BusinessInsight-Agent-Package.zip
- SHA256 1053a1d63688bbb59896719f72e7b32715c7afcfbeab3ed4956ae00f066420dd
Overview
overview
8Static
static
3BusinessIn...re.dll
windows10-2004-x64
1BusinessIn...re.dll
windows11-ltsc_2024-x64
6BusinessIn...ty.dll
windows10-2004-x64
1BusinessIn...ty.dll
windows11-ltsc_2024-x64
1BusinessIn...up.cmd
windows10-2004-x64
1BusinessIn...up.cmd
windows11-ltsc_2024-x64
1BusinessIn...up.exe
windows10-2004-x64
1BusinessIn...up.exe
windows11-ltsc_2024-x64
1BusinessIn...nt.exe
windows10-2004-x64
1BusinessIn...nt.exe
windows11-ltsc_2024-x64
8BusinessIn...on.dll
windows10-2004-x64
1BusinessIn...on.dll
windows11-ltsc_2024-x64
1BusinessIn...ed.dll
windows10-2004-x64
1BusinessIn...ed.dll
windows11-ltsc_2024-x64
1BusinessIn...es.dll
windows10-2004-x64
1BusinessIn...es.dll
windows11-ltsc_2024-x64
1BusinessIn...hy.dll
windows10-2004-x64
1BusinessIn...hy.dll
windows11-ltsc_2024-x64
1BusinessIn...nt.dll
windows10-2004-x64
1BusinessIn...nt.dll
windows11-ltsc_2024-x64
6BusinessIn...te.dll
windows10-2004-x64
1BusinessIn...te.dll
windows11-ltsc_2024-x64
6BusinessIn...ns.dll
windows10-2004-x64
1BusinessIn...ns.dll
windows11-ltsc_2024-x64
6BusinessIn...ry.dll
windows10-2004-x64
1BusinessIn...ry.dll
windows11-ltsc_2024-x64
1BusinessIn...ns.dll
windows10-2004-x64
1BusinessIn...ns.dll
windows11-ltsc_2024-x64
6BusinessIn...ns.dll
windows10-2004-x64
1BusinessIn...ns.dll
windows11-ltsc_2024-x64
1BusinessIn...ns.dll
windows10-2004-x64
1BusinessIn...ns.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BusinessInsight-Agent-Package/Azure.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BusinessInsight-Agent-Package/Azure.Core.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
BusinessInsight-Agent-Package/Azure.Identity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
BusinessInsight-Agent-Package/Azure.Identity.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.cmd
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
BusinessInsight-Agent-Package/BusinessInsight.Agent.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
BusinessInsight-Agent-Package/BusinessInsight.Agent.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
Behavioral task
behavioral11
Sample
BusinessInsight-Agent-Package/BusinessInsight.Application.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
BusinessInsight-Agent-Package/BusinessInsight.Application.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
BusinessInsight-Agent-Package/BusinessInsight.Shared.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
BusinessInsight-Agent-Package/BusinessInsight.Shared.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
BusinessInsight-Agent-Package/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
BusinessInsight-Agent-Package/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
BusinessInsight-Agent-Package/Microsoft.Bcl.Cryptography.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
BusinessInsight-Agent-Package/Microsoft.Bcl.Cryptography.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
BusinessInsight-Agent-Package/Microsoft.Data.SqlClient.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
BusinessInsight-Agent-Package/Microsoft.Data.SqlClient.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral21
Sample
BusinessInsight-Agent-Package/Microsoft.Data.Sqlite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
BusinessInsight-Agent-Package/Microsoft.Data.Sqlite.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral23
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Abstractions.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral25
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Memory.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Memory.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral29
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Options.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
BusinessInsight-Agent-Package/Microsoft.Extensions.Options.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target BusinessInsight-Agent-Package.zip
- Size 24.2MB
- Sample260701-aj461scv4x
- SHA256 1053a1d63688bbb59896719f72e7b32715c7afcfbeab3ed4956ae00f066420dd
- MD5 ce4b5917e811a39b21b1da3e666af881
- SHA1 194b2eec52154a9d0f4d7d86852a0e0fb0287571
- SHA512 86e9a5065252ac05e5effac4cca37c74da72af6da5d5e00043e0d67a51fd6365cc80d4978251904febac956f2f11c3015b6a109c888e60b0e771321373cf7b21
- SSDEEP 786432:FPNl33KhNcK9LquQG+4y2gS6+IXnP514HhovYa+:tNR6Dc6qe+b+InPf4HKvYh
- TLSH T1A64733498BB53343C2898FB167EB1641A23A7770F2948A095EE874884D974DD59CF33F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack001/BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.dll unpack001/BusinessInsight-Agent-Package/BusinessInsight.Agent.dll unpack001/BusinessInsight-Agent-Package/BusinessInsight.Application.dll unpack001/BusinessInsight-Agent-Package/BusinessInsight.Shared.dll unpack001/BusinessInsight-Agent-Package/Npgsql.dll unpack001/BusinessInsight-Agent-Package/SQLitePCLRaw.batteries_v2.dll unpack001/BusinessInsight-Agent-Package/SQLitePCLRaw.core.dll unpack001/BusinessInsight-Agent-Package/SQLitePCLRaw.provider.e_sqlite3.dll unpack001/BusinessInsight-Agent-Package/runtimes/win-arm/native/e_sqlite3.dll unpack001/BusinessInsight-Agent-Package/runtimes/win-x64/native/e_sqlite3.dll unpack001/BusinessInsight-Agent-Package/runtimes/win-x86/native/e_sqlite3.dll
File Explorer
-
BusinessInsight-Agent-Package.zip.zip 24.2MB
-
BusinessInsight-Agent-Package/Azure.Core.dll.dll 427KB
-
BusinessInsight-Agent-Package/Azure.Identity.dll.dll 348KB
-
BusinessInsight-Agent-Package/BusinessInsight-al_badar_spinin-Agent-Onboarding.txt2KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.cmd.cmd .bat 488B
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.deps.json33KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.dll.exe 41KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.pdb20KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.runtimeconfig.json516B
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.deps.json38KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.dll.exe 78KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.pdb38KB
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.runtimeconfig.json488B
-
BusinessInsight-Agent-Package/BusinessInsight.Agent.staticwebassets.endpoints.json53B
-
BusinessInsight-Agent-Package/BusinessInsight.Application.dll.dll 45KB
-
BusinessInsight-Agent-Package/BusinessInsight.Application.pdb12KB
-
BusinessInsight-Agent-Package/BusinessInsight.Shared.dll.dll 54KB
-
BusinessInsight-Agent-Package/BusinessInsight.Shared.pdb27KB
-
BusinessInsight-Agent-Package/Microsoft.Bcl.AsyncInterfaces.dll.dll 18KB
-
BusinessInsight-Agent-Package/Microsoft.Bcl.Cryptography.dll.dll 16KB
-
BusinessInsight-Agent-Package/Microsoft.Data.SqlClient.dll.dll 908KB
-
BusinessInsight-Agent-Package/Microsoft.Data.Sqlite.dll.dll 173KB
-
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Abstractions.dll.dll 35KB
-
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Memory.dll.dll 47KB
-
BusinessInsight-Agent-Package/Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 64KB
-
BusinessInsight-Agent-Package/Microsoft.Extensions.Logging.Abstractions.dll.dll 65KB
-
BusinessInsight-Agent-Package/Microsoft.Extensions.Options.dll.dll 64KB
-
BusinessInsight-Agent-Package/Microsoft.Extensions.Primitives.dll.dll 44KB
-
BusinessInsight-Agent-Package/Microsoft.Identity.Client.Extensions.Msal.dll.dll 65KB
-
BusinessInsight-Agent-Package/Microsoft.Identity.Client.dll.dll 1004KB
-
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Abstractions.dll.dll 19KB
-
BusinessInsight-Agent-Package/Microsoft.IdentityModel.JsonWebTokens.dll.dll 134KB
-
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Logging.dll.dll 36KB
-
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll.dll 125KB
-
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Protocols.dll.dll 40KB
-
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Tokens.dll.dll 293KB
-
BusinessInsight-Agent-Package/Microsoft.SqlServer.Server.dll.dll 23KB
-
BusinessInsight-Agent-Package/MySqlConnector.dll.dll 856KB
-
BusinessInsight-Agent-Package/Npgsql.dll.dll 1.4MB
-
BusinessInsight-Agent-Package/Oracle.ManagedDataAccess.dll.dll 5.3MB
-
BusinessInsight-Agent-Package/README-Agent-Package.md4KB
-
BusinessInsight-Agent-Package/SQLitePCLRaw.batteries_v2.dll.dll 5KB
-
BusinessInsight-Agent-Package/SQLitePCLRaw.core.dll.dll 50KB
-
BusinessInsight-Agent-Package/SQLitePCLRaw.provider.e_sqlite3.dll.dll 36KB
-
BusinessInsight-Agent-Package/System.ClientModel.dll.dll 171KB
-
BusinessInsight-Agent-Package/System.Collections.Immutable.dll.dll 245KB
-
BusinessInsight-Agent-Package/System.Configuration.ConfigurationManager.dll.dll 432KB
-
BusinessInsight-Agent-Package/System.Data.Odbc.dll.dll 99KB
-
BusinessInsight-Agent-Package/System.Diagnostics.EventLog.dll.dll 52KB
-
BusinessInsight-Agent-Package/System.Diagnostics.PerformanceCounter.dll.dll 50KB
-
BusinessInsight-Agent-Package/System.DirectoryServices.Protocols.dll.dll 71KB
-
BusinessInsight-Agent-Package/System.IdentityModel.Tokens.Jwt.dll.dll 86KB
-
BusinessInsight-Agent-Package/System.Memory.Data.dll.dll 29KB
-
BusinessInsight-Agent-Package/System.Security.Cryptography.Pkcs.dll.dll 259KB
-
BusinessInsight-Agent-Package/System.Security.Cryptography.ProtectedData.dll.dll 37KB
-
BusinessInsight-Agent-Package/appsettings.json969B
-
BusinessInsight-Agent-Package/cs/Microsoft.Data.SqlClient.resources.dll.dll 251KB
-
BusinessInsight-Agent-Package/de/Microsoft.Data.SqlClient.resources.dll.dll 261KB
-
BusinessInsight-Agent-Package/es/Microsoft.Data.SqlClient.resources.dll.dll 253KB
-
BusinessInsight-Agent-Package/fr/Microsoft.Data.SqlClient.resources.dll.dll 262KB
-
BusinessInsight-Agent-Package/it/Microsoft.Data.SqlClient.resources.dll.dll 254KB
-
BusinessInsight-Agent-Package/ja/Microsoft.Data.SqlClient.resources.dll.dll 282KB
-
BusinessInsight-Agent-Package/ko/Microsoft.Data.SqlClient.resources.dll.dll 261KB
-
BusinessInsight-Agent-Package/pl/Microsoft.Data.SqlClient.resources.dll.dll 260KB
-
BusinessInsight-Agent-Package/pt-BR/Microsoft.Data.SqlClient.resources.dll.dll 249KB
-
BusinessInsight-Agent-Package/ru/Microsoft.Data.SqlClient.resources.dll.dll 336KB
-
BusinessInsight-Agent-Package/runtimes/browser-wasm/nativeassets/net9.0/e_sqlite3.a1.1MB
-
BusinessInsight-Agent-Package/runtimes/linux-arm/native/libe_sqlite3.so.elf 872KB
-
BusinessInsight-Agent-Package/runtimes/linux-arm64/native/libe_sqlite3.so.elf 1.3MB
-
BusinessInsight-Agent-Package/runtimes/linux-armel/native/libe_sqlite3.so.elf 1.2MB
-
BusinessInsight-Agent-Package/runtimes/linux-mips64/native/libe_sqlite3.so.elf 1.5MB
-
BusinessInsight-Agent-Package/runtimes/linux-musl-arm/native/libe_sqlite3.so.elf 1.2MB
-
BusinessInsight-Agent-Package/runtimes/linux-musl-arm64/native/libe_sqlite3.so.elf 1.3MB
-
BusinessInsight-Agent-Package/runtimes/linux-musl-riscv64/native/libe_sqlite3.so.elf 919KB
-
BusinessInsight-Agent-Package/runtimes/linux-musl-s390x/native/libe_sqlite3.so.elf 1.5MB
-
BusinessInsight-Agent-Package/runtimes/linux-musl-x64/native/libe_sqlite3.so.elf 1.3MB
-
BusinessInsight-Agent-Package/runtimes/linux-ppc64le/native/libe_sqlite3.so.elf 1.6MB
-
BusinessInsight-Agent-Package/runtimes/linux-riscv64/native/libe_sqlite3.so.elf 933KB
-
BusinessInsight-Agent-Package/runtimes/linux-s390x/native/libe_sqlite3.so.elf 1.4MB
-
BusinessInsight-Agent-Package/runtimes/linux-x64/native/libe_sqlite3.so.elf 1.3MB
-
BusinessInsight-Agent-Package/runtimes/linux-x86/native/libe_sqlite3.so.elf 1.4MB
-
BusinessInsight-Agent-Package/runtimes/linux/lib/net8.0/System.DirectoryServices.Protocols.dll.dll 176KB
-
BusinessInsight-Agent-Package/runtimes/maccatalyst-arm64/native/libe_sqlite3.dylib.dylib 1.5MB
-
BusinessInsight-Agent-Package/runtimes/maccatalyst-x64/native/libe_sqlite3.dylib.dylib 1.5MB
-
BusinessInsight-Agent-Package/runtimes/osx-arm64/native/libe_sqlite3.dylib.dylib 1.5MB
-
BusinessInsight-Agent-Package/runtimes/osx-x64/native/libe_sqlite3.dylib.dylib 1.5MB
-
BusinessInsight-Agent-Package/runtimes/osx/lib/net8.0/System.DirectoryServices.Protocols.dll.dll 177KB
-
BusinessInsight-Agent-Package/runtimes/unix/lib/net9.0/Microsoft.Data.SqlClient.dll.dll 2.0MB
-
BusinessInsight-Agent-Package/runtimes/unix/lib/net9.0/System.Data.Odbc.dll.dll 289KB
-
BusinessInsight-Agent-Package/runtimes/win-arm/native/e_sqlite3.dll.dll 1.2MB
-
BusinessInsight-Agent-Package/runtimes/win-arm64/native/Microsoft.Data.SqlClient.SNI.dll539KB
-
BusinessInsight-Agent-Package/runtimes/win-arm64/native/e_sqlite3.dll1.5MB
-
BusinessInsight-Agent-Package/runtimes/win-x64/native/Microsoft.Data.SqlClient.SNI.dll.dll 553KB
-
BusinessInsight-Agent-Package/runtimes/win-x64/native/e_sqlite3.dll.dll 1.7MB
-
BusinessInsight-Agent-Package/runtimes/win-x86/native/Microsoft.Data.SqlClient.SNI.dll.dll 466KB
-
BusinessInsight-Agent-Package/runtimes/win-x86/native/e_sqlite3.dll.dll 1.4MB
-
BusinessInsight-Agent-Package/runtimes/win/lib/net8.0/System.Diagnostics.PerformanceCounter.dll.dll 131KB
-
BusinessInsight-Agent-Package/runtimes/win/lib/net8.0/System.DirectoryServices.Protocols.dll.dll 172KB
-
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/Microsoft.Data.SqlClient.dll.dll 2.1MB
-
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/System.Data.Odbc.dll.dll 290KB
-
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/System.Diagnostics.EventLog.dll.dll 170KB
-
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/System.Security.Cryptography.Pkcs.dll.dll 311KB
-
BusinessInsight-Agent-Package/tr/Microsoft.Data.SqlClient.resources.dll.dll 244KB
-
