0f95937c1fdb7da977e4b6a3f0fa
- MD5 dccd43c45193df60bf310b885ed64293
- SHA1 0149ecd554f19cc8ea75c94dd60a9c2f4b69217c
- SHA512 8b77e584a1dbda5871d8462aebcf2eae18de1de6c197c082b58e6b6fd3e8f92a7f39733732b2788065d8bb324ec94db8b80de5d5825ac143d0d6663a4a3fbce3
- SSDEEP 768:I/xjbqMwmD0m5P1HFuBHy6RcIVDtEnqjNiZ1rDAAwJbOeir2n:qxnqsDv1FkHycVDEqhcPAAwwOn
- TLSH T15823F1B081B6BA50F34D39B2F6BB3E478964DF309690A7C075CA6FD64134907857B22D
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord disconnect.mp3
- SHA256 842f59528a10f5a274bf95d7e8d7db15b5810845129850e32871cfb1d9fce6ad
- MD5 cd3fc7c401bff827a8749ea8b68c4e7b
- SHA1 a12143c2218ba772915a354822595651a23403bc
- SHA512 bfcb709f41760b924dad8b256d224d457c4a4fb7a8bd82c777be70d61c0df1ef9e5b14cdbd45755129f209dd426bac0e837fb0e6de3b772fd45ea8f8e31e34af
- SSDEEP 384:ovVpllUtofMUPK9qnq8b3rLg5vT0Qecdjk+wti+LA:oLUOdnxb3oF06jk+qTk
- TLSH T19E92C087544510DFF7130176F60B1F74ECA0EEAC3A58A1C9FB126B5209A79442FF5617
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Discord spam.mp3
- SHA256 ddeca1dbbff7df07987438734b1e18d6c831852a97652acd29472fc99b2a0df2
- MD5 52264f48b8fc558ddbeae8e52b48a7cc
- SHA1 6b1f0859d3d1ef4a7ff6e0e667d8f908aa747137
- SHA512 efd548f79f2fa36bc76fbf2f3db7a654bb3988f456dbb4aed89cf2db067e403fefc6e5e1fd7cc0734e03bfc3b2f4cc7c4fba90aa4126123dd434dc414a6ee0d7
- SSDEEP 1536:BvpG+hVZtdBTWNuKM4MRCE0NpfNlSF9pn1j6w65L4oNF8NRu2pzs7w:9pLDHTAuKM4PJNpbS51jkd4/Fpzsk
- TLSH T1539301A3C3398D59FA4607788ECFD704C46A5648EF6F9726BE464F810037714BB6AAC1
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Door knock.mp3
- SHA256 67be4a0736f062d6933791e5711836ac8d2aa74c2719e29744c8e53ba41cb378
- MD5 dfe9c734f560ee385acf533668395bf7
- SHA1 73ad757b0b788fec34c10e03d03717eb915fb307
- SHA512 5b77d3939082ead1bc66c245fd8d9bc1a0425b7d83e08c37ee876b2039f142911cf0bafd79bb0ff887fa8962da705af7edb6fe19bb877f44c049efb3bbc4ea9d
- SSDEEP 3072:JlM3Isb4Qbt35PkW63L1PDSEhlCkLAX0ml+g:JlM3p8QbtJPw1DSE7EEmEg
- TLSH T1CCD3028B23AA4081FD22C2FA6DD14460CF1E76297DE5D05EC06EB069B077531B3DEB85
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Jigsaw.mp3
- SHA256 7f9109304504e4ed473cfb41f8960355a2d15f195d61306534de6db7104a193b
- MD5 36fd9257a6d945f0abb406a049d707bd
- SHA1 8bf42de6d7803cb1e7fc02e3ff099fa2eefab92d
- SHA512 3b5df0f3320effbab05ec1f11a818cbf7e5e64536de1ed1255f2f740a2df78ab58ee34ce9c197628a9822fd4c5c2d8d26a670e7cd738361afc58da4df9b0421f
- SSDEEP 6144:GDUBp+7zBu3cHvmDKQOFkR64a0TNNzl4dwmD6bJCjKwaP/Qx7Nk1XvPc5yqOo:GDIJ3o+DKQX6uzzl4Wme43aPo7NUvPc/
- TLSH T139742368D1516083D9AF83750CFB140A3C07BC754A4267C2E3667AA255B43BACEE7CF5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Moaning troll.mp3
- SHA256 28f3cd298d00acbef886d0b3284285fa9b1383d74c629d782b843e8fdeb8ce12
- MD5 d640c38e8ce7a6bda500e70ae13decb0
- SHA1 5a8753c1eca96706f10620f20513d9fc763354ae
- SHA512 c855edc2f9653f1b10e03d245bc342201fb8a269cd7275111d1dd9c5a269aaa9bcfa1271aa214d4413b77697b3202585d72902064adc7185341584c179496427
- SSDEEP 1536:oT+zqcU2D7wugpImWIgi8iiA4aHo+aM/2H6Sxu/:Zzq1U0uPm/giV7Ho+aM/2bg
- TLSH T15D33EF493BA9145AF4286F3C35BFA538D4495C0D6C81DFE9CD19EF2982BF4893E3A121
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Mosquito.mp3
- SHA256 e8864ab4b00fa25d2e9fb026dd0685a074c15694c4d287e022b108348116b51b
- MD5 b2e2ad83288fe4f24d25775cba371852
- SHA1 3e94d5fbd7e31760999e56681fa4a6d555e34d27
- SHA512 b24f6c79392ade696289fc90d84213b456ac99a7c0253b3cc2d28137135fecc662e1b947aa2c2bebac636d90971fcf18e0ad625ef4b24f61ee60cda7cfbaf8d0
- SSDEEP 6144:XszBBIWunxeEWCotVYNOmmq5LctnhAq7W8n2Vm/vd2jcsdY9HVZKWSwF12zK:XMBBj6eEN/D5LcthAq8VmX4jv+Zw210K
- TLSH T18B8412576B1A82F7F10227384E9B4238F77791F851CA421A8A70177ACB4B214FFDB169
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Niggers.mp3
- SHA256 799b82c6d95a4aeaa0ff09ba9c26848fabb9fe504a4742b6f16a3b5798aee14e
- MD5 50440b03c4ea35df5336da93d17981e2
- SHA1 b0a55f29418e87fc598f61ef9ddb137046ac9f4c
- SHA512 fe971f54f09c046bf1e8a976d395dae866254bfda34af579aa3f2d7aa4941e6cbb80e6908c4a81216186dfcab58b90ed3f4884c2f91b08e7f844b2bee51d419d
- SSDEEP 24576:o9bqFzuiCYxgh2VVHnSlN3G6lY+5LiPOdYVk:o9wgh2rnSrW6lYKmPOdF
- TLSH T10A15238443499BAFF00217A13AE2EA55D2001FCA6138FFDBF72573A566772897B60607
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/Rake scream.mp3
- SHA256 2fd070091c4870f53b5353d6c09153d394454c42064275e6cf1d4d34df03fb84
- MD5 896807d141167574a0a8528c88e9ae6b
- SHA1 d2143a2bc9f2ee5a805750fd5e6e8fe429a7454b
- SHA512 a8754615a49db447299e35d65ed2c3bf5a2a7c655d7485f499dd4a0e32877c612b20996816dd48fc18d74d28cad0531c630b9ed76dd2d2e1e6547af8715af738
- SSDEEP 768:K3258bF45fUxpJfBM1JM+Hxn0u9d2M7IKe:a258bF4yx7515u71e
- TLSH T16CE2CF4A9B22541DF4151FBC627FDB30E58A0A2C4DA1FF865294E33509BF281BF3721A
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Audios/raton_welcome.mp3
- SHA256 d3991980806e562ad6f1474c34edd4de4b5ef452d479be6deb2e2ec01b898de7
- MD5 112242ebacd9df44f7912221236ca825
- SHA1 790fe96a3b240cca984d7c5727fbb61334a133c5
- SHA512 9939e497a4ee6d74198f7222187d1bcd0fdd29dc514c4d3c680c599d6b6d011ae8181195f86ed02ec14d324d81e7da310eb5bb4205285b50156f92a233fd96ae
- SSDEEP 768:VSmbel0VDdsaNLcXPoLOSbGBl2soNhkiv3lg:zeOGaigLO04loS
- TLSH T1CCF2E1B9068F4D00E8E20F3265F9D040B0AFCD751F557BC0A29687E43CA8395BBA42A7
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/Client.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6c41fa2f4ec3d30efc4aa42c5084bc48ec687d755c30770b37d94836e5fb49fe
- MD5 4cbd857d7e365e4c1375e0dc632943dd
- SHA1 34baf49f25aefdc98ffefd9267fd6f61903245a8
- SHA512 46ac9bafb8ca5187ae74eb79a50a94785e0ac5caf4bb7dacebc3f24df519b5eed13bc34b4a4dee27cd3083aff6a2ddc1e960334007f9aa0fa819d7a363155863
- SSDEEP 1536:s/ugsp5RjLl9VlrT8qS4tsi5gy6KiSbPK3sCsCQXbuR:9gsjRjLl9DwX4tnbiSbPKfsCoqR
- TLSH T129936C0473EC6B16E6BFCB7E5CB554505F32BA172E71D25C8C8A60AD0A70782AD10FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
101134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\RatonStub\Client\Client\obj\Release\Client.pdb
mscoree
_CorExeMain
Name
.text
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Builder/clientForCrypters.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8e817dcdc9b30f53bb9207d2e2200052d48e5233d3a0e3dcebc3ce88e194b5ce
- MD5 0de95d21e3fcf16d9b216057038afc06
- SHA1 2755c3006cd7a8f87f783f7ee2ba6e8792fde6cd
- SHA512 9de7c0347dc11c7e5f3cd4582065eb8fd1fffc6ec0a6a04a27470efdd644f2a6dc4d5dc635dbe86dc509b756b4e906ccd9ac0675e3e416cfa06d4c4002f04984
- SSDEEP 49152:xmu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9s:6q0WgVUuHjkDGjYQeqpgmlt
- TLSH T1AC06CF407BD0CE1BE1AF87B6B4F2061057B5EC15A796E70B2D90B6AC1CB37446E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3701230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\RatonStubCrypt\Client\Client\obj\Release\clientForCrypters.pdb
mscoree
_CorExeMain
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/DONOTDELETE/Commands.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e809495c34524a4bbf57de1ca2d57ee2f254f61b11f9a460085841a4f5890926
- MD5 92d3ad1f8c1c7eed7e34cd1191fb5402
- SHA1 31a2840e7ee40b8db77297a66a495129e1b653b3
- SHA512 22bd0f2931d6f41fc46790f7ed53f928051cd26020580251b405244d2572e510ea0baf299c121a314fd50e6b3723d92398d4aa8fc90a83fd1eebe12bf360b22b
- SSDEEP 49152:Tmu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9s:Yq0WgVUuHjkDGjYQeqpgmlt
- TLSH T100F5CE417BD0CE5BE19F87B6B4F2021057B5EC54A796E70B2E90BAAC1CB37441E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3608738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
C:\Users\Cristian\Desktop\NewRaton\DONOTDELETE\Commands.pdb
mscoree
_CorDllMain
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/DiscordRPC.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 44d71f4c058cf8d0e531a1a1d5e9d892bae0784479509be3d921a7c59b85270d
- MD5 9f747cc51687d853f92f70a537ff6ca6
- SHA1 5efe5fbbe266066572d15a138bbff2bc0c578a46
- SHA512 87855c0a47336c9c48c1e5726fa80c631d612c0b024e259376cde324dbb91c15131d7cff60c79f97d7987d234ed5b22ec6f2c4d20d6586b4143c9853cf87511b
- SSDEEP 1536:KOBvajHhXD0UroUVBxECc7kGFkgfLM9wUwRDzJO+mHxULSiI:mjBXfroGxECzGbokR4+meI
- TLSH T102933A6597FC4679E2BE2B34E4B052410BFAB989B931D79F4A0810CE1E13BC25D617B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
98314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/DiscordRPC/obj/Release/net45/DiscordRPC.pdb
mscoree
_CorDllMain
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.SqlServer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a960dd4d2f0f37b3c09ffb9567c32426b8791310d7eb935c04c819c3d46bd49e
- MD5 af1646b1c2227ab206d855bd068535cf
- SHA1 3cd982ad2fb00a50151d7f416e4b05f79528496e
- SHA512 04eb6b5ec3a1655ae2fc661f6f9053f7743a2c624c4e8b0e1e6660fcb135a847adda27919ae8f38987e370e0114bd5ce45e01f1c894019a864a22cae3d24af0a
- SSDEEP 6144:EcK9UcUZV25QiE0U0CxzB6zHK1HHYkIfPQG2puGeqVmjaVmnS4bfu65+:fcuV200veIJu65
- TLSH T187C4F715B3E45E24C3BB4230583A701CEAB582F3627D0694F95EA3DF6FBA91115A3723
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:c5:11:28:68:d6:51:bd:1d:88:7b:a2:95:b6:a4:1e:10:90:40:df:99:35:39:92:62:d9:0a:b7:28:af:67:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 16, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:24:cb:cd:02:a1:17:70:5c:9a:00:00:00:00:01:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
587890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/EntityFramework.SqlServer/Release/net45/EntityFramework.SqlServer.pdb
mscoree
_CorDllMain
Name
.text
Size
566KB
Virtual Size
566KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/EntityFramework.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff42bca704605e187abb45523868b15128d6af1c28ad40a4579d507d34a953b2
- MD5 ffdcf232d0bb2fff78721fb347641a76
- SHA1 54c76a2fa61e6df1ae4c9df65435a38482c2cb71
- SHA512 89df103556cfbd955283bee551576134f9a7b0d121e12cf6df4e9f4028075b2c4ff9d22886cfd21b10d0a0d6e640db784b74d42ebac4a45ccb9ce9c725a1fdf1
- SSDEEP 49152:9PrnRLX8ziolcD5jX24Y/g1YmNBayW5Ci72yEBzw9vb5:tnt8zi8o5jX24Y/fmLaZv7xt
- TLSH T1EA362942F3E81F2AE1FF067AA435604A5AF5FC6A1352D65E381CB1AD1F227005A63737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4b:23:17:75:a0:e1:0d:cf:78:75:af:e9:4d:d3:dd:b6:84:55:8d:90:dc:2a:e5:20:27:57:dd:97:7a:9e:24:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 16, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:0a:52:c8:39:01:52:d1:70:4b:00:00:00:00:01:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
4947982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/EntityFramework/Release/net45/EntityFramework.pdb
mscoree
_CorDllMain
Name
.text
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/FastColoredTextBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9
- MD5 8610f4d3cdc6cc50022feddced9fdaeb
- SHA1 4b60b87fd696b02d7fce38325c7adfc9e806f650
- SHA512 693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09
- SSDEEP 6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO
- TLSH T16564391012F84659F27F47BDD4B9C01CC3FAB566A99FEB0E89A560DA2EF37409905233
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
336350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb
mscoree
_CorDllMain
Name
.text
Size
320KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b260bd61d577d7cf6daf5e954a8b894999441833c33ef270c9e73d7dd8580dc6
- MD5 112a37e4e190b6af687fc71a8518562f
- SHA1 3be3c34b4245cb8c27b348acf0273592b84a8822
- SHA512 a6ed4ad3ddfab121176818273b9f9f2ed3bd0c6d37a6f5173ae1256ba6dee47e2c6f40d763885934b2736380d74a0bfb0ded7cc7d24e0d847d378c485ef48ab4
- SSDEEP 6144:FFj7zE9i6vGyNr9Fb8d+Vb8uJgbqefHLBBlwePz:7j7zki6vGyJPb9VP0H
- TLSH T1E9644B1827E8962BEFFF4B7AD0701D2E5274E01662BADF6D4694A1FB2D137827400673
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
316730
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\juder\source\repos\judero01col\GMap.NET\GMap.NET\GMap.NET.Core\obj\Release\net472\GMap.NET.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
301KB
Virtual Size
301KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/GMap.NET.WindowsPresentation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 194fc0defdb71052d9acd21c9bd004f8b98f463e95fad5f8106d9c9e7c674e19
- MD5 0ed344a5005d6e31e448f1a23d26e307
- SHA1 3bc89732fc9f788ec1cdd9454858d3d3a8bd458d
- SHA512 eef285b60ef066e49789237451bc8dbdcf6e892935741e6c9978ebbc4b355c93ef69f417ca30798096197a1ce282d1ac27d185281ea73ad0183777f695c49dff
- SSDEEP 1536:U191sCtO1MZvboXcDYBVIV5aBIzEX5TZ:w91Jo1MZcccPcasMZ
- TLSH T1C3433A91A3684A2FD9BF0BFAD4A402111B71C657B622E78D1FF490BD89DB38106163DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\juder\source\repos\judero01col\GMap.NET\GMap.NET\GMap.NET.WindowsPresentation\obj\Release\net472\GMap.NET.WindowsPresentation.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Chrome.ico
- SHA256 142b529799268a753f5214265c53a26a7a6f8833b31640c90a69a4ff94cee5ec
- MD5 f1463f4e1a6ef6cc6e290d46830d2da1
- SHA1 bda0d74a53c3f7aaf0da0f375d0c1b5aca2a7aaf
- SHA512 0fa93d009cc2f007d19e6fdda7ebe44c7ed77f30b49a6ef65c319133c0570ab84f2d86e8282b5069d7f2e238547722ac3966d2fa2fae4504133f0001a0387ae2
- SSDEEP 1536:WE4NpLpq8Bb7RFRz8nqF+o2Hc0cccwccyccxcccMcccNmccdccccTccccncccNJ+:j4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv2
- TLSH T186B30F6A8EEBB642C5425474797363814A3D1F78A4CE35518EF33FED5AF3CA521230A2
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Edge.ico
- SHA256 5bb21d6c04ed64a1368dace8f44aff855860e69f235492a5dc8b642a9ea88e41
- MD5 9c053bef57c4a7b575a0726af0e26dae
- SHA1 47148d30bc9a6120a1d92617bf1f3e1ba6ca1a2c
- SHA512 482d639ba60f57827d8a343f807f4f914289c45643307efaa666b584a085fe01ac7892252f41b7756fde93d215b4f3fed16e608bc45102d320d77239fa93146a
- SSDEEP 1536:zVRUhw3TWxcZss+SP21wH7QOK/PPLr8zdYpizfgMRHGuTRLJHPxDsPsx3CXhRcVN:ZRUGKXs+S++7KFSbxeY+qDDrMY
- TLSH T1BAC32C2D5E4BB8DBE42449B558A6EBD10A6CEFA4F4E1169834E8FE3CB7D1474C500F90
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Excel.ico
- SHA256 8fc693238afc49a8098dac1762bfae891e818bb84749c6eef5f1b0c6c8ffddb2
- MD5 0c24edec606abda7c6570b7dcf439298
- SHA1 4478a102892e5eb4bb1da8e9c62d17724965691a
- SHA512 f8de3ffb8f9fe1394b3626ae5616213d4612b43f0635fa9053d74ac6fe536657e796289487f245b8abff74f1de8368c0df8e56bf21f540366ed86a378649ea24
- SSDEEP 384:FY9tDXICTUj6Q+CUsn2JiAAA/////////A+AA////////AAAiA////kujYYFsG3I:+PMXT0
- TLSH T13574D45560B2F99CE512CAF714F0D5005DF2AC68AE6CA65EB9317FBE4E7708230867B0
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Firefox.ico
- SHA256 b2f7fb22cd5b935cf19a2f58f7fef9db99db40772ff4bb331a73c345161c2574
- MD5 a512719efc9e6ecc5e2375abceb1669a
- SHA1 51fae98edfab7cd6b6baac6df5ecbda082eeb1db
- SHA512 e0153dbc8f3fdda8d1a7082bc30a3895d7f4b3bc2982b4b4ece55653d1b4c293eba3ba6d4a0a581f0f7db95ab287d6616ef7bf03af4485904111798bf9d9e625
- SSDEEP 1536:Ms6se7llqn17KineXd2wwKtivEYoNRh8RX9EIKhI49NT:MsgbcUieNJHKoPC5+Ld
- TLSH T1C5D36CFF29A9491FC2052D78C249F735044EFD6278C6CA03B5A57E9FF23996A1C20993
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/OneDrive.ico
- SHA256 45c85bdaaf0e0c30678d8d77e2585871ea6d1298ee0d30037745bacea6338484
- MD5 9dbdd6972e129d31568661a89c81d8f9
- SHA1 747399af62062598120214cef29761c367cfd28a
- SHA512 e52572de3f0d57d24a24d65eca4ff638890ccc9c5aca3f213ff885eda3c40de115849eb64c341f557d601f566ce21f8fc0df25cc4b13aaad5e941449a6b7f87d
- SSDEEP 192:sVLDqC6ot/2AlVx1qa6mgIwEk4w00wILxuudXCnadwyHXZ:EH/6A/9d1qDIwEk4w00wsuuXdwyHJ
- TLSH T112A379CB6E1486B7CB4CF63054A7B33C032BA83D6BD38E0EE55B3E59AB3265C9945105
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Outlook.ico
- SHA256 a65cbbdc2ca671a9edd7edac0c6737b3b116e357727e003e5fdeff163c6c21ab
- MD5 af1739a9b1a1bf72e7072ad9551c6eea
- SHA1 8da0a34c3a8040c4b7c67d7143c853c71b3d208d
- SHA512 eeeac307371c38b75e256083c55a3fe4ab096c1c7520a4b7acb40fad3af5a0d6c88aaf85f2c3e418034abee422c2a3ba13731adf7ee6078016da4dd2e989b120
- SSDEEP 768:ygjWAisCkoAbhMDB8dfO944J+IiIxzAILEhmtkW9iVHD:yOybBYfOS4J+1oEhyiHD
- TLSH T168B3A69A1D055BF7E70CF43480F3732D637ECE3A3E961E4DE9AE7EA862708491598811
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/PDF.ico
- SHA256 3f3c5ce486e5b9fa88dc60b60916053e8808c69167df1a11287fd3cd6db1ca6e
- MD5 14465d8d0f4688a4366c3bf163ba0a17
- SHA1 9f1fa68a285db742e4834f7d670cae415ce6b3b6
- SHA512 01db4fac75136baf9c162265785877b21fba9c4b8d9dbe4e495191f15aa9c914e3d5baf1c4606041279a7138c7e5c8f4ccf6e64689354fc3fb3fa66ab3b1da2d
- SSDEEP 768:5As1Fd6jrW6QKysmsolxc4nvPQIfjRuw+mqbz9j1MWLQes2aXS5Cjr:5AMwflmsolaTIrRuw+mqbz9j1MWLQs2
- TLSH T15DA3D2F1A740C465D8A796B9883BDAA7A423A24DDC6C490D3D92FF0B7D723474027C9B
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Player.ico
- SHA256 84b48ca52dfcd7c74171cf291d2ef1247c3c7591a56b538083834d82857fee50
- MD5 4ea9ab789f5ae96766e3f64c8a4e2480
- SHA1 423cb762ce81fab3b2b4c9066fe6ea197d691770
- SHA512 f917059b6f85e4a25909a27cad38b1ef0659161c32df54860226ff3d858127d8da592ea9072ad41d5a9986dd8c04a37e9ad34e2251883a8c2f0933e6aa201414
- SSDEEP 192:8mEKEEjOjzSId77Fe0ggzSXlYtAMXa77gieRHw9S1IId:HUNdsgzS1EAEaHB8IId
- TLSH T13312C764B449D511C83A4139CC2BC9AD03250EF5C5340C1BA89AFF6736DBAC5131B56E
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Power.ico
- SHA256 b2f57a23ecc789c1bbf6037ac0825bf98babc7bf0c5d438af5e2767a27a79188
- MD5 e3143e8c70427a56dac73a808cba0c79
- SHA1 63556c7ad9e778d5bd9092f834b5cc751e419d16
- SHA512 74e0f4b55625df86a87b9315e4007be8e05bbecca4346a6ea06ef5b1528acb5a8bb636ef3e599a3820dbddcf69563a0a22e2c1062c965544fd75ec96fd9803fc
- SSDEEP 768:0nnnnnnnnnnnnnnnnnnnnnnnQInU2/gohN/yRUZZZZZZZZZZZaaa0KaaILjeuFgZ:Rkccckccccct
- TLSH T18E74051CB53AFC87E85A9E727E42E77588BE2C135F608841F604FFBE9639505A3D8811
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Skype.ico
- SHA256 7a97547954aaad629b0563cc78bca75e3339e8408b70da2ed67fa73b4935d878
- MD5 ad1740cb3317527aa1acae6e7440311e
- SHA1 7a0f8669ed1950db65632b01c489ed4d9aba434e
- SHA512 eee7807b78d4dd27b51cee07a6567e0d022180e007e1241266f4c53f1192c389be97332fcd9f0b8fda50627b40b8cf53027872304a68a210f4d754aa0243b0c2
- SSDEEP 768:VDRRKECMsn3H2GkmPe3KUDlGEJ57ukb8rJXAtnvWrpLDvZ8EZN:tjls3WGkoe6Uso9T8r9AtnertLFN
- TLSH T1B9C31747A1281C21DBB0EE39A2DCC8BB594F5E79F1A6464C7CB5FC6864F68F1053AC06
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Steam.ico
- SHA256 bd1c33a67244801e828035904882ec53bd2ea8a1db9265a06d1aa08cf444ca80
- MD5 3e24e40b41ecc59750c9231d8f8da40b
- SHA1 91a701cf25aea2984f75846b6c83865d668ccad6
- SHA512 fe62edddb62dd4b695f1ef40ffb7a0119d480d1c176f0254acee19a45d6433ef6c308acbe567c721018390626c71f7a0f7bcd195d59d54c19cf019f13c4f7572
- SSDEEP 3072:HAZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ+ZZZZZZZZZZZZZZZZZZZZZZvZZZ+:H+GIIIIIIIhIIIIIIIIIIIIIIIUP
- TLSH T13344EE606A050EBCEFE0BA78EBDD536513A52E91017B54CF13D03F8A3537E53BA9A052
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Teams.ico
- SHA256 6ea04cf08751a2f6bb2f0e994258a44d5183b6cdb1471a0ee285659eada045b5
- MD5 d7c9666d30936e29ce156a2e04807863
- SHA1 845e805d55156372232e0110e5dc80380e2cb1e5
- SHA512 3cfd7a41f65c5a0dc23a90c6af358179efb3ae771f50534c3d76c486fe2d432ea3128a46b4b367c4714e86e8c0862a7385bd80662fe6ea82d7048f453570ed56
- SSDEEP 768:LZe7enyslZ87gUcXmEHNBFNJC5jWb2NM2:Npysa7iAM2
- TLSH T1E1B3EEA41820C65DD5C4A776CD17B37D37882E5C14319B8A9270B8EEB23710D297EAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Winrar.ico
- SHA256 29d38c75af79aa0554f34cdfecb311f88f8dd02b02facaa299b9700841806ab8
- MD5 7891c91d1761dc8a8846d362e6e31869
- SHA1 0229bb01b7b4a0fca305eb521ec5dfbaa53674ea
- SHA512 ed14614a706da985566853dc13df0d1128a718f39ec9957320813803fe07e59de337d51033970e2f57d9f56da3546c506f5f0f3becfa91ce741576855be14ba7
- SSDEEP 3072:Y8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLn+:YUhcX7elbKTua9bfF/H9d9n+
- TLSH T1A6F3BF6D2E55CD46E9854C7544B7D3BCE66C4DB32E4C8912E72C7EA41B3AE483E22323
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/Word.ico
- SHA256 2e2f17b7dd15007192e7cbbd0019355f8be58068dc5042323123724b99ae4b44
- MD5 e6fec4185b607e01a938fa405e0a6c6c
- SHA1 565e72809586e46700b74931e490e2dc1e7e3db1
- SHA512 13daeb2bf124e573590359f18a1d962157dc635a88319c9ed1a2e8ccad6322fb081579e1e8fbe62ffe55c8286c2bc8acb251d572a4beb00641ad5009a380e513
- SSDEEP 384:AyIh9xb9bexqcmOg1/JuiiiiiilllllioiiiilllliiiiiuGxbu:9Ih9Z91hJy
- TLSH T1B674056F7E12B9BAC77856BF0810B18D59586C2696DCF103791FFB2CAC3DD076A09242
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/clipboard.ico
- SHA256 584ff2115ba3bffb807b53870034c3b5e96b8c7417535d86718e1d67b84ed2a8
- MD5 613ec1e0f83cb02be9f77edf268be2d8
- SHA1 4e48e3cd61188cba3548bbc27c425e852e4a3cc8
- SHA512 feeeb085da62b8878e22e8a8738530810a85ad9b2c30d0aa1532bf8290c6cde51b9044157ad07d9eaf57a1bd0c987842360328c564de8067f7da9ac665d6ce80
- SSDEEP 384:ErSo62+C48SZ41xlzTSUTWqiVlB3+vs0YjSusYN4jsMxxuu+kqMlGiiiiiiiiiib:OSo6/gVST4wIi5
