Cad setup.zip
- SHA256 57d2bfb9c15ff2a56eac88b65a6cd7c1634b11a58da123696330d2a96a9aa8c3
Overview
overview
5Static
static
3Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/DAC/...es.dll
windows11-21h2-x64
1Setup/LICENSE.txt
windows11-21h2-x64
3Setup/Léame.txt
windows11-21h2-x64
3Setup/Setup.exe
windows11-21h2-x64
5Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Setup/DAC/bin/ja/SqlPackage.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
Setup/DAC/bin/ko/DacUnpack.Resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
Setup/DAC/bin/ko/Microsoft.Data.Tools.Schema.Sql.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
Setup/DAC/bin/ko/Microsoft.Data.Tools.Utilities.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
Setup/DAC/bin/ko/Microsoft.SqlServer.Dac.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral6
Sample
Setup/DAC/bin/ko/SqlPackage.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral7
Sample
Setup/DAC/bin/pt/DacUnpack.Resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral8
Sample
Setup/DAC/bin/pt/Microsoft.Data.Tools.Schema.Sql.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral9
Sample
Setup/DAC/bin/pt/Microsoft.Data.Tools.Utilities.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral10
Sample
Setup/DAC/bin/pt/Microsoft.SqlServer.Dac.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral11
Sample
Setup/DAC/bin/pt/SqlPackage.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral12
Sample
Setup/DAC/bin/ru/DacUnpack.Resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral13
Sample
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Sql.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral14
Sample
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Tasks.Sql.11.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral15
Sample
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Utilities.Sql.11.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral16
Sample
Setup/DAC/bin/ru/Microsoft.Data.Tools.Utilities.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral17
Sample
Setup/DAC/bin/ru/Microsoft.SqlServer.Dac.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral18
Sample
Setup/DAC/bin/ru/SqlPackage.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral19
Sample
Setup/DAC/bin/zh-Hans/DacUnpack.Resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral20
Sample
Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Schema.Sql.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral21
Sample
Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Utilities.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral22
Sample
Setup/DAC/bin/zh-Hans/Microsoft.SqlServer.Dac.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral23
Sample
Setup/DAC/bin/zh-Hans/SqlPackage.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral24
Sample
Setup/DAC/bin/zh-Hant/DacUnpack.Resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral25
Sample
Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Schema.Sql.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral26
Sample
Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Utilities.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral27
Sample
Setup/DAC/bin/zh-Hant/Microsoft.SqlServer.Dac.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral28
Sample
Setup/DAC/bin/zh-Hant/SqlPackage.resources.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
300 seconds
Behavioral task
behavioral29
Sample
Setup/LICENSE.txt
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
300 seconds
Behavioral task
behavioral30
Sample
Setup/Léame.txt
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
300 seconds
Behavioral task
behavioral31
Sample
Setup/Setup.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
300 seconds
General
- Target Cad setup.zip
- Size 71.8MB
- Sample260705-br74baf12s
- SHA256 57d2bfb9c15ff2a56eac88b65a6cd7c1634b11a58da123696330d2a96a9aa8c3
- MD5 4dc472e912ae292def0cdd7a3916a8fe
- SHA1 d60f62b6fbf0b4a618fcfadfbaef5225551b03d2
- SHA512 1bf122c61661d5fb82118ac9ef6248d2b5e964fcce6dba5a6c1d83e6272219ae6f7e5fc4f3ea115b811eebba914785c15da63200e2f66bb0e6dd705c8d2f28db
- SSDEEP 1572864:qJ5aRQ0AIESzwF5AQzm5ETcfoPsDF61/+n0e8L5jKpmqVjU5:qg1iAQ6gcfo08Z+0e8L5YlVjC
- TLSH T1CCF7333AC1B26865FC3BA47955BB424D20CC6AF9D4A01FF41FE42B5D02A9CD0761E6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Setup/About/KeyFile/1033/resources/lgpllibs.dll unpack001/Setup/About/KeyFile/1033/resources/libEGL.dll unpack001/Setup/About/resources/lgpllibs.dll unpack001/Setup/About/resources/libEGL.dll - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup/About/IA2Marshal.dll unpack001/Setup/About/KeyFile/1033/resources/Engine_x32.dll unpack001/Setup/About/resources/Engine_x32.dll - Untrusted Codesign Signers 48 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Setup/DAC/SDK/100/KeyFile/1033/sqlsysclrtypes_keyfile.dll unpack001/Setup/DAC/SDK/100/KeyFile/1049/sqlsysclrtypes_keyfile.dll unpack001/Setup/DAC/SDK/100/SDK/Assemblies/Microsoft.SqlServer.Types.dll unpack001/Setup/DAC/SDK/100/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll unpack001/Setup/DAC/bin/Microsoft.Data.Tools.Schema.Sql.dll unpack001/Setup/DAC/bin/Microsoft.Data.Tools.Utilities.dll unpack001/Setup/DAC/bin/Microsoft.SqlServer.Dac.dll unpack001/Setup/DAC/bin/de/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/de/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/de/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/de/SqlPackage.resources.dll unpack001/Setup/DAC/bin/es/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/es/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/es/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/es/SqlPackage.resources.dll unpack001/Setup/DAC/bin/fr/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/fr/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/fr/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/fr/SqlPackage.resources.dll unpack001/Setup/DAC/bin/it/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/it/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/it/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/it/SqlPackage.resources.dll unpack001/Setup/DAC/bin/ja/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/ja/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/ja/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/ja/SqlPackage.resources.dll unpack001/Setup/DAC/bin/ko/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/ko/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/ko/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/ko/SqlPackage.resources.dll unpack001/Setup/DAC/bin/pt/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/pt/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/pt/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/pt/SqlPackage.resources.dll unpack001/Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/ru/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/ru/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/ru/SqlPackage.resources.dll unpack001/Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/zh-Hans/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/zh-Hans/SqlPackage.resources.dll unpack001/Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Schema.Sql.resources.dll unpack001/Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Utilities.resources.dll unpack001/Setup/DAC/bin/zh-Hant/Microsoft.SqlServer.Dac.resources.dll unpack001/Setup/DAC/bin/zh-Hant/SqlPackage.resources.dll unpack001/Setup/Setup.exe
File Explorer
-
Cad setup.zip.zip 71.8MB
-
Setup/About/IA2Marshal.dll.dll 77KB
-
Setup/About/KeyFile/1033/resources/CreativeCloud_icon.svg.svg 1KB
-
Setup/About/KeyFile/1033/resources/DropGraphicFiles.svg.svg 4KB
-
Setup/About/KeyFile/1033/resources/Engine_x32.dll.dll 108KB
-
Setup/About/KeyFile/1033/resources/GroupOnboardingBackground_CCD.png.png 281KB
-
Setup/About/KeyFile/1033/resources/GroupOnboardingGraphic_CCD.png.png 151KB
-
Setup/About/KeyFile/1033/resources/MissingLinkedElement_Dark.svg.svg .xml 1KB
-
Setup/About/KeyFile/1033/resources/MissingLinkedElement_Light.svg.svg .xml 1KB
-
Setup/About/KeyFile/1033/resources/NewUserEmpty_dark.svg.svg 2KB
-
Setup/About/KeyFile/1033/resources/NewUserEmpty_light.svg.svg 2KB
-
Setup/About/KeyFile/1033/resources/ScrollDownArrow_dark.svg.svg .xml 513B
-
Setup/About/KeyFile/1033/resources/ScrollDownArrow_darker.svg.svg .xml 513B
-
Setup/About/KeyFile/1033/resources/ScrollDownArrow_light.svg.svg .xml 513B
-
Setup/About/KeyFile/1033/resources/ScrollDownArrow_lighter.svg.svg .xml 513B
-
Setup/About/KeyFile/1033/resources/ScrollUpArrow_dark.svg.svg .xml 510B
-
Setup/About/KeyFile/1033/resources/ScrollUpArrow_darker.svg.svg .xml 510B
-
Setup/About/KeyFile/1033/resources/ScrollUpArrow_light.svg.svg .xml 510B
-
Setup/About/KeyFile/1033/resources/ScrollUpArrow_lighter.svg.svg .xml 510B
-
Setup/About/KeyFile/1033/resources/aif_filetype_256.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/aiff_filetype_256.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/aiff_filetype_64.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/captureCoachMark.png.png 146KB
-
Setup/About/KeyFile/1033/resources/checkerboard.png.png 1KB
-
Setup/About/KeyFile/1033/resources/coachmark.png.png 500KB
-
Setup/About/KeyFile/1033/resources/icons.svg.svg 111KB
-
Setup/About/KeyFile/1033/resources/lgpllibs.dll.dll 37KB
-
Setup/About/KeyFile/1033/resources/libEGL.dll.dll 39KB
-
Setup/About/KeyFile/1033/resources/m4a_filetype_256.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/m4a_filetype_64.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/mp2_filetype_256.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/mp2_filetype_64.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/mp3_filetype_256.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/mp3_filetype_64.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/qtmultimedia_m3u.dll.dll 33KB
-
Setup/About/KeyFile/1033/resources/scroll_triangle_down_dark.svg.svg .xml 499B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_down_light.svg.svg .xml 516B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_left_dark.svg.svg .xml 509B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_left_light.svg.svg .xml 524B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_right_dark.svg.svg .xml 509B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_right_light.svg.svg .xml 524B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_up_dark.svg.svg .xml 499B
-
Setup/About/KeyFile/1033/resources/scroll_triangle_up_light.svg.svg .xml 516B
-
Setup/About/KeyFile/1033/resources/unlock_coachmark.png.png 129KB
-
Setup/About/KeyFile/1033/resources/wait_32.gif.gif 613B
-
Setup/About/KeyFile/1033/resources/wav_filetype_256.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/resources/wav_filetype_64.svg.svg .xml 3KB