BusinessInsight-Agent-Package/web.config507B
-
BusinessInsight-Agent-Package/zh-Hans/Microsoft.Data.SqlClient.resources.dll.dll 220KB
-
BusinessInsight-Agent-Package/zh-Hant/Microsoft.Data.SqlClient.resources.dll.dll 224KB
BusinessInsight-Agent-Package/Azure.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 224d09cb39eae4d8c30272a0c49beb19d873c87347eae9487f0ddd859d752b56
- MD5 f97d69848c1fc36ce431b8cd4c9e1dd0
- SHA1 4de0299ee65815c2462e10646c63a26864a5ed40
- SHA512 f187ace9cc2986ea52bc0794da2a1fe1918546948a6d865f69de704b085b13629368b50874ffd87f450ff6caf62217a94ec1489afd8dbfa08b2bcdbf2dd70d9d
- SSDEEP 6144:bFImTo5WDhHcnM5C9+ZMeAWz4GdOtzfiTXp:pImTaYHIM5CoM/WOtzfiTXp
- TLSH T18D947D2223B84B25DADF17F5F870A8D54772F406A55AE34F5908A9FD2C877828D20F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3d:eb:69:aa:28:20:b3:d4:30:35:d4:61:9a:05:4b:43:2d:79:6d:0c:7d:af:f7:2b:4d:6e:1c:fc:51:b1:7c:a0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 15, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:04:6c:74:06:ff:57:2b:27:72:00:00:00:00:04:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
432194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Azure.Core/Release/net8.0/Azure.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
414KB
Virtual Size
414KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Azure.Identity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 af18f20be25b2895c912f3ba0a9f2901a82dda823edcad76e6a19eac9886a40f
- MD5 e9e32512adfc7b59a93e906a8db6f3e6
- SHA1 529a19e1e536a4b17c1a7c281f2858a58cb4d8ae
- SHA512 8f68928f0cce510e03bd7ad6d0a41b79f7f658450a700bbcede05d9270faace47d1624957549cfa4de3f7bb2ecc97a3bee47278d71d16b0e561772bc1e0a24e7
- SSDEEP 6144:/40xIPH7WiQe4DGv3tMtS2FjPEqkRRalkcPG+HHm:/c7iTDGv3kxxPgIlpG
- TLSH T10974294023E88729F9FF6BB8F5B0559586B3B94AADBAE39D051C94DF1812B81CC50373
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:0a:d0:c9:cb:ac:44:75:58:b6:c9:42:18:30:e3:09:7e:27:cf:8c:45:53:86:d7:37:7b:b5:2a:76:ef:de:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 11, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:08:78:9d:58:5d:92:c7:d9:52:00:01:00:00:02:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
351738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Azure.Identity/Release/net8.0/Azure.Identity.pdb
mscoree
_CorDllMain
Name
.text
Size
336KB
Virtual Size
335KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/BusinessInsight-al_badar_spinin-Agent-Onboarding.txt
- SHA256 4139cca0191720666a3401464f042ca357597c4e4caad08d11784bef0e609250
- MD5 b986f08ce6ffb64de76885add9edbf39
- SHA1 796cd6be4daf950be92f96d393099b2644b8ac65
- SHA512 487350d195c6695ef8e48b0b026db75f89b16189dcf14f6ed041b9f673bf3fc0e04b87be8308ab1329b3cc0660b3e86874c3ecc23ca3d434836c3da742125876
- TLSH T1B45124136F45D3711611DBC67A4C34D0D518E214125A3D3969B4C354075C79EF3BF6EA
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.cmd
- SHA256 ae205a06fbd73839eff9c7901b74cdb2cb3ec51d7900ead81bd1969efba34299
- MD5 18add3aacfa4f7ce5cb17a47ca35fe88
- SHA1 647cd05916d9d63f1add8bd9277fd195108e6487
- SHA512 22ff887e85a60c325664db7e8598e48927b6c00598a9a2a7aacb6e056722b12bde797288bdda990f4d2e0432cbd1c4996d0dae7da6801acd109f9af6256261a1
- TLSH T138F059446F17BC3393747E582A08A495F032C3D73329AAD83308844A4B7E09B99CC3E8
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.deps.json
- SHA256 e89b758282b614ac1f307a9ea96e8778bf2238c63a5ebaa13606dc8721580711
- MD5 0b46359a41da6925b270304a57cea352
- SHA1 2ef3864815ee3462664dae8eb1e9213a229dff1a
- SHA512 53d796c0404d05594d0c866e709fc4a073238030255d3227fe69d4e88b04e2f1b8c5342ecddcea1cf3a812aa9f0225757b0a4ed0b193b04b44b82c1fcfc72c65
- SSDEEP 384:pS/7UMwOYnLA1YQYz73dxgzrpji7VQk6UwC:pM7UMwOYLA1YQYzwzdnC
- TLSH T11DE2AB26E9504E3751B1B7A6E87806C1F229032F91005D4BB8FC295D8F77F9B6196F38
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ce330c34637d96216f21b468ce8f43567f70a2edf1f5d06a906581e98afb3ce7
- MD5 161372587bf31320744a943d77d62a31
- SHA1 4d4cd6ea8419e93f42ae7934ae0aa7ba5cdfc2bf
- SHA512 3623b64535d2ab59ed34c3b7bcc0ad4ef82d224fd5eaa6bb0bbd89e293cb6a579310ba21ba7bfebfd549f1ba60ed6b454d0ca0c9a0fc70c77a93969be235d12a
- SSDEEP 768:22rMEjBlPTwdIc9gsz2zLIUXqhMJNTJbxE:BM+jsyHIU6hMJtJbxE
- TLSH T1BC13190037FC8A17E63F2F39657491438A71BE2A6A21E75D1D4DA0EC19B2B40E931B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46882
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\BusinessInsight\src\Agent\BusinessInsight.Agent.Setup\obj\Release\net9.0-windows\BusinessInsight.Agent.Setup.pdb
mscoree
_CorExeMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.pdb
- SHA256 1e2b9408b6cbd38310b6cd3415987eabf02931b93a240bdb3af4540dc69d643c
- MD5 da93b049961fac08e7447181bfef2a85
- SHA1 83a1e61a0bdf880efcaa2ba03b338bbce20b8809
- SHA512 bbf35d6939345669ccf19c7c09168971377dbbbf1071b3ac1df425a27995684756ba7ddffce1db5e591d8ac2525d8a719bccf96f3f2e1d7dae0194059789df18
- SSDEEP 384:h3KO/PQPZ5VjxQPPdivXpF76cXCadF/LKoeasqrns37OVtZfosL4X6+HvfDFDuy7:ddHQPZSPc/lXnmEgs4W8r
- TLSH T12D9218379349D622C141A5B29823C68D33B48311A741EF79F6C8B545EEEF7984BFA270
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.Setup.runtimeconfig.json
- SHA256 05917b409d59af31bc8d3021bc06302a0c21c7d05b449603d6cc9f0301a2b66c
- MD5 6cc5992b5f24e3ff259ff61441f0bce9
- SHA1 98e9fecdc80c90f6d250b9afca50eab4c4c0151b
- SHA512 64b9612846b342fd254c439be1833b4fde0e7bcea5979879d333b54a7633a9936df65639101ddb28023a3877f9a4dd1cbde29b2dfe79538bec48cc4a8aecb377
- TLSH T150F02069CA106DA704B937BAC63AC182FB30573B00041D92B9FC080C2F77DB22212F89
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.deps.json
- SHA256 c65b4c0f34f7e039f0a677f306bb8c521e785f2205fe361175b4fefd0946d2fc
- MD5 d5fd8945c31c14293bcf19c406284dab
- SHA1 aff7e8cb587963f9c92ccb1d27df83a5101e5381
- SHA512 f6da12faa73ade464c2852e311eccaa17ca1eda9852b343b58863d6bf8be8a3454541336f726941c9b01bdd2dfa043bdafdb880c152c51214a7e566bb487435d
- SSDEEP 384:pboQ7UMwOYotA1YQYE73dxOTv7YHX8NEPpji7VQk6UDvCn:pJ7UMwOYCA1YQYEW7YHMNEx4Cn
- TLSH T1E903CC26EA504E7701B2B7A6E47846C1F235032FA1005D4FB8FC295D8F77E9A6196F38
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 550926327d0fe1934cc302ff6a3b8d32b86eae10d5eb03fabc8523b85a13d273
- MD5 489443349dcda27ba756571105328694
- SHA1 27b1622acf3ba6518a13b41f1d34430003a87568
- SHA512 ec66abc103e7dd62f7d0939d28cfe58178918afd00ec0f83debcd0c1afd7c05b34212a67569461c8a4d80f4818b168bb0ad7884741ed0be8a1fecd6f46afb513
- SSDEEP 1536:QbAcDn4ydUmb5fMaVbxA1Sh6DSDuTBmuJ36+Fk554byu7DkKDYG:ud4ydUmtfVVSrNNRO/4jDH
- TLSH T1E773F94063FC8F22EBBF2FBDA8B545550732FA225865EB4C18CC55DD18B27D049623AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\BusinessInsight\src\Agent\BusinessInsight.Agent\obj\Release\net9.0\BusinessInsight.Agent.pdb
mscoree
_CorExeMain
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/BusinessInsight.Agent.pdb
- SHA256 87da3ab2f800d708f6365b9575d7f73aff48c024b59f294b805476214d3d38f1
- MD5 87b1b537ee57005aa8d40e8149864fb8
- SHA1 7656e995426ba308804352d64fc3cf8c9a5482b7
- SHA512 2614c530da7119170832c2d8b65565085fd89f216506e339289452329d868acc2c13c2747d3bb331bafc82a1aeecac453d47d5aa12be9fdb4e0c89ba623bbd49
- SSDEEP 768:yd325JmIAYD50QDxMXkehAmmQO6aZl6DgsEppke:63cmIAvX7yhsEXke
- TLSH T15D03A467C345E157C59125B2E8129E4DBB3883932305EF36F18FA3649CAFBC486B3265
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.runtimeconfig.json
- SHA256 4044375fcab816ed4ec7938f8e825f2292205adc48892551d70347857eab0226
- MD5 a1572136b280623c4252f8534b93afca
- SHA1 ef14774c759bf07101daaf3de3465ac84f52d32e
- SHA512 9e008b451bff77b09eaa8e5524b758af7bac4696c5bb9e8b6d3e25a4b7ee740fbc25bf3bb2ac7a6b1c735fb51c0125e54879e0c182f859aa9ba684d08a3c99a1
- TLSH T195F0A069CE006CA705F976BAC521D182FA30132700005C5675FC040C2F77EA61222F56
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/BusinessInsight.Agent.staticwebassets.endpoints.json
- SHA256 c1686417e8d5c31bba969f12b6f3d2b35e6609adb5ca42f212261a3a02771aac
- MD5 c257f74d704f9d4fdd2c1313d6fd7a72
- SHA1 0a8ab028fd7712a07801c5969fed6a63aab5ba24
- SHA512 9c32c6c3d6e708d797a9ec6d159c924385124eecdd5e1a8cd49284ef2297f114aa177305b806bf6edc58c833ecad947b77cb9546da8076a0db8216ce733250ee
- TLSH T1F99002852545549115184330689E511266B5814044A507582BD412D8226852A4F72261
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/BusinessInsight.Application.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d16c4fa399f4f6e6ee5b525f471ea520bf44be47044d17f918466ef8bdedb62e
- MD5 8bfb46257c5e7688acdf7907547b6c55
- SHA1 e6fc3731349cff376944fdbddcaf26d1d804e206
- SHA512 db5e381e4ce3963db685d25fc498dc96a329cd7f3d366a10207bdf1270d8f84d73662487ddb4020bb33b8db8fd9b194479e83c44a0a18b748f51099cf1fbf37e
- SSDEEP 768:P2VVvw4VP4Tqp4MtHSlnrNCZkkPTNLmq+x98BTujNcFtDlpIx0:P2VVhVYEyln5CZkkPTNLmq+x98BTujNQ
- TLSH T1FB236004B3FE0364F9B7B7B55FF58020453AFB69AA36D65D0850428E4871E42AE62F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\BusinessInsight\src\Core\BusinessInsight.Application\obj\Release\net9.0\BusinessInsight.Application.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/BusinessInsight.Application.pdb
- SHA256 ecda803a1bbfa5793e088eb5af6414e92d0d18249e52880f9b0bc5009320fe60
- MD5 9662ca8cf5e0fc445aff847614d6bbec
- SHA1 7608ff1b366db56ffd900cfeb39b468f6f48ce23
- SHA512 c8d9213e9ee8689e1923daf8027ce9528047b6a2fbca140a825cba1c0f77e8b0c1b1fe6add67d96a73a61e44a41e8f96760202d51624ba6d191f014b67a5e2da
- SSDEEP 384:Jo/qdYF76cCCadF/LKoesqOX+jfYs0X6+HvfDFDuyth/ucB:JQe+gsgt
- TLSH T1B642D577A75CE265C58619B24A22C0CD377483203355EE78F2C82A44EEBF68E47F6671
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/BusinessInsight.Shared.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d3feff9076f38c082d901065feb6a390f5241953bc88fb44fdac440e137906fc
- MD5 2e97068cdc2ae793dc5c353f3e355c8b
- SHA1 7dd96d6ba671c2ea4e0b4d692ba13da9b0f05313
- SHA512 1777757782f50832bed223ad99751276f11534be1a8be356ba209114fe25637343c4a80f3c94f71fba433c9abcbc4fea879fb040dcd57b1a816befb53f64aa69
- SSDEEP 768:8EHOwVmRzAINrze8H4vGoHQL5u72U7d+w8B6q31Hrp/+/B:8EHXVq9Yeowu3zpq3lrp/+/B
- TLSH T1A5436625726CC3ADC75E0AF4F4204B361372A2AA3511EEF5C790FC8A3F7275662125B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\BusinessInsight\src\Shared\BusinessInsight.Shared\obj\Release\net9.0\BusinessInsight.Shared.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/BusinessInsight.Shared.pdb
- SHA256 588d668d24f6a60af19a38fc34362afc2c75c12f620dfd798c85b29c25af6d9b
- MD5 62c357ce5130770cc8e68847c6cd54a8
- SHA1 3747497e7f36a05535e8345e636b2848f9c19c5d
- SHA512 df97155d450f3aa5e4fd7d00321ae25c069d2e9846ab5f138c926fdd41328b84d65bcbc8fb0c8c419827ecd8fcbd9f382ea3e8903cf78f176fe48c4322492449
- SSDEEP 384:iM+G5aUvLtlAdh3QIoQCKYF76cCCadF/LKoesqOX+jfYs0X6+HvfDFDuythvRuct:iM+G5xa3ye+gsgv0FnWzhz
- TLSH T11BC2DB6B93058B1AC6E245F6452387A8A330C750FA039BBBA2847534DDAE3D50F771F9
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 136d5965cf4768e8420b547a8bddea882921f426c371833d558a858a2f0c235a
- MD5 b984be2a4fc05e9f83e7446b4455806d
- SHA1 3a9cd4a322a8f91e67552a87b079a4652805848a
- SHA512 d0200ffceb4f850db6a7b3e1d7aab6b996ae8f26971472eca3e80d0ab4c763ff13f628a48c1ce02bb9d695a90986f872b81932ee8b7aa45b5cdf67080bb55b71
- SSDEEP 384:JbZwqhkB49n5q1WeP/WuTb2HRN7IPsWAR9zgX2iKdTS:FkBT5/iIkL9zRiKE
- TLSH T1B0825A62D7AC8207DCB62FB0E975D5123D39BBD26C22E56E0589E1460C93B81DB3533E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d1:cb:37:a4:5f:de:7f:72:82:b4:b6:5b:b2:cf:27:16:79:de:7d:09:ab:67:5b:f7:d7:a8:4c:82:61:8c:e8:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
13682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/netstandard2.1/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Bcl.Cryptography.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 009a27b8e3093fdd2960bba63e4acd48eab05c4f8f8a6d9fe8c24b4657f44c4f
- MD5 170ebbc0f639923b9c117918ee85fd8f
- SHA1 6f90c93d28bebc7ca9f12fa18fa32269f4038f99
- SHA512 6aa46b6ddd66fe7277b6beb5ae18374405b77f6db36c4c72fe69b07049cecaca1695a08c26767f30f2b1f5dec3f11a25b9260d4d3c773e314d5ab7ce5689e0b3
- SSDEEP 192:w4J7yhmNQOiyGs8WhSpW2ppWKNA/F5+MHnhWgN7aIWjm2WvpGX01k9z3ACQ1XaXy:wW98WhSpW2ppwnHRN7MmrpGR9z/QIC
- TLSH T1E2724CA5D7B88203EE7A5E7097B9D8433D3C63C26912892E1696F2451C637D9DB3032E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2b:83:25:a3:43:2e:b7:b0:2c:5a:db:b8:0e:34:2a:48:2e:0d:ea:e5:7a:c4:7c:13:1c:1a:b4:50:db:a7:99:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2D1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fd:73:f9:68:5a:cd:0c:61:ed:00:01:00:00:01:fd
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.Cryptography/Release/net9.0/Microsoft.Bcl.Cryptography.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Data.SqlClient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a34e2fa3479b1508dbc20fbeb2c9172f18c3868bdb147a185213a446645b400
- MD5 d2219a8d6f1f65524c2cafea1fd6b94e
- SHA1 d8ee45b49f4fd53fc78a98de6079295b95838b2a
- SHA512 0744d745229a282a53fdf4216629f0c82ac73a7db1f3aa0a6b44a40c625b3530f70845b2f5bb44d6e5fdaa85e2c64151c1e534703b2d8b946da60105b263f5eb
- SSDEEP 24576:GwwljyiS+wrjSn68fVEbiBg7g5EJeGlYeRCEEuaVvp7gmn6GjiLQUg6BV0fHgwgW:Ay0nLf2iBg7g5EJeGlYeRCEEuaVvp7gY
- TLSH T13B152E1267F8266CF2F73B607A7911244E3A7DE67A39D25E3548404F0A72E509DB2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ef:94:a8:70:1e:56:25:0a:e2:5a:48:46:d0:6a:dc:10:24:28:ea:a7:66:d9:ef:ef:4a:8a:26:4e:6d:f1:c8:21
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:03:bb:1e:5c:00:38:6c:74:ca:00:01:00:00:02:03
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
924714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/Project/obj/Release.AnyCPU/Microsoft.Data.SqlClient/netcore/net9.0/Microsoft.Data.SqlClient.pdb
mscoree
_CorDllMain
Name