- TLSH T16D33FB92ED886CF5C47311B95925E950E46DFB0A072E8916F9F2BE5BA0760C33473E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/defender.ico
- SHA256 671b2b0025aca2be5fbadcca30af2e958f9815ef770df16ecbf9da5cd9b89065
- MD5 89858d80957b48d3ccdba5143ee331d5
- SHA1 932ab6566e9b3f806d9bca0e6a65a395a0693c11
- SHA512 f45e770f247953944cdb17dd0e49fb87e9da307009c9bcdade0dec438200c58f1fdb80021c93b33edd07448408424d4a847832eaeac91f980e25ae2ae20bdc41
- SSDEEP 6144:aVUuV2HAd/V6dmJb8DhVVrVV6VcVVaVV4VxVCocFVVjVVVV6VVVvVVgVVVHVVVR+:jgI
- TLSH T18554F492CE4954CBEC369F31E1B0B7650A7BAAD4B8DD9FA8106D3D3C7C94A409803779
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/desktop.ini
- SHA256 f318004857bb7f6d56ee7ab53e886be82e7f1eec25ca6681ee4bb2099b140cbd
- MD5 27509ab6f2e90479cf3de19f2c58d542
- SHA1 39b5ab177010053504c2d2b7d52199a1b1e36ca9
- SHA512 f6105b79b751cb200214327dbe79b47872760dc4a47cf74c1e5022b62e54c3af3c6fd2156f2b97456d0305e1d5c99dd278c3df0f20da4e0f8e2c6f3141bf1d20
- TLSH T1C9D0C95A05F7B022CF2517904C1F0246F0B750598DD4EC068A834B26B1034CB7409B80
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/installer.ico
- SHA256 115f0db669b624d0a7782a7cfaf6e7c17282d88de3a287855dbd6fe0f8551a8f
- MD5 4f409511e9f93f175cd18187379e94cb
- SHA1 598893866d60cd3a070279cc80fda49ee8c06c9b
- SHA512 0d1f50243a3959968174aa3fd8f1a163946e9f7e743cbb2c9ef2492073f20da97949bf7d02c229096b97482ff725c08406e2e9aa72c820489535758470cf604f
- SSDEEP 1536:RBrn6a7/Zu/M615kfNOfEK3EpQkGhD94TtcmeVQU71qiLSeznFkKeUqvllR/t6c1:RBz65/M6If+3Js+3JFkKeTn1
- TLSH T1DFA39283B511D2E1E5308A33E15BE9F10F227C5EEB5A281B7684FF173873151AE2791A
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/keys.ico
- SHA256 3ccf54808de6d42cdcae45f6ac062a8c4fc947d7ff54972b7048c2f8254f3c1d
- MD5 a60da1e2bece5298a8375c3c67361204
- SHA1 3ebaa59b0747a0e130fc6d2a014528ec2ebf681f
- SHA512 5a7a8ed86d3fab5f815852e87c764797ae50800124fd994419c9f3793464d3819b697df6e4e757bafc7d7dc5e3d8257429d06245afe7b2292e8e4d3a183fc0f0
- SSDEEP 768:qsMEzy7dKmuavkLAN35//vAgmCmEr+BIcIdp1lBCXdKcEIsOPFcpp:qJEznivkk5fAg7+BIcIPsXEcEIskcpp
- TLSH T1B3539E57724DD0ABEC294E310C2758A972565D4F4FE8BE933185371EA63065308AF6FC
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/notepad.ico
- SHA256 998776a81e1fe20ff37623d2a6d2e9404fa085571afa35f212f11b2f40e70ca7
- MD5 0c608de527bf9dca343dee4b0cb8d40b
- SHA1 d182e020af3a8100143b27192359f254f3d654b6
- SHA512 c22e1a0e27276a4743f6256c3338ff6b98de305e05b66ddaad4b2a8ba4a23d663c5a2fb7547dde0c61e4c75b27ebec6b1420f1c5556b713b840cfd28ca4ab827
- SSDEEP 1536:trvUF9I4QyIOn8Ml72R5ywNRDO+6KTkwGtc:trIiyF8bnywbpanu
- TLSH T160541D47A6DED267F52CD37942528C64CC325FBAF1A1F052B3E1160F85426A292FB363
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/nowifi.ico
- SHA256 96249b54ee56f165d748b6d1657139cbeb6440c4ff45971822575c9f172d587b
- MD5 256c5c93a564505d3a3e36336e11c743
- SHA1 ae33348359cdff8dab1ec3a098c6918c7ceb1de3
- SHA512 cb38adc6b3ac14b884c3394f16a0a7ec322abb487197712b20848cfe55fabda127e58b1031b3297693b24b79e26e698b82fb56b318ecd4f2993a4dd91f8db010
- SSDEEP 6144:iDfDUAZh4Ys64g2qtREBZUPVXkW2jv3+Ph:iDf7Zh4Ys64g2qtCBZUPV0Wh
- TLSH T16064199676B3E3C8CC149035D933C4B11F122F3A898494272AE6775A1E76B13252FEE7
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/screens.ico
- SHA256 c732a455b8db210c8bde81931c9688ba01e5d1f3748861aea69cbc2d66068ced
- MD5 59bf2eb38216a00ef0ed1a77635392a4
- SHA1 c44b288292157a0bb2f304c2acaa63556c474927
- SHA512 cee47ab289d9fc83d37748e19f47797a71a66f8db144e3aa526d17668cfb6a02d2e412281680927b8be35cd2d4d2f9e86013d6f49d68030f206a4060eb8dff94
- SSDEEP 768:FWOcug0IbRIlv8GBkrVe/WCLbLTCgDq4/XP1yDJmD0c+:FWOcug0tlv8GOZEWCPLmg1n1+mD0
- TLSH T117239D82FC85CC8FDA60017DF82906F690AAFD2AEC5442476B767D4CFD396D93C910A6
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Icons/windows.ico
- SHA256 02c54d8c53dd8f9c6fd029cd7a54bab062bfa0685a4a02f8aa09025e74ce656e
- MD5 43ef4accb62205c701fde6e2a5acdc1f
- SHA1 c4752184c47ea5a71051977357537e29bb439f83
- SHA512 9ad47d841f7862055530a052a425952b96f1d2747c7b402a6e0eb8a140d386303a629ee776be53e764441cbd962adfcad02223064f66d1a6fb32e36abb9305b7
- SSDEEP 768:Uv4ivr9hstnjY8YbM88DI0q4ytCb+sT6wtoCwfh93G11hbxCvId0J3xyfo/f:U5LstxOEfo/
- TLSH T1CCE360BBCA005083DD307430E26FFA9101B6DBB82D8D87C94DFD152FA3A299656355FA
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/MessagePackLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0d10269ef6e07a7bc18f80a4178dca6d384c0f08fff150b9ea3bf2083bc69360
- MD5 a805eca2b129bda1ef793798fde57810
- SHA1 3b089b80751660a5d1c0ef94ba052f3973de53e0
- SHA512 b7bc68f190e5d43d59752c18d76a5df44f4af2c603f37be891957e2b4599a8d07ba8c57d9edc29affcce9d1667e26ef6e07711b24c17e7a24dec3a7b141f7852
- SSDEEP 192:ibcn+VG13cpi+BhUaM191EvK+OADyxMK0ffCZ2ku:iE3m2avK+OdxMKSCZ2L
- TLSH T121320A5CA784826BED7D0BBDBC9253062376D214AF43EB5E1C8CB8BA6D173680612770
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\RatonAccessTool\Stuff\obj\Debug\MessagePackLib.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bda069b17261a50f36b3a79a88b0243d7b9f6508725598adf88d42471977720e
- MD5 6b81ffcec37066c94500d0845f580e91
- SHA1 795e193099214a767cb642c2b48022ef3e59e63d
- SHA512 9213cd310664c429c4d1981b530639c33104b9d17ed8121304af6ec48ee6c3095f4d78365ad7d6141b2a18a0acfaabfa63211420248c0d891c6078dfb2608c45
- SSDEEP 384:snuDmDZGXTmBxeg0ZrS2Yh0WXIdGl+IWY6FU2jWeT/WjjPDHRN77LDGTYAsR9zJn:suwIqBxEZ22LwJgFU23EvyMj9zGxji
- TLSH T125C26C55D36C4313CFAE2FB5E969C6822D74E38A3C33DA3E1248E6550C97788A63523D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:93:99:10:52:d6:2f:20:22:1e:a2:62:27:db:b2:b7:fc:88:95:4c:13:8c:fb:60:7a:b0:ae:86:2f:87:56:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 25, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ab:af:3a:c8:82:4e:48:55:5d:00:00:00:00:04:ab
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:16:d6:93:ce:fb:93:1f:ed:e1:00:01:00:00:02:16
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
22682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Toolkit.Uwp.Notifications.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a0b5be9580bf6548f685d79e5439f6d946ef57e013d201f946b2a894e7441804
- MD5 805135da62c5b65618b9782a5dc48f06
- SHA1 4f074c676e8a93ea4e618db0e2af4d5d2463ac17
- SHA512 8594aef25db9e73dbad999f6e4cbfe548fa82e41d94c6396f51213809bab01b043c1238171cd44fc962e0f53050e4067a449aeec07fd23b511a1003e71e2bb65
- SSDEEP 3072:V4burBkDijpS3+n1Sr5ePVM761+fAwb7xp:ViikDiw3+1af761+r7
- TLSH T16AF35C2D33AC877AFAEF17B4F8F424154F77FA4B7429D2598A0495AD5813B8081523B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
03:76:b8:18:35:19:7a:c6:70:fd:6e:22:e4:bd:57:e7:67:e7:ab:df:4a:12:81:1f:96:9b:4d:b8:5e:79:5d:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US
Chains
Nov 1, 2022
SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US
Serial Number
0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 28, 2021 - Jul 19, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
157094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Microsoft.Toolkit.Uwp.Notifications/obj/Release/net461/Microsoft.Toolkit.Uwp.Notifications.pdb
mscoree
_CorDllMain
Name
.text
Size
145KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Microsoft.Win32.Registry.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 619737e2af8fb713085726631dd2e522fe130cac1d388a59c38907a47d7aadea
- MD5 da40f3db8b34571684c0cb5bcecd2a79
- SHA1 1c27a41fd84d6bfe99dabae2e59fcf12fccf6213
- SHA512 e656d72e111eaca7c8e9b7d4106030c1104286395046c2de58a04edd590cb2714dcf3aeca2b93f843b4663f1d1e630cc19f1e4eae2fa62f0d382fa18cc8a5981
- SSDEEP 384:z8a6WQCgE7MHVia7Z7aLPQmlJLfbTWnWDxW8QHRN74fZalxA2:AJCp70ViyrmlDt84a
- TLSH T18FA22A02EFE8402FFFF70E3519B5D9225D76FAC62902864E1958D2CE5DB2BC4D630629
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:d3:f9:23:6b:09:bd:27:29:6e:be:e0:b7:d2:f4:95:7f:a3:7e:ad:a3:49:ee:89:bf:31:0e:bd:89:19:30:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 15, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:03:ea:4e:2b:78:b6:2a:27:93:00:00:00:00:01:03
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
19162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Win32.Registry/net461-Windows_NT-Release/Microsoft.Win32.Registry.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d65e445a02dc2d2a189d19745f14368c6a24d05914e36bbc7ed9732962998ea5
- MD5 a97d8b05414aaaa056d6aec577ab15a8
- SHA1 19b2a8967106dddbdb60d09d6012bae36d0d17ea
- SHA512 be05b237d8beaa52ae22a97a27280341a5eab3f88e59816c9c699ca9fe74ac22b0e5e8611cf4ddce1f13d5f8afc2153422906fe08dffc74c742529dd4358dc25
- SSDEEP 768:Yr5EYZep98C87KHeBUZwrEe9EAnlF+em5Kktn4CRIcZwMRTIzCuAtpx:Yr59g98C87KHeBUbTAnXGVXdwMRTOAtr
- TLSH T1AD1319156BFC8B27C29E51FEA4D226060BF19178A513FBA79EC0E5F7BC43B45450222B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e221211df8a917d69145239b71b71c87e61761fb0c96d5e997964c172dda4c0
- MD5 358ee793e3f5139ec1f835f0cf306baf
- SHA1 be0a3453276ae078d66eebed4f3516f246805cef
- SHA512 b48a78e55573c29ea925138753f4996309929cf1ada435e1c88ae3b9f97b13eaaccb2e756f929b341ab9110204f85b5d024e65364e023e286fe2f8e50c7d712c
- SSDEEP 1536:ifCEVETXo3f+yAvaDvNaPS/vSC6GOALYKXgAJGsZAhcbcvjCXej:kuiQPwvH6rArVJGXh+cveXej
- TLSH T196938D35E798672AE5DD797628A60D050BF1D2B9C153A70E4A84FEF83E0B7121973383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9db3edaa8bc6ccd7ac6e2517c743591658bd6bdd436a146e0eda101d30a1332e
- MD5 6fcdf77e1f173f269ff56752f273f094
- SHA1 d9d26753c23fab955bb20289a20e37a1812888dc
- SHA512 84f87537685ff55a681bf2acb4e35f77ea6ef3afc3cfb6257b7a72a62ba7f27e6a580fda89ddde2d8f9c22cce6a94622b58fe344d8fa52ff163d7cbc7d7a1804
- SSDEEP 768:7gVxLIKwiowt0j1KODTq7/hRssvewJ1pfFpFo:s/6wtm1J3Wjssvew3o
- TLSH T11AD22A0217A6CF3BC1EF5D7AB8F2132801B1C6863003DB664DCCA2E9694BB955B613E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71c8b01208ab37a5164f5bacd69054899db9fc00f2da87dbd07dc1ee40fc06a8
- MD5 037dbbacc199b24bc0ee91f60a561f06
- SHA1 3f82ecbe123c783b24705862c066018f827355b6
- SHA512 dfa108f22e5e9250d0fdecb91317278c6212773d87b9fa36ab896c3f7a66a549da3d57f71b24778fe0727408eab89cc078f260dfd245c8738a0fe78b9c812549
- SSDEEP 6144:krsdKY7ap3A+oQ8suUmk/yC/tyPyJH+dIz1R:gpY7YuXAyPysIz
- TLSH T1CB748E3963EC462BE68E537BE056446E42F6DC1AB34BEB8C9DC4E6FD4C83B525500263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
364286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\obj\Release\net40\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
350KB
Virtual Size
349KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Asio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca03780217139b37f7f5b6921d59defb8d24988315b16b167a77fa88caa7d00f
- MD5 eb254b04d63a9f03b77563243805f68f
- SHA1 b01c83ec51f7a6548d1babb5e5ff8d5b944965a1
- SHA512 af40c8b9753ebd5abdefad82597dcefc3e5272e917657e3cc7d7961ee8e0070c04f964df456eaa92c8ba832b1967f35ac57490fa2adab2164f323e778979ef9c
- SSDEEP 768:gehRrWpB5henf0HTYdpVCYKo9c1e6ttHjB6Ca:gehRr68M47hGtHF4
- TLSH T16FF22B71EBE88A27C92E2779B4F2040407B5F190F623E74F9A4C54AA6FE63594790373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Asio\obj\Release\netstandard2.0\NAudio.Asio.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
- MD5 48867f392b8e77dc06c062638c6fbd36
- SHA1 ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
- SHA512 b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
- SSDEEP 3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
- TLSH T1CE046D2963E84256E5AFABB1F0F208175BF1F4463037DB0E5D806AE92A07B11C562F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
190890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Core\obj\Release\netstandard2.0\NAudio.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Midi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f246e29921797b173b54229685e997a11f9cc388fa1e589c212328abd7a94ebe
- MD5 3f5c79100f4f7902114c3fcba275c606
- SHA1 cb874b2a2561239b5b1c30a49574229716f5f62d
- SHA512 e435b839a769572a251cb07238020f2496bef97949a3b3159e85c12327e4399a2adca67bb5b2a0606318ca9b5c7ea99bf013a431c72034ce51f9224721a4cf79
- SSDEEP 768:lwuDUaOqgwjYpA2kn+sbS+O/RXgQPODHM0Mx7YlEmmSFyaetiWvmYRMUQ6LUOu5+:lwuDU7fwT2k+sbRMZgQP6HM0Mx7cPXeN
- TLSH T103232915A3F8861AE2BF7B79FC7056100BB2B9867A32D74F0AD8686D1D237844C61773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Midi\obj\Release\netstandard2.0\NAudio.Midi.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.Wasapi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 618ef0e49d64e7a66dfe64bbf6ae81705b9d9683d8a9f321e5c3024d666bdf82
- MD5 278ebb79da14ecf8e0559530c2fda076
- SHA1 8a45f0400f6bc46d254120345fd5e39b6c9b71a1
- SHA512 f789600a820ff4286cb323c4f9dfb6b44001be9295bb24973308363a2668761055e807c7ebcb53900293f4be71c6b5ca328075c230b1ea8270f0d76e3ec477bc
- SSDEEP 3072:ZTo4k5xAt4T6awobjXGUHVUbLuh9aaWIiEKILT9rPr/duoSabKj5BIfgmFyjaKv9:ZTxk5xc4W+VU69aaWfIFzDoI44
- TLSH T121046C3537E88967C1EF97B4F8F2294787B1E0463A13AF8D15C45F256D13BA24804BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
185178
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.Wasapi\obj\Release\netstandard2.0\NAudio.Wasapi.pdb
mscoree
_CorDllMain
Name
.text
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cf92f2f143c22806b88c82f7ec1556f0d814bbd81aca998814709b0da7437f12
- MD5 be8205f435b2afbfd178960c46310c17
- SHA1 6cf807daa6ab142ead6619addf8fc11c56dd51f9
- SHA512 c0cb8ed1381c932a222814084bb50788f51d863b306ba41bfd5b548930ba6939fb0cea8a39f1f171247c461e4d67a1f0aef4207216bdcbfe770e6715d8f5e522
- SSDEEP 768:ZNMJ4j7TupqLq+VHDvtiT8dDDOCPRtbQDmZ1RST+WjQ2fPj9N2fq:fuiqP8d3OMzbQDmjM
- TLSH T165033B25935CC37BCA2F1A7E48651105037AEA84B441EFEA7DCC729D9D83B421720BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.WinForms\obj\Release\net472\NAudio.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.WinMM.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 749a01ebbb5edd8b1a03c5263b04de6acadecf52e4cc84d7412bc6e93f180958
- MD5 faf1ba532964984a34d60674fbc7a5a7
- SHA1 0999178949de510a47d87de3b8a117a003c572ee
- SHA512 d23b783bfd55a09c726ba09d627dfcc6c22a6e7bed8a53dff72c349bbe6fb190afb574cc267b7bebed1540b0bf834f259b5d03b50e023881b3ec42a8b2b57f1f
- SSDEEP 768:cQFu51JOtZ+Wr3CJBTNoNfDhPrDVSvxu1tEMgGd8GbpDrXa8Rcer+7Ul:cQ8zvWr3CJZNYDhP9Svxu1tEufpDuil
- TLSH T12A434B013BD8427AD2FE1B3EA1F30A524731A8D6796BFB4F1598F1DA9853B8049017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio.WinMM\obj\Release\netstandard2.0\NAudio.WinMM.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/NAudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8bf0f2e8dadf3967757191c2212c269333ccd9d7e59839eea968212c64787be9
- MD5 c583aa3819b16ae53859f728f59ea9a0
- SHA1 b699e8e2cfc52bc3cfba182fdabfc7f6ff8f82de
- SHA512 580fa002b890c6c36dd907b40a121153eb12192721e67b7209c9bffedf8e18128b75ed454d813b67c67040fe5869816ac10e624cd8dce68917a85dd5426a490b
- SSDEEP 96:GBFskeJHn4jZkcLqEm5Nj7AVUhkon1MrtrRGD5pkQa1LrjSd2V:G7kHn4kcLaj7zSon1MRlvQa1fjSm
- TLSH T14AF1D729A398C676CA674BF1A42703400339EB40EA57CB2D0D9CA59FFD133185AB27D1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\markh\code\mygithub\NAudio\NAudio\obj\Release\net472\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
08:39:56:e4:21:43:4f:90:03:ee:08:ba:76:09:c5:58:d4:a5:2a:73:28:78:a1:5f:f6:46:d6:59:61:a9:2a:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 16, 2025
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0c:0d:22:a2:ef:64:2e:b8:88:c4:4f:a0:18:f0:0a:1b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 4, 2024 - Nov 3, 2027
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:4b:a1:b1:ad:e1:59:fc:e7:34:00:00:00:00:00:4b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 26, 2024 - Nov 19, 2025
Minor OS version
0
Major OS version
4
Entry point
713798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
690KB
Virtual Size
689KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Notes/Raton_GowxuFtD_notes.txt
- SHA256 80860c7c3f953fa20ffe80a8860bd6606403d700b0186cc117fd624baba99e7e
- MD5 d686897782720b7891f33f11833291d9
- SHA1 3d2c2272553cdd2aff8557cfdc5e76cd1f35998f
- SHA512 0d16b233497e09db1957c77c002a4b22a5014cdf0e47e5a6218b55fc7ee63e5007b203074eb8ccb9a4b002ef93c2ed9ebca5181c6676f683a9b3614e50a5849f
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/.vs/TestPlugin/v16/.suo
- SHA256 400b4ec9d0e7b4004ab4fe592f945c224872a600f9e269fd317f9aafac678a31
- MD5 524c959810f608782f53977532095dc0
- SHA1 56dc4cf96e2ff6796223754572c03819c37fd9b7
- SHA512 52edbc99e2e4a5702dc3c31d45ce7f9abbd4aa5ac167f8d84c51b429983bf8d0a9709d08d23fc9bda650af56b5fa662c9a5b27e55a341ce3861fd2cc42302def
- SSDEEP 384:KylRglqiStevtMHjOJxMIpX4LMNMZ/zjOJxMIpX4LMNluHDkyF/2F/:KC3iYmSHENMZ/zENluAyZ2Z
- TLSH T1CF53EA0023F54998F3B70E303DFAE9D928BBFD229CA9D25E1111328D1972D5BC965B27
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/Networking/Class1.cs
- SHA256 0139dca1cb58bb884da56ed126ffac7015aee514143707d6239fb363125f4cc7
- MD5 d24612b7c57db0ed17d15e937b4583d3
- SHA1 463f2e314084108828291681de7991e752ea1ec1
- SHA512 0d7e9edbc9be34398893006e677402d4c2ae44a31fc003d78c702659870c86f737a3247d128cd132b812881e576a18bffcf62b32b01511370fc6aecc507ceb00
- TLSH T1B8C0122C334BC76E045348035D05F058977333150347CD443CF812C0CEAA0241770C16
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/Networking/Networking.csproj
- SHA256 b716a907700e29781a72d1fe7e40224022cb6b5662124355c41307130a2b6ad7
- MD5 da0a255007c8c21c83205592c15b5651
- SHA1 0885019dc20c13f8c9817a9e95d8768d35b2979d
- SHA512 7a9d80cfd7c7d9cffe8649ba5d981a56d383c63b22c43adc567c63a0ec93719bcdda832fd2df87856636a791ebba52e53d2bd3fe375855ea51a35b0b34b98364
- TLSH T1CE41FF30D2C82A9A43B55133D2B3AE05DE7963E325A50CA8F29EE54B0B73FA41153773
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/Networking/Properties/AssemblyInfo.cs
- SHA256 fb3640b63c006cfa95ac9b70f42eee63b9e7a43adc2032f631cc5dea8be9dec3
- MD5 712e842a7fce7708758931ac4544b271
- SHA1 299fe2945d7ba632cd47458c24739b2d64991208
- SHA512 4e2de32c17c1b99c301950746d9f75b57521f03b260f47b27101876548642cb5953dd6282cd15ae6c153354fd8391b389ccf77fbd4dc0be0c2dafa9e198355bd
- TLSH T11031AE2C4285673ECF550083BE637586E2DCB320A0DD4C1934DDB923E1457BC82696F6
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin.sln
- SHA256 05d05e0b0ffd7eb459ecc8990086976a16550ad97e4cc416ace2bed3eb78b7a9
- MD5 a8c460b2623b38ca996bbba4d15f239f
- SHA1 0b6ef856f9b3aea6ebb9cbc8dc4cf6fc3a10cf15
- SHA512 1f2494b1b34e914a33467098ac71d8b08555764780c3f466597444b114547eb4489f58dba1912f15c41cab7f3ac9cfe5e402680ac7e904fde2ed04cb9ce05144
- TLSH T17B214CDD107E4CA6AA5513AA9FA22CDB3D738240D19D587C428E204C3E2BE49517685F
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Bridge.cs
- SHA256 107ce7796340682ba35dbbe7d3e2555155ac10337fb8fffd0cd7c03302ac89ac
- MD5 4354f53ca35200867cd1824fb23d1f5e
- SHA1 bf56554dd4943d1abad89ebff9927016e1f7eda4
- SHA512 7bd9de193275c00557a172a71d99f8ba498d6d3bdecac34bc84ad6aba3e37bf125904e5ebee09749be0c0a0cd71710287cd196257c05a634cc1b28129019200b
- TLSH T1FC11C0039B441A9649714FF3CA83C825EE3264D302B7A1BEBEBE96505F39D094530FE6
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/CustomBinder.cs
- SHA256 99719f7fcf8e08807881beb3c8398880e405c0cdd8ca2076f02e65762d4738a7
- MD5 ed6a87eab0d350e4af1266b0e7884aed
- SHA1 e3351016b8faa01214f206b994232614d33f4f9b
- SHA512 142398382092774520a16d9f6d1d29009a93f19d0858f2d3ebad7a5686978c41e86f06d1b4415514f1fb1588ed2d5a4b40e6959c0d14ffff1eb9752ebf4483a7
- TLSH T16C212699A04A9A164B37333B7F836144E72BB31347D54140F9EC0822EFB60A0F722F5A
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Helpers.cs
- SHA256 fb9cfdf11aa30fa14dc3123424d9664c1ef1d672721358c19b3aeb9d69bcc817
- MD5 fd97d7bd8829accc365ba3dbd4ff8b87
- SHA1 ab69c3e57a9b0bf3c7908f1194777c3197a55daa
- SHA512 64740da12006fc16be36df13f0755ec86e47850418f4445d793d1ccd6051c425423dff0db120aa34909f204914c9c2bfc9bb10d5b52edb4683ab3a9f23171f08
- TLSH T100416891B34FE6DE0AD6104186B15924FB5EE612033F5AF6F8CA5A04C825C0D47BCE95
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Pack.cs
- SHA256 82f86b6318ad56346c59ef51b750af7f8ab0b13f2c763b8c98d48123ec140407
- MD5 e1967602c420ec7407f02d6617cf9bc9
- SHA1 323017be0f024e8f8c6d7a5500e79c4908afdc1d
- SHA512 31e9261a78f2022908ff24f5443bcb7affa8fc6788d40cb7993e5944b10cf3f5acaf0dd9c546474ff5d4adcdca0df9ca7d18d03a0e7869745deafa5ef02f3828
- TLSH T1F7213522F70AD798466B50EA5679E582EB3FD2091536D9F8A4E7C190D812C500278FAB
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/PacketStuff.cs
- SHA256 650b43e626b0547992a4d087f3b51c05cfc937137f298637aa7524b998b5a4a4
- MD5 9933969ea3430c8c376f4c21264b67e4
- SHA1 d444c1e2957cd316cd905ea6b3b6f69b5f34c2d3
- SHA512 353a8f03ec51dcf1c3bb0f3a3e1649be6d9dbbc5c0f5a7558d526afb364b320a61fdf6314341913559217d59628a456d420bb5defa4524bb106a671dd66fe465