-
Setup/About/KeyFile/1033/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/About/UI.txt6KB
-
Setup/About/qtmultimedia_m3u.dll.dll 33KB
-
Setup/About/resources/CreativeCloud_icon.svg.svg 1KB
-
Setup/About/resources/DropGraphicFiles.svg.svg 4KB
-
Setup/About/resources/Engine_x32.dll.dll 108KB
-
Setup/About/resources/GroupOnboardingBackground_CCD.png.png 281KB
-
Setup/About/resources/GroupOnboardingGraphic_CCD.png.png 151KB
-
Setup/About/resources/MissingLinkedElement_Dark.svg.svg .xml 1KB
-
Setup/About/resources/MissingLinkedElement_Light.svg.svg .xml 1KB
-
Setup/About/resources/NewUserEmpty_dark.svg.svg 2KB
-
Setup/About/resources/NewUserEmpty_light.svg.svg 2KB
-
Setup/About/resources/ScrollDownArrow_dark.svg.svg .xml 513B
-
Setup/About/resources/ScrollDownArrow_darker.svg.svg .xml 513B
-
Setup/About/resources/ScrollDownArrow_light.svg.svg .xml 513B
-
Setup/About/resources/ScrollDownArrow_lighter.svg.svg .xml 513B
-
Setup/About/resources/ScrollUpArrow_dark.svg.svg .xml 510B
-
Setup/About/resources/ScrollUpArrow_darker.svg.svg .xml 510B
-
Setup/About/resources/ScrollUpArrow_light.svg.svg .xml 510B
-
Setup/About/resources/ScrollUpArrow_lighter.svg.svg .xml 510B
-
Setup/About/resources/aif_filetype_256.svg.svg .xml 3KB
-
Setup/About/resources/aiff_filetype_256.svg.svg .xml 3KB
-
Setup/About/resources/aiff_filetype_64.svg.svg .xml 3KB
-
Setup/About/resources/captureCoachMark.png.png 146KB
-
Setup/About/resources/checkerboard.png.png 1KB
-
Setup/About/resources/coachmark.png.png 500KB
-
Setup/About/resources/icons.svg.svg 111KB
-
Setup/About/resources/lgpllibs.dll.dll 37KB
-
Setup/About/resources/libEGL.dll.dll 39KB
-
Setup/About/resources/m4a_filetype_256.svg.svg .xml 3KB
-
Setup/About/resources/m4a_filetype_64.svg.svg .xml 3KB
-
Setup/About/resources/mp2_filetype_256.svg.svg .xml 3KB
-
Setup/About/resources/mp2_filetype_64.svg.svg .xml 3KB
-
Setup/About/resources/mp3_filetype_256.svg.svg .xml 3KB
-
Setup/About/resources/mp3_filetype_64.svg.svg .xml 3KB
-
Setup/About/resources/qtmultimedia_m3u.dll.dll 33KB
-
Setup/About/resources/scroll_triangle_down_dark.svg.svg .xml 499B
-
Setup/About/resources/scroll_triangle_down_light.svg.svg .xml 516B
-
Setup/About/resources/scroll_triangle_left_dark.svg.svg .xml 509B
-
Setup/About/resources/scroll_triangle_left_light.svg.svg .xml 524B
-
Setup/About/resources/scroll_triangle_right_dark.svg.svg .xml 509B
-
Setup/About/resources/scroll_triangle_right_light.svg.svg .xml 524B
-
Setup/About/resources/scroll_triangle_up_dark.svg.svg .xml 499B
-
Setup/About/resources/scroll_triangle_up_light.svg.svg .xml 516B
-
Setup/About/resources/unlock_coachmark.png.png 129KB
-
Setup/About/resources/wait_32.gif.gif 613B
-
Setup/About/resources/wav_filetype_256.svg.svg .xml 3KB
-
Setup/About/resources/wav_filetype_64.svg.svg .xml 3KB
-
Setup/DAC/KeyFile/1033/sharedmanagementobjects_keyfile.dll.dll 23KB
-
Setup/DAC/KeyFile/1033/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/DAC/KeyFile/1049/sharedmanagementobjects_keyfile.dll.dll 23KB
-
Setup/DAC/KeyFile/1049/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/SqlUserInstance.rll.dll 20KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/de-DE/SqlUserInstance.rll.mui.dll 22KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui.dll 20KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/es-ES/SqlUserInstance.rll.mui.dll 22KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/fr-FR/SqlUserInstance.rll.mui.dll 24KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/it-IT/SqlUserInstance.rll.mui.dll 22KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/ja-JP/SqlUserInstance.rll.mui.dll 17KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/ko-KR/SqlUserInstance.rll.mui.dll 17KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/pt-BR/SqlUserInstance.rll.mui.dll 21KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui.dll 21KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/zh-CN/SqlUserInstance.rll.mui.dll 15KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/zh-TW/SqlUserInstance.rll.mui.dll 15KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/SqlUserInstance.dll.dll 168KB
-
Setup/DAC/License Terms/150/LocalDB/Binn/localdbxeventconfig.xml1KB
-
Setup/DAC/License Terms/150/Shared/xe.dll.dll 616KB
-
Setup/DAC/License Terms/License_SQLNCLI_ENU.txt13KB
-
Setup/DAC/License Terms/SqlUserInstance.dll.dll 150KB
-
Setup/DAC/LocalDB/Binn/Resources/SqlUserInstance.rll.dll 17KB
-
Setup/DAC/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui.dll 26KB
-
Setup/DAC/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui.dll 27KB
-
Setup/DAC/LocalDB/Binn/SqlUserInstance.dll.dll 150KB
-
Setup/DAC/LocalDB/Binn/localdbxeventconfig.xml1KB
-
Setup/DAC/SDK/100/KeyFile/1033/sqlsysclrtypes_keyfile.dll.dll 13KB
-
Setup/DAC/SDK/100/KeyFile/1049/sqlsysclrtypes_keyfile.dll.dll 13KB
-
Setup/DAC/SDK/100/SDK/Assemblies/Microsoft.SqlServer.Types.dll.dll 303KB
-
Setup/DAC/SDK/100/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll.dll 41KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.ConnectionInfo.dll.dll 167KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.ConnectionInfoExtended.dll.dll 107KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Dmf.Adapters.dll.dll 71KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Dmf.dll.dll 355KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.DmfSqlClrWrapper.dll.dll 22KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.Collector.dll.dll 99KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.CollectorEnum.dll.dll 47KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.RegisteredServers.dll.dll 87KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.Sdk.Sfc.dll.dll 495KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.Utility.dll.dll 323KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.UtilityEnum.dll.dll 63KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.XEvent.dll.dll 159KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.XEventEnum.dll.dll 55KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.PolicyEnum.dll.dll 51KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.RegSvrEnum.dll.dll 83KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SString.dll.dll 43KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.ServiceBrokerEnum.dll.dll 55KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Smo.dll.dll 3.4MB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SmoExtended.dll.dll 227KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SqlEnum.dll.dll 1.3MB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SqlWmiManagement.dll.dll 175KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.TransactSql.ScriptDom.dll.dll 2.3MB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Types.dll.dll 374KB
-
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.WmiEnum.dll.dll 55KB
-
Setup/DAC/SDK/Assemblies/Redist_TSqlLanguageService.txt25B
-
Setup/DAC/SDK/Assemblies/ru/License_SMO.txt36KB
-
Setup/DAC/SDK/Assemblies/ru/License_TSqlLangSvc.txt17KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.ConnectionInfo.xml173KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.ConnectionInfoExtended.xml69KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.Adapters.resources.dll.dll 39KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.resources.dll.dll 55KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.xml651KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.DmfSqlClrWrapper.xml1KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Collector.resources.dll.dll 26KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Collector.xml00075KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.CollectorEnum.resources.dll.dll 43KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Sdk.Sfc.resources.dll.dll 159KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Sdk.Sfc.xml1.1MB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Utility.resources.dll.dll 71KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Utility.xml162KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.UtilityEnum.xml156B
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.XEvent.resources.dll.dll 47KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.RegSvrEnum.resources.dll000.dll 21KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.RegSvrEnum.xml37KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.ServiceBrokerEnum.xml6KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Smo.xml5.9MB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.SmoExtended.xml208KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.SqlEnum.xml827KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.SqlWmiManagement.xml104KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.TransactSql.ScriptDom.Resources.dll.dll 38KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll.dll 55KB
-
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.WmiEnum.xml6KB
-
Setup/DAC/SDK/Include/sqlncli.h171KB
-
Setup/DAC/SDK/Lib/x64/sqlncli11.lib6KB
-
Setup/DAC/SDK/Lib/x86/sqlncli11.lib6KB
-
Setup/DAC/Shared/Microsoft.SqlServer.Types.dll.dll 374KB
-
Setup/DAC/Shared/Resources/1033/sqlevn70.rll.dll 2.5MB
-
Setup/DAC/Shared/Resources/1049/sqlevn70.rll.dll 2.8MB
-
Setup/DAC/Shared/instapi110.dll.dll 47KB
-
Setup/DAC/Shared/lssyscat.dat1.0MB
-
Setup/DAC/Shared/sqldk.dll.dll 1.6MB
-
Setup/DAC/Shared/sqllang.dll.dll 24.8MB
-
Setup/DAC/Shared/sqllangsvc.dll.dll 51KB
-
Setup/DAC/Shared/sqlos.dll.dll 23KB
-
Setup/DAC/Shared/sqltses.dll.dll 7.8MB
-
Setup/DAC/Shared/xe.dll.dll 399KB
-
Setup/DAC/bin/1028/DacUnpack.rll.dll 132KB
-
Setup/DAC/bin/1031/1028/DacUnpack.rll.dll 132KB
-
Setup/DAC/bin/1031/1033/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1031/1036/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1031/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1033/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1036/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1040/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1041/DacUnpack.rll.dll 132KB
-
Setup/DAC/bin/1041/KeyFile/1033/sharedmanagementobjects_keyfile.dll.dll 23KB
-
Setup/DAC/bin/1041/KeyFile/1033/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/DAC/bin/1041/KeyFile/1049/sharedmanagementobjects_keyfile.dll.dll 23KB
-
Setup/DAC/bin/1041/KeyFile/1049/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/DAC/bin/1042/DacUnpack.rll.dll 132KB
-
Setup/DAC/bin/1046/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/1049/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/2052/DacUnpack.rll.dll 132KB
-
Setup/DAC/bin/3082/DacUnpack.rll.dll 133KB
-
Setup/DAC/bin/KeyFile/1033/sharedmanagementobjects_keyfile.dll.dll 23KB
-