.text
Size
895KB
Virtual Size
895KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Data.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ffa9156ebb9332bc53196cde2e62997447ad046629216be555e07d5d65f6c19
- MD5 803fb44bcf3e488c9fbaac4933d729bb
- SHA1 2f9d613cc53944e912ede7a1214d87554e30394f
- SHA512 569041a3b05cf1bd548ff2c767a48d4c30c9be9a3e11c4407714d1ae1928f817d1a15cdc08fed40c0fbbda78ee3ac4f9ad443be43744647507bc7f6caefb8afd
- SSDEEP 3072:5Po1U7KHI/FRmHsGP8vrzqWLvVtly65GBSilr7DSILSAQSIgdG8CmST:9omLmHsGPKGWhrZ543Iv8Ch
- TLSH T16B0449B4135C6543C7FFCE32B0B96C820734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:02:1e:e2:4b:25:96:4d:22:d6:37:2c:a6:7a:a1:4d:68:84:11:12:5e:49:84:a9:20:81:2c:21:dd:c5:97:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1d:4d:19:c8:4e:d7:0f:57:48:00:00:00:00:02:1d
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:24:3b:84:21:b0:2c:ac:64:22:00:01:00:00:02:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
172314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/efcore/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net8.0/Microsoft.Data.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 001baee94c7cac0cac5b4a49accce3a1e9d21053ea99abe42f871710d96640ad
- MD5 bee0fda5b6a5ab8695f993ed558496d5
- SHA1 7341c43c8be2ba933b3a00e64ec14a6bbe6563a2
- SHA512 93c038aede7dff93ff10dbd1046314cbe80f8061f8bff7773d28fe3bf49eb4678691b4b479919aeb00d8f38176860e6056c7cb3cafc81b5bb2b23bb9a1f0768d
- SSDEEP 768:sOcLs0yZ/0f8eMrnKIJGTQ9nM3k+DKGjQtaKio9zg:sOB0zf8eMrnKlTQ9nM3k+DKYQczgzg
- TLSH T10AF26C4443B88323DCEE2A79F9F2C5924A76EB463021EB2A1D5CD0DD0D5778D86B0B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7f:bc:d9:cf:15:e7:13:d0:3a:31:65:59:e5:47:0e:f7:32:40:59:ea:5d:d1:0f:b4:b8:15:44:96:56:74:b5:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
31030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Caching.Abstractions/Release/net9.0/Microsoft.Extensions.Caching.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Extensions.Caching.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2205b4ce4ca238a3d36ab36cd312d59e5189c581c5f5af5775b9853150cb871
- MD5 a9aeb8731fac880833b5501efec48026
- SHA1 be62432ee67fba79d2b191107d78d37969a5cb69
- SHA512 a20759f1cd4220d7439e51b7dfa66cda164cfa76eb7a10ad70b7e63cec165e53f1904d2baddb0455422cea036a1d5ce17f069599071325b351dd8d3f861d3893
- SSDEEP 768:bP8LCJxCRf9ZuE+udsPpOMJYDsN4iKejoXmjQtaUMK9z1sq:b3zCdj+udWpvJt4iKhX4QcYzSq
- TLSH T1F0234B0057AC4323DEFF0A7599E4A5641BB9D7837802FF6A1D8DE19A0C537C18A2363B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
76:e7:8a:27:59:32:e8:c2:9b:0a:ad:c2:5d:6c:93:65:24:e4:02:ca:01:3f:ec:d0:75:05:16:31:56:2a:d9:a6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fc:18:a0:af:cc:69:5a:87:3a:00:01:00:00:01:fc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
43530
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Caching.Memory/Release/net9.0/Microsoft.Extensions.Caching.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 190142694ee938f5ecd88edb959238968e68cf976a80a6e65ddd488af49f7442
- MD5 572f1e59e51f42fcce45849b49b9d895
- SHA1 1579c85859d0333e876b7ddfea2fd4bd13d36390
- SHA512 c35120a59c4ee3ab0577dcc00ea1ad01c3c283b6f8d25aa3ec803cb4f39af24362db665cebcc7a49d6d3d218a9b71cfc3eff0b335effa00ea85a2baf00c436f7
- SSDEEP 1536:UJb2eM8jJR5f7NlcQi6qim5OLCO8j5XAdkzf:UHlVHW4COs5lj
- TLSH T1D8535D5433F8B62ADBBF5B30517191209B38AF477412FB0E796AD0E8088AFCC59519F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b4:d1:99:01:d4:2c:1e:84:23:4c:42:06:d2:ad:d8:e0:18:9b:e8:cf:d5:3e:89:c6:e6:47:b4:ac:64:29:4b:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
60410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/Release/net9.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Extensions.Logging.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8422575f5591b25a70f4d32a606c0997fe3b0d0348a814ce6e51547b5446da6
- MD5 9232751df48509234134efc16f2fb202
- SHA1 8873571c1dcbfebbcaaa8cca81a560f75a063034
- SHA512 d2cb1900740aacbb7c3099524fa9344f3a8792c622a8cb572055aca5f735059a9c7b046c77bd349d3945d4899773bcc9484c7aa8f197b7bfc429ad2ce454a128
- SSDEEP 768:e5DSfPFlAQynOLmIWHjsMoc5Z9p+T0NFb3GBgx+uUdMDXJIPiYs3L9hspDCwY8Sw:esFlDdcX+PBAUOD6PJoQQclgzy5N
- TLSH T1B3637B10BFEC4333CBAE4DB9E4A46A126B35D2933207E34B7DC8E1592857BC45A60779
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
02:0d:da:08:e7:ca:52:ec:59:c4:38:ca:83:86:38:8c:02:ef:50:e4:7f:52:17:74:d8:19:f3:6c:0a:62:b7:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
61774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/Release/net9.0/Microsoft.Extensions.Logging.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Extensions.Options.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cee3a3432a2e7e0328d49cba4bfa57d81ca05b0b14826cefbcf6b1984153e1ad
- MD5 e82f5bc32635561175c75dbffefc1255
- SHA1 e355976a48b93325a49b20672b78662abf2cb323
- SHA512 5e94b8a5b15d0a24e92174632dbbe15cbf2e730e9cd122c12ef25c3ee9f4d047d8e298224e835d076b6083e066bc11aeb41d9ce7fca6848dfefe106a815da3bf
- SSDEEP 1536:yPJGeDpvU0KQPTBzdXAdiW/1b/pOdgBfMXKgzv:XelvU0BM1b/EdkMhr
- TLSH T144535C1297AC9322DEEF4972F0B4E46E0F35D74B7447BB6B82DCF1A419A33804961639
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
72:cf:63:50:f9:f5:3b:2b:cb:08:d3:f3:e6:0d:9f:0f:c9:52:96:94:fd:63:02:61:be:3e:00:1a:2f:a9:25:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
61158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Options/Release/net9.0/Microsoft.Extensions.Options.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Extensions.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e84ec5f6625612d65c9d91914f8ceaf4e7fa8896c98c0f66f15a59ff9c6b0984
- MD5 524374d78f606f34ed14c3d5758a03a3
- SHA1 7beae22ab8a2a1e2998bf1272416b7629b7d4c1e
- SHA512 1c7fd86c4451e1e9ec35fcff364478af80892518cb41162e89788ba9ecb858faf2e7168b69568476ca52248f0e8f48a201615e47d8a37c52f4f12269d1fbc5e0
- SSDEEP 768:DipZy7/jRFQLfvg0JHVax/sfDFOkytW58cZM7uiXKvTDNKjQta0K9z1A:GMjjcLfjsxELFOkytVc67uiXKvFMQcDm
- TLSH T161135B51A3AC8337CEFE1D35B4F4D1550A3897AAB552EB5F42C890A16D633C05B2262F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
04:3b:e6:67:94:c2:2b:f3:fa:41:13:f5:14:f4:26:0c:8c:07:7a:67:91:0e:b8:0f:3a:55:8d:ec:9c:8c:6b:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fc:18:a0:af:cc:69:5a:87:3a:00:01:00:00:01:fc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
39422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Primitives/Release/net9.0/Microsoft.Extensions.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Identity.Client.Extensions.Msal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c1f736b16cacd318afe07d3b9d707a4b4b56def5e403b0aff471c1af413aaf0
- MD5 5bae973861367dfe5c0ecf6fe381c656
- SHA1 526dc23c7f9e5688d855cc1912ccd97c0192c7e5
- SHA512 16573227ef7506c520230df4c26340e6595230ed35586232df74612488200607ee80e9681a93680876f2fbfd06b09b5a3889f57c697714bb0a676eb2acd2b225
- SSDEEP 1536:s5RWQsAmdWWfJcC73IcYrD4pOYbGQdbcARWCtkxQzR:IWNJ1zYrI3bGQ2wW0rV
- TLSH T16453098063ED5226F5FF6FB8E9B0A4100F71F997A931DA5D1685509E1833BC08E20BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:4d:38:ae:e7:c2:ef:1f:c4:b6:50:ef:0f:95:5a:5e:46:08:dc:10:42:12:f5:43:fa:2d:e5:f7:db:61:15:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:04:6c:74:06:ff:57:2b:27:72:00:00:00:00:04:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2D1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fd:73:f9:68:5a:cd:0c:61:ed:00:01:00:00:01:fd
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
61538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/client/Microsoft.Identity.Client.Extensions.Msal/obj/Release/net8.0/Microsoft.Identity.Client.Extensions.Msal.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.Identity.Client.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 10d59df4170053ea9597e3c20adc9607ad17318ad5d8747eda3d930a5a4b463a
- MD5 6e308cd0f336e2864022d996ad2bbb03
- SHA1 022955442279e93b81828832ad18dcbcda85a418
- SHA512 97a167c029548daa51a9044c8d6b075f2e0264c76bb33d321b5b7cdb805dc7e66d9b3483f60fc26a3a4055c52dc6cff8cb06e299e903244f7e217d14e8d6c0c4
- SSDEEP 12288:GEcO4eA1U7vr9s6JxDEgn681+L/WTJxMind6LG5Oi/xnTHZjqwWgla:Jxd7v+4x4JeTJxMXG5ZnzZjqwWgA
- TLSH T1EC25F71233F84725E5FF2B39A5B405584ABAFC43AF36E74C1608699D0D72B808E647B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
58:da:d0:5e:f1:72:b9:44:33:26:63:39:db:03:64:74:ce:75:66:d3:09:a7:3b:f4:da:97:5f:2a:a7:e6:58:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0c:b9:64:e3:35:9c:ec:f4:ae:00:01:00:00:02:0c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
1022582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/client/Microsoft.Identity.Client/obj/Release/net8.0/Microsoft.Identity.Client.pdb
mscoree
_CorDllMain
Name
.text
Size
991KB
Virtual Size
990KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27af0812016ee6bb9a22beef2b8697a9d1eda96913f11335878458fff79a717f
- MD5 fbe7bb00d37f31fd57f6484be15d2980
- SHA1 3ab4fef0bf936b07bee4aed31ce04c9d5f48b06e
- SHA512 72e1b44d71fc656871753a8d85b4ae95b198b330905c0816e3d32a9dcf8663a2ce55b055842d7feb630350dd2c4e7e86101d3ba30556518573c8dfacf90f3391
- SSDEEP 384:725zb5HdY+1SbVjOzWdIoWm/2HRN7vyWCRxB+R9z/f0:7uzF93yVjAKivyWCRxw9z30
- TLSH T129925B5587ACC653ECE71B30A2AAE9471D39B3C6DC10C56B0698F50A1C237D49F7163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e3:e6:6b:40:37:99:de:77:a5:27:d4:ed:7b:61:d0:2a:be:3b:ca:32:30:8c:e6:2b:a1:39:30:e5:9b:2b:d7:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ef:89:3f:56:a1:58:cc:a8:da:00:01:00:00:01:ef
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
14434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net8.0/Microsoft.IdentityModel.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.IdentityModel.JsonWebTokens.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6add69ec50664469f739c527fb74c37fbffa072c36e889d91e058faa64542b1
- MD5 88f1e523217fb9c807f4680c3cab5f6b
- SHA1 21ed1facecec58089a0a60a1c9a877410fd3f970
- SHA512 4c0fcddce6ac965011e6bead10e4635c57b908bb3996d482a2708d647826fdd7612e2d4dbedb22bd86bdc34379cb753a604733139a5c032a4a1a3cd97f4501ff
- SSDEEP 3072:QNoKLFZPQcLNwWYfP0y7x/k/N9XNEgfpXaXr0iMJgBGILkDzVZl0+88niFF2G5mh:QNHLmJ/kZa3c
- TLSH T1DBD3294077FC9709F5FF6F3E68B160150E7ABE566878D74D19A0969E0832F808A20B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
16:a6:02:e6:3e:5b:09:58:1f:d7:fb:3d:1f:a6:18:e6:9e:ca:92:b1:b9:66:14:bc:5c:ae:ae:f4:00:de:7b:53
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e6:d9:42:9e:ea:00:f8:7d:e1:00:01:00:00:01:e6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
131814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net8.0/Microsoft.IdentityModel.JsonWebTokens.pdb
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Logging.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4eb68fb71d38d86e93e0c9145620ea3e528fc49333d82c923140f9868f1ea426
- MD5 786bd79ca7518bd218df3d497d2dd2b5
- SHA1 dd8e2f0253b26530d34a33eaf671737702439320
- SHA512 fd9fb88582fdbbe21a4450428b491e0030d62a07199cef1e98ea27be373b733e6e71d0c34b81cedc0e8898e75a3f2b503594ac0ba02cbd0eca56238d553d2723
- SSDEEP 384:792TD5MK+MpjaadF6cqqYrhvgUZg6PKdFSwcLj8kkaQ4iczWiY4WEU2HRN7udbR:MTdMK+saado9gUaPG1yzBiu9Rxw9z
- TLSH T1FFF25C51A3EC4317E9FE1E30A8B9FA0606377783A871C79E6994F18D0D037E55E2136A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
38:29:06:32:c8:e0:5c:3a:25:6f:00:be:80:fc:8d:fa:41:cb:bf:10:fc:a1:af:9f:cd:09:b6:2e:ea:8a:1b:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ef:89:3f:56:a1:58:cc:a8:da:00:01:00:00:01:ef
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
31878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Logging/obj/Release/net8.0/Microsoft.IdentityModel.Logging.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e845988a113b5c146f1392e993e8f554a34756d37563a85c64bb399e45a4c0b
- MD5 2f6b026acb7d866fe9fbc42808416c82
- SHA1 e51e5a78431befb0d9a0fa92cd510fc2d2f014fa
- SHA512 fcd75b195ff9f86317b854323014b8fb973bf9d2187a153811b6066073a740f8c803a645bbc941a24d2751c71afe729fdd1ddbda1cad7f8ad4c91c310978b0f6
- SSDEEP 1536:cMepI3K67hXTbozSFLAHGZxZhUrjlVX8pc4kDxdAxqFpzym:cMepI66NIzSFpxEX8pc4kuMpem
- TLSH T16DC3A32067FC9608F5FB7B31B9741A2589B6BE9E3D70C64E1540858E0C62F81CAB2777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
24:76:5b:4e:a7:b7:d5:9a:34:74:dd:f5:de:eb:5f:e8:6e:e6:ca:ca:a5:f2:43:16:2c:b1:77:31:77:b0:e9:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e9:0f:71:30:7e:5d:f1:12:36:00:01:00:00:01:e9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
120450
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Protocols.OpenIdConnect/obj/Release/net8.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.pdb
mscoree
_CorDllMain
Name
.text
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Protocols.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e81eb0584e24d6274916a6f470c990ac3aaa924c2f10255e64679c1a032f0e2
- MD5 457c08fe84d7c537e7c3133df08e8fdd
- SHA1 2633d7c22385947c310f2fe5e3c5edada904dc8b
- SHA512 9ceb845e8f2d1955d174ee7a2431e7f3a6e49887930fa3453d22d75cbb6d625c7f4a398e138f5cefa251c423ffd8612da16d072db918cae658d81feaae3c9ec5
- SSDEEP 768:tKq9599jnDolPcglpw4+kKMDf2RoAGjViF7Epw9z3:R37CJXDz2RNGjYlEp4z3
- TLSH T1F3031A4567EC8306F9FF2F36E5B085115936BE86B831EA1E5598F19D1863B40CE2073B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
34:27:db:56:1a:67:09:9c:3d:a9:b4:1e:37:89:33:d1:e0:b7:5e:40:99:5a:62:72:0b:f4:5d:65:c5:5b:ac:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ea:9a:24:72:d5:59:3f:61:63:00:01:00:00:01:ea
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