- TLSH T106C022277206EBAC0D5788614036CC51AFB2821580F3D5E41CE101D0C4924408335D0E
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Unpack.cs
- SHA256 c9caaeb310ffe8a760f0fa074bcc5fd4629d4e436a4398e512af1b6e1843045b
- MD5 28e3f53030ba4bce488ccb221781834d
- SHA1 eb7ce87da0952729845a032ffd201a68b9320102
- SHA512 8513259d24e20a520d1a823a6dfd83468db9830d28063d0302b99b78bb6810855bfe5340661bf4d32631a5563ba4cf7db11650df74e1ff98a50bda9ae680846b
- TLSH T157417BA5F34FCEDF069A00D64178D842EB6EE822113ED6EAB4C68140B852415477DFAB
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Networking/Zip.cs
- SHA256 8e366429c020c7400a3c9382fe2071f10a4af459b2fd43c131337fef56df7d27
- MD5 0ac1e56b0a9d7a6e3a84dcdf8dfb1519
- SHA1 d8a330f209b6cc1c7693c488b611ae2463958461
- SHA512 8fce451fee4fe765efe95bdcb8d400bc1302c01505fa14b8b4438a200f55af9acc79bc4894797ac7950667bf9501f4c0f12ddabb217738b7e53fff1b186775de
- TLSH T1321129243B2FCBFF07C1A8312E70570CB7AAEB63191998DA5497AA0185544941B74FD8
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Plugin.cs
- SHA256 6417f8a375826018977f35e4000510980f9cce8505c684bc6cbf2e181235f12e
- MD5 db0db4692d0c81cb688346c7a11d5101
- SHA1 476664f7f3f2b86e9d437f3eb212975842d417a2
- SHA512 77e3e9a8e1cf6db05d1156406c2a452c462e3271c42b713f38200cda5c59195c598f51a3331428fc72efecf986f87caac2d5ade0c303098d76dd399d59337885
- TLSH T1FB41C014BD62568BD973112ADF663DA0F7AF132312B196F4F89F16180F308858275F98
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/PluginInformation.cs
- SHA256 7e1861a0cacef35a61f398c53947d9c9dc06e2155d1efc2bab6b14c8256c33f9
- MD5 97a4d5d243b687b74988c78fa8d4ed5d
- SHA1 b63b09fc1e3b863a9db3a260a5a96b612810f5ba
- SHA512 5bfbc83aa41cd3f15e4954778be414c109c6a5f6a38c75b656ed3a8f0d045f749e665a0d9e1152bb1f015acf52d65c66cfc255bebd3dc92464ed0ae3c7824473
- TLSH T1A6E086351B11A2324C7F9741FD15E8CAF57713534127D060FDEE82129F659948C35E9B
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/Properties/AssemblyInfo.cs
- SHA256 54a6ffbb8abcf05493ac88989a5271cb6d5dce872ca2387880364eab6612ed92
- MD5 b678041f69135d9266420d218f299eff
- SHA1 10882cca524fc023c760a35f835f9c88a1c74639
- SHA512 1355f5a4fc1374b7d04d726a81a454bc55e8dda28fb0d66ad889db61538425644127dbf04b7bd38256aa827bb754623c72cb99f77dbb9feebcf2160565dde285
- TLSH T1BC31AE2C4286673ECFA50083BE637686E2DCB760A4DD4C0934EDF413E54167C82A56F6
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Plugin template/TestPlugin/TestPlugin/TestPlugin.csproj
- SHA256 8a659d7c45016c2b6b3388189025301f8dd951689cc2a6aa0469d5d86cc963d1
- MD5 3d062eefc5482a169bcd0ab317bcfe71
- SHA1 c87c2152803f98e5a43832125f8a4a415151b378
- SHA512 763c57868cae992c2149ba3270a0f5ce15c2ee7a42d1ad8becaca1e0a3678a8d1e10bcc4fbe44d084ea8e83720c566c2f0712e5c6cae241059e83285604a5dcd
- TLSH T1B651BE35D1EC2EA943B410738767AE4ADE65B3F314940CA9F25ED2875BB3A541013773
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Ransomware.jpg
- SHA256 128888b5adbbd76f9fe3306e602213c7d8fb0bc000351446a5539ee51a7c5ae6
- MD5 0ad6dd3053f283c9c167f18ec569ca5f
- SHA1 37d340d61eabc0e2fbd8e11b8c77d36c4a1db11e
- SHA512 79ccf0b317efd67b3c706f770fb2366776cea5997f73b22d2b6f7d79273336188cb7d95bcb0d8f5ad18696af74912104057dd5317a1e43dca40bfb506e37a6c1
- SSDEEP 768:+SPQcrcGjVitPXYXCMBkyRCxSQ0wvR8x1ZES7ussKX7X:wcceVgXY52IGSQ/vRMJSssKX7X
- TLSH T13913F1EE71647197C07CA8FD128B903177E7A3266F3649B6684BAF14DE70AC04E8434D
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe
- SHA256 f0e77c60536f123cc62eb799275b79b462f97666e91703e4dae28c05276d5c88
- MD5 910958e9b8e325881804cd7ede76b59c
- SHA1 19880f62a3742f27ec1e3f6f18d63e4ab23f71f4
- SHA512 b8a428d0ccc434054ed4996a75aa5874b7d83760e89b1909ec124add6d930057f83a11d4dfbef0c59d0c41e5f26341bf7794538233bddec25f06af81fe268a6d
- SSDEEP 393216:j9iiiaG3Wg1aGIHbBtyNKNIwzHp94HTSHqIb4U5so9HvyKy6X5m0vyKy6X5mF71X:M6Gmg1fQbBtyNKPgzSdDypuypn3FJuw
- TLSH T1B947232135B2E705E63E4E3413B11995432D673B27E98E5C746ACB8E34C3BC2B99E253
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
24.2MB
Virtual Size
24.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.10/manifest.json
- SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
- MD5 fbebd68ecaa98928909421f66909c054
- SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
- SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
- TLSH T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.10/protocols.json
- SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
- MD5 1de85fec2dfcc28011a7c2aaab95eb5f
- SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
- SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
- TLSH T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-69A205EC-4638.pma
- SHA256 fd4db528652ac20315f718f76959d39253112917060471e1767267b8cd7faaf8
- MD5 f4485c02e16d284c622e5c2f3de6e54e
- SHA1 90820bdd7b6996e2cde2b69b60654da12e57d505
- SHA512 0999cb941badf003764020f76c60605de3db2a440dcb1ae63b0bbd926185bd83ae2a42e3e5f68df2230a02b9a27567cea7dac379d263e057423d94da7150db3a
- SSDEEP 1536:638UseWerJyd2owqRG2488+RGg1DRFFZxqCRGObDo7RGwwrRG:63fseWetyg324883g1HFZxqrB7RGwwU
- TLSH T17855B75AB7C95F1BC49B1870CAAE47185731E3CE7712DB0362785A1D2E0B3B06F9A358
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/CertificateRevocation/6498.2025.9.4/crl-set
- SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
- MD5 d01869348d5a783f61f90cbb27b82a78
- SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
- SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
- SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
- TLSH T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/CertificateRevocation/6498.2025.9.4/manifest.json
- SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
- MD5 7ef3c71464d0fef472bc1d81fd363c62
- SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
- SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
- TLSH T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Crashpad/settings.dat
- SHA256 a292512f098ba32e62e8a9f9a1927541267295e7fcae407cd560ae8e64a5d702
- MD5 068c7338a720a854b967d2ff31288284
- SHA1 8c1765dface9fcab54f3c29b9555655b02e0ae75
- SHA512 8857b695c92998d72407826f17c5e0bbceeeeaaae3bc3d82646869be2d11a39a9c6a5db62a84b0301c12c3c42f7094dc8ee725428412475dde587abf8435f56b
- TLSH T1C7D02212F28689B8C41410BA4080B3082B02D24A30089206DE7AC24E0A8C4A4CA82891
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/BookmarkMergedSurfaceOrdering
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/BrowsingTopicsSiteData
- SHA256 c5e606355e30127ffaf893ee29b6ff81e1ecc2222688a9b342e5fbf02904b314
- MD5 33e2f6b2323a4cb51abb58c5f15248ef
- SHA1 d2c9340c7f19b3a244afa429ec04b924a7b98a07
- SHA512 d6bf24487b2e5ff4bd8963789a0fede0428b8bb69fc27b79e839c0cc06a6d95388072730782f4a4175899d92d8e09d127f10da1ae83f8175d5b8b6973af1b563
- SSDEEP 12:TLiqic5xT5SmKT5Si8wT5SislpXUUfzBW8ybwaW2b8wAs76uvsUkHZ6HFxOUwa52:TLie5byqkiXBzlRr6hkc6UwccI5fBG
- TLSH T1CED29B8A5F32E951CAF0D63BB0C0866A9B34A2198BD36D931B1110328F83401983B47D
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/BrowsingTopicsState
- SHA256 5132ccfe3e8544948341149daf564b9e831267d97d5e9b36dc3567a1d1c38e56
- MD5 38fc9912eecb8f5c500f6e7c1f7fee4f
- SHA1 50da17d983d3e2bbaac6e8ad978142ffd68e6296
- SHA512 20570facb3e24bc3b0ac72f3ded7444e2e1f711bb761d9385f2af99d7e9daa96d16ae4838203081de12d440898ea40ad68e51d9c3c9c689528c297adc45e5904
- TLSH T1E8F07DA9C920EC370CFC1B1820A84747EB9413673F80884F7A3D810D8FB477B869681C
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
- SHA256 624e14e95717c407cb8633a8611459bb9ac9d50d844bb583b8ef682b6ebac417
- MD5 cf5f6142020546397fa943e659e3ae32
- SHA1 6c7828bbe2a7984c207102de7920499a79086c6a
- SHA512 632fe0e797207d25aad451b3f68ecf180b43cf25417d1b612519ab33adddd050ef76bc7aae6fd9b89c366f3af0b050795799c4e12a2009065cf31e246ec12181
- SSDEEP 3:MsFlthltllKlllztTMthJ+tklMx01lsd0dTlkF+6mpvCDKlHUqPPKlzvSlq+fltc:/FsbtPSMIu+9pCqUqPP6vS4+K2H4iL6
- TLSH T165134CEDC6A91D87C3C0707D6DDB5770576BC804E641AE5B33EDB478648971A700C784
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
- SHA256 713efc7a0878ef949c955e50f96670aada9db29136ff64390fb3bffe081a8b1a
- MD5 3e3efe4a9ba60b1097165e2cf53ce7f6
- SHA1 59431157265f0348d51fab591537e8b23ef8b137
- SHA512 f8f708f185c397c373174048bb5d531b80cfd1be6cc2389eea88c7915cbf6d873fec3f116e882ec5c7e9c733385afa401e584b40a279cc77c5233477bd8995b8
- SSDEEP 24:Jmcmtx0VTbomGQCfuxoqxJgJXlfFtb59EpZk5JungTpeutN/9YdPbROFabUrm1i:7m6muKzF3EkzugdeutNGJ80bUrv
- TLSH T171440AAB12DB9715C70442B7031B57933D324064099583D2F4BDF1D9A4FC412E18478A
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
- SHA256 5a24bda8cb7448b1bd6dbe78f77d2aacfa5be8cbfb73db37c5c963cbcbdd0554
- MD5 12c62c91aa5fd1e4e4c97d0282193fb7
- SHA1 4f4bac044f4dc26a51ce75d58c1fb09eeecae42a
- SHA512 a01df8cdcd769d5b70c144fc546a3d8c44bfff3b822d6e396c3b31725a15bf7c4186b3a2d7298f2cf1e82d0288372aa82f3087da36b23f05ae7904104723a50c
- SSDEEP 24:WTqFjOy3UyF/Ynd+cgw55Q3F2lvxvVOk/wMw8Zn+4ztGC4n0oOEv7+J6AU7x:NFhO521sHOk/fXztJjA7+J6J
- TLSH T1A925F8588B60CC95D540213B41C2A9D225DED1BE8C81FFDFF67BD36C8C637101642004
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
- SHA256 508ed3d4abff9c08317b6de61f6961658e1b3aa6c02ecb9e4fad0102ca37b2b4
- MD5 bf3dcd96ec2573150248fbc70ba857f6
- SHA1 3062eb9df4b0d06a2da43c12d78b03536fcf0b57
- SHA512 bd400964198f6f5d05f02b40f181afff4aa1770af48c779d3bd0cbad791d5e844d71cada1a3d7f2ed78511221507a87795a8fba219015e8b4a4d12ca7240dd27
- SSDEEP 384:P1rQu+JEYxsA1/Qu+JEYtjAFSYVCQu+JEYv2rQu+JEY:9vgxbVgtMCg2g
- TLSH T1FD165CD70F74E546EE51DA70BBCCED2C7CB05693BDC2A8D2640A81ED19E0BC4274A19E
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
- SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
- MD5 9a01b69183a9604ab3a439e388b30501
- SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
- SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
- SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
- TLSH T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
- SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
- MD5 260c81a4759baf163c025001c4f27872
- SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
- SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
- SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
- TLSH T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
- SHA256 3f6ca7098898d49f264ae88dc6fd41c183a01af03b41bb53b6b7ea5de98d997a
- MD5 8882cd14154814bc2760faea17e99592
- SHA1 33e8b5fc188650281ca58cce861b866821f96247
- SHA512 1470b192e08842c7d9bf0ae56e853b9b6e6ad6f1af0159e4526fcbf5c43584ebc6f4be43b77e342c029aeb1e88d54f7c0a1a66a62ec981a5469b98d6078e9791
- SSDEEP 3:LsYllFl7llllnlb9k/Tll8mltzNtl9lXl2lXlWNtl:LsSlnlqbpOuN
- TLSH T1D4B4012E82A19D46D5E152BC849B932033348049CA0FC3871728993066C17A60E0E050
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/No_Vary_Search/journal.baj
- SHA256 9c169428d852e25bd59b27652ed533d2a1f09f96e4c329fa5e06f47e16731543
- MD5 11daac1cffa071d4e1ffddcb865aa73a
- SHA1 321585a6f7e4b50cac5d72b4baf5535e68d77201
- SHA512 f49ad8c3924eed37210d68e06dd9b2292356ce21aa8eebc34395af54cebc0155657394e0e012824ce716449fc9bf4412aba1c2cb2917d56f1523ec7af3f0e373
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Cache/No_Vary_Search/snapshot.baf
- SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
- MD5 7177cd1b3e21f48a23cb47dc11b36f7b
- SHA1 9e1086a6c2296b41c004834f7521790bb2941d67
- SHA512 e7e8b2204e455f6e7fa5a2239cbb4c0c506562d30184fb07d63f8544cd0249226bd3d7d399ef0b69774e72afe100f9858da527b0e15a7bd3c35782d7513eff23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/js/index
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
- SHA256 a39ebecf64de11f28446a22f7dc1d87ddd3665e4c47c74b68c4825cc2fe7e53d
- MD5 5771156a6bf94aff3c1fcac64ee57c66
- SHA1 07c59d5b36198d6d006cf22865fe75f375a3cba7
- SHA512 90bad4c35924f70a10b0d7d9ac8ebe78f80c967e22a74ed285bb77b0d6647f92383397ddb00ab6583c0de8177c1dc127fc7ca9ed3267585500a0b84506c8e6cb
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
- SHA256 52a6864bcc61b60c05f593c54da7a1206654fd2d0bcb65bd87d5689999eddb0a
- MD5 d3c20a17fb65ac4eea967b2477758540
- SHA1 8918121066e34180274bd293b2d3b6ae6fb31f7f
- SHA512 0d5c419405958cfe4ab9f066c31ba779956f64960fd0ca0e6cb6decc75f07da9333174547dad82a301f3b72ee8ef10c0503b087d3665c96817bb6ca01f645cce
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DIPS
- SHA256 5a5837fcc5529af5620f3c61d38167c09bcbba717f71ae4e4405b7aa41f73643
- MD5 0c2815399ff42d8000f872f91ee4ff1e
- SHA1 c46956cd21ec18c0b96ed6b21c9997350432051b
- SHA512 96a23ec2868f6f004bb61453f9566269795119d0ff278f45c9c282bb6d328a745515d081f2490d7def7b7ba7ce39501d4bef20268ae996105bcd889761fe7159
- SSDEEP 48:TDQq3qhmr/O43vY+uIW9WjWbfl4pwU1aBK:VEmrm43vnuIW9WjWbflfK
- TLSH T149F2105B8F2D3C62D0DBC63685C14AEB0F7A071C93575EA864E404A11ED1A8481BA0FE
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DashTrackerDatabase
- SHA256 6891bb0b0dbbe3dbdd4c4810cf59076a25b66cd7866250b9c813385b973ca35c
- MD5 cd71be204ff2bcbed082998e3b8a4eb5
- SHA1 3d041951e285088b6acb6722afb9922ebce4f051
- SHA512 aa3e8c896f02adab32e4a204d4ba273ba4a6d72f146772c9c8304b595d7b1912604033abc7a1e05fdb18d313cba221cad2dc123c7a54d99f2ec483cba925b61c
- SSDEEP 12:LBtW4KqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLeqEt30J2NbDjfy6UOYMvbKGxjgm
- TLSH T1F422C08E7F957330D4FA03786CD241E81E7DE53D0F4945015E6844E08F784A1126E19E
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
- SHA256 e169799aba637517152e24e9bdd31450f2f5c39fba55543673f8f6303b7f7271
- MD5 6caaa41b96f546a695a6bfbd6024ce00
- SHA1 61011511b5bace86ed11ff1f7efca1098689b675
- SHA512 e8d8b036bd4c61c11819fd32a99b6dca3b32029316d25305f1b1fdc70b6d5d56ce27d2d278622219350ff4136f512b46af8f16a0405c931a9500e5f493ed84e7
- SSDEEP 3:MsEllllkEthXllkl2zExlU/:/M/xT02zJ
- TLSH T1ED440244EFB04405C510A030805987510360E4110915574B6D510412ACCA6600C00140
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
- SHA256 4f72fd5b9159b0df0faa3017c22b56b4bff22113928c99fbb9c32ee2dfca5e83
- MD5 758498755dcc52af72a6c7f0707eca33
- SHA1 18f8c1552df18e9b3d724e6a50691397cf73e463
- SHA512 57949bdd52f413bf1003475362d540a9a66efcb657590031c5bc5e9b3caf0a325288e33e682ac9bcb52d69d6d813932a01faaeee1283cafa054b8ed9e9311769
- SSDEEP 3:Lsnllkll/ly2:LsllEtX
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
- SHA256 3f48dca002aa8fb3ea465734ff69be819dcfa676c4d264065c35ce3ca3a780a7
- MD5 0240aaa8435eaa89dbda8f573f06cc46
- SHA1 77ff7d3878b953479a449b2578a10bab6abe5a43
- SHA512 5327434f720aeaad5d630b1b40e9aabf740e587f1f6c4d954d20c68297e72865b86444db2fb6571443c422f99af6559fa145961563496770d213fb81b0b046dd
- SSDEEP 3:MsEllllkEthXllkl2zExlGwJ/:/M/xT02zl6
- TLSH T1FC440244EF840405C5105030405983600360D4130A19574B79511412ACCA6600C04100
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
- SHA256 c631de8204fcbfe7c7ffecefbf9af171999193786b7c9a5afed6b03fd2c968f9
- MD5 d51e3f6cf19b4af9cd3f9c5a85a212c5
- SHA1 bebe8cf56ebc29a64abfae5b5bd8c30072612d8a
- SHA512 8d8681d8130883871b4005685d8a53d0a1f938a06c8ee846902e1c87cf0d5498c5817719720298e9992dc7158199c9fca797582d8f0994fd08aae4d68cd7c901
- SSDEEP 3:Lsnllkll/lsX:LsllEtsX
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
- SHA256 1c43a1bda1e458863c46dfae7fb43bfb3e27802169f37320399b1dd799a819ac
- MD5 51a2cbb807f5085530dec18e45cb8569
- SHA1 7ad88cd3de5844c7fc269c4500228a630016ab5b
- SHA512 b643a8fa75eda90c89ab98f79d4d022bb81f1f62f50ed4e5440f487f22d1163671ec3ae73c4742c11830214173ff2935c785018318f4a4cad413ae4eeef985df
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/LOG
- SHA256 59310f9b9cc737cfa09b32bd724ab976466367a52872c4d47270b0e12f767022
- MD5 4ae3908ab88666ee31c7454f57a7d17b
- SHA1 52591cc9c30c438f6ba38c31cadbdc28acc22703
- SHA512 e4adb20d982e90ba465a50eceaaa050cd817cdf1e316de2a8dea872c0d7f18e185417a6de85ac6b4571ed8d57f4f6592d2b7c9967d830eea21ed7b0d213f62a2
- TLSH T141E086CA284DC46380D24ADAE1F1830ECB59388BB68035291F9D8DC130C7508A464A46
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
- SHA256 1c43a1bda1e458863c46dfae7fb43bfb3e27802169f37320399b1dd799a819ac
- MD5 51a2cbb807f5085530dec18e45cb8569
- SHA1 7ad88cd3de5844c7fc269c4500228a630016ab5b
- SHA512 b643a8fa75eda90c89ab98f79d4d022bb81f1f62f50ed4e5440f487f22d1163671ec3ae73c4742c11830214173ff2935c785018318f4a4cad413ae4eeef985df
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
- SHA256 fd14002b24f3763bf178dd4046be673a5ec8cdac2773ac7df5337170d15f830c
- MD5 fb22b9546baee13c11f8dc30d132c747
- SHA1 52c404666e32dd55fe9b0e9df4c4c01c3caf3afc
- SHA512 f3fe0e24e97eb04b178b3489e5688776a48e3f0d75855591b2938d8b1df81b0ea63e0fbf52c79c2dae5f048a8f1d5b8aac02d46b7722b4e4a3bdab879ca78ce4
- TLSH T185E0CDCD1CADC47384D24EDB95F2930E8F893487B7C4B5291FDE8EC020C75049520E46
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/000003.log
- SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
- MD5 891a884b9fa2bff4519f5f56d2a25d62
- SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
- SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/LOG
- SHA256 8e3b8dd6c209f892388a51d458b961121aabe6b476ab800bda318bb7f4867cf3
- MD5 a0c349fa5a2c0a6d7fb8e8ad6b78a5a5
- SHA1 6b8de9219ee03f53bb8e45d1c3929c221884b232
- SHA512 457c236fbc73c1e4998e0ec9516d897b3ba67a6e51f18e4da4ecd597e0a53b7eeea46ace79caed330afea35555360317e3b9956779bddf58c7c1fae1eefe5f30
- TLSH T1FEE0D8A5147EC03654834C9F82FA530ECB8934CAB8943D05BE6D09A2A187D05A294943
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/LOG.old
- SHA256 0d146c3b6f3e1904969c0cb9da43fcf4c778aa69adb2f50af336894247e3bf0f
- MD5 e8ac7b6ba3804ac0c5f65e99fa0e2f04
- SHA1 0220e14dd140eea9e13f02449376f19e62a5329c
- SHA512 8d1847f97c937b890d82a675f35dbe96c81b380ba26d5a7641ddc0841b15adcd647af3b8f1bf62fe67c2c705efc78442e7ee528a898bd2fbd36e0d4b6333ed0b
- TLSH T113E026B82D0EC02A80975DDB82F9538E8BC93CC6F8C4742E3F0D499160C2A01A3A6B41
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
- SHA256 ec4540ffa9a4ad9ecbafcb0de5f71730e816488ce7fe5de835a8527910c176e9
- MD5 49a2765ee0a9df601cf74556f7d7306b
- SHA1 37639aafe9f83f1d624f1f58d7e2f6ec800b7527
- SHA512 c5b1ee5ec8106ab3f626533f8fba0bb0a020239b6c6ba3a26827adc3e985f069bdb89fe2efd348f8753b9dc91feccd4dab811fe3919ca3379d0882c9d420802b
- SSDEEP 24:TLihI3iOCwxwwweePKmKIOAdQB8rA/oNj2VQZwJ9ypV/geQQ:Tirt+oEQZW9y/
- TLSH T143E2262A0E3C7121CD66713A7C60A45759B910DA977736F23EE010BD6E8268B8434CEE
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Favicons
- SHA256 9bf77888f3554f305bf80e1ea1c15c6f5189fab024ab738d308455acaf0757d6
- MD5 426b5de2fd3512aa149346ff9c51fa03
- SHA1 01109ff2ae28e560d3a21cc39ee8e6202e18203c
- SHA512 fd7e2cb17e0808624b3a96770b5437ff4ec235e0f31911517b6cc0961abbeae6985476b21a57267482b0040247ec85014928321f6d2bb5a8ff794e43d1892ccb
- SSDEEP 24:LLicExh0GY/l1rWR1PmCx9fZjsBYuI+Qo66UwcEv+75fBmI:heBmw6P1U1kmBmI
- TLSH T11092AA075E387407EBA11E7D267A183A9E3FE26D9FA29CA4347410618CF8582D5394FE
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_0
- SHA256 e038948cb97c9e4539c651f17347937b7096d4cc0ef5be4826b1463df2677286
- MD5 e7489b1180f21698c723cb15ae20613d
- SHA1 d108a6736671014a7e99b30642e0052b2d05bc0d
- SHA512 09f8f4c0a73a7a38f17c9bdace046eceaf65e76d55899876dbd09b07c8f55ce8f26c6def6d15dabe5bcd17f9084ef954247ba19c397110a4a0e26765f50bc1e3
- SSDEEP 3:MsFl9tlGallbCDvOikM/ld4kD321/1Je5XFKEVK+ltl1P//LEtt:/F3XGusDmikM/lSK3SfevnBtv/A
- TLSH T1B213922DE7D60847CF0EA13069A34B7507F3C90496C9076BB3A46554BA0E7B224CB144
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_1
- SHA256 116b54e4e99cb703c7f0ed474100d6e3d68c8bf0e7b142369c119b7dce840cd9
- MD5 585f79956d87b14da7d77e1f285dfb7e
- SHA1 855f87e8892114e14dfd80b18cbe9168e041c86d
- SHA512 bfdc02d40502a8e3b99620aed06ed8401e1329af9e3225e0b22e21d7264168f816dcfb50a0638c88e9b69f4c218925c468cc957132d761464d78dbe678532aed
- SSDEEP 24:Zbx+NrSNnUdE0DDx+NrSNnUdMgx+NrSN:KNrSNnUdiNrSNnUdMPNrSN
- TLSH T13C442BE7BBB8004EC92E4530D616A12C6F132866E1EF5F97B2C0001224CE2B0AA57786
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_2
- SHA256 46300010d6f8b3c09a8aec7fa5f4bc8ba72a6dc1e766fa66ee0a7c78c79149e8
- MD5 ae77ac7c1bc20aa41dd96f8c1480104e
- SHA1 227efbae336cc0aa13b4a9c9725d5637d2fefca1
- SHA512 02d0b40cd3e4972a1d74fb55893f29b94cb6bf6ea2144f1c742a0917184de2d70cc98381d0bdb4c1eda507b238dfd21a98a5065635c8eb658a0de6bdf745a0f1
- SSDEEP 192:oPfir8IuFgFh0yQ31NF2fir8IuFgFh0yQ31NFK2ERfqLCfAhqkkydzKxQ:oPf1IuFguR2f1IuFguRdtCfAhhde
- TLSH T12C255DFB18747398D4F10633297C63B21CE96EFB99D935AABF90428863A5F0F5136019
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/data_3
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/GPUCache/index
- SHA256 cf62567bc560cdcd7c1a17b0b5f4c490d07102b3e115d686b89c6c58c81ed1c1
- MD5 487951f4554bcabb695e9d486a57ac8f
- SHA1 e88856db015741108e1311fc7d3231ece3541cad