Setup/DAC/bin/KeyFile/1033/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/DAC/bin/KeyFile/1049/sharedmanagementobjects_keyfile.dll.dll 23KB
-
Setup/DAC/bin/KeyFile/1049/sqlsysclrtypes_keyfile.dll.dll 23KB
-
Setup/DAC/bin/Microsoft.Data.Tools.Prototype.Dac.Service3.dll.dll 87KB
-
Setup/DAC/bin/Microsoft.Data.Tools.Schema.Sql.dll.dll 7.0MB
-
Setup/DAC/bin/Microsoft.Data.Tools.Schema.Tasks.Sql.11.dll.dll 150KB
-
Setup/DAC/bin/Microsoft.Data.Tools.Schema.Utilities.Sql.11.dll.dll 1.1MB
-
Setup/DAC/bin/Microsoft.Data.Tools.Utilities.dll.dll 430KB
-
Setup/DAC/bin/Microsoft.SqlServer.Dac.dll.dll 162KB
-
Setup/DAC/bin/Redist_DACFramework.txt18B
-
Setup/DAC/bin/SqlPackage.exe.config803B
-
Setup/DAC/bin/SsdtCompatibility.xml143B
-
Setup/DAC/bin/bin.rar.rar 43.4MB
-
Setup/DAC/bin/de/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/de/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/de/Microsoft.Data.Tools.Utilities.resources.dll.dll 31KB
-
Setup/DAC/bin/de/Microsoft.SqlServer.Dac.resources.dll.dll 18KB
-
Setup/DAC/bin/de/SqlPackage.resources.dll.dll 23KB
-
Setup/DAC/bin/en/License_DACFx.txt13KB
-
Setup/DAC/bin/es/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/es/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/es/Microsoft.Data.Tools.Utilities.resources.dll.dll 31KB
-
Setup/DAC/bin/es/Microsoft.SqlServer.Dac.resources.dll.dll 17KB
-
Setup/DAC/bin/es/SqlPackage.resources.dll.dll 23KB
-
Setup/DAC/bin/fr/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/fr/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/fr/Microsoft.Data.Tools.Utilities.resources.dll.dll 31KB
-
Setup/DAC/bin/fr/Microsoft.SqlServer.Dac.resources.dll.dll 18KB
-
Setup/DAC/bin/fr/SqlPackage.resources.dll.dll 23KB
-
Setup/DAC/bin/it/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/it/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/it/Microsoft.Data.Tools.Utilities.resources.dll.dll 31KB
-
Setup/DAC/bin/it/Microsoft.SqlServer.Dac.resources.dll.dll 17KB
-
Setup/DAC/bin/it/SqlPackage.resources.dll.dll 23KB
-
Setup/DAC/bin/ja/DacUnpack.Resources.dll.dll 154KB
-
Setup/DAC/bin/ja/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/ja/Microsoft.Data.Tools.Utilities.resources.dll.dll 33KB
-
Setup/DAC/bin/ja/Microsoft.SqlServer.Dac.resources.dll.dll 19KB
-
Setup/DAC/bin/ja/SqlPackage.resources.dll.dll 24KB
-
Setup/DAC/bin/ko/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/ko/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/ko/Microsoft.Data.Tools.Utilities.resources.dll.dll 31KB
-
Setup/DAC/bin/ko/Microsoft.SqlServer.Dac.resources.dll.dll 17KB
-
Setup/DAC/bin/ko/SqlPackage.resources.dll.dll 23KB
-
Setup/DAC/bin/pt/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/pt/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/pt/Microsoft.Data.Tools.Utilities.resources.dll.dll 31KB
-
Setup/DAC/bin/pt/Microsoft.SqlServer.Dac.resources.dll.dll 17KB
-
Setup/DAC/bin/pt/SqlPackage.resources.dll.dll 22KB
-
Setup/DAC/bin/ru/DacUnpack.Resources.dll.dll 154KB
-
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.3MB
-
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Tasks.Sql.11.resources.dll.dll 24KB
-
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Utilities.Sql.11.resources.dll.dll 63KB
-
Setup/DAC/bin/ru/Microsoft.Data.Tools.Utilities.resources.dll.dll 36KB
-
Setup/DAC/bin/ru/Microsoft.SqlServer.Dac.resources.dll.dll 19KB
-
Setup/DAC/bin/ru/SqlPackage.resources.dll.dll 28KB
-
Setup/DAC/bin/zh-Hans/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Utilities.resources.dll.dll 29KB
-
Setup/DAC/bin/zh-Hans/Microsoft.SqlServer.Dac.resources.dll.dll 16KB
-
Setup/DAC/bin/zh-Hans/SqlPackage.resources.dll.dll 20KB
-
Setup/DAC/bin/zh-Hant/DacUnpack.Resources.dll.dll 153KB
-
Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Schema.Sql.resources.dll.dll 1.2MB
-
Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Utilities.resources.dll.dll 29KB
-
Setup/DAC/bin/zh-Hant/Microsoft.SqlServer.Dac.resources.dll.dll 16KB
-
Setup/DAC/bin/zh-Hant/SqlPackage.resources.dll.dll 21KB
-
Setup/LICENSE.txt1KB
-
Setup/Léame.txt93B
-
Setup/Setup.exe.exe 782.9MB
Setup/About/IA2Marshal.dll
- IMPHASH 647a85e36e41699e332c1c106f975a6f
- SHA256 70db8976911089b12d584faa1bc48cbbccffa8e79afc70273cc4a8352a0dc615
- MD5 31fcd15b9a06ac591b130921b0b006c8
- SHA1 81a485e90a33ced93033ae9a4e079639bb283a31
- SHA512 1125e34a0270af7135040e2ab44a5ca749a230ad34bc23b60f3ac529579a21b4d72bf0cf574352469b97c66515cf2d2792e43ab29d9888131053be34d3a37249
- SSDEEP 768:67afxi7heDjJNhM1cUPKRK8MJL6cgNkBewiLW3WwKWeV:yw5DFNhMGUPKRK8MJGhG/iLay
- TLSH T1A5735346BB50D4A2C41C853944574F996FB1EE99AFC253D32394322E2FB33C06F396A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4512
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/var/tmp/build/firefox-7913966da16e/obj-x86_64-w64-mingw32/accessible/interfaces/ia2/IA2Marshal.pdb
kernel32
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
rpcrt4
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrOleAllocate
NdrOleFree
NdrStubCall2
NdrStubForwardingFunction
ole32
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
oleaut32
BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
VARIANT_UserFree
VARIANT_UserMarshal
VARIANT_UserSize
VARIANT_UserUnmarshal
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
api-ms-win-crt-private-l1-1-0
memcpy
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
mozglue
calloc
free
api-ms-win-crt-string-l1-1-0
strlen
strncmp
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Setup/About/KeyFile/1033/resources/CreativeCloud_icon.svg
- SHA256 e6ea0ed1b3b944efaec9db8a460c80b17f3a9615d62e480abe27f11f193f4970
- MD5 6a64e1497b1b02f66585f92cb447214a
- SHA1 3a885e6376d2e09e6307243ab64b8095cbb2fe2a
- SHA512 454dd6771ea2b886ae4aeafe582c8b3db6f0e94694538706c64929cf526685f480645cdded8505c16a5320ce34d12bebd33b23beb65e135a24a288a79eb7d593
- TLSH T1B6219817839286B9EE8EC0396605298571D0CDD3E1B4E1D4ABAF1402C56CCD0A69D3EB
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/DropGraphicFiles.svg
- SHA256 eef63f34e5d56f9b0cd56aa7e79e5b43ca51405e6fa332ffd3bb4dbb81d605b9
- MD5 d75b221927d956d8bc1e740dd3ad68f4
- SHA1 e33a92f7373f7ce03d8f3f2ba195f436c5fe11d9
- SHA512 1b57da36511b3f3a0b30bfbf8530ff256a89704e823026b3465be73cbaa347665ef561c6c16227bec885e6f23507f30aee50110df7862e03236da4e1a9610d4c
- SSDEEP 48:eUA9aJK+5nIz7jqtOy5KNzs7gAU7LEWW/U3DPvufQANL3nXRweJ8ZABvcqAhOIOb:IaJrVMs7cPEBMaVchSrZm4t6hEpdOwOm
- TLSH T1BFA13FFF1391CAEFB24963842E191A1D33B164EAB25441B48BD72EE25F64CC79A34870
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/Engine_x32.dll
- IMPHASH 2c8b6407e1519c6ac69e454ee4a811d9
- SHA256 bb77efde7a4596b880cb995f863f371ae212736a9cc694ea093dff5bcf6a6c67
- MD5 4f2712e0d78459a1e9d9940015505b52
- SHA1 1d3cde855b59567a52e5fd60b2671a363b65f706
- SHA512 8c96da16c32cfa6f3e0e940952079abfc716d9900c4b0b8f01ec7f163bf2b10cfd3341b25c39caabbf8c34b7ac0a6b460a65af912f4bde8488ed82af70625512
- SSDEEP 3072:JAcPlem5+yyDJhZcmy3sRi0+ba2VWndROdw9um:Jgm5+yoxy3s2baE2dRX9n
- TLSH T166B34B12B6A0CD76CA121236DE6C6F58D2E9E5241FF05E83235C0FAC5E3EF679113A16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\thailand\890a\cprd32\AOL\misc\coreclient\abls\abls.pdb
supersub
ord1611
ord417
ord1610
ord984
ord1609
ord411
ord1725
ord1730
ord72
idb
ord1
ord12
ord15
ord13
ord9
ord4
ord6
ord7
ord8
ord5
ord3
synccore
?ConvertHostTagToLSTag@CSyncUtil@@SAJABVTString@@AAJPAU_SYNC_TAGS@@H@Z
??0CSyncHttp@@QAE@PBU_SYNC_TAGS@@HPAVCThreadSafeSocket@@@Z
??1CSyncHttp@@QAE@XZ
?ReadLine@CSyncUtil@@SAJAAKAAVTString@@PAVCSyncHttp@@@Z
?SyncSetHeader@CSyncHttp@@QAEKPAU_SYNCHEADERINFO@@@Z
?GetLValAndRVal@CSyncUtil@@SAJABVTString@@AAV2@1@Z
?GetHostOperEntryType@CSyncUtil@@SAJAAVTString@@0AAJ@Z
?ClearBuffer@CSyncUtil@@SAXPAVCSyncHttp@@@Z
?SyncGetFileSize@CSyncHttp@@QAEKPAK@Z
?SyncSetURLField@CSyncHttp@@QAEKHPAD@Z
?NeedToKillThread@CSyncUtil@@SA_NPAX@Z
nsUnescape
?SkipLine@CSyncUtil@@SAJAAKHAAVTString@@PAVCSyncHttp@@@Z
?SyncStartURLString@CSyncHttp@@QAEKHPAD@Z
?SyncGetServerResponse@CSyncHttp@@QAEPBDXZ
?SyncQuery@CSyncHttp@@QAEKPAD@Z
?SyncCloseAllHttpHandles@CSyncHttp@@QAEXXZ
?ValidHostType@CSyncUtil@@SA_NABJQBJH@Z
manager
??1ABDataStore@@UAE@XZ
ord368
ord372
ord342
?RemoveEntry@ABDataStore@@QAEHPBD000000@Z
?AddEntry@ABDataStore@@QAEHPBD000000@Z
?RemoveItem@CACDataStore@@QAEHPBD00K_N@Z
??0ABDataStore@@QAE@XZ
?AddItem@CACDataStore@@QAEHPBD00K@Z
ord393
msvcp71
?_Nomemory@std@@YAXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
msvcr71
_adjust_fdiv
__security_error_handler
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__lconv_init
__CppXcptFilter
_initterm
_callnewh
strtol
_strlwr
memset
_except_handler3
free
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??_V@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memmove
memcpy
strlen
sprintf
malloc
strncpy
rename
_purecall
realloc
strcmp
strcpy
user32
LoadStringA
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetFullPathNameA
DeleteFileA
GetFileAttributesA
DisableThreadLibraryCalls
lstrlenA
CreateMutexA
CloseHandle
lstrcpynA
ReleaseMutex
WaitForSingleObject
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
zlib
ord3
Name
.text
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
552B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=93, version=2179,
count=2, id=93, version=2067,
count=4, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=9, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=15, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=222, id=1, productName=Unmarked objects,
count=28, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Setup/About/KeyFile/1033/resources/GroupOnboardingBackground_CCD.png
- SHA256 b5cc8307253d273aa5d89cfed2e216ec9a47db41f52fc1b15a8cc4790933efb1
- MD5 5fc4323989820ca53d5e7ec7ddb5975a
- SHA1 1a94b4ffab4bcfe7d3c83437e70898e04a57ae1e
- SHA512 7f4cfb56e047e1be4e3cafdcfcb8dccc17cb2b151bea41843a6ddbd4043fcd70fae17a3f48233d58132c6672185b3fbdab0f65b5b867112d3ee8d3d75c30ac3a
- SSDEEP 6144:iTe8lhGK7hksOP+bpXxAHnxetIwI26I4jw0:L8lhGOjd94l
- TLSH T1B05423AAD4E34B9C849D78DFAE635D0F15F268FB5343384A9C2E58B0D241041FEA6F24
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/GroupOnboardingGraphic_CCD.png
- SHA256 2cad134452e77c9f25a23fbad663e2f0d8bdbe7fc0155d85b64ff5ad9fcc82d1
- MD5 10615aea053a64f4e10e0b33cbfdfbc4
- SHA1 680c4883dad07f356e3912f372bfc1348d70155a
- SHA512 718ee59633f9597cbfb87adedddfeee2e822240c7fce3e6db14a87b438eda31df3cfb18700090392ed7c5518063c3569d8e41561d3c93a1447c65a1a7d77085c
- SSDEEP 3072:VjBdi+wKmOcx5GqG5KUubOq8rz1QV3xUAA2AH:VftwVfx5LgcxUAA2AH
- TLSH T1CFE3129284E9E933D76698DC474339A43FB015703AE66966CBF8019B160F83C2D93FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/MissingLinkedElement_Dark.svg
- SHA256 16f2efcbb0246a503a86f50b8f966fc250a72a8ab8c3736bc0cf79cd7ed957d7
- MD5 29f044467dde443be87dcdf7518f9b9c
- SHA1 bcd4fd5bc8987a6e10095253e0de2d76abcb0bbf