35866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Protocols/obj/Release/net8.0/Microsoft.IdentityModel.Protocols.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.IdentityModel.Tokens.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 07d46c63c931f8792e932cc131dc9580dd4575e0872cae92878d26847c9f248e
- MD5 729ca5dac4f6868f25711a06001257c0
- SHA1 b1a344c36fc570d12be1a8e8825211313ed2544a
- SHA512 1db6a94c901bc05e71d8d89ba539f16115ecac26b0045c0e66eee86fdd0b57c46caff397cff4fb664f385f7042f736eeaab8d0073570d12bd78b54aa0e9abdef
- SSDEEP 6144:6MwHUv2vqWBLqxA0D5b1ohbqt/jjoqhknnNX1PuEWD5hfTN:SBL+AO5ffx
- TLSH T1CD541950A3FC8605F1FF3B35E9B5646589B2FD4BB878C78E6151D1AE1826B40C920B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:22:16:1f:7d:e8:bc:20:b4:e2:f8:e0:1d:a7:68:c1:01:e0:71:74:af:86:d8:53:8b:37:4a:25:d4:5b:1e:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:E002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ee:05:d3:02:30:b2:9a:9d:a7:00:01:00:00:01:ee
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
294470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net8.0/Microsoft.IdentityModel.Tokens.pdb
mscoree
_CorDllMain
Name
.text
Size
280KB
Virtual Size
280KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Microsoft.SqlServer.Server.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a9dca1b42bc875f966b78b2c0880e62b838f0ed6567166d7f1f07ae4b76ec4bf
- MD5 aaf7567e5f8c1b057691cc562f9d0123
- SHA1 044138ce52b067e938c2fedb3d950b94c686830f
- SHA512 491b70f8eebeb184ef88dc79fc46faa83cecfcb0f3b79ded3b46de97dfcfd49cf277391fd88aae284e14e9d6d9759d30ce9e684750de9099aea9912c9b54c976
- SSDEEP 384:Mk64ziUFjN8LbfTYK9/RqzEDROpWhSxWsyHRN7ivVslGsVmTe:Mk9W3jkK9/7Q9ZuiDCmC
- TLSH T1A7B25D52D7ACE12BEEBB1A30A5B4C557193C53C33512F67E4E44E48C2DA3B82D720766
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
47:13:65:8e:13:5d:a3:e9:03:e2:f7:0e:7b:e5:a1:cd:96:d3:2a:20:a0:3e:dc:40:3c:94:97:2a:70:0d:fd:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 27, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:62:d0:fe:02:f3:01:e5:cd:49:00:00:00:00:01:62
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
20434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/Project/obj/Release.AnyCPU/Microsoft.SqlServer.Server/netstandard2.0/Microsoft.SqlServer.Server.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/MySqlConnector.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1dd5966bf918a21e1f2dafc27902806673df8eddaef3dcd2ff6678955b46ff53
- MD5 6599f5422b80d6dc58a2f0c6f4ee24dc
- SHA1 023a8dd844299377068bb120b86f8fc9ba2bfec2
- SHA512 c9667f25c946e1e2aa23a5664348722bfb8a344369e23b8ecd94a4428bf7567996df6beb6d7ef92dbe6abbf50131e976303e54c3abcc210a91e638f5c61cfe73
- SSDEEP 12288:UzEaqKnZDOxXUu3EhLSnK/ql1IgsCtr5s2j/j0DkbfCm1zjB2fkEKJ:Uz2KnNqJsCtr5su/j061ek5J
- TLSH T190158E4037F45B26E7EFAAB8D879C24807B2F9426A71E36F0554D1AF1D91B809D703A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3c:91:ad:17:1c:57:2f:ad:17:a8:77:bb:14:eb:66:9c:9e:82:2e:1b:f9:2f:b0:39:a7:2d:f7:8a:63:54:56:21
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Bradley Grainger,O=Bradley Grainger,L=Bellingham,ST=Washington,C=US
Chains
Jun 2, 2026
CN=Bradley Grainger,O=Bradley Grainger,L=Bellingham,ST=Washington,C=US
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Subject
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Serial Number
7b:2c:9b:d3:16:80:32:99
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 12, 2016 - Feb 12, 2041
Subject
CN=Bradley Grainger,O=Bradley Grainger,L=Bellingham,ST=Washington,C=US
Serial Number
6d:22:70:6b:6c:8c:8d:97:5c:39:26:7d:7b:c2:f3:20
Issuer
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 20, 2024 - Jan 19, 2027
Subject
CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
64:33:51:d3:c7:38:9f:08
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 24, 2016 - Jun 24, 2031
Subject
CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 18, 2025 - Nov 12, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
4
Entry point
872098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
MySqlConnector.pdb
mscoree
_CorDllMain
Name
.text
Size
845KB
Virtual Size
844KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Npgsql.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1465869e982e5c897c5d9ba51a0929c5938213c065f11c4f79f638a14f37e447
- MD5 4dfffbe7f2599dc29c10a88c160a26ef
- SHA1 9a9ca73d3b0c378674907e9bd47f2103cf1f0bf5
- SHA512 c6c916d70f1c1c31957a15ec6c9053fde094a4d4c15025ace8de6e8381b3005e2b79d98a30360a0f94dcdd8684ad5c84c2218385fc5f17169d75bdf8e69feb0e
- SSDEEP 24576:1DSp5/bCq56ISYpSo/K/Ax4N1VCK5caX0v:dIrACK5cD
- TLSH T183656C5173F4EB2AE2DF573990B1A11407BAFD4797B6E34E9209E2D90CA27824D143B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1482530
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Npgsql/obj/Release/net9.0/Npgsql.pdb
mscoree
_CorDllMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/Oracle.ManagedDataAccess.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4763155c0b4e1d34783f3ec2f7d1e82dd098b77eece588f7cefb71834039d9f4
- MD5 12d1a041fefc57d5452c56b8a6063278
- SHA1 af7533e3de4a3d81c8b4c39936f917f0213b3cbe
- SHA512 3e71359e48cec148b2ccbfc00fbfcb23490f6325ecf407b63c1567e6205b2d0bfe7de1b1850e5216c42841e8cb6bbe0a326624c6600dea07143bc9b43e8093da
- SSDEEP 98304:pWnMK29tUzEmY4tfszbv+Uxrds9ujq363IEXYCT4:0WtyEmY4tfsvmUxrds9uju63I8+
- TLSH T14F46AE01F3D86E15D4BF17B269BA911287F1E8579333F30AB099E1FE1E66740A9013A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f5:0b:65:61:bd:14:86:fc:b3:ff:eb:32:06:58:9c:c0:fd:ff:e7:03:77:56:3a:2b:34:02:48:d8:58:9b:e1:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
Chains
Mar 21, 2026
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
Serial Number
0a:a1:8f:63:f9:6f:11:77:1c:bb:0b:43:e4:d6:90:b8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 10, 2025 - Jan 11, 2028
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
5571358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/README-Agent-Package.md
- SHA256 c4340e7510e2dccff868db2b69f8757b5fc8bd7f17c1b3f66f580393df6f5504
- MD5 8080e8bdb2121c8a1881c059b0abcd9e
- SHA1 596844d97aecb7253b96231c98de310864ac0c94
- SHA512 99458b6d6a5cafe153a357949c1ea7b3999011762f7bdab37d4d5da3c76e2c89b6d67f348c2045c60068270b2b11b96a686fafcb894fe8e5fa5998f233603641
- SSDEEP 96:j39zbRWjaA9/OvLXrJAZDZo8KibSd1/rArH8zUg5q:j3+VJO/KZyZ1q875q
- TLSH T1BCA1D6223B1A23761F3243D1A85CA1D0D922A210621B29593978C30C637E1DCE3B73ED
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/SQLitePCLRaw.batteries_v2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 94ac800c6b93ae50a025f247547781debe18391110667c5e242f51d8ac188ffb
- MD5 5f7bbc0d5e37719c369221116d856f2c
- SHA1 4cb92f17c36c418125e9d6ff5c0639a2242d12ea
- SHA512 487b1c35fce26e61366187645cc134cb147a5f09b3c7cf504147813f1fd165e0e033b6ac1d3e4c4350415410946af1ee0807c0902a4b28a3ca67fd7e8406dc11
- SSDEEP 48:690+lnLvBaMW4HQ3cIcU1N4zOuSOiWoCWCzEWalhBzAAwnaA+hGLsnOVjdvi9:8VdaMW4w3cI/Yz1SOxDEllnAAXA+7A
- TLSH T1F7B19595E3D7533BF5BB8FB27C7256004230BA50DA329F2F8D81420A5C125199E20776
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.bundle_e_sqlite3\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/SQLitePCLRaw.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d2ed8e186f124f988ebdb45d0354185b424357be2433bba0033ab9ec31bd25b
- MD5 26cbe846decab0836717301f0bc6ec0e
- SHA1 a3902cfce95dd0756bcd22c51dbf9e69b1205be8
- SHA512 4926f2182bb6a3d6fe9705ff50bc59b5df06b62574c6ecf05aeac9b27ecc3e2c177efb37351d766de901dbc7a1ea91063e8950dfa7ec2d0cc6e87e84e6d76467
- SSDEEP 768:SUTwxD03Fy5WiUxBPHVNaDJqq4qLN75A4c9q1ITd9P581Itm/DshU:wAFy5WiUx1PaDJqq4qLN1JirPi1HLsK
- TLSH T12333D7749396DE29F4CE5130A43B00D5A670D019E7BBDB23FA90E0B069723CB59761BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\netstandard2.0\SQLitePCLRaw.core.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/SQLitePCLRaw.provider.e_sqlite3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 60ab6cfa2f3cc907bcee4d0c1264d5c36de0a3da701dbebf5efc9d542ce69fa2
- MD5 630ca4a4fbcd4ec8b70b0ea298f7c501
- SHA1 c9b095124fe4510bfe6104b85eeecd5b483b7d68
- SHA512 0dd7bbb6af6def43b2d74e1866d4d5b1839c14d421057feac890aaa894658e0a34b0bf744fc1321376e740b621e37bc5102cb5baa0b96692d71bbcc0be09acc6
- SSDEEP 768:ALpUHDBxh/eF5nnJSwPI/3ja9qJqkT6E43isTt:ALOVCntPI/3ebE43FTt
- TLSH T111F255E5978F2A28F19D07337C771E8952B8E391FB771B13AA93C339DC625844D842A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net6.0-windows\SQLitePCLRaw.provider.e_sqlite3.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.ClientModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ce44a4fae4c4787c12475700e19a365fc2f388ae5d0f6182557ce5ea175be7f6
- MD5 84986cc42f3d48fcf1deb886151dd53c
- SHA1 1977158e15a03ef2493ed9edc5165383984631d4
- SHA512 d3c6e62dc8c9d2347e18a8d1b78d32f72e806945b526e548a5ed782ea789dd820a2f2c8febabbf99a8b8639057381c85accd4829640e152de47278f96118b243
- SSDEEP 3072:en25Dq08tnNVGL50POwvgzz3kKN5FcUDUR4Vx3YlydbD6gTuWqL3KR3kxP/mCWO:e200WNVmw4pHRUR4dqy3kJ/N
- TLSH T15B048D2063E44723D6EF1B74F57092118B7AFA06EA1BEB5F5D58A0ED0983781AD21337
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c8:ff:6e:85:b2:c1:97:3c:a4:77:e2:ef:25:29:a3:cc:22:bb:45:a4:59:03:03:12:60:de:20:18:ed:22:3f:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 15, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
170946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ClientModel/Release/net8.0/System.ClientModel.pdb
mscoree
_CorDllMain
Name
.text
Size
159KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69672ad27cb00505256a64c49895596d0e36b291a112beb73c30be5ccfd59cfd
- MD5 07a9325b8e791d961e11c70403dda065
- SHA1 c66f54384fc35f0c7502983bca6a3436811e5e0f
- SHA512 17e34e46cb56679bc2b5f6a0b9b4fa43b1ff2159fd6a222a3454ecfe666e1c0be39db749ea210329df3d55b68a9e181d320fc6c585e7c21cb4b20c08cdcf3451
- SSDEEP 6144:HfBILU+sMGIWDyuhur2rniqH1yhAlFobfWjP:HfBILpBaNflFobfKP
- TLSH T12D341700B78C5732CABF0F73B860D09D8BB1D853619BB3DF64E5A7E52CA23845D650A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:1e:59:fd:ff:a8:5c:81:33:c8:76:ab:71:d7:ba:d4:25:26:c4:7c:a8:fb:9f:ec:b8:3a:a8:ee:ae:24:35:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 25, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ab:af:3a:c8:82:4e:48:55:5d:00:00:00:00:04:ab
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
245534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Collections.Immutable/Release/net9.0/System.Collections.Immutable.pdb
mscoree
_CorDllMain
Name
.text
Size
232KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Configuration.ConfigurationManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 08b618461d62fe65451bdac4dbc25f8ac8ab16a914a687f2dbe3923bf0e8b3e7
- MD5 c0db217bb7145ea0bc65960383223b5a
- SHA1 bcb9c071c2a3ff215264408465b47b92bb986a96
- SHA512 97bea37124e51d5ed70e2854c9667274adc1aa2568947c98c54cca1a1754bacf305fbbc358502dd4944e5d802d6a7457a5bcc6885ef0af8df47f8f7e9df20617
- SSDEEP 12288:qF0fALHiivnh/Kr8YhenZQ+2/NVQ8GLa0Uh55T3lEC/IOPbZUNZvROjJfOsdV0Z8:20IVh/m8PMjs8
- TLSH T1FA94281223FC462FF6EB1B35E03940188BF1FDDA6626D34E5995709C1C67B808EA2767
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:39:8a:8c:82:55:30:a5:85:92:27:33:f2:0b:ab:54:11:b3:09:8a:da:cb:84:cb:eb:74:1d:a6:0c:ba:89:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
437522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Configuration.ConfigurationManager/Release/net9.0/System.Configuration.ConfigurationManager.pdb
mscoree
_CorDllMain
Name
.text
Size
419KB
Virtual Size
419KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Data.Odbc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de0a949d468d6346d20c2b811bc646d52404c86d5dbee6bdee1c60953346ba7d
- MD5 1a089debc6f2a90764285a84f365a924
- SHA1 9b2c37bc056205163fe6a1ade9d564be85fa65a7
- SHA512 09d0cd6e2471b02cba668531186ea50cdf3954654c70dde87b5a85b6392a4064d88752a695db9a6bd5fb75056902acc3cbe7f15e2c25fa0a0fd5ecb0b8d1d1a5
- SSDEEP 1536:cofVVX38/NDXpM1S14/KWDKiB3Switz2R:cofzX0XpKlDKSCwCaR
- TLSH T18CA3933432A433DEDA9B2533917F0516653F6A92A226C2BE6E4D003B6727D716373E1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:32:5b:fb:db:c6:68:8a:6d:de:70:82:04:e6:cd:d6:bd:a2:ff:66:c5:61:0a:6c:7f:8e:68:54:e1:f6:1e:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 29, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f2:3e:32:d7:64:ac:70:91:94:00:01:00:00:01:f2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
96642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Data.Odbc/Release/net9.0/System.Data.Odbc.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Diagnostics.EventLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df5c292e44872ddbf657e393a4cef4259825d2db573e6e6db794bbf1157b41d0
- MD5 42afbd6696baf4b7052e3fd68bf0a708
- SHA1 d12b008ccacc025b9f5bc7f6cfae4291a600f96a
- SHA512 0e57daa592ce27e997049b563d628129c65670768626f86de1d439b5dc5c13f5ccf5a40e5c33df1ff2e6501b2815cc028f17b70cf6bd528a53e511f10054c050
- SSDEEP 768:nzNpFWQj04nag8hWAmQ+e2/iMYXqgHGfmAXOaYPuwX2Fio9zK:5a8KBS1iigHLPuwX/gzK
- TLSH T114331BCC9FA8432DD9D54A33B66381290631A2E62F12CE492E0F75493B5FFC8E362559
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:d8:31:d4:a7:2e:f4:e6:f2:93:21:79:4b:20:f9:ff:9c:c2:34:b2:41:b8:80:51:6f:eb:ae:fb:d8:44:18:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
48582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog/Release/net9.0/System.Diagnostics.EventLog.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Diagnostics.PerformanceCounter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c596c35317c7bd5ae3938854996d62c24c7f67f61d3710a379bf1f3ab1a9e3b4
- MD5 d1d63abe9c87fc2d59bd1b81cc98cd5d
- SHA1 22609ad6cbe30841cd88af86c042735cfc866518
- SHA512 9f4eaa642296f8413af0adcf294c92f1dfb944d8f76f5eddf8a66882f4edc512a1feec38442db8f6350272695ae18c4dace496a6135e9fa7cde7a0c9e4387063