- SHA512 e3e143f9e3a9e701677bd5bf881143344753a3960425a2f8ee60655862de3bc40a357dcf803306a158d2a4bcb918dc87c08eaf1da571cb302ed06a4ebaffc9b9
- SSDEEP 3:LsKllkll/lpql/911nP/Hll//Gsl/:Ls+lEtpKNl/Osl
- TLSH T17D44022DC380140ACB4E62F445F9DF701B24C40406CFD3620124C13565067A04F83452
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/History
- SHA256 c6e4ffad6a8fea0d05c1beb10fc72620abb9560a7da91eacf5eca49165c8b36e
- MD5 9fa3a850e6e601099575f9cab55dc078
- SHA1 826edc5ceccbfc01321b8dd98a47dce075d7a45c
- SHA512 175b588012962447e67de5a7398006ff5d698e6e0291d817af1dc9c389df6d6ad041486b0662b0051808134f43d3c55581b7d7efcb0ed4b83831cba8cc19ce18
- SSDEEP 192:gkqD6md5WqtvtVJ8iEH7H+bF+UI3iWGVwWN3qL/rfPTPbC8Mju32:wTbvH2bIkUI3ijVwWN3qL/rXuum
- TLSH T15E14A74F6F742715C9FD963A69B328625C6FF4BF431221E6BC5104A0CED2342622DCEA
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log
- SHA256 1db1ccdfc8494ca3c444cac48ee4dafa6f0d1ee37faba1e3deaffe512862910c
- MD5 ea6e0bf07f08023aac846423694439e6
- SHA1 197e4199bbbbda204ec51d29b8f4b4fd200f37bb
- SHA512 357e2b3b00b691c7b9a7451c7c6282f7f6284016faa8b1f1df6578dd958e8ed6c2685e8a740c3463aa2a373f3b4901b2ae9fa676a59664b52c6db01142d69836
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
- SHA256 39b3430003556261cd5eff9014de69ebbc4f5f6f7a744132b14987b2367b40e8
- MD5 8b1a6b53fdf685954712a9ff39149606
- SHA1 7d7681d95630c48ae13f51b42d81a19a1eac9cf5
- SHA512 745169a1de598bdaf8bf045497383a119796abf22a5f3a1e2c12cc5388e73f0374a3b1fb7dc19fc0bbb0d30ac0279cbb6c3d6d36c37636ca527ed5f0abf9f8a5
- TLSH T1EFE0D8F6143FC02A5A87044FC2FF631EC764398EF8C46A4D7AA91A91E5C740052D29C3
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
- SHA256 d407c94499e5ded1d4f6a030d02b36ac7676a2336a01534982c7bc491d5655b9
- MD5 a43c3fc6515cd6db4bc985e4c145aa42
- SHA1 95f88ba2a0f5566d566534e1fb334127efad43ce
- SHA512 9f86d08dd358676d382b73e3af90c7005f4c610613f2423747088f6084475e122ef8411b2d4157e7f43d044cf3bb044350bf5667a564a1d29b50d1edfe797b98
- TLSH T170E0D8B5251FC06E51829C5F81FD730DCFA5394AF8C46A696E089A91B0D640093D1A83
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Login Data
- SHA256 06ab298edd12857cc70f080af232c29ff4cc2196f26ace01c13849fddc1f00e4
- MD5 6233c4622861892a62b3cc83eca79df3
- SHA1 fc694979e3a10dff53162cd74a718b1be236a73e
- SHA512 b2bbe4099ffc2f6bcab9f3078fd9007891923edfe2f7a7269c6f106dd085a39e08e407211b3eed9901555ce48056659e807457f8c3106e722fa7bbf3715fbcd2
- SSDEEP 96:Gr2eymweCn8MouB6w9fUnFlXqiEqUvJKLuyn:Gr6eG7Iw9f0Fqidn
- TLSH T1C613340F2B682401C8AD8632BCB114B66D7CA13F8B639FD12CB114659D75C63B42E5EF
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Login Data For Account
- SHA256 06ab298edd12857cc70f080af232c29ff4cc2196f26ace01c13849fddc1f00e4
- MD5 6233c4622861892a62b3cc83eca79df3
- SHA1 fc694979e3a10dff53162cd74a718b1be236a73e
- SHA512 b2bbe4099ffc2f6bcab9f3078fd9007891923edfe2f7a7269c6f106dd085a39e08e407211b3eed9901555ce48056659e807457f8c3106e722fa7bbf3715fbcd2
- SSDEEP 96:Gr2eymweCn8MouB6w9fUnFlXqiEqUvJKLuyn:Gr6eG7Iw9f0Fqidn
- TLSH T1C613340F2B682401C8AD8632BCB114B66D7CA13F8B639FD12CB114659D75C63B42E5EF
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network Action Predictor
- SHA256 4ec8287a2898d48f5c9492c0e1c2dd5af77eb03dfe3ff5d794fee7a1e4d46bed
- MD5 1ce84bd3815c2f8e075bfcd87390befc
- SHA1 080ab446da74b2ca6502c7001f7c96a0f6f58e58
- SHA512 9985cbb4d053cce986bbc3ed1cab044474b42765762c1a1f8ac8b61829dd4ef6dd8f76d3be7f893f923343f53426376b805e0fbb3116cec5b33bc236abad9351
- SSDEEP 24:TL4dzMkJJYYkJPkJzlkJ7kJKDk5Yk8k+qkCkED3zzmLFfIzLihoe9jxq/jcIFf+n:TUHYzydK+/9n+Fda/4ALihoe9lqY5UF
- TLSH T1C53329B379176133F816E67CBEA81990146636C48DE1CAE4DAF00C702FD6650E71F9D6
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Cookies
- SHA256 651cd57b7d07ed03e46eda31168817ee2ca77d8c082e5ad0c50daa2e376fed6d
- MD5 122442ca7c4809ac445cf50448e55789
- SHA1 7d6779796ae11de76f0ec9f8a8a633ad110f35b4
- SHA512 0ca12cb562227eaba14a87596511f84b9db30df18503339b3f2b8ae4cf1a9d1b3d3275a3e245125d19298303c55691307ae28f36c8ba65333d2a34367545a39e
- SSDEEP 24:TL9LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:TxLopFMatSaw/auUOt8B
- TLSH T1E4928A4E5F346221C0F44B36EDD189672F7C212CD3B72699DE1420F3DE925ABF1095AA
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Network Persistent State
- SHA256 b21a9b70c367b143aa8dbc909f868e3f0c7dedf0c80e0fa7ab3126ca157c1ed1
- MD5 5a0b5866aad96aa3f7fb563ea1135960
- SHA1 214ff727c11c58a873d0a8ed9fd0792abd14d0ef
- SHA512 f022c9affc41088aa0da97f815ed64bd8d9f838cc088745b1a787161176bfda32e9a8aa76b137cb9b1fd8ae87e4ae9d4cac4b09905a26b338e25f836b4c4f961
- TLSH T12EF0592A92E42ABD068242E421287927C9BA08875248AD9CD9BCBF4E93F5478C51484B
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
- SHA256 d67e84d7d8420439f523a6b2f118c7c38c7de8d3aa574f5353182a32d2c9a60c
- MD5 74b9b75402d6c78f949f11f86c6fb24e
- SHA1 3e9a7de2e2df496a2561faa0233344c0a2fb26f8
- SHA512 986b6ae38ae5d3e3691662b9bd4a0fd88d929bbbd1e060bc205db2530caf9237aaebcbf9d8f6f8c99f7bdeaa1ea086d4f3f8fd5b3b117e219938bd497f16dcdb
- SSDEEP 48:T+IopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBEU1:KIEumQv8m1ccnvS6x
- TLSH T155F24BEE0B097710C0F49578E6C549C77D7E102E8B96AFC45DB806F2FB412F26539129
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
- SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
- MD5 20d4b8fa017a12a108c87f540836e250
- SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
- SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/TransportSecurity
- SHA256 db590e6141faeac1a874bd34a5ee8cd40086bd1edb6a1b0c8942a5773764a01a
- MD5 72bc3011cc80f50a2ba6283a0c8a4d6f
- SHA1 dc5de9b1318d8e18d1c3b4bb976e99dccedf2bb3
- SHA512 7bb7ba1b6355811edd73bb88dabd80e1c4909e75053892e7d1b6db54355094a28823f7e285408d216f9b5f24ba0410bb0f06c7fcce029ef1fbd5e5d18c9b6f9d
- TLSH T18DC0C0EA0035B437103C46763E003C414736903310E11CF4CC97403CB0836E70F00430
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Network/Trust Tokens
- SHA256 fe03fb82cfe74a64c7094c810f9e8167c3b61c254c27569cc6b7db5ed84b0b18
- MD5 c3e47f014a4bb58a64a57890314786ae
- SHA1 ff572da2509f042cfd7ee8245f90c76105e27c89
- SHA512 fc5c8206b6ff078fed3c2481360d0f638e828669f972710b1b0fdec071c0fdcaa481cf3a48b95df014943b9aed3b97da808c5567765ad6a226488aad4ab2e16b
- SSDEEP 24:TL03lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:Tw31DtX5nDOvyKDhU1cSB
- TLSH T115F2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Preferences
- SHA256 c6e0744fafa27a3afca8b3a98b77098724fe37bf7abc285574d4397d99462893
- MD5 6e2a442a2fe6bf74350117a73cf9d355
- SHA1 5d8412b5824151503509155a9171d33cb71dead6
- SHA512 6aa82dbb4529aff2f1c518e11f704832172a11abd9301d48857a24a8a3a5d45a97ad17cd9a36789798ca988ff734e71878a2046a805094cdffa7b7873ebc7de8
- SSDEEP 192:sxR2ESC0lVSBUmChvy3sb+WNODPeWlFRWsxxrS:sxRbb0Cn3w6XFRWs6
- TLSH T13D22855AAD29A97BACC7D119F562BB62E3F9102374C08F4C97FC491C15E7ACE620341B
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/README
- SHA256 a0c9abae18599f0a65fc654ad36251f6330794bea66b718a09d8b297f3e38e87
- MD5 643e00b0186aa80523f8a6bed550a925
- SHA1 ec4056125d6f1a8890ffe01bffc973c2f6abd115
- SHA512 d91a934eaf7d9d669b8ad4452234de6b23d15237cb4d251f2c78c8339cee7b4f9ba6b8597e35fe8c81b3d6f64ae707c68ff492903c0edc3e4baf2c6b747e247d
- TLSH T15BC0123585C365A5521A02F2694152826606E923A82ADD6097DD804C1703BF1F2112DB
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
- SHA256 651cd57b7d07ed03e46eda31168817ee2ca77d8c082e5ad0c50daa2e376fed6d
- MD5 122442ca7c4809ac445cf50448e55789
- SHA1 7d6779796ae11de76f0ec9f8a8a633ad110f35b4
- SHA512 0ca12cb562227eaba14a87596511f84b9db30df18503339b3f2b8ae4cf1a9d1b3d3275a3e245125d19298303c55691307ae28f36c8ba65333d2a34367545a39e
- SSDEEP 24:TL9LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:TxLopFMatSaw/auUOt8B
- TLSH T1E4928A4E5F346221C0F44B36EDD189672F7C212CD3B72699DE1420F3DE925ABF1095AA
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Secure Preferences
- SHA256 3085e21d169687293c3ccf75581a2cf408def2bc06287ae7f3b97807c165e454
- MD5 7af6cb2fa8abec60fb3c22cd0f86b396
- SHA1 1269f63c0ddcf96e9f954cae8175b46f05ea86ec
- SHA512 772f188527419974a3edb554b186129bea436b7d7362019a6a6d1987fe5806e3ed9651b2bc1c1ac48709c16e0dc6f29c571ddd306b818d3b27f79edbf14c88d6
- SSDEEP 192:HV2fGQXHl+kVbzPHuzKi3eAgueXgEBNqZIrTfmZ+EIgqmC3ugZjVg:1AXHbcc4m5ME3ub
- TLSH T1491209F75C2C8E366F0D96EDAC3AB9C7C95900DF8A891C15D6D6824802C3AED21D94D7
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/ServerCertificate
- SHA256 a632d6fc2465fae260c043bc615ff6c7bfef70fff7a80f9e5062965155439ab6
- MD5 a84d8b4f8660ac4c689de1bf6630d80f
- SHA1 402ef7bb30fc6d791eb3cd171f6c9657a0af23c9
- SHA512 f5918c0308484b586bdc530d4d81cbefd5ccf9cf69bcdbc32883868de014ff51cd2d919a674b5ed036cc9f23257e94ecc024281ffa17fb0612b317cfa066d4f9
- SSDEEP 12:TLiNzB+TR0wfQQ+aoMllfIHFxOUwa5qgufTsZ75fOS:TLiVkZC6UwccI5fB
- TLSH T11592468F9F843935E8A947BC458706E00F7AD73E8382AD6352E848503F90D8081BD45A
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/000003.log
- SHA256 fd09d03a0fe85b6249dab7d5daf4c4f17e17c616221ed628677c9f6057bcaa0e
- MD5 c119fcfea0279e372154a3b98e408bab
- SHA1 6ca548a04744d54a1e9e49f03120ab33ec960bd8
- SHA512 83f4b2ba5a8f30e53f5a736b61d2318761936d02299223205445dd6052570b8b406006b6fce83aa198e9cbad92893d89d9f5787c5bd1326866f55642c3840262
- TLSH T1780102F7F2404036C1034DFCC1B003047730B54C210001D1030500313A717443B0FC8C
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/LOG
- SHA256 940e1da34f2aabb8624c54686f6a52fa7fc4155ed253197109cd7c76b04904c3
- MD5 99a3459dad8dbc59405bf99fe45ae414
- SHA1 38af09c68a0479bfb0a7c0d6b45317a27aa12a5e
- SHA512 f9c3464f62756881a86f5e88e6272412848d15d431ccb1694d50b5b4f8499fef08af0c94d2ccd7e89181da7102ea706c0839faa82814c75c9c08568ea505d938
- TLSH T174E0D8B6142F803E5583085F42FA536FC795B54AF5D81D09395646D1968390162D2983
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
- SHA256 8a3c1db506a49426ea6de4904f998c5bf99eb2fd8b7612dcb1e37fcb485b348d
- MD5 f22d953d15360a0ddb99e16403a9fbd7
- SHA1 ad4a03bb1f999fa37670d1197fba4f77f9bf2ef4
- SHA512 9b128e4b24bb4fa9ef89538eb75ddc5bb54f483eaa6f71283ec9d0e6f48648c2d85f06dcd544086a0f1ca32c9436d1c39bbeb1f7fd12c95346f0cb5c9d15ff2d
- TLSH T1DFE0D8FA281E807B41835C6B81FD631E8BD63942F59819493E4585916186A01A2C0B92
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
- SHA256 9ee84bc75ba977ed18bdb2fd731619aca8b1ec70e89ca40fff0cb588ea7d75df
- MD5 76541e876542ab55ba3d938d1ac43661
- SHA1 236e14435d15993d662089a21fae7eba3dfb021a
- SHA512 d2ab60003581e0b9dac07b74bf7b8449da204fcdc2043c8f5f862f1f7338fdc1c618eb5cbcfb84606e0a67f4024f8c4c76c90ca22b674c698daf9635f3cb0d7f
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Shared Dictionary/db
- SHA256 9dfba1d139c9933668e58e9c7777804c8ae01b2942dcc2dfaaa65ac139853a59
- MD5 726d6140f181f7300ea50c13070a5903
- SHA1 5a78b8a7db3078a7ca5a81e4fb78ed35ca476515
- SHA512 6d48e90d26205be87925543a1645036971b9419785e0e8ba5987cc27c7926a53c71338dc2336878c649d186142239ed8be93309a7f2e695409119a624c2b3e9c
- SSDEEP 24:TL6lgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg8TPq81fBG:TBOIy4m1b3fbUdeqSB
- TLSH T11013AA0F1E187551D1BD0235E9E64E6B2E7E205C9B8369D125F01AF24DE211C5D2F27F
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/SharedStorage
- SHA256 5c9dec1886cc01f5f2307ee1ea87f9b32a4cef0f8f9a2c68beebc558013bedab
- MD5 22ebdd36e102f2af2f5766b7297dcad3
- SHA1 ba29f798da42295195aab0af09c1c1e067c6913b
- SHA512 f1911640f9fb21fa51628f5eb2feb945a00e2a65d7b5ae55639c0bc42b97c8f36788008693314da891d65cf37b969340293d940f018b3d9a151e91bdf2ee8d8d
- TLSH T18A81044053C000F1D07507F354D5530C4F07D1F4D5510F5717011145CC415450C70FC4
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
- SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
- MD5 148079685e25097536785f4536af014b
- SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
- SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
- SHA256 5f2bedc3396bc048543a8e2e66dabf327da1d6aba0c363787001d2feddea0028
- MD5 801a48132e2430f840e9857a4ae2d600
- SHA1 146f8194104b6ebcdbcc5d8eb6f473fcd0f6efc9
- SHA512 b2a5e0f072340ba437469e8bffc10cc84f122e653ce3390e54e6b3d50e7e505c127777db2daa56bb8c0bd368152773fc7ac1ecf9ccd8dbd04ead176420dc0856
- TLSH T1B6E022B1147EC12B108B088F43F6E38EC392B482F8C456253D6856D1D2C790031A2E42
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
- SHA256 c4283310884b3a4a1377c88a4cce5419d5ef911f35ba72ecaec91a7b33bc0ce6
- MD5 e7eeb5cf7aa53c7278ca8110067624d5
- SHA1 39505e927ff36e1fb504136ac5002d9428e943ca
- SHA512 96d07a0e7005bf10b7a58a39d32151dcf0c10762282ab4d33b9df662f2e9dc5700077fb0e3bf697636ff8b814383454ddac6ea968f44dae86b626128f2d087ff
- TLSH T1CCE092B87A4EC12B5093168E51B5E34D879A7846F8D5503D2F0856C15182900A392A41
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
- SHA256 8ff00d859349a3ea206706cdd3fa2762ae7c8efe2fdd33a95a72fee45aac6bc4
- MD5 b14764cd1bc1aa64a1f0551cd3682b81
- SHA1 21fe0b213419ad4efa4ea03b856f8da1b3ae9351
- SHA512 86b372fe41c4c2a8e75b5e3cb8979425ca07e6cf0142ef88959c8fd3c35890d8eca2b83e77bf19cb19900b1c4c296d94abca81c135f1d40329c4e3470bdc302a
- TLSH T150A0029A6B145012D1459D7C4468B3406320D9452024C256C19060542D402CB9F5515A
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
- SHA256 f50c7a2eb55587d29b118d7a9d89347f924b3dd65f0f3d9bafb0f55236b9c485
- MD5 686800fa38166341967168ea65d4db70
- SHA1 cad6385608203a0895e905c4254dc87750ef2deb
- SHA512 cd76d6c4dba5e43b867b80c28ac8a3dab2334c09db8db53d8a6564aa273a09361af98deed039d622daccc32269bca33401dbd15639c21e41f3cdffc989e438e8
- TLSH T165E0D8F1147ED0765487048F83F5970FC7A4BC8EB7D53649BA2809B2A5C7500A2B4D82
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
- SHA256 57ec8fd41713b521a06b45505fa4993b61b68bc1cefbd1084502fc52c12ac376
- MD5 c00ebb0e531462a0ffa748b691c76b72
- SHA1 5ccd1cecf2de26e21daba37cac0e0bf08be47306
- SHA512 286f56a65be38440654403d0a47c06a72dcb538325a1f0c12010f4f8eeae1186b36d21f386e8ba7f66132a183d7f589a26666d50cca24130928d0b59f85bd5f5
- TLSH T1ACE020FCB54EC03A509554CF41F8930E87E57C8AB7C5316D2B0C058150C651062B5E81
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Top Sites
- SHA256 70d0ae040fe94df8905168c71652b0cd12054eb8c4d18afc5d68cfa3cf585ec7
- MD5 7550e30310a4e5acbc98a773f94ab898
- SHA1 8c64b008876699b9ebaf7020123e09d0424599a1
- SHA512 5cd4aa55571c26851e52fb68bfd0c31e26dba423847f8ff71bc634fd11ff554ee1e68294a71278eb4a63861fbd9f621639c3cc81cde81f3dd8435068c8a6912f
- SSDEEP 12:TLiNOCZhDu6MvDOF5yEHFxOUwa5qguYZ75fOSiPe2d:TLikCZwE8I6Uwcco5fBtC
- TLSH T193927D8B5F246832C8B5473D92DBC2D44E7BD52DC781AFD1419858619ED0580519A456
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Vpn Tokens
- SHA256 7195f345369e2297b61b64e78db61743d116557c556f26ef1c2cae7abc8dadf7
- MD5 2496854e15065e604be96705f1c7f179
- SHA1 98797e100bed9a77af341f83e9eb59a8e8f4427c
- SHA512 fccaacc1502bad7b1430004ce7ac8a4f986977eacbbbd709df7c29fe7b16015f9f02d5d344348d061e47a93e4ea6c30f6ca20cf359dcc2ba030e500e33ff43fe
- SSDEEP 24:TLq9/DFF348u548k48aDI48mT48G6UwccI5fBI:T+RDFFI8p8x8aD98h8ZU1cEB
- TLSH T1A7D2B8935E1C2DEBC8E95E76C3E2C2E10E7A4F6C4B80D80155A0F0516EA14C81AEE86B
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/Web Data
- SHA256 1e538a2c1cb6d7b202f19fe23708537684b51cdce1df6ba2c546c4082fcb80f0
- MD5 60c9dfdf3183d66ff2d992e7304e8b89
- SHA1 4f4db0fb6eae24ff9d9fe886ed5d034abee4898e
- SHA512 a839e308bae94c9099770de416b62a071f62a1b3612e2f5ca42afcd3d702157053b54ae21e027d7550f32b43f1bc73c713f39730f3ab7cb857d63f82995f9510
- SSDEEP 192:+fCxS6Xuv6PIDnLlbZhJvJRjzH/XJGJHXaGUjydhsAV8dbepV:+fCoCuvjDnxZhJvJRjL/5GxXCe
- TLSH T19124530A6B747001ECD2D9B25CF080771E3C71AD8F2696D16DA658698DF3853A23D8EF
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/favorites_diagnostic.log
- SHA256 ebfed67e358a196efa617976ee74473c65405678e0e5641ce61c1fed40aa4886
- MD5 604e122dedb68e5945e00511945e9c2d
- SHA1 f7edef4b03865d5e0a1bbb0071fbf7ae366060e8
- SHA512 0adfedc60045598be316b4f0061b24fa7348305539a15c5626d71e27b616971ed31243b4d55721662ac76bc1de6af1966298015933e037755425333b616bb85a
- TLSH T140018ED1132A744577CCED84D1253A0364CD3EA6350A94B53B5D25AC4B4981DAE7FE33
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
- SHA256 4a0e1287759f2bde64997cf1082acb1c35980f68f400ebac686a9a22fb42456a
- MD5 684eab907edab7b4b974af6dd3b82cbf
- SHA1 f3b6d03f1eac641c3fd286b25266fb0dc5638676
- SHA512 a468d6ee62580e13699e5118f884bee7aa973490dedec4ad8ca57ddf64498ecd03407126d480323c7bb109d1df13a0604e0d3271404257a79fedcf20278364b9
- SSDEEP 12:TLCiwaBg9LBgVDBgQjiZBgKuFtuQkMbmgcVAzO5kMCgGUg5OR:TLrdBgtBgJBgQjiZS53uQFE27MCgGZsR
- TLSH T1AA72596D4D14B201C4BF9E75ACC0C0D23A2C712B0757B6E1A74023FF486E032A5358A6
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
- SHA256 fed90a8db63cd12910f8c00c0bd39aae04a07b9055412e24028a16ba41db75a8
- MD5 1068dc8cf8f3c506c545191bd5b91167
- SHA1 465f3e1234dc87a9d07e4fb2e8f97eed68e3936f
- SHA512 02e62da00782e1de507e8c74c7b4996ecc0bf7852d7fdbecc34fe23f24c7d9f96abd76dea711410ec208a067c6c1129902deda1219c520767b1200abc8563c03
- SSDEEP 96:NG0GmD/mUzbQSVIYjIY8bVMYjMY0pYcY1RS3g8DLDs/6c3JJiv:tQyIIIxbVMIMbpYcYByhv
- TLSH T10DA1980E413C3B97C4AF2FB8614A834F9FA96F0018A1387934A5EC1B94B3ED0517B5D2
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
- SHA256 1c3d64f7f8ced5017540bbb84d8c56068c07ee2c19e4445c53efdece13d303a9
- MD5 d7a9c15d90f74c99848c9f48c0404bec
- SHA1 4938df42406a539a27443ab2affd61d0d6402a38
- SHA512 ac2d5e6bc2e84270e2ee52ef752f898344450734462ff56405c46b6c3ba46ebaf8a610bb5f55a65e2afb8552ecc7a8198075ee4358dd606d7b5f1bbe6e789e43
- TLSH T106E0DFA7287EC07BA583888B93FA434ECB493987F9D8594A3E0845919583900A1E4982
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
- SHA256 881fbbb0dded02a0f5294e8afd16e74ca419010a7b840190dcbbdf8e42d1f222
- MD5 72eeed5a70e53e1d26fe19de58a55b3f
- SHA1 1e4464242c9fe66ae71c9f81f76602e5fdd9ce74
- SHA512 dfed828b8e29fb9edddbe597feba3c6b0a31cbd3a3d951f51de9d7f8437b629aae00927d6d6060f7341dac142fc38cebe2f6c01454c6889473ba6a4bd8649a3d
- TLSH T10BE048B9BA4EC07F6197258F51F6535DC7853C47F8D4946D3F0945C2508250162A6A45
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
- SHA256 725b7c9b1637cf8151268fb2804fe06ee620cffa9cca365de3df101ba83318fe
- MD5 c99e84068f484d05582fbd19d9405dad
- SHA1 c28dc1c4f38f3204d519404c0f98752866e71982
- SHA512 38b1ffd6df7df219535dd1929394bee9b54711aebc567846c00db474d7b62e0ab4de69ba46d5f6debe4849f2e525492bcd68e79315c8ca73632d8c9238f1248f
- TLSH T1C141F719F320C15AE54E863D906B9B34037CE8128AEE990F84B920321DA6B011F8BBF5
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
- SHA256 1066ba56370f2e7eafd1a12e99842e2552559b4f5b646c9613118f7ca4ac40b5
- MD5 516bbb8b78fad0aee7abb168d67f8b8a
- SHA1 8cf18b5f0ec0d1fbf83bd570f06978408b620065
- SHA512 b00f40d8d13b2a3025c49b5252e0ffcf650edb2c27e79f339e0ba359579128d9213a327ca08f18bfbc7e5220e2d92a2451247b1883f0322be876dd0b89b471ce
- TLSH T101E0D8A53C3E846F4183458741FBA38EC7453C86F8D41E193E455AA1D6835117299942
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
- SHA256 5853f78ce8a131aaa544b6f897b5739094991d919e940d4d0a6391452ad5ad94
- MD5 b98706975676ee13b6c8baa92e2673f7
- SHA1 3572c73424b46f32430af1b6e51a9ed30da888f8
- SHA512 520576cf33cb2abbd482de4fb1b6df85157c3cddf7d2a3585d396a9318486f3e576fe131d669edfec2ef6fc27b54041508af437a2bd060fbf1470f07b4a81e60
- TLSH T1B1E0D8B8B90EC07F4093248F50F6938DC7953C86F894A92D3F044AC3508290272ABA41
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Domain Actions/3.0.0.16/domain_actions.dll
- IMPHASH 9c486a9bcc50a29c17754bc1c5aa3b01
- SHA256 cd4e81ff9db4c6b086b70b09919b9426ca1f2c05ec43c477e9ce99156be66399
- MD5 4ef0ad12ffc81a3570d19817265b7197
- SHA1 a70a993ad81ee36d5f719f2f046d30b397fb5191
- SHA512 c270a4d32d8f10eda440ce521cce4f29544b384577548ac0e43b869d726d9cd6d1b283020ade3bd8153b0fc5f6a93bb630b7139b2c627ad0b0e3fe78bf01f212
- SSDEEP 1536:ci9SEjRPuonFOxAdgxBf8pa5oMNOKVGxJeyf2Fm9vcyaZzezj:ci9IcFPgrfrxOKI3dgmuyaAf
- TLSH T16753D1988F68501BE5BA1DB0D576DF0AAC79E6A3472060CB2391FA5C1D21BD07F3671C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
be:57:fd:9e:0a:1e:60:a4:90:2e:5f:94:d5:9d:e1:28:88:54:4d:fc:11:44:95:2d:07:e3:ae:0a:f2:07:a0:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7e:ac:fa:0a:41:ff:7e:13:f5:00:00:00:00:04:7e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:03:bb:1e:5c:00:38:6c:74:ca:00:01:00:00:02:03
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
5120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
domain_actions.dll.pdb
kernel32
DisableThreadLibraryCalls
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
GetDomainActionsURLsHuffmanTree
GetDomainActionsURLsHuffmanTreeSize
GetDomainActionsURLsRootPosition
GetDomainActionsURLsTrie
GetDomainActionsURLsTrieBits
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Domain Actions/3.0.0.16/manifest.json