- SHA512 a60b9505fbf0bf72389ec574e4971c3b13fb3db87abdedb453fa3e9cbbc966e3e4e95df89149a0d519b08bbe9a2057c0b0256b831702da4c946699faadacafd4
- TLSH T1471112FCB27C9CEC092A4F71FB7770B5A11F21E5078552C888C1E5F288614F1EE1126A
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/MissingLinkedElement_Light.svg
- SHA256 939148072ad83c2e2654434872629f63fba42d54fc0d490fa6959cab9c190e4d
- MD5 6b734b0cd51b85dd6ff9346b90bbab8e
- SHA1 266f5f67b9798186524f2cfa4b5293609fadbbad
- SHA512 7f0604a89dd688f6cc9c12a26b3a90a3f23bd860f5de20f7d88ebce243e3a5a37305d2fdd68ef53f4c4dd65e76d2487abd9f89137a7e54d3968f8e6ef0a205df
- TLSH T12A1135FCB36C5CBD052A5F71E777B0E6A11F25E4074245C884C5E5B188604A19A01267
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/NewUserEmpty_dark.svg
- SHA256 a41c4492dfba858f85e90cc6ec78132c67a53c3612db3a4241d509b4276ff9c8
- MD5 e0b69de845834f4a42e18775209cfeb5
- SHA1 b5fc23ca5f08e671bbad75b3eb0573c285c1102f
- SHA512 fef733f19ae30987d77fbe8fae646a964fddd1cd3217ee0cbf0cd23cc0e189a71e7bd0c62c380aa6d6267e099778acdd57d35fb6c5d1f89fd694b96775c0012a
- TLSH T19851FD26835287E8BEF8541C2DD40444F6D4CC87E8B8F1D8B2EE8019DFDC8E4959CB9A
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/NewUserEmpty_light.svg
- SHA256 488e48d504cff2f5c9d589c11ff4226bb64db3da5aa59bbbb2652a434d0cb2ec
- MD5 d5a58cc52c3244bdc70039ab96dd415d
- SHA1 2fc0ec480b66757e9b4e363d7b8f6e245635c6cc
- SHA512 c4f975573223447af3465453772d585444b0a5a5182fda13d8ff269c748e87619717c4d3fb64442720938b44137701fbe91a59760b0b7caba3d1e66c48cf8d09
- TLSH T1FC51ED26435287E8BEE8941C2DD40444F6D4CC87E8B8F1D8B2EE8019DFDC8E4959CB96
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollDownArrow_dark.svg
- SHA256 740b0c8374faadd98639b72a76ae9e238df2d7221f85f92c6618b90b5dc146df
- MD5 392596491d185d364db9f745a40a7627
- SHA1 19a512dd279c22f7b8755c5af5597ff490a96303
- SHA512 d88e6b82b10a9e9b261b9adadf18f604f3c69995d4c64e18e930222f26462f38a553a99127b962a552b06cae062501835c3e0ef10438555476e05c4dc1ec74cb
- TLSH T111F0C04D86849CBA9030CB6DB3BCAAC38F743147C3440C9884A12DB7E250948194279C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollDownArrow_darker.svg
- SHA256 d5b9c4e856cfe146aba59ad8654a757f68333ef766692a0a762e2fc84edb4aff
- MD5 9de5f6c80862b02ebdaf5586048dbaa1
- SHA1 e8691137a2105da5b4682d4a33d65ab90a402ac4
- SHA512 d8902cc0b568d4aad8ad0df72e2430942c79ccb16e9f029c1c42e9f7b1612de8c9de5ab22b1ec12c7e20e8c7b32d4533e05fbe120b246c23901ffb4f4030f837
- TLSH T174F0C04D86859C7A90318B29B3BCAAC2CF742187C2440C9884A53CB7A6549481A4279C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollDownArrow_light.svg
- SHA256 9160f4307df3a3226b3e43c1a94fa5d3d948aebe8374fc589445113a9b123a03
- MD5 e3ea7f7f1e30adae593120641bc99255
- SHA1 98893bc914507a2aa4e302eb28ac37ad91a50d07
- SHA512 df24dc6f4a5b25d8b8e4519c349357d5baa52c0068b1e09aebf6d0461d842b5ef45e6028806841d355677ee72acaac1e2b85de25f314d08134a7c965c571033f
- TLSH T145F0C04D86849C7A90308B29B3BCAAC28F742147C2440C9884A13CB7E29084819427DC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollDownArrow_lighter.svg
- SHA256 740b0c8374faadd98639b72a76ae9e238df2d7221f85f92c6618b90b5dc146df
- MD5 392596491d185d364db9f745a40a7627
- SHA1 19a512dd279c22f7b8755c5af5597ff490a96303
- SHA512 d88e6b82b10a9e9b261b9adadf18f604f3c69995d4c64e18e930222f26462f38a553a99127b962a552b06cae062501835c3e0ef10438555476e05c4dc1ec74cb
- TLSH T111F0C04D86849CBA9030CB6DB3BCAAC38F743147C3440C9884A12DB7E250948194279C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollUpArrow_dark.svg
- SHA256 57d6656956b4394e3d2ce980869023e924640b23906895f1e33b1a44a9838a29
- MD5 8bb0b63065fc6aebaab0b8a8b517ee7e
- SHA1 7c58e190675a8c9a24b1abe0867a4b9ddced0dab
- SHA512 360d40625303707e97d5374383a039a212407972653dde64af290ea05a3f8af5205f475fd7684f2d144d05038a7cb423f47e349d5e86b8dc131fb97b0fc94339
- TLSH T175F0C04987849C7A50358765B3BDA6C397703083C7451CD8C4A1397BA650958064275C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollUpArrow_darker.svg
- SHA256 c4013e0df4edcffc65859194176d683d6bd740a3d45d6aeac964d5cfaa0ce4d5
- MD5 b34c2f03e784153382757df0fa260b1f
- SHA1 5e63168f50e9ad1218cc16f61c7abab98fd2bddf
- SHA512 aaa6483d2a385920a809c43e49258044a350152a1b6489f9abe3ec80d148a63576e71bc71569d6204bf5593d06ecb6fce5e87942a59a21240c2973fbc7883ed4
- TLSH T172F0054D87859C3B50358721B3FDA6C3D77030C7C7451CD8C4A13D7BA750948064275C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollUpArrow_light.svg
- SHA256 f670de0a5d653e636fc1801284cd8f7057da075d551bc9e6ad5c8eab32567bc5
- MD5 bc93867d4a2cfdabeeeee4953e469cc1
- SHA1 4971f2cfef4046eb51f2940fc06a30faa8cdb326
- SHA512 4c76c3df979b2894a901fa5abb4387b7cb174fe1541787d3bd99af6ee50478f298fecbf3935d7d05a669cfa3f86b70ec8aefc444f3855213568e9e7cefba8439
- TLSH T1E5F0C04997849C3A50358721B3BDA6C397702083C6451CD8C4A139BBA6D195806427AC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/ScrollUpArrow_lighter.svg
- SHA256 57d6656956b4394e3d2ce980869023e924640b23906895f1e33b1a44a9838a29
- MD5 8bb0b63065fc6aebaab0b8a8b517ee7e
- SHA1 7c58e190675a8c9a24b1abe0867a4b9ddced0dab
- SHA512 360d40625303707e97d5374383a039a212407972653dde64af290ea05a3f8af5205f475fd7684f2d144d05038a7cb423f47e349d5e86b8dc131fb97b0fc94339
- TLSH T175F0C04987849C7A50358765B3BDA6C397703083C7451CD8C4A1397BA650958064275C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/aif_filetype_256.svg
- SHA256 363fbc62ff46d1462e1d74c4446e4bddefcf2616d32114cacb2cb59203c797d9
- MD5 7e407b4f280ece8797ac13c8a278c71e
- SHA1 49e0c3d1d59fc3881494fe1702993adefae60b98
- SHA512 1adc0a8b1ff9c399ba338cc1ceac4b62fbff5b21c3c2c5a91e3b3edd43ea0663f61420a93101bb3c2e3e023144d211ae127674bbb8d6d695329004505fb5c619
- TLSH T10E61DE1A034D9AFD9F294358C6E450C9B1E8D9DBA170F0C0F76B3812D48C8D9AE9C7A9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/aiff_filetype_256.svg
- SHA256 9a828e56cb6632d867ace968b66b337ab4d574ca3f67f5b2f55d85865ce6eb61
- MD5 ee5b7a43f1e84e8289c88aa15ca6a116
- SHA1 d10e7e157817231cb743b3309440f47504500656
- SHA512 c2a988aca4b5479912fb5040ba5fffcd9e7a206fc8738daf9d6e83a07aa3c04fad7a8c1cdf7d3141fa73bc928154701dc9390c9ae351f554aa6b47c486c97c4f
- TLSH T1F971CB1A0349AEFD9F2D4358C6A410D9B0E9D9DBA170B0C0B76B3802D4CC8D9BD9C7B9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/aiff_filetype_64.svg
- SHA256 6ea294b41307c2d6e9def8c12d6654fec6dd39f3c9573249eb87ca17aafc28a7
- MD5 ad271197a69e5ff26ce903a288a859f3
- SHA1 7b38723cfb8a79cfed19de965f9af5ffb267ddf7
- SHA512 4ab577c3739b1b6026d13b99c5d44d09b3b8ef322a449d63fcbb60e0916836a08084c50a77c30b92d0f9cfe7d035ea892b340aacb5c26a1b4fb970bf1ca042d1
- TLSH T12161A87F030BEFEB8859C358995414C9B6E4DCCBE22460C8A3A73C19D8898D77C5C799
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/captureCoachMark.png
- SHA256 73ab10ea9765774e600fe6ef7eb2ada4ab1e9d667e1033e0df954fa62c4136c9
- MD5 f189acfc03efc50de1d1e8c86c5c9d30
- SHA1 10cf952bbc0548ee445c9a896d1660ae5b3855dc
- SHA512 bdd3ce59e9a938f93ad7795282fc01de10e7c0d65552947d4ff3ffa9df13b201191e5b7e6f1eb78b0d1ea18a91a7207212feb9db764e63d7ff9f79a885b2f470
- SSDEEP 3072:VcesdZ1MZcTkX7aBSim+uEgDra02xDyiov9oubXP9TFY+Q5YlAoi:Wi28imHEgDrCG7Fo8P95YRvoi
- TLSH T1A9E3128AD93F98598F2F99A487B40FB6DEED1F413B75CA42DD25588D2600ED39400EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/checkerboard.png
- SHA256 12ef1bb525527de9fdcfde40982cf46fce7f5f2d93005e35ee732770b2aac59a
- MD5 9a9c60039ea575ee17e75bc9d6d4ecbc
- SHA1 fdc517792bad4ff7ecc2e7a8ba0b7e07b57764fa
- SHA512 64f3bf7b648e3653b46acc6f1b5412f38a500932254e92ea77b99db56a598517ed576a84cd9a1316cc5d7004bd5a9000a46cd70aeeae1bc101057e0eb3448395
- TLSH T19741033FF986013CD822B4109F733E8F74A9DADAC1921905EA95993C211A2BF52E4D55
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/coachmark.png
- SHA256 63cc41fa1e8006193905ffff29e8591d920fa3efd1d8e643caa7fa25d6e70f8b
- MD5 f3697339c01d81b89c13b3409488c720
- SHA1 8ec2ea26aab0f32da5c608a07873b06fcd435ded
- SHA512 cc9bf8da66fbd5ad54440711681ab75990fd92477b757f380e06d449c30c150e895f4c6e1184cb0dc42e572fa0df88fad7f85c0ee4ee8faecf1a49f7c37ad8be
- SSDEEP 12288:HrroMlDvG9S3u8RrXgrwzXtcW6Kh5531jDbdKpa:Hrf5vGCRTgrW6+55FjDbwA
- TLSH T1B6B4231994707A1C761741249C7204ABE7EB74D2FEA0D7438CF341FAA25EFAC7918B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/icons.svg
- SHA256 d2a3bf87819506c2c753d13da43b9a21bf2aed71f040fb2e0cac8ddac4fd010b
- MD5 1ba23cdfb7059c77db84c52342ece3ba
- SHA1 97f070d24d01c0807622a1d0b3b568397b452b86
- SHA512 14142f29589f3c20dc85eaca276e1dbc4deae133a1551368e1351a5535477b33f69a3726299419ea2a14a183363145b0fbd1213325997c124a0e47d082e93778
- SSDEEP 1536:PPl2yTQ2V49xsvPappRqcRD+MmT8+/jS07uWqJgdnygtNLzxwkHUo+06eONf/:PPl2Fisfl
- TLSH T1EAB3B5FB037483E669895B7CAA2A24E937A8E4FB7470C1C8576B6905CC02CF3953CE51
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/lgpllibs.dll
- IMPHASH 451aecea9f58042e76d96a82be2804fa
- SHA256 80e043c258c7f2b00bbdb26268a7a5c4b31875f3864e0e2d71af88ba74932184
- MD5 2f0cb93abebfd247176b5d0527c62ecb
- SHA1 1b6ab1cd0b77bf77aed18567a65937acabaa5ff3
- SHA512 5207218a78c756ead6963e8fe1758eb1e4c3f09f16aede9e76762900abcaa797c6ced002ecd5304d43a155f1d4c7fa8ebb31dc05a9ec8b44d4c69fac6d0f4e20
- SSDEEP 384:rbijnYW+DZZMwrusWsWQfRl30fP5/A5KFUkYvitA/QcP+ACxwJ93PvDG/t8E9VFW:/ijnQDnzruRNQfv0fP5/orVHDGyEAdN
- TLSH T1BD036C7776A948A8F472E57592E2AD1BE972F510076280CF0721821CAF673E03F7F492
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4a:3b:90:da:c2:ec:bd:f2:73:49:3f:a1:d6:9e:62:a9:55:da:15:1a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Chains
Apr 11, 2022
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Serial Number
0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 9, 2021 - Jun 19, 2024
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
1
Major OS version
6
Entry point
4944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
lgpllibs.pdb
mozglue
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
kernel32
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
api-ms-win-crt-math-l1-1-0
cos
exp
ldexp
sin
sqrt
??0SoundTouch@soundtouch@@QEAA@AEBV01@@Z
??0SoundTouch@soundtouch@@QEAA@XZ
??1SoundTouch@soundtouch@@UEAA@XZ
??4SoundTouch@soundtouch@@QEAAAEAV01@AEBV01@@Z
??_7SoundTouch@soundtouch@@6B@
?calcEffectiveRateAndTempo@SoundTouch@soundtouch@@AEAAXXZ
?clear@SoundTouch@soundtouch@@UEAAXXZ
?createSoundTouchObj@soundtouch@@YAPEAVSoundTouch@1@XZ
?destroySoundTouchObj@soundtouch@@YAXPEAVSoundTouch@1@@Z
?flush@SoundTouch@soundtouch@@QEAAXXZ
?getInputOutputSampleRatio@SoundTouch@soundtouch@@QEAANXZ
?getSetting@SoundTouch@soundtouch@@QEBAHH@Z
?getVersionId@SoundTouch@soundtouch@@SAIXZ
?getVersionString@SoundTouch@soundtouch@@SAPEBDXZ
?numChannels@SoundTouch@soundtouch@@QEBAIXZ
?numUnprocessedSamples@SoundTouch@soundtouch@@UEBAIXZ
?putSamples@SoundTouch@soundtouch@@UEAAXPEBMI@Z
?receiveSamples@SoundTouch@soundtouch@@UEAAII@Z
?receiveSamples@SoundTouch@soundtouch@@UEAAIPEAMI@Z
?setChannels@SoundTouch@soundtouch@@QEAAXI@Z
?setPitch@SoundTouch@soundtouch@@QEAAXN@Z