- SSDEEP 768:dKZ0BZH91hRtHK5t9sZxX66ZC2rLMnnnkarDV/ihHji9zPie:dKeBJPdK5t9mq6HrkD9i9+zPie
- TLSH T18833E809D3FA421DFDFB4B7875B081768A39BAE26E11C80D35A9500C159AF90DE72F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f5:d6:69:74:b5:6f:3f:9b:81:a5:eb:54:e0:5f:b8:60:e5:eb:e3:b0:cc:3f:e8:ca:7b:2b:c7:cb:40:dd:61:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b4:fb:80:08:44:05:d2:2d:fa:00:01:00:00:01:b4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
46450
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.PerformanceCounter/Release/net8.0/System.Diagnostics.PerformanceCounter.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.DirectoryServices.Protocols.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 096102bad94746479987ffc4fc6c9faafb9e1ae6ed1c74c9a7dccae0e4f3ea9f
- MD5 5a18f4f55fe0dc2519475fb2dd108dd1
- SHA1 67f418029adcd42d623cbe2c700db22dcd8e02e7
- SHA512 13e7adda823ff98b0b32401520654b4eecb8b3b1dee6a798ba89e436c85dc72d5df41da08c995f8c43b0736708d7b2da19d5eca6e075c3815ba77b014bf1685c
- SSDEEP 1536:FssKTK7UGY7xFscPtUDFa5YYpymIXX+zAEvU:udTgUGY7x71UDSpymIn+nvU
- TLSH T1AF63060066EA5B2CF8D71270F6A7C3289731A2D52E13F68E385A550E1C5FFC0F722665
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
64:88:4f:87:2d:cb:66:55:dd:ce:0a:0f:dd:09:70:6d:27:dd:75:81:a6:a6:d8:04:1a:22:43:f0:8d:95:58:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0e:2c:cb:28:7d:95:20:75:63:00:01:00:00:02:0e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
67118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0/System.DirectoryServices.Protocols.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.IdentityModel.Tokens.Jwt.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8027f6bfe795fd5718b1c7bbb3951af064ba29cb92ee965bbe237f6808cfd28c
- MD5 1edc26ea91c7dde66cc3a61e17dcf107
- SHA1 296f95ba221fd9b8ebc1f00b9ceb50abd5481829
- SHA512 b3a9888acf4dc65df3ae297d47e3ac1a45188554ad4bd39802de103affc10588bc5bea9c9e214f4a7d52d5af1fda129ddfda7b09ce58c6a7acde8214b1624477
- SSDEEP 1536:pxSWxgynNOt9c5ytilPc6ukNApnqk5p/rqXTqA88z/KtNJ8INc3z:/xgyn+9cxPc6ukNe/rqXTqA88z/Gcai
- TLSH T1C293F719B7FC8329F5FF2F35A5B195000A71BF4BA836D74E1980929E4877B808A60777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cc:84:93:09:77:b4:0e:90:05:23:32:ea:b0:f3:80:1b:a6:31:33:cb:8a:00:05:ec:b2:93:29:ed:dc:a0:de:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 12, 2023 - Jan 10, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
83650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net8.0/System.IdentityModel.Tokens.Jwt.pdb
mscoree
_CorDllMain
Name
.text
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Memory.Data.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bae79a4ff6e8fcfb65a3d88eb53d281898e699e5471ebd780843e5616753f0c3
- MD5 c1a673301a207c53b35daf5865dc1aef
- SHA1 9adfd8b2c6d5869c4019b8778f65377231a2054f
- SHA512 a0b6bb5420f1a07899821d3b6dc634d9bd9c15527f5bcd49547bdf10283ded73d0be8ec8becf5de9d603c7c27c595fd3c4688287760b33ec8761cce35f9259aa
- SSDEEP 384:FxsRgwRc5EjcEqMKVGAiTFjurKrnzEq/xuWSXdqWkYA6VFHRN7WNbZR9zdVjQ:PKgSeLFMurKrnZx24FClWFT9zfQ
- TLSH T1E4D25C5597EC8237DDBB1EB09AB5D2860F31E2C15812EF1F64CCE41D19A3B885A30B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f2:ef:2f:b2:d0:f0:f7:cf:c8:5c:0d:2c:b2:1d:68:16:fb:38:e0:34:0f:a8:b4:79:2b:fb:ef:33:3d:b9:02:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 17, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f3:c5:0a:43:ae:03:cc:1d:31:00:01:00:00:01:f3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
25542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Memory.Data/Release/net8.0/System.Memory.Data.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Security.Cryptography.Pkcs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dfa1ee60ca07b74f7c4de24e3b9a93a302cb0f0e67813801562ffdf2fb89f219
- MD5 cd7806dfdd6ac9ee497b3165eb7e08df
- SHA1 76e5d01661ce25383820755e3c5c1646e0cbe419
- SHA512 1c494ee77f0227ffc51e2150c77b44eb5502d0eda65d1b641f8ff7e8b89a574cec01e7d31f7db70caf82a80cf65cefd29788c90a2ae425aec9b1d9f50211f1a5
- SSDEEP 6144:uEhjVVG3w9XswBOJk1Uxc82J88Kr2dKVQY:5kUXKk1Uxm88uxh
- TLSH T1B3441A293BE48739F5EF5B35D1B050188E39ED87A457F30C08996EEA2517380DA24F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:54:f6:bc:11:ac:45:37:c6:ed:94:8a:82:12:37:6f:57:02:6b:92:4d:1d:8b:8c:2e:3f:c0:0e:62:59:56:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
259230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.Cryptography.Pkcs/Release/net9.0/System.Security.Cryptography.Pkcs.pdb
mscoree
_CorDllMain
Name
.text
Size
246KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/System.Security.Cryptography.ProtectedData.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 02321322ec85e0a68f28ad33e549213b1dbf3de0e66c3f7803f9ae32c0d00ffd
- MD5 3c8e04a8e68b044e186a76e97191706d
- SHA1 8bb46fef5307b9c8221cae257c433aea9dfc4ac9
- SHA512 7d10a40a73d30a43d971ca6ea3d8fb5c3af5dc0693d7b6aee5a17afaa6f879b14b3cabc06f000b851f58b8efefe9e7f95b156b6280743d971c519bf586305559
- SSDEEP 768:ppLcvDwmgC2w9JMu/x7FVx7Yv1FnplRqBnzXSds9za44:pW7wjo9JXNFXqplRIzXSdkzC
- TLSH T11F036C21E7A8536AEE564835B871F7053C38879A8412BB3ED1CDA04515B1FC29F327AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:af:ac:c8:39:30:d8:a6:e2:5a:dd:83:90:95:87:78:c1:6e:be:2e:da:b6:1a:41:ab:7c:16:67:e9:c6:f4:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
33226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.Cryptography.ProtectedData/Release/net9.0/System.Security.Cryptography.ProtectedData.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/appsettings.json
- SHA256 63cea26420954be0714d194e053c135808be5cd7a4a034cb24782c74a29158e8
- MD5 d10594b0fef0cc470f1a2720b1da1c1c
- SHA1 b3610257c6b7519758b60353a2b0614a00a0f0a9
- SHA512 6f480c275813adabac9a99f81b677d7a78016490a2e3b1d78da769ef3106a1e8564cf8daa6f027b62755ee6605b905dd98205b01e9fc74ea7386134135b78aea
- TLSH T19A112532E0584E7723BB5B91A8B5C201F434131B5242280BF6FDAD9C8FB258222A1ED9
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/cs/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e9b997f45393346cf2f96da99f7fa868f2286964a49ce66a59988defdaf84b6
- MD5 7168d40903995208eb9a2632759cbf7b
- SHA1 8ced6e344c05b5f46374b81a5b3fcfe8d21e4e94
- SHA512 db0f5e7e7570df480b358b159a441fd86bbfb6d4a468788770bcc03d90017c9bea93c1df660e7a3aa06d32c67d7985ba689a3a0089194017f910f42a8b2f00fe
- SSDEEP 6144:mseM6td6kWPDE+g2gKLXg6QO6xZvAm/4cX/giB0Z7tHS2gWoo13mg9gmbcmGT4y+:JeM6yDE+g2gKLXg6QO6xZvAm/4cX/gio
- TLSH T11744A52667F96119F6B70FA47BB9C024A97EBFE91F01D56D188A568E0071F24CDB0332
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:8e:df:4e:a9:8c:ec:92:d3:b2:dc:bb:10:1e:9a:22:01:28:e9:e2:02:84:81:63:9d:af:73:de:36:0c:82:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:02:79:50:74:21:14:7d:b8:a1:00:01:00:00:02:02
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
252414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
239KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/de/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 30e111759eb091735455f8a7e3cb2a5aff16287149cf3d4e7a67624f00320fc3
- MD5 86bf7bf683ea1018ef0806f3468676ab
- SHA1 722f53603b618f21eea9a6acb4d7b30584531cb4
- SHA512 72bb2636a4d7ddee73427f0f92b5840e71030de6dddf0be9672d4df59898add72ee136229f4aecc812df3c98e3259478eb3d338b9851ac522659241ed9b1557f
- SSDEEP 6144:fseMdnoqUiLGRfM3gZgM/J8gYRqHKbcdwhHlrgkgurvkElxfPISTSOVcKQktGdrV:0eMCFM3gZgM/J8gYRqHKbcdwhHlrgkgD
- TLSH T164448302ABF9202CF2F31B647B39D8267E3AFEFA1B41D51D1059906F0526D6189B9733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
22:fd:5f:66:d9:a7:f9:af:fd:48:fd:78:5e:40:5e:fe:ab:ef:ea:aa:3b:ba:84:0c:34:a4:18:48:4b:11:7f:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:02:79:50:74:21:14:7d:b8:a1:00:01:00:00:02:02
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
262398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
248KB
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/es/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6bb867e62e3aef301cecc99311603339301a086bdcfc8683c2c21f9f99850b34
- MD5 38a084b608eb6bf9947032c5e377fafd
- SHA1 1fb07bec67e069361626dba3b2d07ce9d1bfe500
- SHA512 80ad5ee6dcdab80482fb210d9fd92d4be2a06f6e11120d53739fb94a8101caf1e06fe5541398131ca2c9da6b9e507a000af356f8629f26f4b608974c85131295
- SSDEEP 6144:XseMO2D3bQRs2g0gJ0M8Ci1UO/LW3cjUzdgWiEVmyco59uN4ic/jPgd6Q6N7:8eMOVs2g0gJ0M8Ci1UO/LW3cjUzdgWie
- TLSH T1EA44B62267E81A24F4F31B94BB7AC023D9BABCE93900C69E6056825F11B4F44DD76773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:53:06:1f:82:7c:d2:1b:2d:56:46:28:a8:7f:db:a8:73:5b:be:32:32:7c:e2:90:11:91:43:69:d7:98:ac:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:09:08:07:e0:f9:5c:8c:e6:55:00:01:00:00:02:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
254222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
240KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/fr/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2eac255e2a16495d0bb89aeafa5aa668f74e12358e76eb1756de271b8b91e1de
- MD5 ec97fa11e7c761478fd168296ce48485
- SHA1 235a1596da86888320155859e72f00d3523c89d0
- SHA512 49a3dc6b7be1f64bf046655ddd211c673ad9c441e9a1d7a12d6f8f65669dea281dcae23696b5d4f615ca6ac5d08046753585d0c16d9e97535f4b6f8a2cde7a7c
- SSDEEP 6144:GseM9Ts1oSveNrgwgnNoLfTaHwJE6A+fOAzgTkmT23dd1K/Fs85PTPt+wbEw4Mff:peMtBNrgwgnNoLfTaHwJE6A+fOAzgTks
- TLSH T14A44B646A3F82209F5F31BB5BB7B9013DC3AFDA93741C61C5895408E0171E98EB667B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:4e:59:76:22:77:88:3a:4e:d9:58:d5:b8:e7:9e:9d:01:80:ae:62:ce:06:ac:95:c8:25:08:74:00:e9:25:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
263502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
249KB
Virtual Size
249KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/it/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a50867ea6c62b3be1fe4429360fe8018f3002b95c4c7b2d306daf19b4a50053
- MD5 48086ac123f424dd8ab986f135adb2cb
- SHA1 e9eac1f77c83ec3c94e035bbf31551326752fc20
- SHA512 264a16a32810f64ee7c35f7ca1b6c6d565c79026deea556e11501ed6cd7f07558835646059936fa52678262121ba43ef538eeecb1305fccbffff3720344684d7
- SSDEEP 6144:MseM52dSI5pNRZgagh8DEiOPfpeozgi67mygEYmeVzPvVNdcTjVJxWshb+rpFIhf:TeM52RRZgagh8DEiOPfpeozgi67mygEB
- TLSH T18A44852677E82114F8F317A8B6BAA055DE3AFCEA3E41E62C2049150F02A5F40FD65777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
38:a3:b7:a8:51:89:12:d5:55:ff:28:93:d7:16:d0:e1:06:08:fb:6f:b6:cf:76:ac:fe:cf:5d:53:6a:31:74:64
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0e:2c:cb:28:7d:95:20:75:63:00:01:00:00:02:0e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
255358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
241KB
Virtual Size
241KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/ja/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75539952a99301eba174bcaeeaded6da4d758c6f12565bed4208dc50b0344abe
- MD5 14539b213f3c66883cc679eb1f0ac584
- SHA1 2b425a40024ffd0eda30529cf2dd4f2b6decb9a3
- SHA512 9b24c5cf8f65a251f66a48a93ffa3175953401657b7859f37794bd234b0ab65b3ecb995b8cd2c74fbac6f4efdbecc0c19e2028e07e0a72cfdbdbf93de559489f
- SSDEEP 6144:WseMxya9Q0pqo7C6gigDJQUhLAYm0LJo4tTGjgT8g4ijqH16P58FjOqaQWrgphf6:ZeMQhoG6gigDJQUhLAYm0LJo4tTGjgTJ
- TLSH T10A54316DA3E82429F9B35BA12D7DA194F836BCA7EE51E33D002DD01E5530B8CD921772
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:1e:87:0e:7f:b8:45:7e:c2:ed:eb:0c:98:d7:7d:83:6e:45:21:50:a9:14:23:9d:42:ae:9e:64:7e:d8:50:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:E002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0b:11:9d:56:29:92:f9:bf:85:00:01:00:00:02:0b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
284462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
270KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/ko/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5eac865982205ce0d1b94ae4cae4ec003b514829542140c91e67cf86312d5fc
- MD5 e7f6a35df8ae2f517c4060a40a842ea3
- SHA1 04ba83a5049d77786d00072c0add3a236b1bbbec
- SHA512 7029c2f225bd05a0320a9a4cac5b0cff51bac80f2423ba4f320ba14947bbd0f644ec9b07b984643f74c9ba2ddbcbbfbd4ee520562efc7904b4d9efdb6055d3a7
- SSDEEP 6144:GseMvb/ocWbudMDSgNgzw+xazdkERlB7QslVbg4qGGMSnvbhasJPbkHrYx61i5XE:peMvjADSgNgzw+xazdkERlB7QslVbg41
- TLSH T1E44461D233FA1658F9F75B513FB9E02587A2FCBAAB53C11C98408C5E4C74A818D913B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
70:c1:21:7b:fc:19:aa:90:e4:0c:38:bb:90:e0:88:4e:e5:1f:d9:56:37:b6:e2:ca:09:3d:e8:e8:6b:df:39:19
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:3605-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f7:58:20:75:04:ca:fb:c2:f4:00:01:00:00:01:f7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
262366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
248KB
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/pl/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca9d25b7405908146f988c7fad48ded63e7f02df0e43bd1406803010428338be
- MD5 eb3a69ced9475e41453502c841b9138b
- SHA1 e00eb15346e76c1f8c0dcb417c9b2bb960cc64e6
- SHA512 a3ecf336f34ceea511684db8bf1161fa8700a6e32403d2d8cef3776c0d0b8787db165591b344734489e30bcb853f65e2ae0ab24a55050c7014b83e87b32601da
- SSDEEP 6144:UseMu2fEjuyBSgMge4ZhoEMA0Eo5tr6eZUgqOBbHdsEUVGw9rrKeOYYhY9E9yc9G:reMuxBSgMge4ZhoEMA0Eo5tr6eZUgqO2
- TLSH T1E944A20277F8551DFAF30FE9BAFA906959BFBCE92A01C60E544E440E0171A04ADB573B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:75:83:e1:21:93:a8:3c:64:a7:84:43:cf:c6:11:15:ed:f2:b5:6c:9b:b3:9e:9c:39:27:ef:60:49:08:0c:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
261678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
248KB
Virtual Size
247KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/pt-BR/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2a295a383e9076b24f47c1759e1c43176dfd876bc6444a661dee21170cde6b52
- MD5 2968d5bccd3fc1dddcf2beed77a70377
- SHA1 ac74205755c1d18336a4aa347b14b42fb9dce8f2
- SHA512 112582e1dc2f82c3d8798a861526cb4a92b70e38a25721cb759841bd3709f2dd317f01dc07142b71af51895419d61b600718d0eae99d1d7f757a069489436bbc
- SSDEEP 6144:tseMiDNVPwG607ggbgccZSrlH4Q1hsSz2BJEg302r0LIsHR6p4BLzQmg:WeMot7ggbgccZSrlH4Q1hsSz2BJEg301
- TLSH T1D04472156BEC1218F5F31BA07F7AD4139EBABDAA2E01C69E545A060F11E4F80DE61733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:e4:87:cc:43:11:34:1a:6f:76:8c:25:11:25:d5:d6:e6:d8:68:50:b1:cb:e2:69:65:4d:c6:9f:0c:fa:ed:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f6:83:2f:26:6a:54:5d:22:c1:00:01:00:00:01:f6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
249950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
236KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/ru/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f7d51f47b1eba12021161ee39a7d08d24df1dcd52c131d1d94ee2c7e432f4cb4
- MD5 e87fb7acc59897f56b93a0c0034cee45
- SHA1 91e620d5f0adf9bdfbd1e116730bdddecafcc4d5
- SHA512 bc4a03a391475b9d1bf7c3816e9b3f9fde36bdd6e6ee77b8f523e6de74bd27b05f9f65f8e0bb4ad520a449299f3cc487e896caac03809c7dd7d507247444fbbd
- SSDEEP 6144:70seMZGxsP8DwzzDgXgvYOGQt1vjjr6DhS2vXgg0gQ1FCSIgPvh8k2LcJvTu/2Dj:feMW0zDgXgvYOGQt1vjjr6DhS2vXgg0z
- TLSH T14E74DF6116ED509DB163B617E928AD097CBB78FE3F66C32E00542D7F24B2410CA7973A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
31:f7:32:90:6b:2d:95:b5:e7:7d:da:27:d9:79:34:0b:f4:fa:0b:ad:86:32:f1:6b:30:d8:67:d7:ef:9c:a0:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:07:2c:11:39:89:cd:85:fb:c5:00:01:00:00:02:07
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
339774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
324KB
Virtual Size
323KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/browser-wasm/nativeassets/net9.0/e_sqlite3.a
- SHA256 419622488300b7a26e21bc11e76a3e161e80440a22fa4c0519aa6cbac71fcb10
- MD5 e88eff3f5283abc562704a92c814d898
- SHA1 af44dc0732ccb79409a531ff1d207dc257713e17
- SHA512 003924487c68ce9a5f87372f6e74b04eb4074c625ff18a6fefa48ad94867a4c79e6b662163c55e9d44fc9f16d734ca2561a2c6ab7977215b4e7faaf8cc9b6bfe
- SSDEEP 12288:uoqJ56fN+N71A+fnq1VhsZO2ZKKpxgBo37I20yVRLgMBmzZHk8CYoqAa4mk9/5oW:Y2NczTc3MLJmB4LAaWZTcf
- TLSH T17E45184BF22A196DF440547B0548503AAFE6BD83BDB110B1EB8C2C673DBB94AB4E5734
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-arm/native/libe_sqlite3.so
- SHA256 de29ad722adc039f3a3a08fe222ed2bb46948a4acefeaeda86fc57d8ab7edc24
- MD5 04fd9105679f83c26182ebc4903ffce3
- SHA1 de9e170427dce5b307973a649ccac15158bec45c
- SHA512 bf436307b64632464417cc0de49aef7ea80fdb759312d8f4fa8fdcc8ddd4b8a9e47b0d0a03e31f1d93094707421d2e32ff770af9cd8caf397ee2b5301ad56a74
- SSDEEP 12288:ThZrtdXejmB/lzuQSQyi6lYW86dMj0G1pgI2usIM3Vn/X3dLJ:TjB/ApL8iU04yI25tNLJ
- TLSH T13715BE91F98E6F03E9CE833DB82A02A645719C4F67F3EB069A3455737DD76A11A203C1
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-arm64/native/libe_sqlite3.so
- SHA256 3d73c00244173f89bd264d9605e7753ffef8336f487b4ff059ef027261c5d623
- MD5 e0323455b5607045b13862387dc2385f
- SHA1 200ce3e7ba14dd95546e4273d4356d4f7866bb06
- SHA512 7c1cfcc15837893f74f32438ecbdb69756bd24a8aa08f090bafc82839656aa29fbc4b6f8b76555d3a0e157c06174042b526e0d4d124f22643839d67dee13200e
- SSDEEP 24576:gvGNZ4/ewxMU6wKEUQ55NkyyyyyyyyyyymwyyyyHa7XLY:gvGNOewxMTxEUqNkyyyyyyyyyyymwyyP
- TLSH T133556C59FA0F6C42F345E2BCDB5DCAF2723B3594C6A340727964421CA9D76E8CEB2460
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-armel/native/libe_sqlite3.so
- SHA256 83863b2c9dce8b1e4da72a3818025dee6506653149daad14c9bb81b5293baba1
- MD5 a4e430ab22a8aea97db319c3490dc0f1
- SHA1 aeab4833854dada6e2bacf21130410de9ed00cb0
- SHA512 9fd51abf37dd03171d937efe886d43c55af30acabc829c8b35d40497375c36f05a348f6cb131dbd84c7e51808bcb36784c978aa89ed51e6cd109b1ec7e1da6e6
- SSDEEP 24576:j3vhsYmcv5a5zacdv3ZNyw/91cCaszA0JTOC54ZU/TMLUFmLLF:jtg5z7/vK0JTrc1V
- TLSH T102451A91F8449F62DAC46679FB5D52DC33230F78C2EE7006C8259A347BFB55B0A3A681
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-mips64/native/libe_sqlite3.so
- SHA256 31ab04e827923a286649fb060b05cb5020e393a7abe542ceadc60735df090f93
- MD5 4a78659128509ffb287b57e11fe2b309
- SHA1 df733f57049331d92fa4a816a2bfcdbc1088ba44
- SHA512 f386b832a2c1c0df90cc48678a711a51f248657d45c72bcacf1b638dcf4c62b0392972364bc62b37a9b0de993608a629b4257f5fc11b7ff89acb7f622ce83f67
- SSDEEP 24576:B/BmF1a2gms1cR9lUjMl4KNV/L9OGW8l5nHhpcbCXewCuMtuoEd+SSYL4:B/B6lxRn+SQ
- TLSH T1C2754C92DF0E5F96E4EFCF384C3A807B417D6DC7A691827661AC2C593E293E50E92C44
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-musl-arm/native/libe_sqlite3.so
- SHA256 635afd4379650f7bc2599ab2b6606ad6bac44fefc0f2c09018d20d0e1f828593
- MD5 244aa9875f7619bdc0a460c1fe88bff2
- SHA1 0e93a8ac6916592d0ec998482df6da976e108e37
- SHA512 6f3bec8f61789f0a460d2e69478206aecafb7edda92b07d6f522d609d550b8074e0d5432e93a2997e139c19095bdf103432b99243803b8581006f89ab02a5768
- SSDEEP 24576:rdvSFmNEloHyZi18OEjQhBe/XywFgADEmO8wBGL4:r5siDGOUy21DCv
- TLSH T163450895F8508F22DAC06A77FB5E469C33630774C2EE7509D8145A347FEB68B1A3A381
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-musl-arm64/native/libe_sqlite3.so
- SHA256 18468c67541ae7cacf359968fb7427d57978cf0a903ffb42708aae6360d9782c
- MD5 ef226fd7e0067a78ebcb25fe08399c00
- SHA1 1b88cd481733cb6a638f7d82f265b86e43f18e24
- SHA512 2dcaacc81f4cf05f6eabde2d2e35db9c2ec7e822940fe189099a92a3960495c1a696c605e07482278045cc8e4509f7fd29535f382c57afdf8573c173dede5ec6
- SSDEEP 24576:w5oirb20WwGYsE7wCTh42eVIqUHYlVVoyy4om5GLv:w5oirb5Waf0c/2IqQKoyy4om54
- TLSH T129555B4DFA0F6C02F346E1BCDF4ECEE1723B7550C2E780717964421CA9966E9CAB2661
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-musl-riscv64/native/libe_sqlite3.so
- SHA256 06a2faceb613b95e291cbe84a3ec2550e1ae69ffe65b9783fcf557888f2995c1
- MD5 972146deef8c6f866afb58f20b4bb1f4
- SHA1 f2592b2a134d7e1660c185aa19534817a1488262
- SHA512 a23b1d11f914714a38971ba80f2cb5056cb771bcf22ceb32298354a5eb575e3535bfc6591ce4574b9cb4a3497362e297c0279012555c7c7a94d059a4e36348a5
- SSDEEP 12288:TRbw/ATZAPwAA3E+4zj36tpsSJR+ML0wcrrkcwGuk0zLD:Ty/ANAPwJ3Uzj36YSJ1svKLD
- TLSH T1C615C0A5AB4A5E1DDEC4017880CB05F472B250068BE363970170A970BCB77F9BF5A9F6
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-musl-s390x/native/libe_sqlite3.so
- SHA256 02a3d327c3746c0e9883e4d2203d5e5311c3d98d3755ddd3d7670becf7cd4f8d
- MD5 7be115af396a04ddc0bd5bcf408cbd16
- SHA1 fa3a187afddaacd9d4bcb42fe7a841fcb06e8cbf
- SHA512 7fb5e1314136a48507a2fd38935ad87d74a8bb54d768dbc8b9a59b3811b18df557ce4914893effe34a488c74dd76c2f33fe2c5d4ce555870bd542051940697de
- SSDEEP 24576:YpVa688xRkOyIn3km3KHglATq79h5M/XXSWAeLO:YpEdJgXiS1
- TLSH T10D750ADA7524C39AD8702937D26A2AF3877735351AC46F1CD9EDDF320CB32094A19A36
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-musl-x64/native/libe_sqlite3.so
- SHA256 24868846aa49e7d030908d44051a7ecec0e1315524e92bc21a5f6dda816790f6
- MD5 3f5216dedfaa8a8fec59df3fa7edb6fe
- SHA1 6bb1cd10205979c375118533f137274975467b07
- SHA512 11b891a68055e65e6d8efd7e67db5577d4f05122ef58e3c84f48891acbbad9f59c6fdaf742c58f5a5e866f2744d9efb192873d059211e954fed9c723ff78dd7e
- SSDEEP 24576:c43n7Gs4jk7dpIXcFBHn5jAFiEpo2/88BdOXGr1zOZecaTLt:cfjk7acFl5siEpoovOXO5OIco
- TLSH T1F1553B03FBE288ADC4E4C870539ED5637B31F845C632A66EB8581A203E97F615F2E751
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-ppc64le/native/libe_sqlite3.so
- SHA256 ccffec6414fb012c4e52326172ba50006a845f67962d8612cec48790acaa3d13
- MD5 d8fbf1800f7249021815f6ba3fa9ced1
- SHA1 f129a91f83b575c06d06e9f6eeca9dec272050dd
- SHA512 e1550231e691fc2bfa02343ee0bb45dcf75a7be63dca06c116b4dcf38bc0b518b9e2724340849a7be4b9253c5809412e78933516de6a92ce222bca12cc7ef432
- SSDEEP 24576:s0B3ZCq3JzwfyvDpk/0u5Fa24HLyzLR10Be+BsLb:s0B3ZZZzZecu5Fa/6RT
- TLSH T169855C277248F74BEB425C3D87EFAD415386188B0A665C43AF40434FCAA971BCB59ACD
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-riscv64/native/libe_sqlite3.so
- SHA256 a10ee61703cc90a6069b919f39e12b95bee072210bcf82cb49c119ecb61485f0
- MD5 00279867819adf6620ec270d2bd0969b
- SHA1 f662ea9551defaf2b4b6168e5aac0dc1520c68eb
- SHA512 dd7113a2ee34542da130cef38d7e4efccbff7b7045379f3bb7e02717012b7419449597e94d32ae831a77a1c5dd04348ee546f8413f69afb6a0234872e1440ac8
- SSDEEP 24576:vVqYj7Khfkb0NOaO5n2GtQxmICv5AJjegFLp:vVNme5s
- TLSH T18715CFA5AE4ADE1EDDC40178A0CA06E473B11006CFE3538B0160B935BCD7FF9BD5A9A5
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-s390x/native/libe_sqlite3.so
- SHA256 547b6553a9ad65b214366b4372637b772265388a8ce0d7d3eb75995783a69611
- MD5 b7b00e98536326e66b791122f12764e6
- SHA1 f0f0643a86216ab0abce2f1c37aebbd3f2d58dfb
- SHA512 3209fd2b6a5ba9f9d2027d123f14766f8c4ee0fec178297d802e0c5e9264646b02ed9aaa533e53322c850ac48ba7c18b48a34c4a265b8b78f72954b1762707fa
- SSDEEP 24576:BJyvJI1csAVq1O/IE7v4FlT+QYN4X6gvezA0L6:BJ4siB7TdNBgvesV
- TLSH T18E6519CBB565D7DAD8B06A36E2A6EFF1826B39760DD46A0CCC5CEF3208733444A15472
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-x64/native/libe_sqlite3.so
- SHA256 965400c23fde16a19d000c1c6062af577f048410f85253a793f569d5520daaad
- MD5 d630c243d339cbc8322b9d97cc7fa2e9
- SHA1 0d67382a71bfc1ed3e840402043fce921c5adb36
- SHA512 cd8aa153ac9e83467dcb26bd07b87c8265fd66d4c75a14c9e3676301d4385c00beae96f282f0da43457303e41a0fa86073208e5390399be2ef2c94d4e1a6405c
- SSDEEP 24576:DZx7Wf4CMmabf5n158bAdvD8fI4XJaAZ3aZwxIBIfHRHLI:DZCMV5nvNvD8gEJaAoZuIBV
- TLSH T1F5554A03F7A348ADC8E4C870835ED5A36A31F4498632A66FBC585A213E57F718F2E751
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux-x86/native/libe_sqlite3.so
- SHA256 a9382cc28bcf354d15f0b6d392db0dbc9b3dcca1756f11b18d209dc357bc5f66
- MD5 9925a71f9f4c67d25408e200e29eeb70
- SHA1 c7bc9823b262b1e5727ef87bff8319f47a1a25e5
- SHA512 5af23f901949f35bbb982bbc284ed144b550bc5b9cec04b4dd3cf8ce3d460763ed40ea5488d6d9b593fd918309919f9d10a55e678572eb6cc27e9560d9d24485
- SSDEEP 24576:P8pEswGl1XErC02h/PpIII1JDCSlA7a2EwIAx7iaBkSw3xDEBh/zR9+cTLD:P8uswGLN02lI1J2oeEN4hLRr7
- TLSH T1D2656C84EBC354F2F6A216B6435BE52B167199048123F5F0FF4EBAA5BC72303AC16365
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/linux/lib/net8.0/System.DirectoryServices.Protocols.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d9258e7a728e8fcd1a10ea4ee896b75b01d73f8c9a7fa9df88e3671246e00772
- MD5 5bce9f5c12d649801246f848fcf2bba4
- SHA1 f7aa17c9b6163c7570eb687f2f30ecb46341e2b3
- SHA512 f8695e0e2effc7c3149834343fea9a3ffebb7ecb2029a65f8b88cfa8c4726b8082958ca8b2176f24f98ff458bdaf6f5eb89083bd37ff2d563fc47cc7d7d74b7e
- SSDEEP 3072:/zkFe41ShgY7SbxrFJgMLKZToGVgCWNnZ5D9VyxM4y62npyDlQQL:AFelQxF0sCWNneT20pQE
- TLSH T18C043A1023FD572EF6BF2BB4E1B59120493AB9866B67F71E0A4044ED1463BC0DB52B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d5:00:6e:b8:85:01:d7:66:97:43:64:db:c1:d2:60:0d:93:34:49:0b:de:34:00:48:08:e9:40:59:28:8a:cf:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0e:2c:cb:28:7d:95:20:75:63:00:01:00:00:02:0e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
174966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0-linux/System.DirectoryServices.Protocols.pdb
mscoree
_CorDllMain
Name
.text
Size
163KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/maccatalyst-arm64/native/libe_sqlite3.dylib
- SHA256 2d1b982eadaae830abdc9edba3ccbe77036342b19ae00117b96136a6e122d84a
- MD5 32674ba732d8582f5d5e9b9a9bfb5cc3
- SHA1 8a45d5fa6dc507b9fa19aca17004bb453c68ae04
- SHA512 68ad9181623306d64fd2e4b3c647325ea1165fafd889ce37ff2204e046b4b4f35eb1392a736c458014016c0eae8d007be9b87241fe9b766a3197ac0c0033bc89
- SSDEEP 12288:u+qK/vxHHpTzptmy+GRtGCdHDm2cwy7CjJWvp2wNxlVj5Qygyw7+WqsYzingQB0/:7tNttmGeyyujUNxLUxnTBWY8HXor4qC
- TLSH T160755C92FA0CB922E7C7B1FD8E444E95702DB0A081B4C6D47233D55CE8C5B95A93E7B2
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/maccatalyst-x64/native/libe_sqlite3.dylib
- SHA256 2bdb87f40497aa0d744835ae43f948586ff6e8df861c9fbf7be29b7f3fed6b39
- MD5 33220c81cc854dd57f6f0c737755f44d
- SHA1 dfab0e478330d37199504d659b3f1bdf84923bcf
- SHA512 c26a830f094a31b62b02373a458b438e565bd9f65a6039478eac96d6d297cfa7825d2694e207a71fa1d1adba9f3ae0cef60f22f3414452438464cf47d9601ce6
- SSDEEP 49152:xe6kBA8gpKnIhf8CJVlehpNbVcNM1cs+Yo0g:s6sGcoNeBbVQM1Q0g
- TLSH T146758E2BA2B1E46CE547C070435F97716571FC766A246CAB2294F7303FB6CD06B0A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/osx-arm64/native/libe_sqlite3.dylib
- SHA256 bea557311c6ef51eb6a69834dbd7a4e1ebd9d3654790cf311d942bf6a6ade0a2
- MD5 c4cbb8d7cc052662ec40d5e44e335e7c
- SHA1 7a1015ae26546ff6a5064e2cc585b57a38ebc91d
- SHA512 effa41baa6177c95ba8214d21b75e66912f0cce9f84960e76e100f8f413272459d8c77639dfbcdfbf9f95a5901c3d3f274acecfbb842276ea501ab35574f83ef
- SSDEEP 12288:OQoCMQfv/Qvewn6QhTBC27VDJk6bhA+mqasHXxjw7gzlEBnkmvtFRBa9EI2WKPBA:e2nwnfphaqxLEBV+KXc++YO4pRqb
- TLSH T1BE756C92FA1CA813F7C7B2FDCE854E91B01DB4B484A4C6A47133D59CE8C5B85683A772
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/osx-x64/native/libe_sqlite3.dylib
- SHA256 858192f4089b1e643a8b972100e71e17fb83dea0c352d9f161684f6dcb69034a
- MD5 53e26a0c422fd899b13e64f115cf19ad
- SHA1 4b9d54ee2136aad9d660efe8ceb3357f3d9f915c
- SHA512 b477657167805935b58c5eeca4ea0eb4f36fac2bdd1bb128cce9c9cdfe01bfddf7770e7954ae548100e267fb0bdffe430442a611e5a52d4cce5803ec9b538241
- SSDEEP 49152:cU2On2GWCGxc5+dgMHGOj2gT4f0t+iqYlK:KO2QQ0lO6gT4fiDK
- TLSH T10D759E2BA2B1E46CE447C070435F97716571FC766A246CAB22D4F7303FB6CD16A0A72A
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/osx/lib/net8.0/System.DirectoryServices.Protocols.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0282f75e160e9d948437059694123183c6beccf7ccb35690a8ebac87f2d524bc
- MD5 f58285fb7ca4f7b4a9f32a1ee7221d25