- SHA256 605fad4274a41aa5139f0339fd3f0ca2483c9507cad75df8269c01c0d75aeb4d
- MD5 6573c73b7ed1c6cbcf46c46f495e2b7d
- SHA1 73e3c97a7c2503dce8ffd2c7c03a632471ec5afe
- SHA512 e9bcf833d116faa47e992283af2aa3cefe7af97aca508cb1676794fe1562def41b43c254f7d8c06652b17bcb72854c0df1129c282148959420df606ee4f2e8a0
- TLSH T199C0801294011D7419CE47150D5CE3889723D716298070154BD7C21CDC3DC8B68F3B5D
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_0
- SHA256 f856bffb3554e187fe75a832b987eb1b59e9e957fb90463ad9ecc4557276e472
- MD5 7cbc3a940ee24edae99e061b1d32cebb
- SHA1 7d64b6f1650048f12811cb68f181d241e557b1a0
- SHA512 626b56e081b206e70af090ce5abec0d7b2b8f31f350223d8110faf81c1c104602e16ff9d0e899b0c476b379dcf5915bb1acfb10cadb1a7d35a69cc3c9def93b8
- SSDEEP 192:B0aKgOV/7qZ/PjYiP1fVN6AMZ9tJUqUY1wQQUteHXSTp2:qaKgRNPMJJZ9XUpYCQQUYCd2
- TLSH T1F1131BBE773921ABCB1ED0B5426D2FBA4BB1C5351AC0852783BA3004D2AE3756EC35D1
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_1
- SHA256 4238cb4bc22e29ef108f6d9eb3d9a3b639a8faf4a4d4a08f06b72d9bd5904b0a
- MD5 a6938a013aaa6b3b27004f2798fcf0b5
- SHA1 0c47edb7b83b0bffb7e33206d9a51ddf3018fa54
- SHA512 68f4d5fea86e8c4fb331f0780385410f8155fdff26cbef89e4a4a012ba35486ebc4753a057770f137f859be8d7771e2109a70875d10710e52e8fce48c1ca44bb
- SSDEEP 768:9HFBOBg+KVpm8rBLvCvw8uHd6aP6uIaCI4fSq7dV8s1j5NEGPYY:9lj2u9J4
- TLSH T13C444EF3BBB61C9EC92F4D30D51631342E273457E1EA5B9BBA80308129DF524ED36A52
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_2
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/data_3
- SHA256 2e8c94fddd2a857215d332eac8eef41b31839e2dcff6eede141063405b59708f
- MD5 8e29d5a1bee1aab65a464d4778ac472d
- SHA1 02ce2bd6348eb50c66039c38a5dab15e7ac3ed78
- SHA512 bdafbc6f4be96f9eac830461f99cc2bd46deec2315a6d2e3a381f5f5c40313f51b6e9ec6da37a00f3ef0df8f87f98d8d3f9e27dc05dc276125a6b996d72822b5
- SSDEEP 3072:/vLwritMO1iGoF8yf4SldCjkztBENi9PnyJPJ++iHF5HLtVlt/xSxHO6BDnVz72z:RPpGJk2
- TLSH T1188610057761C412CE1EB17C8D8386496339ECE68ED6870B354CB71E0E772AB4BA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000001
- SHA256 500d85e30d563bcd5a3ce12d49632db1ef5b6970d166618c8ee9c1f95e122b8a
- MD5 4f4da5dfb96b7b691031f68fa6f8c608
- SHA1 187ef9b89de01b732d905c0f921f7b052413b172
- SHA512 9e724a4e26e31a35db8491c3cf43c0f34c42e6b8dc03b7c95a5a3c11ecef0d86b07983132eb1f0c7132b56bb904f6aa1b5816c166814dd7b42099d59a3988447
- SSDEEP 192:oavrT8mlFa+xEpAlZSlHCOmHbrDYZyoYY1zf68rID/kpgWaRjic/cUDTNcxdEGWT:o6NzZsRrIoSjn8
- TLSH T15A72320567608D36DD2DB27C9CCB0A04737EC8E59FE6470BBE4C52020E973DA1AA79D6
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000002
- SHA256 d8533caa693feb1ee74b8fe7e7a84916066d2de7c7bb5ace2eb277c8c655363c
- MD5 e486644496b6f429fc96ed0c1b062c12
- SHA1 c0361ba19f44570c841344b8fd3219a92369600f
- SHA512 365398bd563d16a19ee3d07c691d185f0cde162fd00fe7ba81ce52c940f946090192ec23ff837cfe06fc7c9adf194f2755f01b61fcf142f6824f52cc9f5011bd
- SSDEEP 192:0ionFyQrtTw8maWbm+xEwIeiqOTGO6dtzSdza4IlB2/TN/jo0oM2W613XF1qJ8U:0Qdvbdwdza4INnx+lJMbSt4EZvT9
- TLSH T171B252057671D832CD1DB37C8CC74A48777A9CE54EE2870B7A4C630A0E6339F1AA6AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000003
- SHA256 3857201a636b2d47050980a7f155b344072fb2baf7b0bbf139c4cbd51cefa0d8
- MD5 11c86f0525609aee2fcfe7bb8d5725d7
- SHA1 08d7ec2756bdd5dafef7da398a52f3a0a4464692
- SHA512 031780902c6e56c2d70e8222fc029becaa31d82b37b153298119cbfd35b0b7f605d5d020f2fcd84bceee094d94404fa6513b2b086806bb8c39c5401ef93dd143
- SSDEEP 192:KtFofmgaTwVdVLBog+xEmFYIqk/TN/jo0oM2W613XF1eJ8UEE0CRpMAuDFsc0Iu1:EOBofYIWnt+/Mj6c03T9
- TLSH T11B7211457671C922CE1EB27C8D8386892739BCD64ED29307314C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000004
- SHA256 13a47445744294f71eb69751e758dc7132c065baa79f3bd65f2d60a111c761a2
- MD5 6b2be65a6e211cd64b6642704d71d11b
- SHA1 4da89f9d86cf082e2088c51bd2bdb89fd225d6cb
- SHA512 9906e99f6a29a3972667df43765187825a6e843968f1c4e05094d1c01934170453b4b9e2f29d3ab5da4ef68d12085fc3d741e75656a78056eb2eb2eb617dabee
- SSDEEP 192:/C72cTwVaW++xEdZhIju/Tbjo4wW5rrHX3XF1ZJ8UEE0CAlo++I9MGI67g/+PIU3:hEhIknw+AlodI9MAnPX
- TLSH T1CB7201017672C812CE5EB27C8C8387892B76BCD64D928707354C771E0E772AB4AE6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000005
- SHA256 4f6c26f941bd3b58e779aaa6ba79a6cdda75ff52536388cd89ef7aec8890367d
- MD5 7bad4ba8742e795fae2fb3a75f1dfc0b
- SHA1 16c5a3bfdd333c608a71d601d9255ab8db16c825
- SHA512 450c6bb4f63d3161f42b14a30dcfa815b72753b21685d2bb2fa1dfe19c7d7b2a227171d075054b80cb5706a10415f6791a6694f2780b131155fc4b56f0c6d200
- SSDEEP 192:QC7R0TwVaWH+xE91hIRW/TN/jo4wW5rrHX3XF1xJ8UEE0CMh2MlYFY/+LmYUcno4:p5hIkno+Mh2MM7Lmwp
- TLSH T1767211017671D852CE1EB27C8C8386896B75FCD68DA28307354C771E0E732AB4BA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000006
- SHA256 b8b4bd195a865873dbef12e4678f1df85d5e77e2eb8978c5e978e6b56ceee96f
- MD5 7761efbd5a56298253788cfcf93797c7
- SHA1 26365ae9d6e2e9bc20df06749c6cb2bff5a123a9
- SHA512 d221e787a9e86804a0d5e0a1398e88cebb3f07a674d7c67d94a0a28dfec8f5d3126225aa84819a32f68fe21ac8a94e84dfe90f461d7fc6a9ddbecf1355db85c3
- SSDEEP 192:9ayorT8mlFa+xEzAlZSlHCOmHbrDYZyoYY1zf68rIJ1keg3ERFTH6icm/UDTNcx2:9sPzZsRrIYI6+lY
- TLSH T13D72340557508D36DD2EB27CDCC70A04B37AC8E99FE6870BBE4C52020E973DA1AA79D5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000007
- SHA256 15acc3b7536ba08a4775dc769102cbf8f1a8ab2c74228e649930550ccfaa9bf1
- MD5 7cbbc66ab97a7d6ff711e24eeee81218
- SHA1 1c5dd0128faea0553174d94fe6d6a99cf686cd2b
- SHA512 737e3b7ca1156b03f8419ba9c3e87d430f667820e7de85233d1c202ea972b9ec825f9cb82b180713252bdc43880e0af4434b82852034f960dc9fac2343303f72
- SSDEEP 192:a/onFaaTwVaWBog+xEmoyIqk/TN/jo0oM2W613XF1eJ8UEE0CRpMAuDF/+fZTcVn:apBoyyIWnt+/MjYfmT9
- TLSH T12D7222057671C822CE1EB27C9C8386492739BCE64ED29307714C771E0E772AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000008
- SHA256 500d85e30d563bcd5a3ce12d49632db1ef5b6970d166618c8ee9c1f95e122b8a
- MD5 4f4da5dfb96b7b691031f68fa6f8c608
- SHA1 187ef9b89de01b732d905c0f921f7b052413b172
- SHA512 9e724a4e26e31a35db8491c3cf43c0f34c42e6b8dc03b7c95a5a3c11ecef0d86b07983132eb1f0c7132b56bb904f6aa1b5816c166814dd7b42099d59a3988447
- SSDEEP 192:oavrT8mlFa+xEpAlZSlHCOmHbrDYZyoYY1zf68rID/kpgWaRjic/cUDTNcxdEGWT:o6NzZsRrIoSjn8
- TLSH T15A72320567608D36DD2DB27C9CCB0A04737EC8E59FE6470BBE4C52020E973DA1AA79D6
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000009
- SHA256 d8533caa693feb1ee74b8fe7e7a84916066d2de7c7bb5ace2eb277c8c655363c
- MD5 e486644496b6f429fc96ed0c1b062c12
- SHA1 c0361ba19f44570c841344b8fd3219a92369600f
- SHA512 365398bd563d16a19ee3d07c691d185f0cde162fd00fe7ba81ce52c940f946090192ec23ff837cfe06fc7c9adf194f2755f01b61fcf142f6824f52cc9f5011bd
- SSDEEP 192:0ionFyQrtTw8maWbm+xEwIeiqOTGO6dtzSdza4IlB2/TN/jo0oM2W613XF1qJ8U:0Qdvbdwdza4INnx+lJMbSt4EZvT9
- TLSH T171B252057671D832CD1DB37C8CC74A48777A9CE54EE2870B7A4C630A0E6339F1AA6AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000a
- SHA256 3857201a636b2d47050980a7f155b344072fb2baf7b0bbf139c4cbd51cefa0d8
- MD5 11c86f0525609aee2fcfe7bb8d5725d7
- SHA1 08d7ec2756bdd5dafef7da398a52f3a0a4464692
- SHA512 031780902c6e56c2d70e8222fc029becaa31d82b37b153298119cbfd35b0b7f605d5d020f2fcd84bceee094d94404fa6513b2b086806bb8c39c5401ef93dd143
- SSDEEP 192:KtFofmgaTwVdVLBog+xEmFYIqk/TN/jo0oM2W613XF1eJ8UEE0CRpMAuDFsc0Iu1:EOBofYIWnt+/Mj6c03T9
- TLSH T11B7211457671C922CE1EB27C8D8386892739BCD64ED29307314C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000b
- SHA256 13a47445744294f71eb69751e758dc7132c065baa79f3bd65f2d60a111c761a2
- MD5 6b2be65a6e211cd64b6642704d71d11b
- SHA1 4da89f9d86cf082e2088c51bd2bdb89fd225d6cb
- SHA512 9906e99f6a29a3972667df43765187825a6e843968f1c4e05094d1c01934170453b4b9e2f29d3ab5da4ef68d12085fc3d741e75656a78056eb2eb2eb617dabee
- SSDEEP 192:/C72cTwVaW++xEdZhIju/Tbjo4wW5rrHX3XF1ZJ8UEE0CAlo++I9MGI67g/+PIU3:hEhIknw+AlodI9MAnPX
- TLSH T1CB7201017672C812CE5EB27C8C8387892B76BCD64D928707354C771E0E772AB4AE6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000c
- SHA256 4f6c26f941bd3b58e779aaa6ba79a6cdda75ff52536388cd89ef7aec8890367d
- MD5 7bad4ba8742e795fae2fb3a75f1dfc0b
- SHA1 16c5a3bfdd333c608a71d601d9255ab8db16c825
- SHA512 450c6bb4f63d3161f42b14a30dcfa815b72753b21685d2bb2fa1dfe19c7d7b2a227171d075054b80cb5706a10415f6791a6694f2780b131155fc4b56f0c6d200
- SSDEEP 192:QC7R0TwVaWH+xE91hIRW/TN/jo4wW5rrHX3XF1xJ8UEE0CMh2MlYFY/+LmYUcno4:p5hIkno+Mh2MM7Lmwp
- TLSH T1767211017671D852CE1EB27C8C8386896B75FCD68DA28307354C771E0E732AB4BA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000d
- SHA256 dc94c6cd4874858f57c43d6049fc8b59ee21f83d2808d42c357fad8e3c3aab6d
- MD5 53319c251ab0f5bebab08051eabe3df9
- SHA1 d388fc11b56cb622d25b782f969850ebaa7bcbc2
- SHA512 0caca357dc9a72db8619db910d1710d8746d2d225a659217f6e75ecbe77eeeca7cf159109a185945be0880c23652a3b9c5c08800b009dd76b7c3619cc4c018ef
- SSDEEP 192:KnP3jcTwVaR+xEdZhIWu/TbjolVR8I0ESQR3XFnJ8UEE0QQDUfwhhhlrMAI67g/4:AOhIm4rDUchlrMynP5gMB
- TLSH T19682DA017662C962CE4E733C8C8387886B36ACD64DE29707354C771E0E7326F4AA2ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000e
- SHA256 2630c0da8d839078a6b46b02cae4ba49e8229cf7213f42aa86f423fbef6ada1f
- MD5 9303329a00f6d2f1607c554b56853b44
- SHA1 6089ae2b664666a512f4350d76ac0d696f772b5f
- SHA512 1e198c0a4b757cb266f91180d347e9f6459aa315f3b835312940671fd3be5d8152bb69d6e1c10f10d2b4fd59b5db1549109849f611b26f1880866fba9da8c74a
- SSDEEP 192:B/ChCaTwVdVVog+xEmFYIgk/TN/jo4wW5rrHX3XFQJ8UEE0CRrMGuDFsc0IU1ogJ:B1ofYIH1+FM56c0rp
- TLSH T141822F057671C962CE5EB37C9C8386492B3AFCD64D928307314C771E0E372AB4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00000f
- SHA256 78f82f1992985eecdb2155eae8c2d262722fbdda1ff7a11fc8cffbef607743dc
- MD5 36ab132f0389894bb6add6d35ffd79b4
- SHA1 040187d442a8a3cbf18a2ef6fb942630e86b0335
- SHA512 fa7786ae46c5b34504571f28424e21d182f5a1b8b0bff8844c5bd067c98bd9c56b4a3319b126950adc4a3f2e90aef0407e3c21215213b8217581cf2f86bc6ab4
- SSDEEP 384:9hhIYVuvJzXJzonanLnnnFlTsSv3cl1pDr:9nrVuvJLJ0aLnFCS4pD
- TLSH T1D7922C426362C536CDAEB33D8CCB0B5873259CA11DF64247394CA61E1C7736A9EB39D0
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000010
- SHA256 3e04a4231da2cc771e402e9c36c6d5abb33d2dea42e0aa709ad3d8f92b0214d0
- MD5 cc64ba971ff18e4f4bddb4c61d93e54a
- SHA1 f4584c583e2928ba026c4cd644a091bb00770ad9
- SHA512 a6368c08476b65ca652c85a9601bc81ac396509e2225323545a9d8350ace479cde357d19cad6dae73a68d64dccbc0d2200d4fb1eaa7d4dce2925e1ca67a9e220
- SSDEEP 192:8C7+cTwVaR+xEdZhIwu/Tbjo4wW5rrHX3XFnJ8UEE0CARo++I9MGI67g/+PIUM8+:PhIp4+ARodI9MAnPh
- TLSH T1117202017671C812CE5EB27C8CC386492B36BCD64D928707354C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000011
- SHA256 d86d93f7b116cfd65f6f5a6343a9695b22844a9c185201ee186f3c69a5d1af59
- MD5 7ac9fe8a67c6c3ac5d217ff9da35eb12
- SHA1 52d1c56a27542378a5fca4aad1f038dfcfdb63e4
- SHA512 89b319009aa2e9bdca8f755501ca61b4bcea841dba26d69f43125c91a91d5e4015d7a613c46033691df3d9ccbed2679ebff7a9e538292f1fa802213189a474cf
- SSDEEP 192:lC7+cTwVaR+xEdZhIru/Tbjo4wW5rrHX3XFnJ8UEE0CAlo++I9MGI67g/+PIUbFV:EhIs4+AlodI9MAnPX
- TLSH T12872F1017672C852CE5EB37C8C8386893B36BCD64D928307754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000012
- SHA256 82f8db1bec715f89d119db228e617e23d8fe1a009da5d503ff844e6052eb126a
- MD5 119f4222258ee292ddad834ffcd7a7ee
- SHA1 63e5783f18a0610e08b46d02fed8ab1e8724df49
- SHA512 f4c54706f9661d0dffc7602988241e2bef4ac5db6b5a935e04095f8fb864a7e819091534dc8fec35086b48fbb6614a8a5dd5846b32aa86c3a96a858d659df14b
- SSDEEP 192:WFofmYaTwVdVVog+xEmFYIPk/TN/jo0oM2W613XFQJ8UEE0CRpMAuDFsc0IuVTTn:W+ofYI71+/Mj6c03T9
- TLSH T1297221457771C922CE1EB27C8D8386892739BCD64E929307714C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000013
- SHA256 7f9763b8b2a845a27d957cb4b156ea44dfbff83705126e3313d4921435f61987
- MD5 d5a7368ef684529f01c85a3d9b1bd12b
- SHA1 2ca0bc041b4b87fc138176b0214ffdbff4816fe1
- SHA512 f46bf7c62268604403073a96afc4422ac76d55b107ab9ece9c799b9bac0c2e9cace0dbd1c2232cbaa7b05a2062a8d64cbd73300de170140de2d805cd20825a69
- SSDEEP 192:qaKorT8mTa+xEzAlZSlHCOmHbrDYZyoYY1zf68rIh1fg3ERFTH6icm/UDTNcxdEP:qazZsRrIB6+lY
- TLSH T1CE7224055B508936DD2EB27CDCC70A04737EC8E99FE2470BBE4C52020E573DA1AA79D5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000014
- SHA256 fa67425109d2d728c3b18cfd10c05b12f0792246f05c0b211a18d91dbd5c76d7
- MD5 939a50b6619428769491d3d8ae951f4b
- SHA1 e74cf80b131131f89c8caf6232fc9fdb45194ceb
- SHA512 b81d3697c556e90ee9eec8452f47d4d37a76423fd64406d0e346df61ac667d03ebb2e547e8650796122e56a2ea2ae98f6b276f089c579939a99999c032f8e920
- SSDEEP 192:aC7c0TwVa4+xE91hI+W/TN/jo4wW5rrHX3XFfJ8UEE0CM32MlYFY/+LmYUL1ogH4:whIlQ+M32MM7Lm5pH
- TLSH T1617201017671D852CE1E727C8C8386896B76BCD68D968307354C771E0E372AB4BA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000015
- SHA256 82f8db1bec715f89d119db228e617e23d8fe1a009da5d503ff844e6052eb126a
- MD5 119f4222258ee292ddad834ffcd7a7ee
- SHA1 63e5783f18a0610e08b46d02fed8ab1e8724df49
- SHA512 f4c54706f9661d0dffc7602988241e2bef4ac5db6b5a935e04095f8fb864a7e819091534dc8fec35086b48fbb6614a8a5dd5846b32aa86c3a96a858d659df14b
- SSDEEP 192:WFofmYaTwVdVVog+xEmFYIPk/TN/jo0oM2W613XFQJ8UEE0CRpMAuDFsc0IuVTTn:W+ofYI71+/Mj6c03T9
- TLSH T1297221457771C922CE1EB27C8D8386892739BCD64E929307714C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000016
- SHA256 fa67425109d2d728c3b18cfd10c05b12f0792246f05c0b211a18d91dbd5c76d7
- MD5 939a50b6619428769491d3d8ae951f4b
- SHA1 e74cf80b131131f89c8caf6232fc9fdb45194ceb
- SHA512 b81d3697c556e90ee9eec8452f47d4d37a76423fd64406d0e346df61ac667d03ebb2e547e8650796122e56a2ea2ae98f6b276f089c579939a99999c032f8e920
- SSDEEP 192:aC7c0TwVa4+xE91hI+W/TN/jo4wW5rrHX3XFfJ8UEE0CM32MlYFY/+LmYUL1ogH4:whIlQ+M32MM7Lm5pH
- TLSH T1617201017671D852CE1E727C8C8386896B76BCD68D968307354C771E0E372AB4BA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000017
- SHA256 3e04a4231da2cc771e402e9c36c6d5abb33d2dea42e0aa709ad3d8f92b0214d0
- MD5 cc64ba971ff18e4f4bddb4c61d93e54a
- SHA1 f4584c583e2928ba026c4cd644a091bb00770ad9
- SHA512 a6368c08476b65ca652c85a9601bc81ac396509e2225323545a9d8350ace479cde357d19cad6dae73a68d64dccbc0d2200d4fb1eaa7d4dce2925e1ca67a9e220
- SSDEEP 192:8C7+cTwVaR+xEdZhIwu/Tbjo4wW5rrHX3XFnJ8UEE0CARo++I9MGI67g/+PIUM8+:PhIp4+ARodI9MAnPh
- TLSH T1117202017671C812CE5EB27C8CC386492B36BCD64D928707354C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000018
- SHA256 d86d93f7b116cfd65f6f5a6343a9695b22844a9c185201ee186f3c69a5d1af59
- MD5 7ac9fe8a67c6c3ac5d217ff9da35eb12
- SHA1 52d1c56a27542378a5fca4aad1f038dfcfdb63e4
- SHA512 89b319009aa2e9bdca8f755501ca61b4bcea841dba26d69f43125c91a91d5e4015d7a613c46033691df3d9ccbed2679ebff7a9e538292f1fa802213189a474cf
- SSDEEP 192:lC7+cTwVaR+xEdZhIru/Tbjo4wW5rrHX3XFnJ8UEE0CAlo++I9MGI67g/+PIUbFV:EhIs4+AlodI9MAnPX
- TLSH T12872F1017672C852CE5EB37C8C8386893B36BCD64D928307754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000019
- SHA256 dc94c6cd4874858f57c43d6049fc8b59ee21f83d2808d42c357fad8e3c3aab6d
- MD5 53319c251ab0f5bebab08051eabe3df9
- SHA1 d388fc11b56cb622d25b782f969850ebaa7bcbc2
- SHA512 0caca357dc9a72db8619db910d1710d8746d2d225a659217f6e75ecbe77eeeca7cf159109a185945be0880c23652a3b9c5c08800b009dd76b7c3619cc4c018ef
- SSDEEP 192:KnP3jcTwVaR+xEdZhIWu/TbjolVR8I0ESQR3XFnJ8UEE0QQDUfwhhhlrMAI67g/4:AOhIm4rDUchlrMynP5gMB
- TLSH T19682DA017662C962CE4E733C8C8387886B36ACD64DE29707354C771E0E7326F4AA2ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001a
- SHA256 7f9763b8b2a845a27d957cb4b156ea44dfbff83705126e3313d4921435f61987
- MD5 d5a7368ef684529f01c85a3d9b1bd12b
- SHA1 2ca0bc041b4b87fc138176b0214ffdbff4816fe1
- SHA512 f46bf7c62268604403073a96afc4422ac76d55b107ab9ece9c799b9bac0c2e9cace0dbd1c2232cbaa7b05a2062a8d64cbd73300de170140de2d805cd20825a69
- SSDEEP 192:qaKorT8mTa+xEzAlZSlHCOmHbrDYZyoYY1zf68rIh1fg3ERFTH6icm/UDTNcxdEP:qazZsRrIB6+lY
- TLSH T1CE7224055B508936DD2EB27CDCC70A04737EC8E99FE2470BBE4C52020E573DA1AA79D5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001b
- SHA256 29b17fa63bbc9b63cb0ee338d5189a665e9417c8c7a2d231e3f146367d06e4ee
- MD5 458302e8a0d4825887864912eb652653
- SHA1 146dcf67e5ba1399a754870c4da59630702adb18
- SHA512 e5359d27fae9114efea66b5040b256cabae97a7292a04e6d4f5537520f3a400969a06f08c20966254badec1430fbb65593e35a01b56289f45065cf87540c9fb0
- SSDEEP 192:gFofmYaTwVdVVog+xEmFYIPk/TN/jo0oM2W613XFQJ8UEE0CRpMAuDFsc0IuVTTn:g+ofYI71+/Mj6c03T9
- TLSH T1417221457771C922CE1EB27C8D8386892739BCD64E929307714C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001c
- SHA256 19947e7caf938fe1ac30e72efc0af7ad01cc7f48b3206a62b3262af62c52fd07
- MD5 20ec79d47702523dff9627be282a6540
- SHA1 0d40c8e257da0519b078c82d17a03152f3b85350
- SHA512 9a5efd55d4bb4ec9ffab7b515498315c5e7901047ef3abfee48c6f49e44307977caeee9be93f627559045dfee80706aca16f394c34205a723cac47a84646445e
- SSDEEP 192:sC7c0TwVa4+xE91hI+W/TN/jo4wW5rrHX3XFfJ8UEE0CM32MlYFY/+LmYUL1ogH4:+hIlQ+M32MM7Lm5pH
- TLSH T1AA7201017671D852CE1E727C8C8386896B76BCD68D968307354C771E0E372AB4BA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001d
- SHA256 3ffdf00a3b014b819c567731dffcd872259b51ae88a7f783b9dfcddf16f9c590
- MD5 161269552934a94770c08993be2dbae5
- SHA1 d9b27876d7c77d91f02eb7eee1bf3dcfde72f5fa
- SHA512 376a420e4598462ccb3658a7da3f51d97fcda25a5be9edf8e86fefe1f3eaf235992e5595e72090ae6443cb3b8698cf3bb5667a172f67f1af9739da1635eeb583
- SSDEEP 192:mC7+cTwVaR+xEdZhIwu/Tbjo4wW5rrHX3XFnJ8UEE0CARo++I9MGI67g/+PIUM8+:5hIp4+ARodI9MAnPh
- TLSH T1BF7202017671C812CE5EB27C8CC386492B36BCD64D928707754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001e
- SHA256 2345452025901bed4daba0cde86e19e48febf765441154504450bc5b3b2ad5b2
- MD5 f1caa308b662de8f0130c1d4f331efc0
- SHA1 4a5f7c907f4db5baecfad565bb512c59b84019c1
- SHA512 d247ac14102003ff95b42e511740e4a1f980812c1f22efd50a3dba0c123f968ab05fff5035e8fc83082dce6c5b6cd7b7677f00337b7ed448acfb2c7e8f6cba18
- SSDEEP 192:vC7+cTwVaR+xEdZhIru/Tbjo4wW5rrHX3XFnJ8UEE0CAlo++I9MGI67g/+PIUbFV:+hIs4+AlodI9MAnPX
- TLSH T12A72F1017672C852CE5EB37C8C8386893B36BCD64D928307754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00001f
- SHA256 c7c85b835dc75f4abea0d995a91359903222ab399198b94017efa3b1e3f34554
- MD5 97bdd4515c0fbe77328113d850d55c0e
- SHA1 cbdb053a1f78408accccfb5c1f6ee363468430d7
- SHA512 aa62cffcc6512637e6e1287fb5daef4ac7c35665fbdc8e6d1bf5792be0daaa6edaa47a16a8147c0815f2683474b6c8cd3b48af4de22898b466f743a0f5371c5c
- SSDEEP 192:QnP3jcTwVaR+xEdZhIWu/TbjolVR8I0ESQR3XFnJ8UEE0QQDUfwhhhlrMAI67g/4:uOhIm4rDUchlrMynP5gMB
- TLSH T11982DA017662C962CE4E733C8C8387886B36ACD64DE29707354C771E0E7326F4AA2ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000020
- SHA256 7c9139c0e2c7fa74fc70409598c672054f377fd6dfd245cca3fd7f99045ec99c
- MD5 322d903da59dab855c46b02448864d3e
- SHA1 c04a97bf39786f9e9c43b1ea04128bdc7fb8f2e4
- SHA512 bf8334da4aeaacdeeb7fc81ac82560e1b94181bc09f236c5c452deed5a5ab1e31c5877dc37c69a0ed998d7c00fbf7f3133c33865f0258c5e2472e9f6581a6034
- SSDEEP 192:gaKorT8mTa+xEzAlZSlHCOmHbrDYZyoYY1zf68rIh1fg3ERFTH6icm/UDTNcxdEP:gazZsRrIB6+lY
- TLSH T1A27224055B608936DD2DB27CDCC70A04737EC8E99FE2470BBE4C52020E573DA1AA79D5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000021
- SHA256 29b17fa63bbc9b63cb0ee338d5189a665e9417c8c7a2d231e3f146367d06e4ee
- MD5 458302e8a0d4825887864912eb652653
- SHA1 146dcf67e5ba1399a754870c4da59630702adb18
- SHA512 e5359d27fae9114efea66b5040b256cabae97a7292a04e6d4f5537520f3a400969a06f08c20966254badec1430fbb65593e35a01b56289f45065cf87540c9fb0
- SSDEEP 192:gFofmYaTwVdVVog+xEmFYIPk/TN/jo0oM2W613XFQJ8UEE0CRpMAuDFsc0IuVTTn:g+ofYI71+/Mj6c03T9
- TLSH T1417221457771C922CE1EB27C8D8386892739BCD64E929307714C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000022
- SHA256 19947e7caf938fe1ac30e72efc0af7ad01cc7f48b3206a62b3262af62c52fd07
- MD5 20ec79d47702523dff9627be282a6540
- SHA1 0d40c8e257da0519b078c82d17a03152f3b85350
- SHA512 9a5efd55d4bb4ec9ffab7b515498315c5e7901047ef3abfee48c6f49e44307977caeee9be93f627559045dfee80706aca16f394c34205a723cac47a84646445e
- SSDEEP 192:sC7c0TwVa4+xE91hI+W/TN/jo4wW5rrHX3XFfJ8UEE0CM32MlYFY/+LmYUL1ogH4:+hIlQ+M32MM7Lm5pH
- TLSH T1AA7201017671D852CE1E727C8C8386896B76BCD68D968307354C771E0E372AB4BA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000023
- SHA256 3ffdf00a3b014b819c567731dffcd872259b51ae88a7f783b9dfcddf16f9c590
- MD5 161269552934a94770c08993be2dbae5
- SHA1 d9b27876d7c77d91f02eb7eee1bf3dcfde72f5fa
- SHA512 376a420e4598462ccb3658a7da3f51d97fcda25a5be9edf8e86fefe1f3eaf235992e5595e72090ae6443cb3b8698cf3bb5667a172f67f1af9739da1635eeb583
- SSDEEP 192:mC7+cTwVaR+xEdZhIwu/Tbjo4wW5rrHX3XFnJ8UEE0CARo++I9MGI67g/+PIUM8+:5hIp4+ARodI9MAnPh
- TLSH T1BF7202017671C812CE5EB27C8CC386492B36BCD64D928707754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000024
- SHA256 2345452025901bed4daba0cde86e19e48febf765441154504450bc5b3b2ad5b2