?setPitchOctaves@SoundTouch@soundtouch@@QEAAXN@Z
?setPitchSemiTones@SoundTouch@soundtouch@@QEAAXH@Z
?setPitchSemiTones@SoundTouch@soundtouch@@QEAAXN@Z
?setRate@SoundTouch@soundtouch@@QEAAXN@Z
?setRateChange@SoundTouch@soundtouch@@QEAAXN@Z
?setSampleRate@SoundTouch@soundtouch@@QEAAXI@Z
?setSetting@SoundTouch@soundtouch@@QEAA_NHH@Z
?setTempo@SoundTouch@soundtouch@@QEAAXN@Z
?setTempoChange@SoundTouch@soundtouch@@QEAAXN@Z
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
220B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Setup/About/KeyFile/1033/resources/libEGL.dll
- IMPHASH 733fea540c63883bb80910cfcf25367e
- SHA256 d76600edf7a39ee7656f8b49c78d11f82cf9e14c70f9897c863e8933b913ce4d
- MD5 ebc5d564cc5d116bbf21a2e00d4fcc96
- SHA1 da49b16c022586e616b08944e280c31bf438fd11
- SHA512 faf10c609c39055a76b661a46f914e0a657ce4b98dee9befadf742dc578c38aeb322908afb17722cb000542549516a5aceb647aef1ac4863ef29c1234b1b02da
- SSDEEP 384:zzNSHR1I7jygakPISPMtVux5VzVYhwbRJER0n2JwK92uMvDG/t8E9VFK4iFrwXv:zBSHkISPMtV2LV6iER0Wwe2tDGyEAzwf
- TLSH T1AC032A3B77685572ED1A4EB1E4B10C0BE2FCB6551322B5DF0634C2206DA8AC6B7B8395
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
a6:34:64:16:a9:76:95:77:5e:ed:d6:4f:87:24:44:73:2b:ae:0e:51
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Chains
Apr 11, 2022
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Serial Number
0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 9, 2021 - Jun 19, 2024
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
1
Major OS version
6
Entry point
16192
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libEGL.pdb
mozglue
??3@YAXPEAX_K@Z
free
moz_xmalloc
kernel32
CloseHandle
CreateEventW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
QueryPerformanceCounter
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObjectEx
vcruntime140
__C_specific_handler
__CxxFrameHandler3
__std_terminate
__std_type_info_destroy_list
memset
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
api-ms-win-crt-math-l1-1-0
cosf
exp2f
logf
sinf
sqrtf
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglMakeCurrent
eglPostSubBufferNV
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Setup/About/KeyFile/1033/resources/m4a_filetype_256.svg
- SHA256 743a5d558dff401bfc553a5159c0cff47787bc3ddf9807807ad3e06ef26acea1
- MD5 cac342da76beab2cf600fbbd914b0088
- SHA1 4c311bd64b8d0a5ff3fedf6645bd7c0c9b8bc30c
- SHA512 2a870c7a6a7d6fc59e34088dd71d766f3e76236006a69d75449282bf0296e01a4e4e4dfe0567564a4dd5ea1a1c4968b84698448bac97a91bec0c376d8ae22746
- TLSH T1E581FF1603099AFD9F6D4358C6A450C9B0E8D9DFA574E1C0F76B3802E48C8E9AD9C7E9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/m4a_filetype_64.svg
- SHA256 9bbd227ad8e20ff3109b05d54308b15c019e7441ba2c5a6ca03575e68654115d
- MD5 8cf000e426ecbbd370090ac59cabf428
- SHA1 92a805552942663b53b5b178bab68695d30e6223
- SHA512 bdee2b18474a5fb7fa449f046f0015f5384a5bb6f348f47ebdab2ad6b49965617115034780ff19dcef434de6327c16ef59647080b0b48df42744b0b3c1048c8d
- TLSH T16861CC7F030BDFEA8999C35899551889B2D4DCC7E114B0C4E36B3C0AE44D8E63D5C6D9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/mp2_filetype_256.svg
- SHA256 ed45766d88e40e8212ff97f9478dd5c78c524f9a244a10753cf69dc9bfe565e3
- MD5 88e515457918562ee5bb153c2c08d04e
- SHA1 9aa95502f7735adf5b0455af06f4f8368ebad74f
- SHA512 ef50546ce3c504c1527b43e5759ebc5d9b4e9bf230ec0baf1bc090413bc895377aa5ca37a4f9623e75375eac377e6a837f33d284963b51ae8c8257b256f363aa
- TLSH T18981E11A03099AFDAF694358D6D410C9B1D8D9DBA170F0C0F76B3815E48C8E5BD9C7E9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/mp2_filetype_64.svg
- SHA256 07344daf0352c16f39746efbd632db9c158efd1a801958bfc3eac39df2652b0f
- MD5 1b33adfab9a1322bf615d7c5f37b3d91
- SHA1 ad9b6c04473aa1d0b2a53ba785368d7f5ed614e2
- SHA512 028d694c709278b3046c065770def84e0677af14a5b5fa05eebe9f89fe77121056dd3628ea2c51159f4d4267fceb5c3e7781f80e2815124a3cb6907b77bb45aa
- TLSH T1C071AD3F030BDFEA5D998318995418C9B2E8DCCBE164B0C4E76B3C16E8498E97D4C6D9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/mp3_filetype_256.svg
- SHA256 a7c64f3749a8623b2ab5c5da51e82bb03a94d15d635e81589bc95cc938f0ab71
- MD5 f0b0782dcadfbcb9894b6d853bd53f57
- SHA1 595df3dd14829146174f9028b7a4e209525bc8ad
- SHA512 b851e2dfe6541b22453c188dd2b44d6594081072341249ca97c4347687fc107375d40db3a5447a44797fa143e17c2dba34a6ff672b12366335c98b2337e517e5
- TLSH T12081F01A03099AFDAF694348D69811C9B5E8D9CBA170E1C0B36B3415E4CCCE8BD9C7E5
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/mp3_filetype_64.svg
- SHA256 9db3c0792df964c18bf1ba19c5d42ec17d339d15b98f5ed793027d8d9a0fc632
- MD5 30049e2cf1eb9f4b46db7068ea615361
- SHA1 9c96e470bc8d29ab66e5243d0353802dd6522b4c
- SHA512 b80dea3c6af959261d36f5fb6f9615066b7139d67c140581874e772f4885672dae2ae067766b008ca20dd4adff1bb850fe269df1e8b2efa422638e87d370ddf6
- TLSH T19471BE2B030BDFEA59A98318AD5405C9B1E4DCC7E164B0C4B76B3C06E88D8E57D4C6E9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/qtmultimedia_m3u.dll
- IMPHASH d35460b9a3baf35d1aaeb2c0ade3acc2
- SHA256 dae45e4b553bdb471bb97b75060829d78f98dd824ebd765ceb9347af7697addc
- MD5 e5edd622c8db0f7caca1fc1bd58a0c48
- SHA1 1f1ff78d2eae799e2abf06252265600eab3f4551
- SHA512 e8f9be815ab30a158dbd050085e1418307ef86f0cfdf8833afdde44c52fca66d7ad452e159d1cf3cb96ca32ee60c639998a6eea6d1933f6a34f06b41a5d99710
- SSDEEP 768:sCV1YEh1QGs52809gKO0aiZnVbZnkN2661tq:sCVCEh1QGs5m9gKOonP66u
- TLSH T1E8F26B523B5502B1E6DEC1362486D7278D78F6306FE38DA3AB0786665C613E27E3831D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:86:f7:f1:c5:65:6b:35:be:e3:c6:3c:61:d0:64:72:d1:3b:59:ab:19:38:a2:2d:0c:37:15:8c:d7:ea:b9:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
Chains
Dec 22, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
4a:53:8c:28
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 7, 2009 - Dec 7, 2030
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
Serial Number
5a:34:61:50:30:94:33:f3:02:f6:ec:f2:31:43:1a:6d
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2021 - Dec 1, 2022
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Serial Number
38:63:de:f8
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Dec 24, 1999 - Jul 24, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 22, 2015 - Jun 22, 2029
Subject
CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 22, 2020 - Dec 29, 2030
Minor OS version
0
Major OS version
6
Entry point
9552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\qt\work\qt\qtmultimedia\plugins\playlistformats\qtmultimedia_m3u.pdb
qt5multimedia
?qt_metacall@QMediaPlaylistIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QMediaPlaylistIOPlugin@@UAEPAXPBD@Z
?staticMetaObject@QMediaPlaylistIOPlugin@@2UQMetaObject@@B
??1QMediaPlaylistIOPlugin@@UAE@XZ
??0QMediaPlaylistIOPlugin@@QAE@PAVQObject@@@Z
??0QMediaPlaylistWriter@@QAE@XZ
??1QMediaPlaylistWriter@@UAE@XZ
??0QMediaContent@@QAE@XZ
??1QMediaPlaylistReader@@UAE@XZ
?request@QMediaContent@@QBE?AVQNetworkRequest@@XZ
?isNull@QMediaContent@@QBE_NXZ
??4QMediaContent@@QAEAAV0@ABV0@@Z
??1QMediaContent@@QAE@XZ
??0QMediaContent@@QAE@ABV0@@Z
??0QMediaContent@@QAE@ABVQUrl@@@Z
??0QMediaPlaylistReader@@QAE@XZ
qt5network
??1QNetworkRequest@@QAE@XZ
?url@QNetworkRequest@@QBE?AVQUrl@@XZ
qt5core
?trimmed@QString@@QHAE?AV1@XZ
??8QString@@QBE_NVQLatin1String@@@Z
??BQCharRef@@QBE?AVQChar@@XZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?dispose@QListData@@SAXPAUData@1@@Z
?append@QListData@@QAEPAPAXXZ
?isOpen@QIODevice@@QBE_NXZ
?isReadable@QIODevice@@QBE_NXZ
?isWritable@QIODevice@@QBE_NXZ
??0QTextStream@@QAE@PAVQIODevice@@@Z
??1QTextStream@@UAE@XZ
?atEnd@QTextStream@@QBE_NXZ
?readLine@QTextStream@@QAE?AVQString@@_J@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?endl@Qt@@YAAAVQTextStream@@AAV2@@Z
??0QUrl@@QAE@XZ
??0QUrl@@QAE@ABV0@@Z
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
??1QUrl@@QAE@XZ
?toString@QUrl@@QBE?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
?fromUserInput@QUrl@@SA?AV1@ABVQString@@@Z
?isEmpty@QUrl@@QBE_NXZ
?endsWith@QString@@QBE_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?resolved@QUrl@@QBE?AV1@ABV1@@Z
?isRelative@QUrl@@QBE_NXZ
?fromLocalFile@QUrl@@SA?AV1@ABVQString@@@Z
?toLocalFile@QUrl@@QBE?AVQString@@XZ
??0QFile@@QAE@ABVQString@@@Z
??1QFile@@UAE@XZ
?exists@QFile@@SA_NABVQString@@@Z
??0QFileInfo@@QAE@ABVQString@@@Z
??1QFileInfo@@QAE@XZ
?isReadable@QFileInfo@@QBE_NXZ
?atEnd@QFileDevice@@UBE_NXZ
?bytesAvailable@QIODevice@@UBE_JXZ
?bytesToWrite@QIODevice@@UBE_JXZ
?canReadLine@QIODevice@@UBE_NXZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?close@QFileDevice@@UAEXXZ
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?fileName@QFile@@UBE?AVQString@@XZ
?isSequential@QFileDevice@@UBE_NXZ
??AQString@@QAE?AVQCharRef@@H@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?permissions@QFile@@UBE?AV?$QFlags@W4Permission@QFileDevice@@@@XZ
?pos@QFileDevice@@UBE_JXZ
?qt_metacall@QFile@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QFile@@UAEPAXPBD@Z
?readData@QFileDevice@@MAE_JPAD_J@Z
?readLineData@QFileDevice@@MAE_JPAD_J@Z
?reset@QIODevice@@UAE_NXZ
?resize@QFile@@UAE_N_J@Z
?seek@QFileDevice@@UAE_N_J@Z
?setPermissions@QFile@@UAE_NV?$QFlags@W4Permission@QFileDevice@@@@@Z
?size@QFile@@UBE_JXZ
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?waitForBytesWritten@QIODevice@@UAE_NH@Z
?waitForReadyRead@QIODevice@@UAE_NH@Z
?writeData@QFileDevice@@MAE_JPBD_J@Z
?shared_null@QListData@@2UData@1@B
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
??1QString@@QAE@XZ
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?toLower@QString@@QHAE?AV1@XZ
?scheme@QUrl@@QBE?AVQString@@XZ
?metaObject@QFile@@UBEPBUQMetaObject@@XZ
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
EnterCriticalSection
TerminateProcess
GetCurrentProcess
InitializeSListHead
CloseHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
vcruntime140
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_dll
qt_plugin_instance
qt_plugin_query_metadata
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qtmetad
Size
512B
Virtual Size
90B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=29118,
count=2, id=257, version=27412,
count=18, id=261, version=29118,
count=10, id=260, version=29118,
count=2, id=259, version=29118,
count=7, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=136, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Setup/About/KeyFile/1033/resources/scroll_triangle_down_dark.svg
- SHA256 0ba7c10647e9cfd14c371132d8d6950511c90add3bf3378653a28909bc13a928
- MD5 3f914cc186c1bcfc00f0c8da97602971
- SHA1 4d284ad08f39c1fa7f3ccf2622ca2d2427d0ee84
- SHA512 0d8743497e5ac773f21c81e8fd8b353aa73f58f48153651410cda8fab3b51f39583f0a765bcabb94fe422e3361792575868a4447784962e99575c4716d7867fe
- TLSH T103F09E4C8B419C789464973272FCAAD253322282D0D3198D98957AFBD9515715B4277C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_down_light.svg