- SHA1 f168979be60c1ed0fbb2e2662f6be5e633d01523
- SHA512 9f82853978a296966a6de35c566412851206c7da4d053a786ae35509cff87181c804d89b69fc3f0d15f965ffd55bec6fce301118bc009c44c94f187f97aac8d9
- SSDEEP 3072:SzkFe419VJgenEf8h7ppno+V3CWNnR5D9Vykz4Y6yjpyI6lQAsm:tFeqeexCWNfkZyApQAZ
- TLSH T1C7044A1027FD472EF6FF1BB8F5B19020493679866B67E72E0A4445ED0463BD09A62B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9f:d1:cd:de:7d:05:f9:73:60:1f:8f:fe:a3:5e:d1:ad:7b:e5:65:d7:a1:ce:00:9d:d5:21:31:52:7e:e2:e0:23
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:08:78:9d:58:5d:92:c7:d9:52:00:01:00:00:02:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
175690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0-osx/System.DirectoryServices.Protocols.pdb
mscoree
_CorDllMain
Name
.text
Size
164KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/unix/lib/net9.0/Microsoft.Data.SqlClient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a95c42d14d8a83ca1007793648b6dae59cee957ea12470578f10c918f91d225
- MD5 429ae1a00f3e2db809e9053f41581212
- SHA1 8221872ba8a26846f873a526c59559e79a005d53
- SHA512 7faa11fa1c6e7bd0e5c6c5f0ece0dc6841ccf6986297ce9be26db220d9d682b9eec809889e905dbe116b08240f927d7690347cebd37796facfe38060094b3da0
- SSDEEP 49152:oB4ATbjEh8iBg7g5EJeGlYeRCEEuaVvp7gmn6GjiLSDAL816DQhHdg63IafHgwgU:M4AT7k
- TLSH T164A5B14133F85619F5BB3B30AA7A00218E7ABDA56B7AC35D3548506E0DB2F508DB2773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b2:eb:0c:d2:1d:0f:03:2e:89:a5:6b:83:a4:54:58:45:08:f6:7c:f7:ee:41:e8:ff:a1:7f:a6:10:dc:ed:07:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:84:98:e2:12:e0:78:a3:31:5d:00:00:00:00:04:84
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
2092870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/Project/obj/Release.AnyCPU/Microsoft.Data.SqlClient/netcore/net9.0/Microsoft.Data.SqlClient.pdb
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/unix/lib/net9.0/System.Data.Odbc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df606472f96e35d2300649052e20e9acdd7d3faff8f17697359313785395251c
- MD5 9cd45a32af8f9c6e3c19cb0b7076cc70
- SHA1 1d87c89f0b856d8c7697def14186c50dcc9ea56c
- SHA512 06d3d7815b598058936c786fe515883170caf3ae27a04b1c4779eab3d05ac7a314c1c2315f8f74c0a1c38aed96c20b32e157ec394083164aa58df1da4b959313
- SSDEEP 6144:aIpMxahn5Qn4X+PwpaLOvlUkUAaO2Sq1nxWQRMnPeq4ylv2WHL5VtBBMUmfHCS0U:aI+xahn5Qn4X+PyaLOvlUkUAaO2Sq1nj
- TLSH T102544B2033F4278EDAEF2537507F00161A7ABA56A227D3BD4D5450FE5A63FA0A132727
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1c:58:3f:33:ea:a4:06:62:db:67:36:2e:34:60:0f:0c:35:82:9b:34:07:68:85:74:79:33:1a:d9:57:5b:a9:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 29, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
290306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Data.Odbc/Release/net9.0-unix/System.Data.Odbc.pdb
mscoree
_CorDllMain
Name
.text
Size
276KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/win-arm/native/e_sqlite3.dll
- IMPHASH 3e84a347e40b7c8d3afb1930770a68ef
- SHA256 2ff400c5bbfd7d08b393eccdc9e0065b525f7fe5ff790b17779d3892bb1de66d
- MD5 b004eed99b4a0419da7f4c1ec6e4311b
- SHA1 0dea2feef8599acc1749f602b15a800a18723245
- SHA512 0b168c23c934dd48121f554010809695f24cef907c1b6222c78068377b4d6b11adc1a314aa53ee46d0600184b02ad98a44cc4b4dacaae6ec7b854c07e03928fa
- SSDEEP 24576:GFqoKs7D8lgRFVRzm34/3WP9dF/JDLzQ:WjnRFfPWP9dLD
- TLSH T19655C082FFE9FB23C64D607C7127D5C54FDDE82534BAE4190639DCB96A2B960CA72600
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
993905
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\arm\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
RtlUnwindEx
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
RtlLookupFunctionEntry
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleFileNameW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
151KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=146, id=261, version=30795,
count=44, id=260, version=30795,
count=3, id=257, version=30795,
count=130, id=1, productName=Unmarked objects,
count=31, id=261, version=30034,
count=13, id=260, version=30034,
count=14, id=259, version=30034,
count=2, id=260, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
BusinessInsight-Agent-Package/runtimes/win-arm64/native/Microsoft.Data.SqlClient.SNI.dll
- SHA256 73b61c3381e32613f59bbe3af7f58871c8cd486e04a9c0e71409f6a1972d6f84
- MD5 3b7a03c40fc724e166e976aa4223fe3d
- SHA1 cfa7b3a73f6439c41374bc31e471846cda3bd56a
- SHA512 090718162008797e687ab2fa60ffeb52a24830ab4c1712e0eac4967b99601548879934e5efe7222d0172437f17f081f8ffb05990bd8aba2ffc7bbca306c7ebb1
- SSDEEP 6144:qUDqPVLIDota5uvdctO/FTYFiLaEnfB2bYctWT9dBm/Hz4L3Kans3KDmW:qvdta5WdqaFTYvSByYccuT4L3VpmW
- TLSH T13EC43BCDBE9A617DE5861F3EAC2B06A47079BE7C8FA4404E31461589CCDD3C4C4A6B27
- MD5 SHA1 SHA512 SSDEEP TLSH
BusinessInsight-Agent-Package/runtimes/win-arm64/native/e_sqlite3.dll
- SHA256 d28ff71188b00e30489bb7bef15dd2ebc2fded92fd9cd8af97ce222d5cfa4c61
- MD5 c3897e6a17697f0d09d90e54199667f2
- SHA1 5f53bbdab6b51501174012b0bc70fb7f2f2884f1
- SHA512 870fcfb0f5e44ac26e62f822b565e3e9e89c6040691f4877bc6750e0d9f30ece18f8736296621f777edaa5c76b1d95ca33470ad9ca6be61e03ac3eb6d041be26
- SSDEEP 24576:zkD1X19fewq1oXeRT2BfUc2XduZ4N/DXFTznxj0Z:wBjfemqXduZM/DXFP50
- TLSH T1AE758E51FA0E7C52E3C7E3BCDE968F60701FB574802488A6A163419CECA5FD4D5F62A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
BusinessInsight-Agent-Package/runtimes/win-x64/native/Microsoft.Data.SqlClient.SNI.dll
- IMPHASH fc2346c7f61324e5b9c7eda90812b3d9
- SHA256 7e37c5bba3da06a955c122e3515b2980e2f1b8732ec0297f0a7e77e79b4de331
- MD5 d6a7e510b5f2ec3af41120b76804b530
- SHA1 e703efbff031491d350d0bee2a20473338dd3033
- SHA512 1cab8313cd48ce92f00f01e6d589f26ab22c5559be735b9a70daca75ba87451d66dff49e42ed814c0d04d76c068f28509c8355e64b7ed160b89b367da8b8c67d
- SSDEEP 6144:vYjQfdTHa2+KBYoQuu3SqqabIMI38iV5tRPnV7LAcA:wjQd3cuuiebIMs8i/dfAZ
- TLSH T185C439BCBDE221F8D03FAA75587B5995FEB07C640A79119F16D949C00EBE360613EB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:6a:fd:42:ee:b1:86:2d:80:09:7a:eb:b6:cd:08:0e:3b:9b:b3:84:c7:d0:92:bf:35:4b:4d:68:8e:c4:ac:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ed:e1:5f:cb:d5:f7:a5:5d:73:00:01:00:00:01:ed
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
243408
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.Data.SqlClient.SNI.pdb
kernel32
TlsAlloc
TlsGetValue
TlsFree
MultiByteToWideChar
SetHandleInformation
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
FormatMessageW
TlsSetValue
CreateIoCompletionPort
InitializeSListHead
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
VerifyVersionInfoW
GetComputerNameW
VerSetConditionMask
CreateThread
GetSystemDirectoryA
FileTimeToSystemTime
CompareStringA
Sleep
GetVersionExW
GetQueuedCompletionStatus
SetEvent
WaitForMultipleObjects
WideCharToMultiByte
LCMapStringW
CompareStringW
SetFileCompletionNotificationModes
WaitNamedPipeW
GetTickCount
GetOverlappedResult
GetTickCount64
DisconnectNamedPipe
CreateFileW
PeekNamedPipe
WriteFile
GetCurrentProcess
SetNamedPipeHandleState
ReadFile
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetFileSizeEx
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleExW
QueryDepthSList
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
CreateEventW
PostQueuedCompletionStatus
CreateSemaphoreW
DeleteCriticalSection
CloseHandle
GetLastError
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
SetLastError
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
advapi32
IsTokenRestricted
EventWriteTransfer
EventUnregister
EventRegister
ImpersonateNamedPipeClient
RevertToSelf
RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
CryptDestroyKey
CryptAcquireContextW
CryptReleaseContext
RegCloseKey
RegQueryValueExA
rpcrt4
UuidCreate
user32
CharNextW
CharNextA
CharNextExA
ws2_32
__WSAFDIsSet
FreeAddrInfoW
closesocket
select
socket
GetAddrInfoW
WSAIoctl
htonl
WSAPoll
sendto
setsockopt
WSACleanup
WSAStringToAddressW
WSAStartup
getpeername
WSAGetLastError
WSAGetOverlappedResult
WSARecv
WSAEnumProtocolsW
connect
GetNameInfoW
bind
getsockname
shutdown
htons
WSASend
recv
ntohs
crypt32
CryptAcquireCertificatePrivateKey
CertOpenSystemStoreA
CertAddEncodedCertificateToStore
CertGetCertificateChain
CertFreeCertificateContext
CertVerifyTimeValidity
CryptStringToBinaryA
CertCloseStore
CertDuplicateCertificateContext
CertFindCertificateInStore
CertOpenStore
CryptStringToBinaryW
CertGetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
?_tlgEvent@?6??SNIPacketRelease@@9@4U<unnamed-type-_tlgEvent>@?6??1@YAXPEAVSNI_Packet@@@Z@B
?_tlgEvent@?BC@??SNIPacketRelease@@9@4U<unnamed-type-_tlgEvent>@?BC@??1@YAXPEAVSNI_Packet@@@Z@B
?_tlgEvent@?BN@??SNIPacketRelease@@9@4U<unnamed-type-_tlgEvent>@?BN@??1@YAXPEAVSNI_Packet@@@Z@B
GetSniMaxComposedSpnLength
SNIAddProviderWrapper
SNICheckConnectionWrapper
SNIClientCertificateFallbackWrapper
SNIClientCertificateFallbackWrapper2
SNICloseWrapper
SNIGetInfoWrapper
SNIGetLastError
SNIGetPeerAddrStrWrapper
SNIInitialize
SNIOpenSyncExWrapper
SNIOpenWrapper
SNIPacketAllocateWrapper
SNIPacketGetDataWrapper
SNIPacketRelease
SNIPacketResetWrapper
SNIPacketSetData
SNIQueryInfo
SNIReadAsyncWrapper
SNIReadSyncOverAsync
SNIRemoveProviderWrapper
SNISecGenClientContextWrapper
SNISecInitPackage
SNIServerEnumCloseWrapper
SNIServerEnumOpenWrapper
SNIServerEnumReadWrapper
SNISetInfoWrapper
SNITerminate
SNIWaitForSSLHandshakeToCompleteWrapper
SNIWriteAsyncWrapper
SNIWriteSyncOverAsync
UnmanagedIsTokenRestricted
Name
.text
Size
356KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
166KB
Virtual Size
165KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=158, id=261, version=33138,
count=12, id=260, version=33138,
count=6, id=259, version=33138,
count=21, id=257, version=33138,
count=227, id=1, productName=Unmarked objects,
count=9, id=259, version=33808,
count=16, id=260, version=33808,
count=43, id=261, version=33808,
count=23, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=151,
count=1, id=258, version=34123,
BusinessInsight-Agent-Package/runtimes/win-x64/native/e_sqlite3.dll
- IMPHASH 468b7ea364b9b1f19deb0c29f9bb7e76
- SHA256 4dcbb2ad197d893355efa004257e048f2c850feb1078158f4baab0f7b53ac45f
- MD5 112b1b7788e602229ee3ccff14f9936e
- SHA1 8c672384c19f3c226e59d5da2a1073afc0b85a7a
- SHA512 520ff432de7ac7cfa9d36c69bcc4b59f588fdd33b53312cb2cfdc2ae3fc7fcef737d1af8c0b0f8cc85235616aa2223611211d4fdea2eafb61fc543baa7bb4c3f
- SSDEEP 24576:D0QT9LAXxkXe4hCk8tmg82mhJhHE6+YPk1Ic1J+6K/H+gmnBaTpmIzgz7QThB5wY:DF9LAKCk8tTEHE3YcviCaTpmvHQThB5
- TLSH T1B6857D4BB2B900ACD8A782B8C517570BD7F274151764ABDB15908AA52F23FF61F7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1374320
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\x64\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
226KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=259, version=30795,
count=147, id=261, version=30795,
count=33, id=260, version=30795,
count=3, id=257, version=30795,
count=137, id=1, productName=Unmarked objects,
count=32, id=261, version=30034,
count=14, id=260, version=30034,
count=10, id=259, version=30034,
count=2, id=260, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
BusinessInsight-Agent-Package/runtimes/win-x86/native/Microsoft.Data.SqlClient.SNI.dll
- IMPHASH 1202488b1141663afe39d79871254bf5
- SHA256 16efa76f220e23166a95873baaed43899191470c13848c944a679ff2bf5ac941
- MD5 4c41c0447df969230e16475466be97f9
- SHA1 0f598f8905a3387f39bce8a85486d448ffdec228
- SHA512 0c4b98cd54df9397f416468deea0779afcf63cebf411713bbe2b71cc2d212439d11dc664af308e79347a0daa15946a7eb0502716fc98c8163d06faf0bfd1c498
- SSDEEP 6144:KgMyw6xkRR8oa4JrlbWhnij9XuK0SZ+xr+JsLlqgW3xTDmbzDmEU:OyJx4LaSxbWhnij9XSc+B+3TDmHCz
- TLSH T127A429DDFCD13078D03F29BA34366DE4D578BC344F7F198A579C09D26DA9A80A922B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
09:c2:69:62:f2:cd:63:97:48:24:3b:58:a4:8e:63:a3:9e:13:3a:e5:f4:b2:aa:87:1d:c1:f0:5d:c8:ac:c4:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f0:2a:7c:1d:59:3b:e6:1f:ad:00:01:00:00:01:f0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
188928
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.Data.SqlClient.SNI.pdb
kernel32
FormatMessageW
TlsAlloc
TlsGetValue
TlsFree
SetHandleInformation
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetConsoleMode
SetFileCompletionNotificationModes
WaitNamedPipeW
GetTickCount
GetOverlappedResult
GetTickCount64
DisconnectNamedPipe
CreateFileW
PeekNamedPipe
WriteFile
GetCurrentProcess
SetNamedPipeHandleState
ReadFile
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleExW
SetLastError
QueryDepthSList
InterlockedPopEntrySList
MultiByteToWideChar
InterlockedFlushSList
CreateEventW
PostQueuedCompletionStatus
CreateSemaphoreW
DeleteCriticalSection
TlsSetValue
SetFilePointerEx
CloseHandle
GetLastError
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
WriteConsoleW
DecodePointer
SetEndOfFile
HeapReAlloc
HeapSize
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetFileSizeEx
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
CreateIoCompletionPort
InitializeSListHead
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
VerifyVersionInfoW
GetComputerNameW
VerSetConditionMask
CreateThread
GetSystemDirectoryA
FileTimeToSystemTime
CompareStringA
Sleep
GetVersionExW
GetQueuedCompletionStatus
SetEvent
WaitForMultipleObjects
WideCharToMultiByte
LCMapStringW
InterlockedPushEntrySList
CompareStringW
RtlUnwind
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
ExitProcess
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
ReadConsoleW
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
CryptDestroyKey
CryptAcquireContextW
CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RevertToSelf
ImpersonateNamedPipeClient
EventRegister
EventUnregister
EventWriteTransfer
IsTokenRestricted
rpcrt4
UuidCreate
user32
CharNextW
CharNextA
CharNextExA
ws2_32
connect
WSAEnumProtocolsW
WSARecv
WSAGetOverlappedResult
WSAPoll
__WSAFDIsSet
FreeAddrInfoW
closesocket
select
socket
getsockname
WSAStartup
htonl
htons
sendto
setsockopt
WSACleanup
WSAStringToAddressW
ntohs
getpeername
WSAGetLastError
shutdown
WSASend
WSAIoctl
GetNameInfoW
bind
GetAddrInfoW
recv
crypt32
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertVerifyCertificateChainPolicy
CryptStringToBinaryW
CertOpenStore
CertFindCertificateInStore
CertFreeCertificateChain
CertCloseStore
CryptStringToBinaryA
CertVerifyTimeValidity
CertFreeCertificateContext
CertGetCertificateChain
CertAddEncodedCertificateToStore
CertOpenSystemStoreA
CryptAcquireCertificatePrivateKey
?_tlgEvent@?6??SNIPacketRelease@@9@4U<unnamed-type-_tlgEvent>@?6??1@YAXPAVSNI_Packet@@@Z@B
?_tlgEvent@?BC@??SNIPacketRelease@@9@4U<unnamed-type-_tlgEvent>@?BC@??1@YAXPAVSNI_Packet@@@Z@B
?_tlgEvent@?BN@??SNIPacketRelease@@9@4U<unnamed-type-_tlgEvent>@?BN@??1@YAXPAVSNI_Packet@@@Z@B
GetSniMaxComposedSpnLength
SNIAddProviderWrapper
SNICheckConnectionWrapper
SNIClientCertificateFallbackWrapper
SNIClientCertificateFallbackWrapper2
SNICloseWrapper
SNIGetInfoWrapper
SNIGetLastError
SNIGetPeerAddrStrWrapper
SNIInitialize
SNIOpenSyncExWrapper
SNIOpenWrapper
SNIPacketAllocateWrapper
SNIPacketGetDataWrapper
SNIPacketRelease
SNIPacketResetWrapper
SNIPacketSetData
SNIQueryInfo
SNIReadAsyncWrapper
SNIReadSyncOverAsync
SNIRemoveProviderWrapper
SNISecGenClientContextWrapper
SNISecInitPackage
SNIServerEnumCloseWrapper
SNIServerEnumOpenWrapper
SNIServerEnumReadWrapper
SNISetInfoWrapper
SNITerminate
SNIWaitForSSLHandshakeToCompleteWrapper
SNIWriteAsyncWrapper
SNIWriteSyncOverAsync
UnmanagedIsTokenRestricted
Name
.text
Size
290KB
Virtual Size
290KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
140KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=33138,
count=158, id=261, version=33138,
count=19, id=260, version=33138,
count=21, id=257, version=33138,
count=224, id=1, productName=Unmarked objects,
count=21, id=259, version=33808,
count=16, id=260, version=33808,
count=40, id=261, version=33808,
count=23, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=151,
count=1, id=258, version=34123,
BusinessInsight-Agent-Package/runtimes/win-x86/native/e_sqlite3.dll
- IMPHASH ed858e32b0c7e4857fdea00b95d3a9b0
- SHA256 d067d9e40d4bc93df3d142e19cd3a92ebae865d245e7335020478929489d5c8f
- MD5 0a6d86ae60ba69e8c0ce24682c97bac1
- SHA1 964706035bb1c9d2de9e113c218b1c829e7d3067
- SHA512 a1b72d311c0d4dee537ea465a540d955cb1c342969d54838363c38e2469a8f246228eb7932216002d1a4f6b4bfc8115e8d4843a871d35e24ec61f5bc34dff20f
- SSDEEP 24576:KA2N7egap6RLpoxNtmv0wVUvyLKYi7tLlyrRzhFFo7w4rVSKBZT8WcDmOB7zw7:KAqHbogv0zLwRb8rVSRWcDmOBg7
- TLSH T1CA657DA3FA91C011F5E501F292FA1EF55C2D6228272624E745D26DA8CD20AD3773FB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1162144
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\x86\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
CompareStringW
LCMapStringW
DecodePointer
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
152KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=52, id=259, version=30795,
count=147, id=261, version=30795,
count=37, id=260, version=30795,
count=3, id=257, version=30795,
count=129, id=1, productName=Unmarked objects,
count=31, id=261, version=30034,
count=15, id=260, version=30034,
count=24, id=259, version=30034,
count=2, id=260, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
BusinessInsight-Agent-Package/runtimes/win/lib/net8.0/System.Diagnostics.PerformanceCounter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb93811a325ab59af45cdaeb57d47a8b1dacfdb19b87cefd1366cb0680250f1a
- MD5 4be7a46eac6f8eb119e51936e9b4ab9a
- SHA1 4a71ba46e173766ea0a5fde169c9757a4ed9080f
- SHA512 a9db874d19c2eac971f7e205d0adcda6b0114746f6eda3962afa8519e0b953684e17578086374196ebb8d5fa036a2166c5c4ad9010dc83b5ef1613dd3c638a3d
- SSDEEP 3072:0MAN8b09FWqiwBQxzLFeQBpo63kaUbDeRMq7ZAQkEsB4:0MqQBxknb6b7iD6
- TLSH T1CFD37D28E3FD0B1EFEBF4B78787050070A7AB6559E12EF2D49D4A0D806A3BD14951B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
94:00:87:70:80:a0:79:72:68:5a:36:78:26:a3:6e:97:f8:21:d4:35:e0:67:ba:50:75:67:69:b6:00:08:02:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d7:9b:0d:1e:57:2e:8c:51:8e:00:01:00:00:01:d7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
129514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.PerformanceCounter/Release/net8.0-windows/System.Diagnostics.PerformanceCounter.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/win/lib/net8.0/System.DirectoryServices.Protocols.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3af191077a7a45d67e89b7ba2667388dd1b6ea79c6dd97fc8c7773c4f2b89b7
- MD5 cac816029271c6fb8911e37e72f7196b
- SHA1 2fb550ef0625aa84bc97b2b4b20b121cd9ae7629
- SHA512 78cf80fdbd3f9cdea9353a0fa7f668f5a6141352f188785beadec0745bedba0e218abc196b052f93162d24978d80659a1e40fa57bdce6ad9b0829496511790eb
- SSDEEP 3072:qdQPDbGH4GHUP6SmErbz7N09CdMiUi6+uJQIWunhDJIhX+b8uWnOpyraFi:IlHUPXf10oTUi6QIWufIsA7npGk
- TLSH T1A3044A1037F8571EFAFF1774E571A1548A35B999BE6AE32C0A8041EE04A3B80D722777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
77:56:c5:7f:49:f7:73:79:f0:dc:3b:2a:3f:e7:1c:23:ad:54:d9:2c:e7:22:33:84:2f:57:6b:4d:9c:7a:b5:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
171182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0-windows/System.DirectoryServices.Protocols.pdb
mscoree
_CorDllMain
Name
.text
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/Microsoft.Data.SqlClient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 13011951ee100b419e0b494baecdbe1402be5cb487d72056014a83253afc1d6e
- MD5 746d8921bd102df057e0f5637bbe7513
- SHA1 5b4c943733925c1b7b425daf422837a60e2d2340
- SHA512 3c6c969c37bb16506e001d8624e1fc18ab9c6ff03d834468d78174a9c180c8e25e8896e633ef12a16b3eec835d03167eeee9bde546bb155d6704285597bf651e
- SSDEEP 49152:7l4tR+xUagM/LiBg7g5EJeGlYeRCEEuaVvp7gmn6GjiLnDFL81hJqQhOdg6nafHt:Wb+xUPUE
- TLSH T120A5B14177F85709F5BB2B70A97904244A7ABD6AAB76C39E3548605F0E72F408CB2733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
86:f1:e1:c5:f6:16:59:af:5a:2f:01:ae:eb:4d:37:04:f8:0c:fb:e7:fa:0d:47:a9:98:11:c5:92:96:f6:7a:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
2157434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/Project/obj/Release.AnyCPU/Microsoft.Data.SqlClient/netcore/net9.0/Microsoft.Data.SqlClient.pdb
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/System.Data.Odbc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 436e5aa726bc9f4ea7cdb93b3e8a280ba649b3dbb76deb5df68bd9ee1f270c5e
- MD5 7626c6e25f6c06cfa4f10da7a06eb831
- SHA1 2e229915c07979580eec0720a30ca62a0d6adf9b
- SHA512 6a1d26c357424063a09c71679c9b62a4185d8875836bc866a7be3f829e4a940454ea02a59afa7a4a74a315b6c312d8a9e728770c0444514e1284e3e0ca18381f
- SSDEEP 6144:D0VcxaUsUhK5BhP6GnQOSl40OEywwosPVHsejyV388uGNcOvUoK21ELdHJzKoUNn:D0CxaUsUhK5BhPfnQOSl40OEywwosPVw
- TLSH T1D7544C2033F4278EDAEF2637507B00025A79B957A226D7BD5D4450FF5A23FA1A132B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c1:90:78:c2:6e:7c:60:81:18:d0:8e:46:e7:2e:63:b7:9b:1b:89:f6:d0:8c:0d:18:db:0f:4a:04:88:47:77:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 29, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e9:0f:71:30:7e:5d:f1:12:36:00:01:00:00:01:e9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
291638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Data.Odbc/Release/net9.0-windows/System.Data.Odbc.pdb
mscoree
_CorDllMain
Name
.text
Size
277KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/System.Diagnostics.EventLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 567bbc886e7c44aa6868c4679d1d1c4a14872eaa1634b0cf678381813af9ecf5
- MD5 be835f672f6cf02cce446119906db705
- SHA1 c50ae46fb907c14f0aeaad1d16fb5ccf2bb83a23
- SHA512 fecd4a292a5d736962340167c86548ee7a420bf7bc10a3fc9e0c54267f3b8523632b8dfbdbcf104dd39dbae2b99ea114800662dfcf072d5cf06cf98109374150
- SSDEEP 3072:ZqNBL+YcWOhkEhfFrew8684kb+EKvVFMQ25Ai+Qci6:ZqnB7ok0drew84kboIKBQt6
- TLSH T1AE046C2073EC474FE6FF1B38F5B02015873AB9666D3AE76C458459ED09637C09A213AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c1:2d:bf:89:b3:f7:dc:7f:0f:d2:90:27:d3:d4:24:c6:e6:0f:71:f4:75:c3:f4:8b:83:62:a7:98:48:08:fc:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:40:14:fc:0b:e8:3e:f1:24:5f:00:00:00:00:04:40
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0f:57:9a:47:14:40:e6:46:e6:00:01:00:00:02:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
169650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog/Release/net9.0-windows/System.Diagnostics.EventLog.pdb
mscoree
_CorDllMain
Name
.text
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/runtimes/win/lib/net9.0/System.Security.Cryptography.Pkcs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6902fe2034ada133d5aa8df0d101279abb3093e346ebf34bbde62670f2a0e9bf
- MD5 ac653e96ba4711c6bf0e48f49e85bd7d
- SHA1 f3b59e7a4308f48a1baed7587e36e093b44b1a09
- SHA512 80b4c03deff9473aae9599e0527c80a6d57e5437b5d58dafb950e97bd2ad53468195220000d93aa7b4c88ff215dbc3eaa258a440516ac052dccde1309f7f94b7
- SSDEEP 6144:NWV2LBLy1QsyEKqOJtPAD8leGL5x1fxJURbA/8vKr+d07u:NWK3Rt5x1fxSA4unu
- TLSH T15F644A2877F44B2EEAEF5774D07104144B7BF447E553E74C08C96CEA2A933829A24B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
01:c0:ec:76:7a:9b:61:84:8c:2e:8e:c1:21:ac:73:93:fa:90:4e:37:cb:c1:34:9a:84:99:d4:53:20:76:37:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 14, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 19, 2024 - Nov 12, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:00:0b:d7:aa:7f:1b:2a:17:56:00:01:00:00:02:00
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
312910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security.Cryptography.Pkcs/Release/net9.0-windows/System.Security.Cryptography.Pkcs.pdb
mscoree
_CorDllMain
Name
.text
Size
299KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/tr/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc8df599a964558fc9587aeaa6c956e1d375944283907193660fa3e96ee38980
- MD5 e8fcfe3d61613a8129bdb8eb8dbc4419
- SHA1 4e286ad5e01605cd6a277b1b450654c72051257c
- SHA512 f3a5ab691a9613c4578b6e33701be4cdda84e7ba71981ea5343d41a0e9a8bed647c5143ce8c0a58d1a15549ab693a1328fea12ca42dfb94d5545d045fb4096ec
- SSDEEP 6144:AseMB+bvGjY8m+4vgPgeEFb8+gtveXL7T/saigjsubTS/0Rvs7eUa0t8x0ed+j2W:veMgbJ+4vgPgeEFb8+gtveXL7T/saig6
- TLSH T19B34934177FD241CF6F71BA6BAB98529ED7FBEA63F20D25D4005861F1630A408AA1733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fc:1e:b7:73:3f:d6:41:66:c9:4d:7b:06:61:42:e2:e3:64:02:b8:2a:2d:9f:53:3b:d0:40:c8:27:84:24:7a:65
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:84:98:e2:12:e0:78:a3:31:5d:00:00:00:00:04:84
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f4:17:46:85:c0:cb:3f:39:e5:00:01:00:00:01:f4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
245710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
232KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/web.config
- SHA256 37c031617bdc480fa9d0f924c8a90ba47909f9ec9cc4550f0c7883c4a407a935
- MD5 acea29837e6a303e60f1828c99abe0f6
- SHA1 c90fce2c84f51e1f55a866e5a107819c2b14e054
- SHA512 3f95751890290eea32e9446aed3a027b8cf44c645763f00f9126fe3ebd87db45acc75bf69cb72dac2a425ae093e0aa998a35d0ea3ec0dea3c854e2fffa0f6938
- TLSH T184F0978202840C978B732B17EAA0AA54FBA2A29F50105898F0DEB3B30F2215C03573B2
- MD5 SHA1 SHA512 TLSH
BusinessInsight-Agent-Package/zh-Hans/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d12450a0c88feaafbf3db907ba9e66e0735ecf43f9089a1b6b583675e561a571
- MD5 343fed5ca112865d01d04be245854ef8
- SHA1 ab7b9fd817ec1e434185a23e4db3804d4156a1d1
- SHA512 9ebe957643999038c71f173e8ba56edc02ed92ed8f31c0e1d1ad6d8070b91bdb2aa239cd071a1fb810b1386b830d52cd12a2f0d260f28c95860220976d0bb843
- SSDEEP 6144:lseMSi0JaN07RugqgDAHYkLax6l8Gg1+a21Lg0yKa21PPD+LFGKa//wmE:eeMSzRugqgDAHYkLax88Gg1+a21Lg0yR
- TLSH T1CC24A34227FC69ACF1B31FB87B7E8025E936BEFA6B41C29C1581994E0530A44DE61737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ab:4e:28:26:4c:25:0a:30:26:87:22:16:5e:d8:4b:81:3b:62:08:28:88:78:dd:a9:a6:61:b4:52:6a:c2:ba:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:07:2c:11:39:89:cd:85:fb:c5:00:01:00:00:02:07
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
220702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
208KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BusinessInsight-Agent-Package/zh-Hant/Microsoft.Data.SqlClient.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a045428a176c4a42518ef6918b93ba0ee4a126dd15b523cc123bb14cad55e21
- MD5 610db164b23a7ee1e81e97aec6322aa1
- SHA1 ec5aac04220f55f1174620e78ee12a8b1c777b65
- SHA512 45706897d92183cc32cd96b056818a0d81439c4e4024f030c3c9959b34141c4fa7eddf0ed7719a37b99058bae165c3e26d8adaa65988bfda343f50c8558471ef
- SSDEEP 6144:MseMl34LlQIMaIMgLgfPtb8kQkpYQbI5dhkjggB2d+CgXV2Rt4yT8zkMHh4WDN40:TeMl3YIMgLgfPtb8kQkpYQbI5dhkjggX
- TLSH T1CF24945A6BFE5A6CF2F32FB47BBA9019DD76BCE92E11D61E1009644E1531E008E61333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
68:32:42:94:e0:fa:b0:2d:6a:8f:76:a9:0c:0a:da:97:d0:0b:f3:3c:20:c1:e4:c5:e3:c2:8e:f8:59:7b:f5:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 14, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f4:17:46:85:c0:cb:3f:39:e5:00:01:00:00:01:f4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
224286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
211KB
Virtual Size
211KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