- MD5 f1caa308b662de8f0130c1d4f331efc0
- SHA1 4a5f7c907f4db5baecfad565bb512c59b84019c1
- SHA512 d247ac14102003ff95b42e511740e4a1f980812c1f22efd50a3dba0c123f968ab05fff5035e8fc83082dce6c5b6cd7b7677f00337b7ed448acfb2c7e8f6cba18
- SSDEEP 192:vC7+cTwVaR+xEdZhIru/Tbjo4wW5rrHX3XFnJ8UEE0CAlo++I9MGI67g/+PIUbFV:+hIs4+AlodI9MAnPX
- TLSH T12A72F1017672C852CE5EB37C8C8386893B36BCD64D928307754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000025
- SHA256 c7c85b835dc75f4abea0d995a91359903222ab399198b94017efa3b1e3f34554
- MD5 97bdd4515c0fbe77328113d850d55c0e
- SHA1 cbdb053a1f78408accccfb5c1f6ee363468430d7
- SHA512 aa62cffcc6512637e6e1287fb5daef4ac7c35665fbdc8e6d1bf5792be0daaa6edaa47a16a8147c0815f2683474b6c8cd3b48af4de22898b466f743a0f5371c5c
- SSDEEP 192:QnP3jcTwVaR+xEdZhIWu/TbjolVR8I0ESQR3XFnJ8UEE0QQDUfwhhhlrMAI67g/4:uOhIm4rDUchlrMynP5gMB
- TLSH T11982DA017662C962CE4E733C8C8387886B36ACD64DE29707354C771E0E7326F4AA2ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000026
- SHA256 7c9139c0e2c7fa74fc70409598c672054f377fd6dfd245cca3fd7f99045ec99c
- MD5 322d903da59dab855c46b02448864d3e
- SHA1 c04a97bf39786f9e9c43b1ea04128bdc7fb8f2e4
- SHA512 bf8334da4aeaacdeeb7fc81ac82560e1b94181bc09f236c5c452deed5a5ab1e31c5877dc37c69a0ed998d7c00fbf7f3133c33865f0258c5e2472e9f6581a6034
- SSDEEP 192:gaKorT8mTa+xEzAlZSlHCOmHbrDYZyoYY1zf68rIh1fg3ERFTH6icm/UDTNcxdEP:gazZsRrIB6+lY
- TLSH T1A27224055B608936DD2DB27CDCC70A04737EC8E99FE2470BBE4C52020E573DA1AA79D5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000027
- SHA256 1341cad74d87490959bad36bf39a23e190de5ca13c99052e00c2ae132322a1ed
- MD5 36ef118656f71c520363bc73014542bc
- SHA1 b156dae5f5de5c2234a1d5bf77c5bafa397b7dbf
- SHA512 a0226f638eb40d0be630edbf31d33d817481da6113e14ddb94d3b4612fe5643ccf733da75dab5e4ffe45011c963b33fec0676ab64d170d2336329c6e1dc8378e
- SSDEEP 192:F1dCAcTwVaR+xEdZhIVu/TbjolVRoes+T3XFnJ8UEE0CARoLz1EI9MGI67g/+PI1:hghI54+ARoqI9MAnPrGmR
- TLSH T18D72F0017671C852CE5E737C8CC387892B36ACD64DA28307754CB71E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000028
- SHA256 065301bd79e8f1b83c9fff76bf714981b344bf6e454c3110ec23a81125d55c94
- MD5 a43a37ceef1d189a0e02b6d9e288dcf2
- SHA1 f5b51e11c8b63b5a0b4209d95a713cb9a8412733
- SHA512 d818b85b5ecae1e66e4bebe3b1bf0cc29db3f0146342271dc492fd1af3d040bb7cec0fc3f4f08c95b6bf6c7fdb83953b5ec36e6c8327377b03078ca412debfd8
- SSDEEP 192:0V4orT8mTa+xE+AlZSlHCOmHbrDYZyoYY1zf68rIv1/DeXJ891rLXI68icZSUDTS:0ozZsRrIr1T8BTHf
- TLSH T1DC92320527608D36DD2DB27CDCC74A44737A88E68FE2870BBA4C52060E673DA0A679D6
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_000029
- SHA256 912ae89543985e01e7dfa1c8705c96278a435fbd15505dff288bdb5aba95fd29
- MD5 f509a2aa787cc5f08458e37dbd8d9985
- SHA1 b39e112099e2eb08fecfe61f0eae0bb49ce74faa
- SHA512 2891e212301371e5be4aad0242d71bc1ff5fad6152bba63f322a6b0e1c19f29fb2165ddcdd3fe436a0e932913b7a66e0598038511dbd1f80b3ccd945a965d76f
- SSDEEP 192:y+C7c0TwVa4+xE91hI+W/TN/jo4wW5rrHX3XFfJ8UEE0CM32MlYFY/+LmYUL1ogY:yMhIlQ+M32MM7Lm5pH
- TLSH T1087201017671D852CE1E727C8C8386896B76FCD68D968307354C771E0E332AB4BA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002a
- SHA256 7d90f9343dd4d58991e1f9804918b789bf7c29add07f8a257b7d39518863aa5f
- MD5 7ae0534ae938f3ff03b867c427ac8bd0
- SHA1 a0a01520dc758f73c26b939f15a129a0819c5c8b
- SHA512 c4a553b6c516601b255584e5bfbcfb7a247413769d6827228e7481be0fec386ac2549f92200ded25761ac78a2b7ea8cf1854eb64eeee404aa852467fdb7665f5
- SSDEEP 192:k+C7+cTwVaR+xEdZhIwu/Tbjo4wW5rrHX3XFnJ8UEE0CARo++I9MGI67g/+PIUMD:kBhIp4+ARodI9MAnPh
- TLSH T1007202017672C812CE5EB27C8CC386493B36BCD64DA28707354C771E0E372AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002b
- SHA256 8444f9d2145f5d5a824013b7b9dff36e851696f600e1d45b9fc374474cf5d799
- MD5 30640d3493f0916b9e67303cf70d90f8
- SHA1 313c92b4154493b22b211e4d17d4c115fe7e67ad
- SHA512 99eaf674bd2e4ecf011ed150c7812c1cf8caebc357cad19a8e0fae8ecc986e35b766a0b0454284c4d43b9b9631fbbff4f631f43ca1d017e44a866182d1a1e5cb
- SSDEEP 192:p+C7+cTwVaR+xEdZhIru/Tbjo4wW5rrHX3XFnJ8UEE0CAlo++I9MGI67g/+PIUb7:pBhIs4+AlodI9MAnPX
- TLSH T1AC72F1017672C852CE5EB37C8C8386893B36BCD64D928307754C771E0E772AB4AA6ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/f_00002c
- SHA256 d56604b86b60eb83c631517d75c7f913085363861ff9b6dbe3f386d5956a6c4c
- MD5 492ec441736b60c029a6c8a59f3d4a8a
- SHA1 cf93fc91df6bdcbdcee037ea8b918e3f3e9d5dec
- SHA512 8090918b5e8d8b01ac05676f532a30ce533976dedf6418f10f875d5989bfd0b51c1b69c89c64892ebbb529db37f82a45181b42e0c94395568ca07f542390dc10
- SSDEEP 192:iKFofmYaTwVdVVog+xEmFYIPk/TN/jo0oM2W613XFQJ8UEE0CRpMAuDFsc0IuVTD:iK+ofYI71+/Mj6c03T9
- TLSH T1287211457771C922CE1EB27C8D8386892739BCD64E929307714C771E0E372AF4AA6EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GrShaderCache/index
- SHA256 685f64c752bcc845c5c9086816085825916d3cdd83d16010324a6de2df46ad68
- MD5 ad6363223c4bb11ca61f2e999bc57bfb
- SHA1 24be3aaa240d06af47b399fa50db4ebf9356aaff
- SHA512 fa8b6edee2a634012f2695e8a801a133459ca5749ba050d3a3443e2d4e481b20fa54657bbaa30ce9a1c58d12fc4db226aa151a110c2fa726908137c4233e2d04
- SSDEEP 48:/NGCck+y22zZ4KghHx077COYXSJgod4HegncDBvZ0DdI16sK+2jb:0nZRZhHuCOESJg0gcFh0DdI0
- TLSH T14244AC23CF02128BE34D8AF0A19E1FA09721C89542C61B4B8AA37526C9623978DE7C80
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
- SHA256 4c59b1cba7b1fe82eaeefe1bb3082ba786cda96dee0620789ce62c840909960c
- MD5 58b4985bb74f3969599c6b71cd78d71e
- SHA1 d2270609d2734b59eb80783f5f72f5d83a14de72
- SHA512 e2f32dd4b6dfee909dfafb1c78a031e429c2ed919cddeca2a7aa95f5faf4451d0b061c369b19bb071563fc82f040aa852d7229ee028a6ba252dbcfd740c0fbc9
- SSDEEP 3:MsEllllkEthXllkl2zExlYa:/M/xT02z
- TLSH T1C04404C4FFC00505F5003034C115C3500774D4110515574F35511513FCCD7700C00500
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/GraphiteDawnCache/index
- SHA256 d1f5cd3f9faba000d33f643c3c0dc498450ac9cebef3d1796ae41829b69be6a8
- MD5 891c97886a9f660cbc3d1018f4a3d3e6
- SHA1 a95aa4ba434bc7d90053b15ed1d3b390de05da88
- SHA512 d21f9a2cc6f56fb0abe30a47b010a34da60e03dcde5c0069ec74e507d27bd861bab2e054d09f68475bfc36edf0c0075cd446533b08ad5785b85e5c5f60930184
- SSDEEP 3:Lsnllkll/lAvDe:LsllEtAbe
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Last Version
- SHA256 3cb7cc147ea30dc39d246516f6c1cf7069b4e74c0536c180c126a66d2cc1bc39
- MD5 0654cc8da5ab7e9397d35943e16ae48d
- SHA1 53eff0a88f78e52ad9ec5afd7770fb415ea582dc
- SHA512 797e6e557b18bf5da529a5c0ef4ed4c09e2c6096f88bbb06f88d6931f2c32677c3dc2e02564eb016467d5077c4711b5cd106961e57da1604e6eb91b1cf59b843
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Local State
- SHA256 95a822fcb3560fdbba2c96280b6a232efa4d4fbd468f50aabe9be6f03645feb7
- MD5 f4922544420295164b8e6db93527a13e
- SHA1 cb359d66768e62370995368a08b2818d6616ef23
- SHA512 34a766f3f5580b332920a5e9909cb350802e03cc79f6fba1b0595e2fcac3deb382f6f0c25ef236d1d37faf102d44f0658ee9b431476fe1bb1d44f8bf7aec0e5e
- SSDEEP 192:zwrJvmYTFw8PInNgRhgx/Ar/GmiU5P6kqJEdcJNkmtdBKF+YAEDXP:z0vqMENgcVYXsEdcbrBykEbP
- TLSH T1CF423AB2E935CB63ACEB4789F6546B06DEF0819681C44FE8C9E91F0E12962DD074BC17
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.json
- SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
- MD5 af3a9104ca46f35bb5f6123d89c25966
- SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
- SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_0
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_1
- SHA256 1f7aabd5673f1ad9f6857d706166866ff5eed5d08220b5da049a27ae7cc7137f
- MD5 1ca0dbef89d07d6bb2fde181527d711a
- SHA1 311e80ec51b86fa4941273449ca3776408b13391
- SHA512 6c98acf1d8536e7e49ab159b3426969acc908264dfd71ce9d1f2a18cba4742c9b59b93ce9305c45278b051250f8744f77f75aba38308de071dcbecaa09be5229
- SSDEEP 3:MsEllllkEthXllkl2zExlQJCK/:/M/xT02zWK
- TLSH T1A4440454FFC00405DD0010F04015C3540371D4100D1D575F75710433FDCD7700C00304
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_2
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/data_3
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/ShaderCache/index
- SHA256 2ef34b1275737e0756ea24e57b08601a56289fab1234259cc65952dd5a799ae9
- MD5 6b1cfc967feea662f78e40e9f6ae981b
- SHA1 dc51bd167a2b7a793e9833f855be8a7d01945122
- SHA512 c67b2de10d27a10fba918c89f813ba516e5c98d3c728fe21df0b4592ce5c4842eaca1410ded7eb2c40fe733144a0121740e6f1b110a55ccb1c2fda67b706e61b
- SSDEEP 3:Lsnllkll/lODKllt:LsllEtOC
- MD5 SHA1 SHA512 SSDEEP
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
- SHA256 d8d672f953e823063955bd9981532fc3453800c2e74c0cc3653d091088abd3b3
- MD5 48324111147decc23ac222a361873fc5
- SHA1 0df8b2267abbdbd11c422d23338262e3131a4223
- SHA512 e3b5db7ba5e4e3de3741f53d91b6b61d6eb9ecc8f4c07b6ae1c2293517f331b716114bab41d7935888a266f7ebda6faba90023effec850a929986053853f1e02
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
- SHA256 2bae8302f9bd2d87ae26acf692663df1639b8e2068157451da4773bd8bd30a2b
- MD5 bb57a76019eadedc27f04eb2fb1f1841
- SHA1 8b41a1b995d45b7a74a365b6b1f1f21f72f86760
- SHA512 a455d7f8e0be9a27cfb7be8fe0b0e722b35b4c8f206cad99064473f15700023d5995cc2c4fafdb8fbb50f0bab3ec8b241e9a512c0766aaae1a86c3472c589ffd
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
- SHA256 42ccb5159b168dbe5d5ddf026e5f7ed3dbf50873cfe47c7c3ef0677bb07b90d4
- MD5 5692162977b015e31d5f35f50efab9cf
- SHA1 705dc80e8b32ac8b68f7e13cf8a75dccb251ed7d
- SHA512 32905a4cc5bce0fe8502ddd32096f40106625218bedc4e218a344225d6df2595a7b70eeb3695dcefdd894ecb2b66bed479654e8e07f02526648e07acfe47838c
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0
- SHA256 e6beb5ac43dfa3e05ca3c40c4e5de7d763e2e0580203ad9034c6f0527ac0e45b
- MD5 513779b6bfa021200e846cd53c017a5f
- SHA1 8368306c7cc80ddff8426cb180591d4623c0f14f
- SHA512 21590afc212f0ae99df983009c813d00cfad87dc645869549783165c609dc21b0726c8f53ef522b7444fc46901a19109b5f6b55e24bc4d836fc57a92d417ed8c
- TLSH T1F671C9FBCB8503C78B72958D141DF04CB6EA068B5890F94B84DDDC6F8426BEDF0065A6
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/LICENSE
- SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
- MD5 ee002cb9e51bb8dfa89640a406a1090a
- SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
- SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
- TLSH T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/_metadata/verified_contents.json
- SHA256 8715ad655d5e91f316218b46850a495227f6205ea7074d5db68b1b1d97e35f7d
- MD5 395f1d154473a38adb0b1c48def5e830
- SHA1 538cb11a677b21c44545caa8322b424c0cc2e4ff
- SHA512 ddd0382f2357582bd50cbd551cb870f00abe672bc21b5f7737c1b6008a8d0f8650da02409435be3c4054edc5dcc84c3d1e3f2d19c456e851aacf1b0ca64c8930
- TLSH T18731F9A8500A715E798A62709C569E335F37A13AB8F429431AC8412DB8C5F5A4373487
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/keys.json
- SHA256 e5b57a8978e405e9487c43e6b0b3685c4c71cdaa2e74e25d7fbed75ffaea01b2
- MD5 80068ae175438916aff814972b76e6f6
- SHA1 39336911d02ae3c5b038aa31c73c4757dcfadab6
- SHA512 7cd55dc8c37fbaf9675d08fd2346ee45721338e1e70cf6aa351e54b45630ada5ada1243d738742cbda258c830e25ee8e09f57fc3cf21948e62c3c552ba9cd18d
- SSDEEP 192:uNtGbRmmhGfHPJyR9Pm4lOvMwkoR9PuGMXcy:Ohm+0KjA
- TLSH T1F002937F14A41182CE7BC06D8F0778B7CFB03C065BCA3A93529BEA49484196D1B3B5B5
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2025.9.29.1/manifest.json
- SHA256 7c00a941d7a04048f469ffb986ff7e8bf349f149639cc474a463da4a607c0a70
- MD5 0726a393d6366788cb47da5897d1af64
- SHA1 022ebd4d118261b871d50479868d502b797e6d14
- SHA512 adaaf0c40793c606d44fd7112b42040f01dd483a7c4c678e811f824e2fbad722ee3faf50984615731d71425eb3a1e4a9090962249e673fe8e7290713c8f75d9f
- TLSH T132A022202C00E3B320CC03F803B083CBC3A02C0A302A38000A03208032E823B23F323C
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/Variations
- SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
- MD5 bc6142469cd7dadf107be9ad87ea4753
- SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
- SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
- TLSH T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/000ac7dc9366969db9d1e41810a3a27c747a7623535d856eecc2de86cfed80c7
- SHA256 000ac7dc9366969db9d1e41810a3a27c747a7623535d856eecc2de86cfed80c7
- MD5 49307ab4f03bc4d3feab3c02e3769dfb
- SHA1 efc6875a2fc7517bc6b5c6ff749913e2b303fd65
- SHA512 2d01f54d9b971cfb39db4b5bafc7d22f144549ac8893bcfd6e662a9fe2dbd6a15909d537290d0eeaf68b499d4e957d99ebc9b2bf1b1a8d67833e1a4a3400b5d8
- TLSH T1E8412B074AEBEE01E16F8FB60C7A4603F3149A1414B74A8F385CA0F12DA723A3F66700
- MD5 SHA1 SHA512 TLSH
manifest.json
- SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
- MD5 fbebd68ecaa98928909421f66909c054
- SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
- SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
- TLSH T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
- MD5 SHA1 SHA512 TLSH
protocols.json
- SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
- MD5 1de85fec2dfcc28011a7c2aaab95eb5f
- SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
- SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
- TLSH T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/89f43cb3df807293de2772d5f01ac2fc1482b38ccc8fdaee859b80642b7a0487
- SHA256 89f43cb3df807293de2772d5f01ac2fc1482b38ccc8fdaee859b80642b7a0487
- MD5 dbd9cc99a17f89f3f5f3c460b8c3280a
- SHA1 b818e5d05a544aa7d1fa2849c47d6e632f4931fe
- SHA512 721aaf25d0746a54563bb9fe746b4e54649c9e55b2fbf9c15391ec8c43e6ab3de4e377dc26836133feae60cd50f29f14ef80c596a1c338ff2e45192450935bd1
- SSDEEP 1536:EAw63nUdx040jWSi55F06NKf6Ero9KngabFW48afl/:nV3UdQja5E6EiKnvI484/
- TLSH T13033F13D2D090D6C717B9A6C49BE634B05D0CF002A57D2898A93E76764DA0BCD8F983F
- MD5 SHA1 SHA512 SSDEEP TLSH
domain_actions.dll
- IMPHASH 9c486a9bcc50a29c17754bc1c5aa3b01
- SHA256 cd4e81ff9db4c6b086b70b09919b9426ca1f2c05ec43c477e9ce99156be66399
- MD5 4ef0ad12ffc81a3570d19817265b7197
- SHA1 a70a993ad81ee36d5f719f2f046d30b397fb5191
- SHA512 c270a4d32d8f10eda440ce521cce4f29544b384577548ac0e43b869d726d9cd6d1b283020ade3bd8153b0fc5f6a93bb630b7139b2c627ad0b0e3fe78bf01f212
- SSDEEP 1536:ci9SEjRPuonFOxAdgxBf8pa5oMNOKVGxJeyf2Fm9vcyaZzezj:ci9IcFPgrfrxOKI3dgmuyaAf
- TLSH T16753D1988F68501BE5BA1DB0D576DF0AAC79E6A3472060CB2391FA5C1D21BD07F3671C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
be:57:fd:9e:0a:1e:60:a4:90:2e:5f:94:d5:9d:e1:28:88:54:4d:fc:11:44:95:2d:07:e3:ae:0a:f2:07:a0:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7e:ac:fa:0a:41:ff:7e:13:f5:00:00:00:00:04:7e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:03:bb:1e:5c:00:38:6c:74:ca:00:01:00:00:02:03
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
5120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
domain_actions.dll.pdb
kernel32
DisableThreadLibraryCalls
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExA
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
GetDomainActionsURLsHuffmanTree
GetDomainActionsURLsHuffmanTreeSize
GetDomainActionsURLsRootPosition
GetDomainActionsURLsTrie
GetDomainActionsURLsTrieBits
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
manifest.json
- SHA256 605fad4274a41aa5139f0339fd3f0ca2483c9507cad75df8269c01c0d75aeb4d
- MD5 6573c73b7ed1c6cbcf46c46f495e2b7d
- SHA1 73e3c97a7c2503dce8ffd2c7c03a632471ec5afe
- SHA512 e9bcf833d116faa47e992283af2aa3cefe7af97aca508cb1676794fe1562def41b43c254f7d8c06652b17bcb72854c0df1129c282148959420df606ee4f2e8a0
- TLSH T199C0801294011D7419CE47150D5CE3889723D716298070154BD7C21CDC3DC8B68F3B5D
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/95fd9d48e4fc245a3f3a99a3a16ecd1355050ba3f4afc555f19a97c7f9b49677
- SHA256 95fd9d48e4fc245a3f3a99a3a16ecd1355050ba3f4afc555f19a97c7f9b49677
- MD5 89fb6ce8c3a916d3d5a46bb06d99b190
- SHA1 38a1828a642f128fcc644190dff9ba10a869db8f
- SHA512 e5f2c9a4f07d5d683687da44711af5b102b478cb76d547b74672656a5283b9c8b4564ca8472255a803e22bf3bb00ff2b66b4bb0f2e8da1909d4082cb7ceeca9d
- TLSH T12A21D85F9758EC47E049CFB03CAF0713FDB0D975042901166E2B6070ADD657C1D58308
- MD5 SHA1 SHA512 TLSH
manifest.json
- SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
- MD5 af3a9104ca46f35bb5f6123d89c25966
- SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
- SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/fa29a6d5775ff340900a65b39b02fc8b4b77d403c048d8debf22f2f5d09c61a0
- SHA256 fa29a6d5775ff340900a65b39b02fc8b4b77d403c048d8debf22f2f5d09c61a0
- MD5 9061e372c05c40b369f7fc96d583fbd2
- SHA1 a1464a420b6328b90704b91626c824260ecbd0fc
- SHA512 aaf5c8ecfd0d1fc577ac0b1c06805f55a89a37597aecb4d56e075f2b2ca99f456f32c7dfcc0d7b7650bc6c56804a3c01b99ae15bacbf76a7473640f0490e6991
- SSDEEP 384:1ckLGYMUsLSbUePOKIJUQLRZ3pOOeULt5X1lkYe/+qEtErIz/1D8bFBvbQMXCP15:1cYGjU2SbNmT+QLRnOBUjUiSc8bFBUMo
- TLSH T13DA2D04F9C1F6560C8E5E6BD867E6E81223AC7B02E85C32A6FB3190392F5563C0913D6
- MD5 SHA1 SHA512 SSDEEP TLSH
crl-set
- SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
- MD5 d01869348d5a783f61f90cbb27b82a78
- SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
- SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
- SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
- TLSH T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
- MD5 7ef3c71464d0fef472bc1d81fd363c62
- SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
- SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
- TLSH T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/fbb2c0f4fad3b34b3ac7116d98f83638cf6f55a47992026a7abf944a759aa0ea
- SHA256 fbb2c0f4fad3b34b3ac7116d98f83638cf6f55a47992026a7abf944a759aa0ea
- MD5 efe8697b249525df5a3a0bc054434ed7
- SHA1 8ae5e8f5327b72058ea6792a0608e9e3b4ee214b
- SHA512 bdbcecdb7f2794efcb054158ba1c0dbd08d2ff14a1c6d90a75bc938dd38de148cdc49086f9e0bad2748d55d62fc8b25c48d199e73a0ea4eed0e833e489a7ada5
- SSDEEP 192:KDAG1RddOd3aMWcxtqqE11Z79KvPsksCI+64q4Q9usi/4fn82Tu+y:oJIfWcxtqqETZ7k8JbnH4LH/an82Tu+y
- TLSH T14502AF1694141064D20F52BFF39E4B060B49C5539E6D93EB8DC913112DFA3C18D8B3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSE
- SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
- MD5 ee002cb9e51bb8dfa89640a406a1090a
- SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
- SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
- TLSH T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
- MD5 SHA1 SHA512 TLSH
_metadata/verified_contents.json
- SHA256 8715ad655d5e91f316218b46850a495227f6205ea7074d5db68b1b1d97e35f7d
- MD5 395f1d154473a38adb0b1c48def5e830
- SHA1 538cb11a677b21c44545caa8322b424c0cc2e4ff
- SHA512 ddd0382f2357582bd50cbd551cb870f00abe672bc21b5f7737c1b6008a8d0f8650da02409435be3c4054edc5dcc84c3d1e3f2d19c456e851aacf1b0ca64c8930
- TLSH T18731F9A8500A715E798A62709C569E335F37A13AB8F429431AC8412DB8C5F5A4373487
- MD5 SHA1 SHA512 TLSH
keys.json
- SHA256 e5b57a8978e405e9487c43e6b0b3685c4c71cdaa2e74e25d7fbed75ffaea01b2
- MD5 80068ae175438916aff814972b76e6f6
- SHA1 39336911d02ae3c5b038aa31c73c4757dcfadab6
- SHA512 7cd55dc8c37fbaf9675d08fd2346ee45721338e1e70cf6aa351e54b45630ada5ada1243d738742cbda258c830e25ee8e09f57fc3cf21948e62c3c552ba9cd18d
- SSDEEP 192:uNtGbRmmhGfHPJyR9Pm4lOvMwkoR9PuGMXcy:Ohm+0KjA
- TLSH T1F002937F14A41182CE7BC06D8F0778B7CFB03C065BCA3A93529BEA49484196D1B3B5B5
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 7c00a941d7a04048f469ffb986ff7e8bf349f149639cc474a463da4a607c0a70
- MD5 0726a393d6366788cb47da5897d1af64
- SHA1 022ebd4d118261b871d50479868d502b797e6d14
- SHA512 adaaf0c40793c606d44fd7112b42040f01dd483a7c4c678e811f824e2fbad722ee3faf50984615731d71425eb3a1e4a9090962249e673fe8e7290713c8f75d9f
- TLSH T132A022202C00E3B320CC03F803B083CBC3A02C0A302A38000A03208032E823B23F323C
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/component_crx_cache/metadata.json
- SHA256 174df00a0a1694e7dd7997d20ec83901f8d2d58cbf4d2d31500d35b25e6abb5f
- MD5 b4155d208b65c5e7f2285ac854bc451f
- SHA1 f93d89efb0a1131781c6c8f88d364f55a07eae78
- SHA512 a50f019be7cc086eccf1d4786f3c7ab808fc56dba430788a982673f4bb185c8f7702d594699addd4964f4c51f85cf046445369217590ad4e2437a2a18706b11b
- TLSH T1B5F08BE22A3E19C045A60EAEC5D7BCBE90D45419E5A872790088D9C0432AE2F76C156E
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.WebView2/EBWebView/extensions_crx_cache/metadata.json
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
v3.8.0 Deluxe Plugins (v4.0.0)/Raton.exe.config
- SHA256 4bd07ce7fe08cae54c841db6b2f9527f8dae5a66bb22ef44159382a4e4612e06
- MD5 a8a89bcd56d94178a2f7ac4bb11cb834
- SHA1 8ece74de4b317d9513c4f70fe4c4ce9f554c9334
- SHA512 a706f792022e2e196f48f6cd420dd2392d3715ed41f1e0547ca5efe04896610e9fa149433caf7fbfe7eba2b07119688cec389e4db2381dd37159dca9f9d3ca0f
- TLSH T18551ADB485CC9EAD0A3109937976C454C7AD43E3A4890889B4DE29ABCFB7DC56307377
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
- MD5 902760412abffbd10be14842e83f0c09
- SHA1 d87680e1a96549cf45506d17566ec08c27a770d8