- SHA256 3033ac4784bacfd61446b7c027684b629fa1e474b98fcdd5c80917cc10803d4b
- MD5 5c88ec9626b7a838cb5adca88c2411fc
- SHA1 9980728cb764f79ee23698763decbe6c55e948c2
- SHA512 15bd7f37dafa3dabfc839491eae22da78a627c474b7ec2e388522cea233c52201e16f89d3b518309f3e56a07aa0ee5a2af28b8cb5a0ca45f27203706c9dfb7f8
- TLSH T1C3F0054C8740CC789551C73571F8AAC7A3352182D1C30EDD88D53AB7DAD157A57816BC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_left_dark.svg
- SHA256 2a5b09c872e6e8b834d79dea8f5e05a28bbd89c983110dc37417144078ea1422
- MD5 191e63f31ec5bd58ba3c20e985c084e5
- SHA1 a5cd32c6f93c577441566b7b2e2c81477a752201
- SHA512 79088acf9d76801e4f3ffe25825648858cc7e26fa2b552b54729210942326351950bfe6ee21cf56e6aa51bf90e8c37cc9cd3993f65e353f12abee522dc140f7a
- TLSH T187F0C95C8B419C7892A0873572B8AAC2A33921C2C1C20ADD84D23ABACA914355B817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_left_light.svg
- SHA256 dbabb6e766b93dfe01415abca826255bb434de8e1c68b80bc60c74aae04f6261
- MD5 7bf67e0585675b193a124e03aedaf3ca
- SHA1 b4f2efd5954aec5f67a180a5d178ec1c6bcae49a
- SHA512 872ee6140c6a82f18fd80a872038231ecbd378c8d2cc872816c160ad1a77565518a857bfd43b93a603e306ca73b3d114aee9f90c1a1204bc63ff3a0641a5db03
- TLSH T19FF0C05C86419C789250873571BCAAC6A33521C2D1C20ADD84D63ABACA915755B817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_right_dark.svg
- SHA256 102aaea163b7253f2267cb0a2276e2f8bc50659623a25f510ef4afed69c4a810
- MD5 3aba77de82ba18a43c5667fdb1e75039
- SHA1 bcb4aa6e64ac361a4b3bec7649170e39c8e188ce
- SHA512 5b27f7c60c72dd8f13018beb4380e947539d054aa0f11262d769bb2e8bee0f98d627f9535e14827e9f992185cd3aa6332f6b108a6bb1d1cda218fe16885ed4f5
- TLSH T142F00E5DCB419C789260873972F8AAC2A33930C2C1C20AED84D23BFACB914755B817BC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_right_light.svg
- SHA256 389cb8ec31bd7644d8bc86b3285e41bb76d697f2115ac19c77a07947b1255ee2
- MD5 dfddf884b7c890b4d3eb62904ede2fac
- SHA1 8fa26919ff6e3d84d0710fd66db911cd2abdd4b0
- SHA512 f03c7b3ee9c8cd6a3db57110609a4b240a8f38d780024c8ff88b735979d5c492caaa0a109df2643570063abce212a02b662822887d0e7c4bd3d7c7f5b2fb638b
- TLSH T1C5F0C05D86419C789650873971B8BAC6A33530C2D1C209ED84D63ABACA515755B817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_up_dark.svg
- SHA256 61a32cad395d42a95e21df9d8a0e01b01ce6f538068a8a1f2359f84f80e07a8d
- MD5 e8adf0e474a5848212311147654fd4c9
- SHA1 f10c672887408df4de58cbbf7182acb483a2009d
- SHA512 2d3948a7d8de8ed0f8435be358ab9c276aebd718cae7adb4e4cd81830015c1d91d9dd29032ddc0988c0b87244c15176310d514d431e26143eb105c159f235e09
- TLSH T1B2F00E4C8B418C789164973272FCAAC253312282D0C3098D94997AFBC9514708B4237C
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/scroll_triangle_up_light.svg
- SHA256 25bb13bb5a9b6028753b24e7ffc17c646a3b55fd65edd87e06c2cfeda47a49a4
- MD5 349da26439a9aa4053650dffb41ce299
- SHA1 d0665fab7e5832d9eff19486e5e6fed0ecfa10a1
- SHA512 e4a6823ed81fcd7024fd4f7f85c2150a85a94ceee5331b0a91421494d9edf20cd476e3472046a45ccee992b5b906e9362b8550a75ee50cd5d118385448a37872
- TLSH T1E9F0C08C87449C7891A0973172B8AAC6D3352182D1C209DC84953AB6CA9557957817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/unlock_coachmark.png
- SHA256 2e0d1bd80adbff7c04a1c18eb077b4976963f2f65744fc500b727a15294b13db
- MD5 f1e14fb7a3c338b043fe533f02f45caa
- SHA1 e2e529cf29aeffe9f754a034c2f6cdc0a79e3176
- SHA512 3ca9fd8c5a60957742b547bfdb14e58bbe396274596c6821298b1d57ef6ef998e163fa14a4f7903724b8bc82e73390b30ab039d521cc5c6c8bbd580770ba06c9
- SSDEEP 3072:rOQtXzyA83GtfwUxolgbnxj+AEO+xPoRB0OJWBN02att:r1y4bxoeZ+NpxwiW2it
- TLSH T171D312D3B75083DC6895DE0873F730458ABA6D9C988CD2E29E45C9E4F54828E7F4369C
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/KeyFile/1033/resources/wait_32.gif
- SHA256 e1f054e0b00ecc690bbe35a8f945db9b50f1c0ff55df376dfe6d5e3ba4064f24
- MD5 65d6cf08fe060e6d6e81d22d7eaac66b
- SHA1 309a589011a3d750fb84e702fa75da1cc4392a22
- SHA512 4df0e9df25cde897f7b4dcccb215c43624b77dae744d1213a933e3cf72d44c1e931392ece9e71d94986d3dcd88c13643ee70e042ad26de2c6f25aae17fcb29c9
- TLSH T1FBF028C7E1B05312D4D920302486E20854C8AFF925AAA31E3808C5965E47A8DF15F7C3
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/wav_filetype_256.svg
- SHA256 c7b06af61a8feb4b64b08a2ec890b74cfb1b3a71192f176e8997d789d52e1d47
- MD5 1b10ba762982abdf242b7f236fa39814
- SHA1 7f90b48bee5932a3aa8c41018da84946c7a7e962
- SHA512 12cc96810a3f802b8ad7397304b55911a66a08db68d871e1f41487bd7e47f5588d90983e17a5b0a3298271aa2e8285b7d168508832bf703c09cc3b81a62b17c0
- TLSH T169710F29030D9AFEEF6D4394D6D45089B1F8D9DBA030F0C0F76B2802D48DCD86D5C6A9
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/resources/wav_filetype_64.svg
- SHA256 d3e40b9497b6b56be5658f90ed32b2c96f3e063ede2860961087a8397d50f0e5
- MD5 798a3d2b91832928dae01c2476bb4327
- SHA1 e0c110f4a4b5f0b58b89aedc37078c33f62d1a6d
- SHA512 a22fc573d1ae49f1288c67efe4483af5f159b697f04f50b06b3dadf468be3917cdb32c871c80b3003d4a51110f7105f1edab3d973b8c1b5c9c10d89ec1bedfe2
- TLSH T1FA61A93F030BEFEB586983189A5405C9B6D4DCCBE114B0C8B77B3C1AD4498D67C5D699
- MD5 SHA1 SHA512 TLSH
Setup/About/KeyFile/1033/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/About/UI.txt
- SHA256 26150135b7012938737fc95971b5c93e0cbcc1c1ab5f2f3ea4f358b41b7f00cc
- MD5 073da378c252e721e14fb5ac101a7c35
- SHA1 2065803864bbcdea59f39f2f615ac48d6a0c0949
- SHA512 d49e9e1299daa146e325e29994ca8bb7a815427c75f114c637e0ff65cb98cf38bcb64659811395bbef6673804eade8b608dbff22d794c6213eff645f25d68363
- SSDEEP 192:KoWWE8jzuJEW2VuV3V3VXVkVAVLVqVbVbxNNVVVwcVHaVsVZVnboZKCkVuV3V3VF:tvkFFluq5ApfXTwWbndkFFluq5ApRXTc
- TLSH T1A7E1B45BD3FC2015F0FBCB88D66641A1DA706DD13A1CCC6930F5628D19F6E0164A7BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/qtmultimedia_m3u.dll
- IMPHASH d35460b9a3baf35d1aaeb2c0ade3acc2
- SHA256 dae45e4b553bdb471bb97b75060829d78f98dd824ebd765ceb9347af7697addc
- MD5 e5edd622c8db0f7caca1fc1bd58a0c48
- SHA1 1f1ff78d2eae799e2abf06252265600eab3f4551
- SHA512 e8f9be815ab30a158dbd050085e1418307ef86f0cfdf8833afdde44c52fca66d7ad452e159d1cf3cb96ca32ee60c639998a6eea6d1933f6a34f06b41a5d99710
- SSDEEP 768:sCV1YEh1QGs52809gKO0aiZnVbZnkN2661tq:sCVCEh1QGs5m9gKOonP66u
- TLSH T1E8F26B523B5502B1E6DEC1362486D7278D78F6306FE38DA3AB0786665C613E27E3831D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:86:f7:f1:c5:65:6b:35:be:e3:c6:3c:61:d0:64:72:d1:3b:59:ab:19:38:a2:2d:0c:37:15:8c:d7:ea:b9:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
Chains
Dec 22, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
4a:53:8c:28
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 7, 2009 - Dec 7, 2030
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
Serial Number
5a:34:61:50:30:94:33:f3:02:f6:ec:f2:31:43:1a:6d
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2021 - Dec 1, 2022
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Serial Number
38:63:de:f8
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Dec 24, 1999 - Jul 24, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 22, 2015 - Jun 22, 2029
Subject
CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 22, 2020 - Dec 29, 2030
Minor OS version
0
Major OS version
6
Entry point
9552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\qt\work\qt\qtmultimedia\plugins\playlistformats\qtmultimedia_m3u.pdb
qt5multimedia
?qt_metacall@QMediaPlaylistIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QMediaPlaylistIOPlugin@@UAEPAXPBD@Z
?staticMetaObject@QMediaPlaylistIOPlugin@@2UQMetaObject@@B
??1QMediaPlaylistIOPlugin@@UAE@XZ
??0QMediaPlaylistIOPlugin@@QAE@PAVQObject@@@Z
??0QMediaPlaylistWriter@@QAE@XZ
??1QMediaPlaylistWriter@@UAE@XZ
??0QMediaContent@@QAE@XZ
??1QMediaPlaylistReader@@UAE@XZ
?request@QMediaContent@@QBE?AVQNetworkRequest@@XZ
?isNull@QMediaContent@@QBE_NXZ
??4QMediaContent@@QAEAAV0@ABV0@@Z
??1QMediaContent@@QAE@XZ
??0QMediaContent@@QAE@ABV0@@Z
??0QMediaContent@@QAE@ABVQUrl@@@Z
??0QMediaPlaylistReader@@QAE@XZ
qt5network
??1QNetworkRequest@@QAE@XZ
?url@QNetworkRequest@@QBE?AVQUrl@@XZ
qt5core
?trimmed@QString@@QHAE?AV1@XZ
??8QString@@QBE_NVQLatin1String@@@Z
??BQCharRef@@QBE?AVQChar@@XZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?dispose@QListData@@SAXPAUData@1@@Z
?append@QListData@@QAEPAPAXXZ
?isOpen@QIODevice@@QBE_NXZ
?isReadable@QIODevice@@QBE_NXZ
?isWritable@QIODevice@@QBE_NXZ
??0QTextStream@@QAE@PAVQIODevice@@@Z
??1QTextStream@@UAE@XZ
?atEnd@QTextStream@@QBE_NXZ
?readLine@QTextStream@@QAE?AVQString@@_J@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?endl@Qt@@YAAAVQTextStream@@AAV2@@Z
??0QUrl@@QAE@XZ
??0QUrl@@QAE@ABV0@@Z
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
??1QUrl@@QAE@XZ
?toString@QUrl@@QBE?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
?fromUserInput@QUrl@@SA?AV1@ABVQString@@@Z
?isEmpty@QUrl@@QBE_NXZ
?endsWith@QString@@QBE_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?resolved@QUrl@@QBE?AV1@ABV1@@Z
?isRelative@QUrl@@QBE_NXZ
?fromLocalFile@QUrl@@SA?AV1@ABVQString@@@Z
?toLocalFile@QUrl@@QBE?AVQString@@XZ
??0QFile@@QAE@ABVQString@@@Z
??1QFile@@UAE@XZ
?exists@QFile@@SA_NABVQString@@@Z
??0QFileInfo@@QAE@ABVQString@@@Z
??1QFileInfo@@QAE@XZ
?isReadable@QFileInfo@@QBE_NXZ
?atEnd@QFileDevice@@UBE_NXZ
?bytesAvailable@QIODevice@@UBE_JXZ
?bytesToWrite@QIODevice@@UBE_JXZ
?canReadLine@QIODevice@@UBE_NXZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?close@QFileDevice@@UAEXXZ
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?fileName@QFile@@UBE?AVQString@@XZ
?isSequential@QFileDevice@@UBE_NXZ
??AQString@@QAE?AVQCharRef@@H@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?permissions@QFile@@UBE?AV?$QFlags@W4Permission@QFileDevice@@@@XZ
?pos@QFileDevice@@UBE_JXZ
?qt_metacall@QFile@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QFile@@UAEPAXPBD@Z
?readData@QFileDevice@@MAE_JPAD_J@Z
?readLineData@QFileDevice@@MAE_JPAD_J@Z
?reset@QIODevice@@UAE_NXZ
?resize@QFile@@UAE_N_J@Z
?seek@QFileDevice@@UAE_N_J@Z
?setPermissions@QFile@@UAE_NV?$QFlags@W4Permission@QFileDevice@@@@@Z
?size@QFile@@UBE_JXZ
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?waitForBytesWritten@QIODevice@@UAE_NH@Z
?waitForReadyRead@QIODevice@@UAE_NH@Z
?writeData@QFileDevice@@MAE_JPBD_J@Z
?shared_null@QListData@@2UData@1@B
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
??1QString@@QAE@XZ
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?toLower@QString@@QHAE?AV1@XZ
?scheme@QUrl@@QBE?AVQString@@XZ
?metaObject@QFile@@UBEPBUQMetaObject@@XZ
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
EnterCriticalSection
TerminateProcess
GetCurrentProcess
InitializeSListHead
CloseHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
vcruntime140
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_dll
qt_plugin_instance
qt_plugin_query_metadata
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qtmetad
Size
512B
Virtual Size
90B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=29118,
count=2, id=257, version=27412,