- SHA512 016a283723e32eedaa3b3c6d92bbd0d4c4d2663ab0f0b74bda56d6d2d742632ea0005b3c0c982ca77dd152b839deed0af07228172f059c9e0840e31b530bd0f2
- SSDEEP 384:7RJyzxhqFAB5n55560IZplFuA6ccxReXWd2WkRnfLXmztvGHRN7LgFA9bFs0R9zJ:FJyYkx60InTuP0njQtaUFQZs49zUS
- TLSH T187B27C11D79C422ADE7F1A716AF9DA862E3983C16102E66F144CF5040EE37C9DB31BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
be:68:48:ae:8e:63:d0:cc:97:89:10:b1:45:84:7f:68:66:d0:47:4a:08:eb:2a:b6:89:66:c1:09:09:16:a3:9e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:04:d8:e0:0e:07:97:32:58:98:00:01:00:00:02:04
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
18706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Buffers/Release/net462/System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.EF6.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 857a287f7f39097c2f70ff0ce681d35196daee60b43f255bc72b842a351208c4
- MD5 6f69454f7206eb6fb00b1f15d13718d9
- SHA1 c1472ad5c91da5e729bf419b8546657b2152915c
- SHA512 27c193cb2d25938bc508312c38932a25d63a8ecf49c9af6ad2819d1291f44f2b4435725dfef2dded2e0f3415aa73c8af276084899302f8b196a993dde85ae095
- SSDEEP 3072:9Nh7rnOCmxzBE91M+I1X+IZ/6KP8czmLhL:9b7Zmx1E91AuQ6KP8c
- TLSH T1A2149725B3F09D31C1AA023029B57418ADF082F3737C5198FE9E63AD9F6A91117B7B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
bb:d8:c5:bb:bd:68:c2:c0:c5:da:67:9a:6b:8a:d7:01:1e:85:69:bb:87:83:c5:eb:ac:08:54:90:1c:cc:77:c5:dd:1c:f9:a5:45:39:35:fc:bf:dc:3b:f8:4a:f7:d6:7f:6a:de:c3:1a:f6:8a:98:da:9a:45:63:66:b7:1e:a6:81
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
99:65:26:d7:c9:e8:76:61:13:07:44:be:3f:37:0f:19:ae:9f:33:c1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
190322
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\obj\2015\System.Data.SQLite.EF6.2015\Release\System.Data.SQLite.EF6.pdb
mscoree
_CorDllMain
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.Linq.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4fa3cc89f5c3cfa0f794c1f849b0ea8d081e5c0e69d7fb2d834caed08d1140c0
- MD5 bbb0d3ddaaba530dc111e665a4891217
- SHA1 cea5a71ff0305083a9add3c4755a8e54ab10f869
- SHA512 ebf248bb57355de887770d91ea2b40a98e0760335a57dc6ea92ab89e65177cae95eb1c08116855c8eeeca81d4022ccdde2fca7cf34fad68b4ff0e14b74c93b89
- SSDEEP 3072:0Nh7rny2puIm199zIsd9IZ16KP8cfYLcgML3:0b7G2wbdLm6KP8cwO
- TLSH T13E14B725B3F09E31C16B023028B57458ADB082F3737D5188FE9E63AD9F6A91117B7B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
19:74:b5:53:55:33:c4:62:97:af:ea:b8:18:02:ef:ac:98:60:8a:00:c6:b1:1a:48:ec:49:45:ee:07:93:1e:87:b9:79:5d:16:76:f8:74:aa:98:f0:20:16:38:f5:a9:fd:d8:f2:d2:8c:b2:30:38:e0:4b:aa:af:f5:25:1b:6a:68
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
3f:8f:87:1d:f5:4f:a3:52:19:ab:82:91:cb:f5:8d:99:1b:51:70:a9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
190166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\obj\2015\System.Data.SQLite.Linq.2015\Release\System.Data.SQLite.Linq.pdb
mscoree
_CorDllMain
Name
.text
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SQLite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5fac5a9e9b8bbdad6cf661dbf3187e395914cd7139e34b725906efbb60122c0d
- MD5 55c797383dbbbfe93c0fe3215b99b8ec
- SHA1 1b089157f3d8ae64c62ea15cdad3d82eafa1df4b
- SHA512 648a7da0bcda6ccd31b4d6cdc1c90c3bc3c11023fcceb569f1972b8f6ab8f92452d1a80205038edcf409669265b6756ba0da6b1a734bd1ae4b6c527bbebb8757
- SSDEEP 12288:5vXCrbE724yjK3r/fFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchs:h8dDm3r/7
- TLSH T122845BA423EC2A19E1FF5774E8F068408B70F452ABAAD31D78C054A92D27B41BD537B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
05:b0:4c:75:7e:c1:9a:ea:48:df:6d:68:e0:4d:83:26:82:55:53:44:03:4c:b5:c4:a4:4b:e3:30:86:b0:60:d1:96:8a:ea:ad:83:0d:9a:a0:c3:3c:22:b7:20:3b:53:c0:84:d9:51:b4:e2:25:84:29:24:67:99:5b:0c:9e:f9:8e
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
12:d6:a7:c7:d7:cf:38:0e:4e:bf:20:38:8e:19:b5:11:95:ce:5d:10
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
381862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\obj\2015\System.Data.SQLite.2015\Release\System.Data.SQLite.pdb
mscoree
_CorDllMain
Name
.text
Size
365KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Data.SqlClient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d81f4a40b0cd8a28ea552d935ff8a7b86f70d746bd969ae9b3a783a5c8e6546f
- MD5 2cf3623600d7948d2d3b2ec51a75022b
- SHA1 d00c8be9945b6fbd22929dd0e666799cf0670673
- SHA512 1dbe67568aefdd9e3d85117b54ab6062efa15f2f2526f9e9c6e78c295bf4e873d2a7066c53b3c5fddbfe8446fb636c29a9bbef5d768aa7290c39ee6ae24da825
- SSDEEP 6144:XXFpBZBJL3rBxad7/bAkGF60FhFoFmF8cjcsc4FEFbFgcbFmFiF6FhFuFBFuFDFQ:HFRf60FhFoFmF8cjcsc4FEFbFgcbFmFQ
- TLSH T17324962433E4369DF9BB3272757B1412A639A2926112D8BE7C8C404F87B3D7551B3F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f9:51:1e:09:e5:65:c5:36:26:ca:16:1f:05:b9:9d:ea:a6:44:d8:1b:de:89:06:85:57:04:1e:0e:41:0e:a6:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 16, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:59:9f:fc:7e:5f:2c:ea:f2:43:00:00:00:00:01:59
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
218902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Data.SqlClient/net461-Windows_NT-Release/System.Data.SqlClient.pdb
mscoree
_CorDllMain
Name
.text
Size
206KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.IO.Pipelines.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52a813c62932462d8f070f001acd1f264c0766a11a78c6d3c4f81ee3b1d67223
- MD5 b7dd6fbeff686894a361817672d9126c
- SHA1 4e8a701a4d567e45c3b33c059fd5d703883ae03e
- SHA512 a30384bbe371c01ebbade5ad887963477f020fa3b8cea1170bd439f90640b6050492a6d912c60cd777ce33ebce22d399c034e00b52e39eaec2dd8b69155f7ab3
- SSDEEP 1536:QEqfoDX1DK6+ZXWKJF4uONj3QRJY/4bgN0xIRgevBjM8D2q9fgJVCyLzr:qglUZGQFEN3QXY/4bgN0xIRgevBjM8zu
- TLSH T111836BA893AC0B1BDF8E1ABDA57452121FF2DB257907E75A958DF8D908837C046243F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0b:18:21:58:61:6e:ca:65:92:48:09:cd:6e:ee:56:18:79:2b:40:4d:0f:f1:61:b6:79:42:56:f7:6e:21:7a:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 25, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:08:78:9d:58:5d:92:c7:d9:52:00:01:00:00:02:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
80750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.IO.Pipelines/Release/net462/System.IO.Pipelines.pdb
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5e8e4866f9cfa66f7765660f84b210198893e55335487afe5ebda342c0e913d
- MD5 bd7f42207f4fdb9c7eafb0013abd7334
- SHA1 96c87b7148805a0adcd4b9e23162deb06d7a4702
- SHA512 a903fda3c5585af8978918c6fa5dd7649e84bee41d0dfa09667e151819d74e16cff626595eb9760588bec12c0b8ec31f527e7dc84800378683156309c3247240
- SSDEEP 3072:IPgSRYPuMbrhcabqwwwUumu36xNOIRJAW:OuPaaWwww4u2HX
- TLSH T161E35CBC67C6DD12CB5F8C70A028621A5A31873FAD43F7E615C8E4F425A37A936193D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:a3:86:d1:9b:06:39:d7:1c:ad:68:32:06:75:f7:af:5a:40:e4:f5:66:01:12:56:75:99:3b:c7:18:c3:38:64
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:551A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:01:d1:45:59:98:10:cc:42:4f:00:01:00:00:02:01
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
138594
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Memory/Release/net462/System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
129KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 20c2fa81b8c70d651099d762954f285fd4f942e63b2d7217c145dab8d4b2f4c9
- MD5 a57f205ce75d4e4a19020e8b627469c4
- SHA1 c5583c3257cf193ff4736671445f8da64366a6a1
- SHA512 6b5985cb7ae4daecd1be3d6dbc709171ec94b89c0671aec1dc7288e08f5fe172900be75da1c43b75fff37504a33e7f8992c66581e562397f47e2ef2cefb46b54
- SSDEEP 1536:2uIaashZlF/cLecJE3+DWG/E2NstmOz+IAKvR7NQcmzF9:2zaashZzWeca3+DWG/E2itDf9NQ7J9
- TLSH T147B3DFE22F6C655AD7CF9F7B20E64E120B331963C403D2E160DC67A227A776729421E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0f:80:90:1b:17:38:ec:61:65:dd:0a:c6:a3:dc:d4:0b:33:38:e1:79:30:66:08:69:e4:67:38:b9:b5:4b:38:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0f:57:9a:47:14:40:e6:46:e6:00:01:00:00:02:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
105250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Numerics.Vectors/Release/net462/System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 08cbd7278b66f1e68425a82d4b97181a4130d93e3dd91831407aba7212ccdacf
- MD5 cb5b861883d2bddd9833c9fe956406f7
- SHA1 43290cd4aaf80df5d1cf9f242486ef8e646fddda
- SHA512 79de2065d8af3713662afb2a10e0a62c0821920608cc63cc2a47a09dc7bb6baf1fa71612da3ebe22d410ddc92fe52c0261faa019839d241fe9252d1663f4f4c1
- SSDEEP 384:RGbUedrbbxT4WT2WCwnHRN7bEpGR9z04yy:RGpd1R3XbEY9z
- TLSH T1F0827C24C7E44503FE627F3485ACE543BE3893960902D72B2582F57A0C973D8AE35A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:bd:64:c2:63:64:c7:c2:51:d3:cc:93:e1:f1:65:00:fd:e6:b6:bc:8e:9f:5a:34:69:8b:2a:49:55:41:8b:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2D1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fd:73:f9:68:5a:cd:0c:61:ed:00:01:00:00:01:fd
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
14046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\Release\net462\System.Runtime.CompilerServices.Unsafe.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Security.AccessControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 aced52254a8c3cb6ad30f99f8b745296926c49373cab00824c2c4c10ad325b10
- MD5 2d3e0b4ddf8628b41057b2aceef296eb
- SHA1 8a3b1bd9df5d052c24de2304a2928fad86927f6d
- SHA512 faac4233c45a773c4470071b0b2a75ee81eefa45f88b76fea305443514ff9c8429af3d394884933712d1fb7a7a03701f3d9df0f1de345078ddfeeeb5b4dc094b
- SSDEEP 384:3RFGaTHrxhDRtGP/Ksmvt4kyvaMAdB+w3G5h9M9ZV3Mfpcrqmf9wEJqIxVRvFNgp:hAajzDRtGUl4kdWBkyHp98I
- TLSH T1FCD2C501ABF81159FAFB4B707AB99E121DBBFAD53D22C50C0514A19E59A2F90CA31733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4f:c3:ec:31:89:27:00:92:43:e3:5e:92:97:46:45:aa:bf:13:7d:68:b8:13:75:e9:a9:9d:47:54:0a:3f:8b:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 15, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:fe:01:f0:b5:1e:ff:e9:f9:ad:00:00:00:00:00:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
26694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.AccessControl/net461-Windows_NT-Release/System.Security.AccessControl.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Security.Principal.Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b4d8e15adc235d0e858e39b5133e5d00a4baa8c94f4f39e3b5e791b0f9c0c806
- MD5 be2962225b441cc23575456f32a9cf6a
- SHA1 9a5be1fcf410fe5934d720329d36a2377e83747e
- SHA512 3f7692e94419bffe3465d54c0e25c207330cd1368fcdfad71dbeed1ee842474b5abcb03dba5bc124bd10033263f22dc9f462f12c20f866aebc5c91eb151af2e6
- SSDEEP 384:cEwo6eTs14YY4cWpOW6dHRN7FYpJAlGspU:VwDdT463
- TLSH T153824A61D7AC8323CDB71A31997AE0533E3DD3C66822862A5689E1061D677C6D731738
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
15:1f:de:b6:f3:56:f1:80:ad:c0:ff:4f:a8:55:41:ad:fa:07:51:b3:2c:1f:9e:57:30:1f:5d:fa:af:6c:1b:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 20, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:26:df:ba:4b:22:b9:82:82:07:00:00:00:00:01:26
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
14422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.Principal.Windows/net461-Windows_NT-Release/System.Security.Principal.Windows.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 43e6dfb4aa333848be5066dcb3d490afc417d0f896aada2f17b5db5fcbb819fc
- MD5 2886fb6ea404d600f7fcf34dc4f7b3b8
- SHA1 e54eb962cb3ac8e778b2648b8f5670eb9b1915b5
- SHA512 e05347c2abb577ddf217b8b6b71cd1ec7084164b5ae920a420fc937888e4b972ae49111c069c61e03dcb5593d0b3f674229273251f82ee73c22ad7d0c96d9791
- SSDEEP 1536:wYQU6qF6FmUroWpn5qTQlyydbrkSycICopK65B21MvI7za:wYcqwTrfgQlTBrWclopTm+
- TLSH T1AB836C12EF9C862AFE5E013A5CE090659B74EF971133EBD73859792916333C4620DAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:5d:af:48:3a:86:0d:12:9d:a8:a2:70:bb:e9:e7:5c:47:4f:f5:21:59:62:83:0d:be:69:5b:2e:6e:38:0c:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 25, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0c:b9:64:e3:35:9c:ec:f4:ae:00:01:00:00:02:0c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
73682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Text.Encodings.Web/Release/net462/System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Text.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a7f2e0b942782739551b37546efc842f53c7fce3a8f0f56ad45a5cf78e2c214
- MD5 82044c0f69679b28bb06c97ae31f31b5
- SHA1 551f618624a09680a11ba5217f63d719499d2610
- SHA512 528c99ae147bd76f51f01242c96dfb0791180f7332365c5e07c9e463cee4bcb08fca16e36ded00052c151b57f1b4f1153ce4050619284f9f44218f2ee71ea7ce
- SSDEEP 6144:mUijbPJXV/2IdelcQTy6fKdHfibTxbsjaq/dliUL5ZFPDnkVOzxQx6aUYMFlsjwR:mVbxFO7lcQTJKd/805/dlcVO+x6tlUS
- TLSH T19CF46B20B7E8D72BD6DF4B71B03089148BB1F61967AAE78F618846ED1C927809C453F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a2:0d:07:f8:48:3f:ef:c4:65:9d:7a:79:b7:18:7c:24:f0:c8:14:54:be:4b:bd:72:20:8e:ad:53:d5:42:8a:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 25, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0f:57:9a:47:14:40:e6:46:e6:00:01:00:00:02:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
771050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Text.Json/Release/net462/System.Text.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
746KB
Virtual Size
746KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 af4e13ef418fd89b432de20cd1dfb7fa10a7179c8dd049c9856316e50c5949ca
- MD5 0fff41795a1107691ec1e5054211c04a
- SHA1 3439da9b7918fa0c17836acbe1fa4e05c40119ec
- SHA512 1333847b76025af23a4a4dd421707732078673c96dcdb726a38b477c51606395002574fbcdbf224fd0ae5b80e8da8b2f02dd4972d88f31c36c3dcbf595510e90
- SSDEEP 384:F7PVBSE/ug12sib05JCw0p8CUQefpnQKwU3RymGWuXWJwnHRN7rpGR9z04RI:9PV0iug12TY+bUKmGfXrY9z1
- TLSH T15FC28D6183B85113CF6F8E77D2A9CC175F74A3466A02E7391AECF2D40C5338A8A31275
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
16:d8:01:cf:fd:de:8b:33:89:18:e1:8b:1f:5e:60:e2:48:88:65:aa:1b:f1:2d:69:fc:ae:73:d7:f9:1a:25:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2D1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fd:73:f9:68:5a:cd:0c:61:ed:00:01:00:00:01:fd
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
22842
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Threading.Tasks.Extensions/Release/net462/System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a9:54:70:d9:79:c0:84:65:e2:00:00:00:00:00:a9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
12898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 570a437dea0271d1d5c8b7d6a408b0b2635bdb0e8b8d5051878f3e7fca087f89
- MD5 2c39a53a61168c8a7a9f53ebdad6137a
- SHA1 b10ac8325cd72c7a9018af806d75739ab862b4d8
- SHA512 d1987995bb58978a063a195a18ba02908edac02a3e7808e93f8340aa968c9bd74f76d2e6fad8158f72bc3629c1382039863471d51e510bd897187ccdabae8e14
- SSDEEP 768:wlUj6BAKp/zgvVucdcRsCVKcraB09THkPFtQI4CRIzZwMNTBczwDN:0h3/zgvVPcRrK09HkBAwMNTNN
- TLSH T135132A1067AD9B27C2AD8AFDF482911507F09125B623FB9B9FC4F4EB6C47B85050227B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50a1a1a79dc86fcfb8b51249b5325a10dd93d193c52999cf6775d25030a4e606
- MD5 5f6a2f17f4e792600a13e3771d5ca5ff
- SHA1 e411b8e51b201c5f389c2388d26735c1e89b3f6f
- SHA512 67af09a5545c6bb0e033cfa09dfc654ce4cd4d22c418402d5a43612eaa6e60b71dca2bf4f796a6027c8e7aece88d418e6e8c469c94c327f5169608e67a3e7a39
- SSDEEP 1536:TexPta15J8wWI7Kgl74TChe44tALYKXybJG3OoCkvV:TexFafB7q2hwArQJGFhvV
- TLSH T137937E3A9B98FA27C3ECAD7724A60D0907F1D126E153FB55C98959F8381BB301232797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
95466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 842e09959084eda733aab1a5354d7af79e29594f4d8b91c8792103e5c755ed9b
- MD5 e136924bb4051a462ad90bd14cb0ba41
- SHA1 8cfeb4034766ce06f9216b1872703015e8ea0e09
- SHA512 1baa852ffa42fd8a743661f003b90c840276b4cd864d5467b8d551454420ea46bb6c97e0dbe832de1e5e0672eb57365332dd5f86ad1df88820300504a3b1ea07
- SSDEEP 768:628hQuem5RPkF+pXtRx/hRsPveQJcpAUdE3fF7Mtm3M:62gYm5RPv9jjsPveQCdEvF7Mtmc
- TLSH T1B2D229022B68CB77D6EF4575B8F0212842B1D39F6803C76E4DCC61E9A947B8567217F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c41bdb9ffd3c5f6e17d2382c1012d73703e035e3f1100245fdd4e08c8dc6eb5b
- MD5 2f096535c228ab0d2082adfc01678481
- SHA1 0e0dcb36aa56e7f99aa524cfb3c72e4918cc5b32
- SHA512 9f54b9e85ef70afcb36569885de73bba704a8901c8ddbb5a35de6a1921d4d42f88026aea41ed77ec7a8041ee8a04efef817deda7dea0f29a716dab7a6ea7fd9e
- SSDEEP 6144:LHNGIaxcvxT+2pEwMjbLmRlQ5+A45iziJCJP+pIoTtya:RRUQCmRw4szYCOI
- TLSH T165747B2167EC163BCADFA37BD06B042D46F9D015638FDB8D6D84A6F91C83FA65800267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
366574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
352KB
Virtual Size
352KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/QRCoder.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1fcb252a5f758d5f8af8581a9250bc2114420e15b7fee61df22289d8627fadcd
- MD5 c21af7f8f870ca63f4213724377c7e81
- SHA1 38b71b685a71f0d4511bc23d7007cd12c64b4e13
- SHA512 28f6d470c68752e1a1ef174191f367001db8087980998c3c894bf61f21e195dc99ac3d99d85c294c7b44ad9a702704fbbdb95a4e40ab5c643461dd3868df4b4d
- SSDEEP 3072:Z+ilEvP1mYrSUToLG0C12p5d8JHJTSE/YinmCyVZf1fdgDbEQElpIk05UB55uyjR:Z+ilEvP1mYrSU0LOMmp7mCyVPwiIk3v5
- TLSH T120048D2567FCEA16D1BF7B31E87040208B33B496B976E75F1D88A8BD159378088527E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
183042
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
QRCoder.pdb
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonBinder.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e12fb454c77939d6de30875c01b4d63f23b53b11fe15cffe3dd485db6252dce6
- MD5 60d41f3ab75f8bf156d6a702529148f5
- SHA1 0fbe14146708da313995db5c83a387b084c97ce4
- SHA512 0337bbe0b99ed0aca2a922fd29a1258416cf38f37eecdc309e00737876780725e1423c2332bb1c2afe52b0b0104346c670eaa651314a162b50970b2e1db212c0
- SSDEEP 6144:6Z5CriVMQLs2xI5+fkZPt/+9XdNhNP/y8:6IiMZPp+9DbP/y8
- TLSH T1C44429203AFA9129F273AFB55BE47496CBAEF3633606E45D149113C70A13B80DD9163B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
252642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\RatonBinder\RatonBinder\obj\Debug\RatonBinder.pdb
mscoree
_CorExeMain
Name
.text
Size
239KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonImageToIcon.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4712cb64c5a602a74e55dc86e82831f94716d90e035eb9ae67538d0794d88052
- MD5 86850975ae10299a5dd57b4f7aef09d6
- SHA1 363b398fa3d8c6d35bbfa4592ca32a6f5cbda5b8
- SHA512 1ff10a960070976ee03d589e6c7722a552c41282fcbe5fa7d784a727b508ec9255eb0bde75bf40b108c9ddc0f83b1a354c7cc2d40d8834c813d1fea1b33cbfa9
- SSDEEP 6144:+pcAUqLs2xI+n+ogqdrqXvDCtc9c3ruJFJd8+DEDlUb2A5vN2gqu:+pci9q/kruJF7wa2Q2
- TLSH T1FF74AE90BBFA5EB9F8DEC5BC3B6589600263FD3169C1CA0578CC658B1A726E001F552F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
287446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\ImageToIcon\ImageToIcon\obj\Debug\ImageToIcon.pdb
mscoree
_CorExeMain
Name
.text
Size
273KB
Virtual Size
272KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonOutput.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d11183559bf8235f849c0272d763a771f5dfb6c19e5d7b62025fcedefabffadb
- MD5 d069b24cd364cd0f980cb4f3c749001c
- SHA1 701b5c83e4ca8bcf8a28a33c3a0fb3e648ab7612
- SHA512 6d0481c2fc6a322f5f14f57c9ff8f7371311807f7d5d0b40ac224086af1effd4c2258a6036ad816018210631a88f4edfcf3cac5e8ac16af864a3c9ede12c376f
- SSDEEP 3072:Tv6gdLs2xIEq+8BPw/Bz65/M6If+3Js+3JFkKeTnjBz6Q/M6ku+3Js+3JFkKeTn5:9dLs2xIEq+8BY/xBt256xmJL5
- TLSH T1F7340642B550C2E1E5354A33E156D9F00F327C5EFB0AA94B7A84FF5B3873251AD23A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
152238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\ratonOutputs\ratonOutputs\obj\Debug\ratonOutput.pdb
mscoree
_CorExeMain
Name
.text
Size
141KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonPortChecker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4385aa3164722e800b80c33c2322d200031dfd01ef8eb9c238e7938d70bcac47
- MD5 c506a5bc57378f8d1d01d1aa9a733bfd
- SHA1 bc6adb85aa70f67637efb47b8c6b65cf72dc179f
- SHA512 ede42c7c9a4866a923b0f4c57ed1fd94da9fe2a01dfc072491d05f8b3ef7eff5a78b5f0d916e7ead28a659e68339e0d45033b91e75d77511c7dbbec77c172ad6
- SSDEEP 6144:X/OodaEmrf0GLs2xIL+JfZPw/+9XdNANPWxRH/By7ogFH/By7og:Zm9ZPk+9DyPWnH/By7ogFH/By7og
- TLSH T12824A72075E7541FF2F3AF755BD4F8B59A6FB6B7A70790693880038A6A03640DD80E36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
200466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\Portchecker\Portchecker\obj\Debug\Portchecker.pdb
mscoree
_CorExeMain
Name
.text
Size
188KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonPumper.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 181c42201b1ad0cd01bb3a228bb5609be4eb51e0207856a88aa0287642a8e140
- MD5 62e882e673b814c7a9805d9f74e0a635
- SHA1 efc7dd67b8bcece3a753946e1a84a924e44216d8
- SHA512 78939958791d885e5ad8455c9700224b6ee5f7217c7e404b5fef5d424ff38b58170a38aa7c9ac383cbb66ce851c21db10daf835cb4d09bfe89479540f6d17731
- SSDEEP 1536:mUKN21nPPDCjIEkq/vjz/mK68b1GYmYY6Ls2xI769+1Dw02XquNUdYU2XquNUdYN:5nPPDCjIEkq/vjz/h68b1IKLs2xIw+p
- TLSH T102536D6463F8872BD8FE4B7CA422095003B0B727A442EB9D9EC579DE6D533418D14BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
59146
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\Pumper\Pumper\obj\Debug\Pumper.pdb
mscoree
_CorExeMain
Name
.text
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonQRMaker.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 53c704b73cf9eff4b3bac4a7895d3c851b09e6072e3f3b9199900fc9eb7e7735
- MD5 3b84ede12991f5ed0470659dac80054c
- SHA1 a771d60079fb096618716e5b2014a2e392f53081
- SHA512 94b29b91507f310d152e6cd4776fbca3ffe923fbdb24de6c86ab804f913b0424d3641eaa9ef62c352f787a50328d45d0c5e7f61cd6bc85b2d9812d81fd074311
- SSDEEP 768:5hm1k7RVCjsjTPf6z2Y6+6IvWnXY5mmF6emPLs2xIyJ+2++Z3mdnzmz:5l73jh+6IvWnwmmoe0Ls2xIyJ+2IK
- TLSH T1A233E81023789662C3AF1F7EC26201BD1770BF1EF632E7466DC238DEA9767A11911683
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\QRMaker\QRMaker\obj\Debug\QRMaker.pdb
mscoree
_CorExeMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/RatonUpdater.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 62ebdc13767cfd26007276a222ec365e2ee644703e0981d28cf31d49e60061d3
- MD5 ceadf71040a9b7143133f86cb412a1a8
- SHA1 1ba76cc3a3bab3758dc0065c887d07a9e031700d
- SHA512 5924593880ece8ba1e2567bb011b5407ed5b03287a4b869766b4e95a131fedbdf986da407c8f8bb314695d5ac4cf3a72615b718b45cc4d632c0aac6d9a7d5835
- SSDEEP 1536:/oyjX4SCXmyZJYY7Ls2xISV+SEQrcJF0m05z:/oyjX4SsZZJLLs2xIk+NQLl5z
- TLSH T1F0537E0073F48B39CA6F9A7DA5E4466802B3E7646002DBD65D8AF8DF2DE77E40501787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Cristian\source\repos\RatonUpdater\RatonUpdater\obj\Debug\RatonUpdater.pdb
mscoree
_CorExeMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Stub/Stub.cs
- SHA256 332efba657a4f83162ef702d70e67a104f20dd4ebefad00b4dfb17d4345a47ee
- MD5 2501adef9f3e0b94cfd09950d5de9732
- SHA1 bf02ae2f0d68cb6d053792b632ed11f5e3a5b9a1
- SHA512 ad3e3eebe1a861293c6260778b39534748d462dbc3937196c9c72ecf33d2e74a49fe5ef9f866f675ae22aa6187af8524eca28e6cd8f6b1c4300a7d343187d27b
- TLSH T14481BE19146E6656D9B732224F473184EB9342233BB65968BAFD8FCE1F305700378E8A
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Tools/Watchdog/watchdog.cs
- SHA256 bfc45018aa80534ebda43895adea03dce3d079bbf72843245423712aefc9f1ec
- MD5 101e1c165ae6744f304eabf7216f3ef2
- SHA1 ef18313b1b8f4af0a27da9640e2af3d604d30830
- SHA512 f570a1a452c954d9ede92afe50316d910572b57147e2b365c369fe93e180b826597d4e5ba043183a076b340eace0814fe83261f374471aaeac24f5e83aaf9915
- TLSH T1C2F0205C1A1AD69508F71332BF421145DF73162712774964FEECC100DF314700575D14
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/Vestris.ResourceLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a8c2ccede8eb154e20cf60bba517ea8e81485da2665362e724a279b597cedce
- MD5 306365ad424bec21e2f0c229a4ac6b08
- SHA1 432be30aa28bcd551d09cb0ed7d14e376638c5c6
- SHA512 db31b42f716e6ba546a176509d5c16fdbb39cc0bced9256203ec4264c3ef85a18981f6cd868f6fc018cb79a03c2fa448a318d310a17bac5a271b74e5066b0516
- SSDEEP 1536:qul14DC9Uf0a2T3Lip1q0GB7xxn0JL+1MtMKot25JYg:quvQ0a26p87Ln0x+1dKot2LT
- TLSH T1F8734B25A3BC4F3BC6FE467EF01704565BB0C907F227E34E8ED8B8DA65A67800915693
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Thomas\source\repos\resourcelib\Source\ResourceLib\obj\Release\net45\Vestris.ResourceLib.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/dll.png
- SHA256 77bafdb871a202ee0f298ac25dd07a9096903a8bad771fa7afff7a94baf0cf32
- MD5 cb8af194c683bde23094f2d27a01eff5
- SHA1 d04d73ee46f3ab7e91a03e18ad2c99c83a84ea04
- SHA512 4a88cf10a959dad384898a9e03a3d243364ce525168cfb0b421c9327d9a7e2a115a26b0e27e2b39816bcb459c8a0213eb738b9be75fd7576d8b9907883cf0e76
- SSDEEP 192:1Rwb6iZK81QfoAYUtkrMQB1Rh4XNnKCHmVnrjPt6vjBq+88xCaW8MTsNUsOtwFi:1U6imfo9PhhCz2jP0vc+88DWKNZFi
- TLSH T1FF52CF22F95BEB9284BB9A3FCE9D1C5C28576671661F21871538D8F241C761DDF803C0
- MD5 SHA1 SHA512 SSDEEP TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 648950f725fb0320e09c52dcaf81764916df96dc62e7429ba67daea0acb784ea
- MD5 5cc2bb48b5e8c8ac0b99669401d15456
- SHA1 02e9ae08f3ec364834eb3ffc122f1c90e1b0e95e
- SHA512 2867e94cee9f89f1cf85ad01083d75f4bc0bc0e551b2ffae05581828994f2b01a458ac7a7c94a45e8c40858ecce197f7ec23482ee13ef3f1bf82b33b89b3b420
- SSDEEP 24576:/bN7xZgKVl/N12pljD7DM2l8xs5A/zYv7flNcK:DyJXn3ML7G
- TLSH T1D8455B0537FD9B3BD49E577AD835092447F2E40AB397EB4F1628E6B91C837A48C012A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1172690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/obj/Release/net45/dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
v3.8.0 Deluxe Plugins (v4.0.0)/ezcracked/SSLRaton.pfx
- SHA256 816125dd412896a9664f026bba3cce6252981ca5673cc7dff0335a5a5a28d94d
- MD5 586d127855df469928dbf0f69550dd55
- SHA1 2567c05e649af12f0d2f68aef2d3fbf8dea6e624
- SHA512 2c693f67aa4850c767ac61197e916ee99e69567c8703e8b4efb83e2bf8fc5567fd3e77304344efe9fc89b7cb1cc0db8a3d98c9cb6c4ed45958112b31dc39b0ee
- TLSH T102413B63BBFE046A3B02AADC34F999B290E4A7801905614F517004CA2938E58D4F35CA
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/loader.bat
- SHA256 c69ea3bab9c92201e2208a9029dbdc600b845cde1d5ba6ebd4c9948446eb7d6c
- MD5 f1effa4455abfa0482622a8e6b9d2c77
- SHA1 cb0279d8831f8f6c8395eab4a7b1aafd14d30b35
- SHA512 8b0e4073891b4e839a2b1608447a14a616b77c3be9fbe59496181d9b21101ba86a9dbb4ea926543f9175397bd16e0c9fe99d8b85b6ecc86ec89d0d32685145df
- TLSH T1DD3166467048C5B146BB82FD4E6802A5F20D82AF80625DEE3C1AE4F59F343D544FF988
- MD5 SHA1 SHA512 TLSH
v3.8.0 Deluxe Plugins (v4.0.0)/runtimes/win-x64/native/WebView2Loader.dll
- IMPHASH 90db803f7a0acc2517ef287c1dc1bb76
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
- MD5 b7f10b8066ee96c628e09c439b8d0b9b
- SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
- SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
- SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
- TLSH T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:0a:0b:1d:57:67:2c:96:ed:25:eb:8b:ac:94:71:7c:b9:ef:20:b6:a5:c9:21:f6:fb:30:b0:72:47:ef:a7:71
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 1, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7f:2f:42:2a:73:53:08:de:ea:00:00:00:00:04:7f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:09:08:07:e0:f9:5c:8c:e6:55:00:01:00:00:02:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
18608
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
v3.8.0 Deluxe Plugins (v4.0.0)/runtimes/win-x86/native/WebView2Loader.dll
- IMPHASH c1214c3b09798333b3bc44c19d95ec00
- SHA256 44ab92c2246ebfb5f98aa5726626fb44beb61543f2ef1803338af9fd295e63f0
- MD5 7b0eeac10cafb4acda98ccaf2f4b8eb1
- SHA1 9af3bdf0f62f6e4b3a936afc9b77fa9ac5a088d9
- SHA512 466b751a90d3b63e6394b47d459da70ee20eb7d6d40c48153996297e460fbaa02f32cab10b737fefd03a2ea62bd273025fc2ccde850faf42c904044c7ea8dab7
- SSDEEP 3072:F6JOAfv0Zj/zjziMy/4rnF4+jqb22EA2TNTEtJAfiPjezIgUW1:F6JNf89Q/In+qPEtJ/QNh
- TLSH T1FAC37B5075D080B1E5BE18390878EAB69B7F7990DF609DDB27841AA94F343D09F31B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bc:8e:ea:69:48:7f:f9:0d:25:00:3d:3c:c6:08:63:67:e3:d9:ca:71:71:67:83:cc:e7:c2:6d:32:f0:90:af:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 1, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7f:2f:42:2a:73:53:08:de:ea:00:00:00:00:04:7f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
16528
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
v3.8.0 Deluxe Plugins (v4.0.0)/x64/SQLite.Interop.dll
- IMPHASH a42f73521c784fa06f1d886fcbcefcba
- SHA256 9309fb2a3f326d0f2cc3f2ab837cfd02e4f8cb6b923b3b2be265591fd38f4961
- MD5 56a504a34d2cfbfc7eaa2b68e34af8ad
- SHA1 426b48b0f3b691e3bb29f465aed9b936f29fc8cc
- SHA512 170c3645083d869e2368ee16325d7edaeba2d8f1d3d4a6a1054cfdd8616e03073772eeae30c8f79a93173825f83891e7b0e4fd89ef416808359f715a641747d7
- SSDEEP 24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
- TLSH T154858D4AB3B8019DD567C17DC6675B07EBB174022310ABDB17A08AAA2F13FE5177E324
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
cf:de:a6:58:6d:f1:ba:ab:46:cb:60:08:e4:1a:5f:83:16:67:26:51:0b:b5:b9:8a:c9:8b:ed:b5:c8:82:6d:c1:e7:36:aa:8a:82:fe:da:08:1c:7c:47:a3:78:cf:af:fe:92:cb:b8:fd:17:10:3d:e8:ca:87:5b:a3:f2:a6:35:30
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
3e:e8:ad:96:a2:e1:d0:66:85:77:ae:c2:41:dc:ef:f3:d5:76:58:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
6140
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\x64\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
StrongNameSignatureVerificationEx
StrongNameTokenFromAssembly
StrongNameFreeBuffer
CorBindToRuntimeEx
StrongNameErrorInfo
wintrust
WinVerifyTrust
kernel32
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
ReadFile
CreateFileA
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
WriteConsoleW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
AreFileApisANSI
SetEnvironmentVariableA
RaiseException
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushViewOfFile
lstrcmpiW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
user32
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI00b5de0dbe05adc8
SI00f2097672333949
SI013768ea228eaf06
SI03ee1370ff2172fd
SI050169b0f137dcac
SI061f9351f6b79d40
SI066df4a47deb7b95
SI075258fe7332f5c9
SI07646c0ac405baf1
SI0a8f1a0337a9feb7
SI0b65268e19d3b81d
SI0e7c9abcb195c68c
SI0f556a49067bf550
SI0fe7fecb92f1b44b
SI12409cae6ddf2f1e
SI12a7c0808f3f99f2
SI150953dc62f0a879
SI1527d54f96ad891e
SI15d5f41c81892f13
SI19b2677a019ab7ab
SI1ae480d1861ed022
SI1bc1bc471c8cd143
SI1c7a7970970b9619
SI21d24eac30bb9014
SI23e7cf9c8e559e93
SI2409c7e1eb500ce9
SI24bb313f312e2857
SI24f5c83eaddd65e8
SI252aeb4a9d3dc2ff
SI2b074e8cf29cb472
SI2b5f6f3d24eb7ba3
SI2bc16556d60ccfcd
SI2c7820fd77bf7594
SI31a566678d8c54ab
SI327cfc7a6b1fd1fb
SI32b0162a49ae8729
SI349980d776ee39ac
SI36ddf861177da59c
SI36e67160052f7f69
SI3723ba2973e3b57b
SI3974af1f94b94613
SI3d45b939740dff51
SI3d527d6e902c8427
SI3efc17e9bbe52434
SI3f596ca698b243fc
SI3f8b1cdb4dc92eff
SI45d842f2d2322061
SI462a496f3247faf2
SI46481015c7f49c68
SI4983499b64278231
SI4987aea8bdedf163
SI4abff63f9a080046
SI4bf5a93645714882
SI4ceb9ee614df7639
SI4fb6877896ef7303
SI50a9b553ac0b2e2a
SI52058dea2268cd04
SI546abd8b90c0f48d
SI568a7d0a1f4d0ff4
SI57335d3e329eea8d
SI5887bf867911838d
SI588da80b6a264802
SI5b2b3e8bff031a75
SI5b7374ef2d63d8eb
SI5c7fb49466251e7d
SI609efcf96ea8408a
SI61a330d2e855b61b
SI633e1c91fb9a8aa1
SI64119fb980b7e962
SI6479b9cf07b87f67
SI674c3bc07fc17979
SI6901b186cfd089f2
SI690ffdcfd9cda629
SI69d8a1d378771295
SI6cfa851319f410c1
SI6d14611bb8b2c8bc
SI6e539204336d5b4b
SI6e6c544c028b2de9
SI70e4ec628dd7e188
SI7164645d0504ae24
SI72621cc08869a205
SI72b05b1ad5f34d61
SI75fe921d50a95fe0
SI768767362ea03a94
SI77ffe3fede90bfbb
SI783104ea11038afc
SI79f6c64948ab63d2
SI7a4943591207dd14
SI7b97ee05aa1e64c7
SI7c373366af3ee2f7
SI7cd7250399b1ea60
SI7da3b9691a73b4a2
SI7f41c842e0d89557
SI8162bd921f89d839
SI824276b89178ecbe
SI83d1cf4976f57337
SI863e1ae0679961f5
SI87a11c29fe1dc17b
SI88974d2e6bd51eff
SI8a3a9f59ab5f24ee
SI8d447a033d183aaf
SI8d676d5954c732bc
SI8dd2c969f2a6a31e
SI8e33e5864c547f3f
SI9196a02c851acbfb
SI919f742193b92a4b
SI943321d364f02e5d
SI94d8f51c6c1db577
SI950480ab972e108d
SI9517b76a4f0b657e
SI9662fa92cee70cf1
SI979d7afd84d6f0ca
SI989b06a5a9b937fe
SI989b754accd7cddf
SI9bf461db9bf83c22
SI9c6d7cd7b7d38055
SI9cb7692f61998485
SI9ea49276dcf9849f
SIa069da76968b7553
SIa0f9dd1158cbfb0c
SIa1d7e21a548b910c
SIa26b8e5116b7d93b
SIa2a6050a8dbd3b7a
SIa3401e98cbad673e
SIa3f7b31190ce0815
SIa618e7f1e95b5c32
SIa62692883d0c456a
SIa8e1a742a358dc07
SIa9b758d3ae2e9aea
SIab3ed5feb3c43f0c
SIada7f27769d7f95b
SIae9562605f0b7c06
SIb391996b7b633820
SIb3f045f05d2d1b0e
SIb4089165600bb7f5
SIb4e97c410be9a2cf
SIb6d52d8cb2f1045a
SIb739af05c351a5b0
SIb84ee16d149e7562
SIb94a6bc97d77e69f
SIbc9b0b73a965892b
SIbff6307869d58daf
SIc001296960f3e921
SIc0bb4eab77f5a999
SIc21d402df09e0c69
SIc26100c97b176329
SIc28b5d2d1f102994
SIc2d8715ee8c9e908
SIc38599462746964c
SIc3b0ae4f7a27b7a8
SIc5d5610a73781fac
SIc8c63d94dd03040b
SIca6f27da046939cc
SIcbf931747ce28d75
SIcc134e65c80c0c61
SIcd2334250b08e199
SIcd6b4ac0aeff7202
SId00f524badf4f5cf
SId6deafdcc0c75049
SId99ac2a61d035e11
SIdba35b6dcb77d463
SIdbbe1b52f304f379
SIdc2e4e1ccfa9a043
SIdc6920f226dceb74
SIdca7c218fe9393fb
SIde347320a2d725fa
SIdeb28053ce71d5b4
SIdfd4d81e1791b463
SIe25e8f29ef2a78eb
SIe2cb515ade8c0235
SIe57aa77c8884d3f9
SIe6405dfd7b63ead9
SIe68a75d48671c8a5
SIe7632ce587b97772
SIea4313bfab0cfe57
SIea8388f7613ed158
SIec91f505db92f298
SIecd4a7ef4a5968a1
SIeea5cda6d9846aa5
SIef12447577961bdf
SIf060fffd3e5c94b5
SIf21356bf3fa1a8ef
SIf216ef3874529d42
SIf356c1132676af25
SIf4199c70bfb81a15
SIf499bb5c421377e7
SIf71b64d343ddea8b
SIf8090240c1414098
SIf8364af380546f2d
SIf86df75514f4442f
SIf8a71e249d9c661f
SIf8b1716e85b0e192
SIf8ee6276be88ce12
SIfc350ae509dc2b53
SIfca3960780d005fa
SIfcfad09d1b0a60ec
SIfd52d1389825aac4
SIfdb97bb7d9d0d622
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_json_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_totype_init
sqlite3_vtshim_init
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
263KB
Virtual Size
263KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=128, id=243, version=40116,
count=37, id=242, version=40116,
count=7, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=153, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
v3.8.0 Deluxe Plugins (v4.0.0)/x86/SQLite.Interop.dll
- IMPHASH 39ace63b362beb47a2a7a8202a5c4f2d
- SHA256 83f332ea9535814f18be4ee768682ecc7720794aedc30659eb165e46257a7cae
- MD5 8be215abf1f36aa3d23555a671e7e3be
- SHA1 547d59580b7843f90aaca238012a8a0c886330e6
- SHA512 38cf4aea676dacd2e719833ca504ac8751a5fe700214ff4ac2b77c0542928a6a1aa3780ed7418387affed67ab6be97f1439633249af22d62e075c1cdfdf5449b
- SSDEEP 24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
- TLSH T1D5558C26FA8390A1EDD610B592FE6FB76C3D120A431808E7E3A41CB55A601D3767E74F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
3b:1f:3a:ac:fb:ed:36:06:88:31:ea:b4:6d:f3:a1:e3:8d:2e:7a:dc:11:66:12:9b:f9:bb:8d:7d:d5:0e:57:cc:4e:89:0a:bf:27:24:68:97:37:c9:ea:55:87:a3:86:1c:e3:da:c3:21:ee:3d:b2:c8:6c:40:c6:40:7b:27:ce:61
Digest Algorithm
sha512
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
18:28:ac:13:a6:25:5d:21:f8:30:42:d7:18:8e:57:cb:ff:65:3f:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Chains
Nov 2, 2021
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
Serial Number
05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 1, 2021 - Dec 12, 2024
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
5844
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb
mscoree
StrongNameSignatureVerificationEx
StrongNameTokenFromAssembly
StrongNameFreeBuffer
CorBindToRuntimeEx
StrongNameErrorInfo
wintrust
WinVerifyTrust
kernel32
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
lstrlenW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
GetModuleFileNameW
SetEnvironmentVariableW
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
GetEnvironmentVariableW
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
ReadFile
CreateFileA
LoadLibraryA
lstrcatW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
CloseHandle
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetEnvironmentVariableA
AreFileApisANSI
DecodePointer
SetStdHandle
RaiseException
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushViewOfFile
MapViewOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
CompareStringW
LCMapStringW
GetACP
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
wsprintfW
advapi32
CryptAcquireContextW
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptDestroyKey
SI00b5de0dbe05adc8
SI00f2097672333949
SI03ee1370ff2172fd
SI066df4a47deb7b95
SI07646c0ac405baf1
SI0a8f1a0337a9feb7
SI0e7c9abcb195c68c
SI12409cae6ddf2f1e
SI12a7c0808f3f99f2
SI150953dc62f0a879
SI1527d54f96ad891e
SI19b2677a019ab7ab
SI1ae480d1861ed022
SI1bc1bc471c8cd143
SI1c7a7970970b9619
SI21d24eac30bb9014
SI23e7cf9c8e559e93
SI2409c7e1eb500ce9
SI24bb313f312e2857
SI252aeb4a9d3dc2ff
SI2b5f6f3d24eb7ba3
SI2bc16556d60ccfcd
SI2c7820fd77bf7594
SI31a566678d8c54ab
SI327cfc7a6b1fd1fb
SI32b0162a49ae8729
SI36ddf861177da59c
SI36e67160052f7f69
SI3723ba2973e3b57b
SI3d45b939740dff51
SI3d527d6e902c8427
SI3efc17e9bbe52434
SI3f596ca698b243fc
SI3f8b1cdb4dc92eff
SI45d842f2d2322061
SI462a496f3247faf2
SI46481015c7f49c68
SI4983499b64278231
SI4987aea8bdedf163
SI4abff63f9a080046
SI4bf5a93645714882
SI4ceb9ee614df7639
SI4fb6877896ef7303
SI50a9b553ac0b2e2a
SI52058dea2268cd04
SI546abd8b90c0f48d
SI568a7d0a1f4d0ff4
SI588da80b6a264802
SI5b2b3e8bff031a75
SI5b7374ef2d63d8eb
SI5c7fb49466251e7d
SI609efcf96ea8408a
SI61a330d2e855b61b
SI633e1c91fb9a8aa1
SI674c3bc07fc17979
SI6901b186cfd089f2
SI69d8a1d378771295
SI6cfa851319f410c1
SI6d14611bb8b2c8bc
SI6e539204336d5b4b
SI70e4ec628dd7e188
SI7164645d0504ae24
SI72621cc08869a205
SI75fe921d50a95fe0
SI768767362ea03a94
SI783104ea11038afc
SI79f6c64948ab63d2
SI7f41c842e0d89557
SI8162bd921f89d839
SI824276b89178ecbe
SI83d1cf4976f57337
SI863e1ae0679961f5
SI87a11c29fe1dc17b
SI88974d2e6bd51eff
SI8a3a9f59ab5f24ee
SI8d447a033d183aaf
SI8d676d5954c732bc
SI8e33e5864c547f3f
SI9196a02c851acbfb
SI919f742193b92a4b
SI943321d364f02e5d
SI94d8f51c6c1db577
SI950480ab972e108d
SI9517b76a4f0b657e
SI9662fa92cee70cf1
SI979d7afd84d6f0ca
SI989b06a5a9b937fe
SI989b754accd7cddf
SI9c6d7cd7b7d38055
SI9cb7692f61998485
SIa069da76968b7553
SIa0f9dd1158cbfb0c
SIa26b8e5116b7d93b
SIa2a6050a8dbd3b7a
SIa3401e98cbad673e
SIa3f7b31190ce0815
SIa618e7f1e95b5c32
SIa62692883d0c456a
SIae9562605f0b7c06
SIb3f045f05d2d1b0e
SIb4089165600bb7f5
SIb4e97c410be9a2cf
SIb6d52d8cb2f1045a
SIb739af05c351a5b0
SIbc9b0b73a965892b
SIbff6307869d58daf
SIc001296960f3e921
SIc26100c97b176329
SIc28b5d2d1f102994
SIc38599462746964c
SIc3b0ae4f7a27b7a8
SIca6f27da046939cc
SIcbf931747ce28d75
SIcc134e65c80c0c61
SIcd6b4ac0aeff7202
SId6deafdcc0c75049
SId99ac2a61d035e11
SIdba35b6dcb77d463
SIdc2e4e1ccfa9a043
SIdc6920f226dceb74
SIde347320a2d725fa
SIdfd4d81e1791b463
SIe25e8f29ef2a78eb
SIe57aa77c8884d3f9
SIe6405dfd7b63ead9
SIe68a75d48671c8a5
SIe7632ce587b97772
SIea4313bfab0cfe57
SIea8388f7613ed158
SIec91f505db92f298
SIecd4a7ef4a5968a1
SIef12447577961bdf
SIf060fffd3e5c94b5
SIf21356bf3fa1a8ef
SIf216ef3874529d42
SIf356c1132676af25
SIf4199c70bfb81a15
SIf499bb5c421377e7
SIf71b64d343ddea8b
SIf8364af380546f2d
SIf86df75514f4442f
SIf8a71e249d9c661f
SIf8b1716e85b0e192
SIf8ee6276be88ce12
SIfc350ae509dc2b53
SIfca3960780d005fa
SIfd52d1389825aac4
SIfdb97bb7d9d0d622
_SI013768ea228eaf06@8
_SI050169b0f137dcac@12
_SI061f9351f6b79d40@8
_SI075258fe7332f5c9@0
_SI0b65268e19d3b81d@12
_SI0f556a49067bf550@8
_SI0fe7fecb92f1b44b@12
_SI15d5f41c81892f13@8
_SI24f5c83eaddd65e8@4
_SI2b074e8cf29cb472@16
_SI349980d776ee39ac@12
_SI3974af1f94b94613@12
_SI57335d3e329eea8d@12
_SI5887bf867911838d@12
_SI64119fb980b7e962@12
_SI6479b9cf07b87f67@8
_SI690ffdcfd9cda629@8
_SI6e6c544c028b2de9@4
_SI72b05b1ad5f34d61@12
_SI77ffe3fede90bfbb@32
_SI7a4943591207dd14@4
_SI7b97ee05aa1e64c7@12
_SI7c373366af3ee2f7@4
_SI7cd7250399b1ea60@4
_SI7da3b9691a73b4a2@12
_SI8dd2c969f2a6a31e@12
_SI9bf461db9bf83c22@8
_SI9ea49276dcf9849f@12
_SIa1d7e21a548b910c@4
_SIa8e1a742a358dc07@8
_SIa9b758d3ae2e9aea@12
_SIab3ed5feb3c43f0c@0
_SIada7f27769d7f95b@4
_SIb391996b7b633820@36
_SIb84ee16d149e7562@12
_SIb94a6bc97d77e69f@8
_SIc0bb4eab77f5a999@20
_SIc21d402df09e0c69@8
_SIc2d8715ee8c9e908@4
_SIc5d5610a73781fac@12
_SIc8c63d94dd03040b@44
_SIcd2334250b08e199@112
_SId00f524badf4f5cf@20
_SIdbbe1b52f304f379@4
_SIdca7c218fe9393fb@24
_SIdeb28053ce71d5b4@12
_SIe2cb515ade8c0235@12
_SIeea5cda6d9846aa5@12
_SIf8090240c1414098@4
_SIfcfad09d1b0a60ec@20
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_json_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_totype_init
sqlite3_vtshim_init
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=49, id=241, version=40116,
count=128, id=243, version=40116,
count=39, id=242, version=40116,
count=23, id=259, version=24123,
count=22, id=261, version=24123,
count=15, id=260, version=24123,
count=8, id=203, version=65501,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=152, id=1, productName=Unmarked objects,
count=1, id=264, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,