count=18, id=261, version=29118,
count=10, id=260, version=29118,
count=2, id=259, version=29118,
count=7, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=136, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Setup/About/resources/CreativeCloud_icon.svg
- SHA256 e6ea0ed1b3b944efaec9db8a460c80b17f3a9615d62e480abe27f11f193f4970
- MD5 6a64e1497b1b02f66585f92cb447214a
- SHA1 3a885e6376d2e09e6307243ab64b8095cbb2fe2a
- SHA512 454dd6771ea2b886ae4aeafe582c8b3db6f0e94694538706c64929cf526685f480645cdded8505c16a5320ce34d12bebd33b23beb65e135a24a288a79eb7d593
- TLSH T1B6219817839286B9EE8EC0396605298571D0CDD3E1B4E1D4ABAF1402C56CCD0A69D3EB
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/DropGraphicFiles.svg
- SHA256 eef63f34e5d56f9b0cd56aa7e79e5b43ca51405e6fa332ffd3bb4dbb81d605b9
- MD5 d75b221927d956d8bc1e740dd3ad68f4
- SHA1 e33a92f7373f7ce03d8f3f2ba195f436c5fe11d9
- SHA512 1b57da36511b3f3a0b30bfbf8530ff256a89704e823026b3465be73cbaa347665ef561c6c16227bec885e6f23507f30aee50110df7862e03236da4e1a9610d4c
- SSDEEP 48:eUA9aJK+5nIz7jqtOy5KNzs7gAU7LEWW/U3DPvufQANL3nXRweJ8ZABvcqAhOIOb:IaJrVMs7cPEBMaVchSrZm4t6hEpdOwOm
- TLSH T1BFA13FFF1391CAEFB24963842E191A1D33B164EAB25441B48BD72EE25F64CC79A34870
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/Engine_x32.dll
- IMPHASH 2c8b6407e1519c6ac69e454ee4a811d9
- SHA256 bb77efde7a4596b880cb995f863f371ae212736a9cc694ea093dff5bcf6a6c67
- MD5 4f2712e0d78459a1e9d9940015505b52
- SHA1 1d3cde855b59567a52e5fd60b2671a363b65f706
- SHA512 8c96da16c32cfa6f3e0e940952079abfc716d9900c4b0b8f01ec7f163bf2b10cfd3341b25c39caabbf8c34b7ac0a6b460a65af912f4bde8488ed82af70625512
- SSDEEP 3072:JAcPlem5+yyDJhZcmy3sRi0+ba2VWndROdw9um:Jgm5+yoxy3s2baE2dRX9n
- TLSH T166B34B12B6A0CD76CA121236DE6C6F58D2E9E5241FF05E83235C0FAC5E3EF679113A16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66746
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\thailand\890a\cprd32\AOL\misc\coreclient\abls\abls.pdb
supersub
ord1611
ord417
ord1610
ord984
ord1609
ord411
ord1725
ord1730
ord72
idb
ord1
ord12
ord15
ord13
ord9
ord4
ord6
ord7
ord8
ord5
ord3
synccore
?ConvertHostTagToLSTag@CSyncUtil@@SAJABVTString@@AAJPAU_SYNC_TAGS@@H@Z
??0CSyncHttp@@QAE@PBU_SYNC_TAGS@@HPAVCThreadSafeSocket@@@Z
??1CSyncHttp@@QAE@XZ
?ReadLine@CSyncUtil@@SAJAAKAAVTString@@PAVCSyncHttp@@@Z
?SyncSetHeader@CSyncHttp@@QAEKPAU_SYNCHEADERINFO@@@Z
?GetLValAndRVal@CSyncUtil@@SAJABVTString@@AAV2@1@Z
?GetHostOperEntryType@CSyncUtil@@SAJAAVTString@@0AAJ@Z
?ClearBuffer@CSyncUtil@@SAXPAVCSyncHttp@@@Z
?SyncGetFileSize@CSyncHttp@@QAEKPAK@Z
?SyncSetURLField@CSyncHttp@@QAEKHPAD@Z
?NeedToKillThread@CSyncUtil@@SA_NPAX@Z
nsUnescape
?SkipLine@CSyncUtil@@SAJAAKHAAVTString@@PAVCSyncHttp@@@Z
?SyncStartURLString@CSyncHttp@@QAEKHPAD@Z
?SyncGetServerResponse@CSyncHttp@@QAEPBDXZ
?SyncQuery@CSyncHttp@@QAEKPAD@Z
?SyncCloseAllHttpHandles@CSyncHttp@@QAEXXZ
?ValidHostType@CSyncUtil@@SA_NABJQBJH@Z
manager
??1ABDataStore@@UAE@XZ
ord368
ord372
ord342
?RemoveEntry@ABDataStore@@QAEHPBD000000@Z
?AddEntry@ABDataStore@@QAEHPBD000000@Z
?RemoveItem@CACDataStore@@QAEHPBD00K_N@Z
??0ABDataStore@@QAE@XZ
?AddItem@CACDataStore@@QAEHPBD00K@Z
ord393
msvcp71
?_Nomemory@std@@YAXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
msvcr71
_adjust_fdiv
__security_error_handler
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__lconv_init
__CppXcptFilter
_initterm
_callnewh
strtol
_strlwr
memset
_except_handler3
free
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??_V@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memmove
memcpy
strlen
sprintf
malloc
strncpy
rename
_purecall
realloc
strcmp
strcpy
user32
LoadStringA
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetFullPathNameA
DeleteFileA
GetFileAttributesA
DisableThreadLibraryCalls
lstrlenA
CreateMutexA
CloseHandle
lstrcpynA
ReleaseMutex
WaitForSingleObject
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
zlib
ord3
Name
.text
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
552B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=93, version=2179,
count=2, id=93, version=2067,
count=4, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=9, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=15, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=222, id=1, productName=Unmarked objects,
count=28, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Setup/About/resources/GroupOnboardingBackground_CCD.png
- SHA256 b5cc8307253d273aa5d89cfed2e216ec9a47db41f52fc1b15a8cc4790933efb1
- MD5 5fc4323989820ca53d5e7ec7ddb5975a
- SHA1 1a94b4ffab4bcfe7d3c83437e70898e04a57ae1e
- SHA512 7f4cfb56e047e1be4e3cafdcfcb8dccc17cb2b151bea41843a6ddbd4043fcd70fae17a3f48233d58132c6672185b3fbdab0f65b5b867112d3ee8d3d75c30ac3a
- SSDEEP 6144:iTe8lhGK7hksOP+bpXxAHnxetIwI26I4jw0:L8lhGOjd94l
- TLSH T1B05423AAD4E34B9C849D78DFAE635D0F15F268FB5343384A9C2E58B0D241041FEA6F24
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/GroupOnboardingGraphic_CCD.png
- SHA256 2cad134452e77c9f25a23fbad663e2f0d8bdbe7fc0155d85b64ff5ad9fcc82d1
- MD5 10615aea053a64f4e10e0b33cbfdfbc4
- SHA1 680c4883dad07f356e3912f372bfc1348d70155a
- SHA512 718ee59633f9597cbfb87adedddfeee2e822240c7fce3e6db14a87b438eda31df3cfb18700090392ed7c5518063c3569d8e41561d3c93a1447c65a1a7d77085c
- SSDEEP 3072:VjBdi+wKmOcx5GqG5KUubOq8rz1QV3xUAA2AH:VftwVfx5LgcxUAA2AH
- TLSH T1CFE3129284E9E933D76698DC474339A43FB015703AE66966CBF8019B160F83C2D93FC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/MissingLinkedElement_Dark.svg
- SHA256 16f2efcbb0246a503a86f50b8f966fc250a72a8ab8c3736bc0cf79cd7ed957d7
- MD5 29f044467dde443be87dcdf7518f9b9c
- SHA1 bcd4fd5bc8987a6e10095253e0de2d76abcb0bbf
- SHA512 a60b9505fbf0bf72389ec574e4971c3b13fb3db87abdedb453fa3e9cbbc966e3e4e95df89149a0d519b08bbe9a2057c0b0256b831702da4c946699faadacafd4
- TLSH T1471112FCB27C9CEC092A4F71FB7770B5A11F21E5078552C888C1E5F288614F1EE1126A
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/MissingLinkedElement_Light.svg
- SHA256 939148072ad83c2e2654434872629f63fba42d54fc0d490fa6959cab9c190e4d
- MD5 6b734b0cd51b85dd6ff9346b90bbab8e
- SHA1 266f5f67b9798186524f2cfa4b5293609fadbbad
- SHA512 7f0604a89dd688f6cc9c12a26b3a90a3f23bd860f5de20f7d88ebce243e3a5a37305d2fdd68ef53f4c4dd65e76d2487abd9f89137a7e54d3968f8e6ef0a205df
- TLSH T12A1135FCB36C5CBD052A5F71E777B0E6A11F25E4074245C884C5E5B188604A19A01267
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/NewUserEmpty_dark.svg
- SHA256 a41c4492dfba858f85e90cc6ec78132c67a53c3612db3a4241d509b4276ff9c8
- MD5 e0b69de845834f4a42e18775209cfeb5
- SHA1 b5fc23ca5f08e671bbad75b3eb0573c285c1102f
- SHA512 fef733f19ae30987d77fbe8fae646a964fddd1cd3217ee0cbf0cd23cc0e189a71e7bd0c62c380aa6d6267e099778acdd57d35fb6c5d1f89fd694b96775c0012a
- TLSH T19851FD26835287E8BEF8541C2DD40444F6D4CC87E8B8F1D8B2EE8019DFDC8E4959CB9A
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/NewUserEmpty_light.svg
- SHA256 488e48d504cff2f5c9d589c11ff4226bb64db3da5aa59bbbb2652a434d0cb2ec
- MD5 d5a58cc52c3244bdc70039ab96dd415d
- SHA1 2fc0ec480b66757e9b4e363d7b8f6e245635c6cc
- SHA512 c4f975573223447af3465453772d585444b0a5a5182fda13d8ff269c748e87619717c4d3fb64442720938b44137701fbe91a59760b0b7caba3d1e66c48cf8d09
- TLSH T1FC51ED26435287E8BEE8941C2DD40444F6D4CC87E8B8F1D8B2EE8019DFDC8E4959CB96
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollDownArrow_dark.svg
- SHA256 740b0c8374faadd98639b72a76ae9e238df2d7221f85f92c6618b90b5dc146df
- MD5 392596491d185d364db9f745a40a7627
- SHA1 19a512dd279c22f7b8755c5af5597ff490a96303
- SHA512 d88e6b82b10a9e9b261b9adadf18f604f3c69995d4c64e18e930222f26462f38a553a99127b962a552b06cae062501835c3e0ef10438555476e05c4dc1ec74cb
- TLSH T111F0C04D86849CBA9030CB6DB3BCAAC38F743147C3440C9884A12DB7E250948194279C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollDownArrow_darker.svg
- SHA256 d5b9c4e856cfe146aba59ad8654a757f68333ef766692a0a762e2fc84edb4aff
- MD5 9de5f6c80862b02ebdaf5586048dbaa1
- SHA1 e8691137a2105da5b4682d4a33d65ab90a402ac4
- SHA512 d8902cc0b568d4aad8ad0df72e2430942c79ccb16e9f029c1c42e9f7b1612de8c9de5ab22b1ec12c7e20e8c7b32d4533e05fbe120b246c23901ffb4f4030f837
- TLSH T174F0C04D86859C7A90318B29B3BCAAC2CF742187C2440C9884A53CB7A6549481A4279C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollDownArrow_light.svg
- SHA256 9160f4307df3a3226b3e43c1a94fa5d3d948aebe8374fc589445113a9b123a03
- MD5 e3ea7f7f1e30adae593120641bc99255
- SHA1 98893bc914507a2aa4e302eb28ac37ad91a50d07
- SHA512 df24dc6f4a5b25d8b8e4519c349357d5baa52c0068b1e09aebf6d0461d842b5ef45e6028806841d355677ee72acaac1e2b85de25f314d08134a7c965c571033f
- TLSH T145F0C04D86849C7A90308B29B3BCAAC28F742147C2440C9884A13CB7E29084819427DC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollDownArrow_lighter.svg
- SHA256 740b0c8374faadd98639b72a76ae9e238df2d7221f85f92c6618b90b5dc146df
- MD5 392596491d185d364db9f745a40a7627
- SHA1 19a512dd279c22f7b8755c5af5597ff490a96303
- SHA512 d88e6b82b10a9e9b261b9adadf18f604f3c69995d4c64e18e930222f26462f38a553a99127b962a552b06cae062501835c3e0ef10438555476e05c4dc1ec74cb
- TLSH T111F0C04D86849CBA9030CB6DB3BCAAC38F743147C3440C9884A12DB7E250948194279C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollUpArrow_dark.svg
- SHA256 57d6656956b4394e3d2ce980869023e924640b23906895f1e33b1a44a9838a29
- MD5 8bb0b63065fc6aebaab0b8a8b517ee7e
- SHA1 7c58e190675a8c9a24b1abe0867a4b9ddced0dab
- SHA512 360d40625303707e97d5374383a039a212407972653dde64af290ea05a3f8af5205f475fd7684f2d144d05038a7cb423f47e349d5e86b8dc131fb97b0fc94339
- TLSH T175F0C04987849C7A50358765B3BDA6C397703083C7451CD8C4A1397BA650958064275C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollUpArrow_darker.svg
- SHA256 c4013e0df4edcffc65859194176d683d6bd740a3d45d6aeac964d5cfaa0ce4d5
- MD5 b34c2f03e784153382757df0fa260b1f
- SHA1 5e63168f50e9ad1218cc16f61c7abab98fd2bddf
- SHA512 aaa6483d2a385920a809c43e49258044a350152a1b6489f9abe3ec80d148a63576e71bc71569d6204bf5593d06ecb6fce5e87942a59a21240c2973fbc7883ed4
- TLSH T172F0054D87859C3B50358721B3FDA6C3D77030C7C7451CD8C4A13D7BA750948064275C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollUpArrow_light.svg
- SHA256 f670de0a5d653e636fc1801284cd8f7057da075d551bc9e6ad5c8eab32567bc5
- MD5 bc93867d4a2cfdabeeeee4953e469cc1
- SHA1 4971f2cfef4046eb51f2940fc06a30faa8cdb326
- SHA512 4c76c3df979b2894a901fa5abb4387b7cb174fe1541787d3bd99af6ee50478f298fecbf3935d7d05a669cfa3f86b70ec8aefc444f3855213568e9e7cefba8439
- TLSH T1E5F0C04997849C3A50358721B3BDA6C397702083C6451CD8C4A139BBA6D195806427AC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/ScrollUpArrow_lighter.svg
- SHA256 57d6656956b4394e3d2ce980869023e924640b23906895f1e33b1a44a9838a29
- MD5 8bb0b63065fc6aebaab0b8a8b517ee7e
- SHA1 7c58e190675a8c9a24b1abe0867a4b9ddced0dab
- SHA512 360d40625303707e97d5374383a039a212407972653dde64af290ea05a3f8af5205f475fd7684f2d144d05038a7cb423f47e349d5e86b8dc131fb97b0fc94339
- TLSH T175F0C04987849C7A50358765B3BDA6C397703083C7451CD8C4A1397BA650958064275C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/aif_filetype_256.svg
- SHA256 363fbc62ff46d1462e1d74c4446e4bddefcf2616d32114cacb2cb59203c797d9
- MD5 7e407b4f280ece8797ac13c8a278c71e
- SHA1 49e0c3d1d59fc3881494fe1702993adefae60b98
- SHA512 1adc0a8b1ff9c399ba338cc1ceac4b62fbff5b21c3c2c5a91e3b3edd43ea0663f61420a93101bb3c2e3e023144d211ae127674bbb8d6d695329004505fb5c619
- TLSH T10E61DE1A034D9AFD9F294358C6E450C9B1E8D9DBA170F0C0F76B3812D48C8D9AE9C7A9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/aiff_filetype_256.svg
- SHA256 9a828e56cb6632d867ace968b66b337ab4d574ca3f67f5b2f55d85865ce6eb61
- MD5 ee5b7a43f1e84e8289c88aa15ca6a116
- SHA1 d10e7e157817231cb743b3309440f47504500656
- SHA512 c2a988aca4b5479912fb5040ba5fffcd9e7a206fc8738daf9d6e83a07aa3c04fad7a8c1cdf7d3141fa73bc928154701dc9390c9ae351f554aa6b47c486c97c4f
- TLSH T1F971CB1A0349AEFD9F2D4358C6A410D9B0E9D9DBA170B0C0B76B3802D4CC8D9BD9C7B9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/aiff_filetype_64.svg
- SHA256 6ea294b41307c2d6e9def8c12d6654fec6dd39f3c9573249eb87ca17aafc28a7
- MD5 ad271197a69e5ff26ce903a288a859f3
- SHA1 7b38723cfb8a79cfed19de965f9af5ffb267ddf7
- SHA512 4ab577c3739b1b6026d13b99c5d44d09b3b8ef322a449d63fcbb60e0916836a08084c50a77c30b92d0f9cfe7d035ea892b340aacb5c26a1b4fb970bf1ca042d1
- TLSH T12161A87F030BEFEB8859C358995414C9B6E4DCCBE22460C8A3A73C19D8898D77C5C799
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/captureCoachMark.png
- SHA256 73ab10ea9765774e600fe6ef7eb2ada4ab1e9d667e1033e0df954fa62c4136c9
- MD5 f189acfc03efc50de1d1e8c86c5c9d30
- SHA1 10cf952bbc0548ee445c9a896d1660ae5b3855dc
- SHA512 bdd3ce59e9a938f93ad7795282fc01de10e7c0d65552947d4ff3ffa9df13b201191e5b7e6f1eb78b0d1ea18a91a7207212feb9db764e63d7ff9f79a885b2f470
- SSDEEP 3072:VcesdZ1MZcTkX7aBSim+uEgDra02xDyiov9oubXP9TFY+Q5YlAoi:Wi28imHEgDrCG7Fo8P95YRvoi
- TLSH T1A9E3128AD93F98598F2F99A487B40FB6DEED1F413B75CA42DD25588D2600ED39400EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/checkerboard.png
- SHA256 12ef1bb525527de9fdcfde40982cf46fce7f5f2d93005e35ee732770b2aac59a
- MD5 9a9c60039ea575ee17e75bc9d6d4ecbc
- SHA1 fdc517792bad4ff7ecc2e7a8ba0b7e07b57764fa
- SHA512 64f3bf7b648e3653b46acc6f1b5412f38a500932254e92ea77b99db56a598517ed576a84cd9a1316cc5d7004bd5a9000a46cd70aeeae1bc101057e0eb3448395
- TLSH T19741033FF986013CD822B4109F733E8F74A9DADAC1921905EA95993C211A2BF52E4D55
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/coachmark.png
- SHA256 63cc41fa1e8006193905ffff29e8591d920fa3efd1d8e643caa7fa25d6e70f8b
- MD5 f3697339c01d81b89c13b3409488c720
- SHA1 8ec2ea26aab0f32da5c608a07873b06fcd435ded
- SHA512 cc9bf8da66fbd5ad54440711681ab75990fd92477b757f380e06d449c30c150e895f4c6e1184cb0dc42e572fa0df88fad7f85c0ee4ee8faecf1a49f7c37ad8be
- SSDEEP 12288:HrroMlDvG9S3u8RrXgrwzXtcW6Kh5531jDbdKpa:Hrf5vGCRTgrW6+55FjDbwA
- TLSH T1B6B4231994707A1C761741249C7204ABE7EB74D2FEA0D7438CF341FAA25EFAC7918B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/icons.svg
- SHA256 d2a3bf87819506c2c753d13da43b9a21bf2aed71f040fb2e0cac8ddac4fd010b
- MD5 1ba23cdfb7059c77db84c52342ece3ba
- SHA1 97f070d24d01c0807622a1d0b3b568397b452b86
- SHA512 14142f29589f3c20dc85eaca276e1dbc4deae133a1551368e1351a5535477b33f69a3726299419ea2a14a183363145b0fbd1213325997c124a0e47d082e93778
- SSDEEP 1536:PPl2yTQ2V49xsvPappRqcRD+MmT8+/jS07uWqJgdnygtNLzxwkHUo+06eONf/:PPl2Fisfl
- TLSH T1EAB3B5FB037483E669895B7CAA2A24E937A8E4FB7470C1C8576B6905CC02CF3953CE51
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/lgpllibs.dll
- IMPHASH 451aecea9f58042e76d96a82be2804fa
- SHA256 80e043c258c7f2b00bbdb26268a7a5c4b31875f3864e0e2d71af88ba74932184
- MD5 2f0cb93abebfd247176b5d0527c62ecb
- SHA1 1b6ab1cd0b77bf77aed18567a65937acabaa5ff3
- SHA512 5207218a78c756ead6963e8fe1758eb1e4c3f09f16aede9e76762900abcaa797c6ced002ecd5304d43a155f1d4c7fa8ebb31dc05a9ec8b44d4c69fac6d0f4e20
- SSDEEP 384:rbijnYW+DZZMwrusWsWQfRl30fP5/A5KFUkYvitA/QcP+ACxwJ93PvDG/t8E9VFW:/ijnQDnzruRNQfv0fP5/orVHDGyEAdN
- TLSH T1BD036C7776A948A8F472E57592E2AD1BE972F510076280CF0721821CAF673E03F7F492
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4a:3b:90:da:c2:ec:bd:f2:73:49:3f:a1:d6:9e:62:a9:55:da:15:1a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Chains
Apr 11, 2022
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Serial Number
0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 9, 2021 - Jun 19, 2024
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
1
Major OS version
6
Entry point
4944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
lgpllibs.pdb
mozglue
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
kernel32
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
_purecall
memcpy
memmove
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
api-ms-win-crt-math-l1-1-0
cos
exp
ldexp
sin
sqrt
??0SoundTouch@soundtouch@@QEAA@AEBV01@@Z
??0SoundTouch@soundtouch@@QEAA@XZ
??1SoundTouch@soundtouch@@UEAA@XZ
??4SoundTouch@soundtouch@@QEAAAEAV01@AEBV01@@Z
??_7SoundTouch@soundtouch@@6B@
?calcEffectiveRateAndTempo@SoundTouch@soundtouch@@AEAAXXZ
?clear@SoundTouch@soundtouch@@UEAAXXZ
?createSoundTouchObj@soundtouch@@YAPEAVSoundTouch@1@XZ
?destroySoundTouchObj@soundtouch@@YAXPEAVSoundTouch@1@@Z
?flush@SoundTouch@soundtouch@@QEAAXXZ
?getInputOutputSampleRatio@SoundTouch@soundtouch@@QEAANXZ
?getSetting@SoundTouch@soundtouch@@QEBAHH@Z
?getVersionId@SoundTouch@soundtouch@@SAIXZ
?getVersionString@SoundTouch@soundtouch@@SAPEBDXZ
?numChannels@SoundTouch@soundtouch@@QEBAIXZ
?numUnprocessedSamples@SoundTouch@soundtouch@@UEBAIXZ
?putSamples@SoundTouch@soundtouch@@UEAAXPEBMI@Z
?receiveSamples@SoundTouch@soundtouch@@UEAAII@Z
?receiveSamples@SoundTouch@soundtouch@@UEAAIPEAMI@Z
?setChannels@SoundTouch@soundtouch@@QEAAXI@Z
?setPitch@SoundTouch@soundtouch@@QEAAXN@Z
?setPitchOctaves@SoundTouch@soundtouch@@QEAAXN@Z
?setPitchSemiTones@SoundTouch@soundtouch@@QEAAXH@Z
?setPitchSemiTones@SoundTouch@soundtouch@@QEAAXN@Z
?setRate@SoundTouch@soundtouch@@QEAAXN@Z
?setRateChange@SoundTouch@soundtouch@@QEAAXN@Z
?setSampleRate@SoundTouch@soundtouch@@QEAAXI@Z
?setSetting@SoundTouch@soundtouch@@QEAA_NHH@Z
?setTempo@SoundTouch@soundtouch@@QEAAXN@Z
?setTempoChange@SoundTouch@soundtouch@@QEAAXN@Z
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
220B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Setup/About/resources/libEGL.dll
- IMPHASH 733fea540c63883bb80910cfcf25367e
- SHA256 d76600edf7a39ee7656f8b49c78d11f82cf9e14c70f9897c863e8933b913ce4d
- MD5 ebc5d564cc5d116bbf21a2e00d4fcc96
- SHA1 da49b16c022586e616b08944e280c31bf438fd11
- SHA512 faf10c609c39055a76b661a46f914e0a657ce4b98dee9befadf742dc578c38aeb322908afb17722cb000542549516a5aceb647aef1ac4863ef29c1234b1b02da
- SSDEEP 384:zzNSHR1I7jygakPISPMtVux5VzVYhwbRJER0n2JwK92uMvDG/t8E9VFK4iFrwXv:zBSHkISPMtV2LV6iER0Wwe2tDGyEAzwf
- TLSH T1AC032A3B77685572ED1A4EB1E4B10C0BE2FCB6551322B5DF0634C2206DA8AC6B7B8395
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
a6:34:64:16:a9:76:95:77:5e:ed:d6:4f:87:24:44:73:2b:ae:0e:51
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Chains
Apr 11, 2022
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
Serial Number
0c:1c:d3:ee:a4:7e:dd:a7:a0:32:57:3b:01:4d:0a:fd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 9, 2021 - Jun 19, 2024
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
1
Major OS version
6
Entry point
16192
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libEGL.pdb
mozglue
??3@YAXPEAX_K@Z
free
moz_xmalloc
kernel32
CloseHandle
CreateEventW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
QueryPerformanceCounter
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObjectEx
vcruntime140
__C_specific_handler
__CxxFrameHandler3
__std_terminate
__std_type_info_destroy_list
memset
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
api-ms-win-crt-math-l1-1-0
cosf
exp2f
logf
sinf
sqrtf
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglMakeCurrent
eglPostSubBufferNV
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Setup/About/resources/m4a_filetype_256.svg
- SHA256 743a5d558dff401bfc553a5159c0cff47787bc3ddf9807807ad3e06ef26acea1
- MD5 cac342da76beab2cf600fbbd914b0088
- SHA1 4c311bd64b8d0a5ff3fedf6645bd7c0c9b8bc30c
- SHA512 2a870c7a6a7d6fc59e34088dd71d766f3e76236006a69d75449282bf0296e01a4e4e4dfe0567564a4dd5ea1a1c4968b84698448bac97a91bec0c376d8ae22746
- TLSH T1E581FF1603099AFD9F6D4358C6A450C9B0E8D9DFA574E1C0F76B3802E48C8E9AD9C7E9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/m4a_filetype_64.svg
- SHA256 9bbd227ad8e20ff3109b05d54308b15c019e7441ba2c5a6ca03575e68654115d
- MD5 8cf000e426ecbbd370090ac59cabf428
- SHA1 92a805552942663b53b5b178bab68695d30e6223
- SHA512 bdee2b18474a5fb7fa449f046f0015f5384a5bb6f348f47ebdab2ad6b49965617115034780ff19dcef434de6327c16ef59647080b0b48df42744b0b3c1048c8d
- TLSH T16861CC7F030BDFEA8999C35899551889B2D4DCC7E114B0C4E36B3C0AE44D8E63D5C6D9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/mp2_filetype_256.svg
- SHA256 ed45766d88e40e8212ff97f9478dd5c78c524f9a244a10753cf69dc9bfe565e3
- MD5 88e515457918562ee5bb153c2c08d04e
- SHA1 9aa95502f7735adf5b0455af06f4f8368ebad74f
- SHA512 ef50546ce3c504c1527b43e5759ebc5d9b4e9bf230ec0baf1bc090413bc895377aa5ca37a4f9623e75375eac377e6a837f33d284963b51ae8c8257b256f363aa
- TLSH T18981E11A03099AFDAF694358D6D410C9B1D8D9DBA170F0C0F76B3815E48C8E5BD9C7E9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/mp2_filetype_64.svg
- SHA256 07344daf0352c16f39746efbd632db9c158efd1a801958bfc3eac39df2652b0f
- MD5 1b33adfab9a1322bf615d7c5f37b3d91
- SHA1 ad9b6c04473aa1d0b2a53ba785368d7f5ed614e2
- SHA512 028d694c709278b3046c065770def84e0677af14a5b5fa05eebe9f89fe77121056dd3628ea2c51159f4d4267fceb5c3e7781f80e2815124a3cb6907b77bb45aa
- TLSH T1C071AD3F030BDFEA5D998318995418C9B2E8DCCBE164B0C4E76B3C16E8498E97D4C6D9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/mp3_filetype_256.svg
- SHA256 a7c64f3749a8623b2ab5c5da51e82bb03a94d15d635e81589bc95cc938f0ab71
- MD5 f0b0782dcadfbcb9894b6d853bd53f57
- SHA1 595df3dd14829146174f9028b7a4e209525bc8ad
- SHA512 b851e2dfe6541b22453c188dd2b44d6594081072341249ca97c4347687fc107375d40db3a5447a44797fa143e17c2dba34a6ff672b12366335c98b2337e517e5
- TLSH T12081F01A03099AFDAF694348D69811C9B5E8D9CBA170E1C0B36B3415E4CCCE8BD9C7E5
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/mp3_filetype_64.svg
- SHA256 9db3c0792df964c18bf1ba19c5d42ec17d339d15b98f5ed793027d8d9a0fc632
- MD5 30049e2cf1eb9f4b46db7068ea615361
- SHA1 9c96e470bc8d29ab66e5243d0353802dd6522b4c
- SHA512 b80dea3c6af959261d36f5fb6f9615066b7139d67c140581874e772f4885672dae2ae067766b008ca20dd4adff1bb850fe269df1e8b2efa422638e87d370ddf6
- TLSH T19471BE2B030BDFEA59A98318AD5405C9B1E4DCC7E164B0C4B76B3C06E88D8E57D4C6E9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/qtmultimedia_m3u.dll
- IMPHASH d35460b9a3baf35d1aaeb2c0ade3acc2
- SHA256 dae45e4b553bdb471bb97b75060829d78f98dd824ebd765ceb9347af7697addc
- MD5 e5edd622c8db0f7caca1fc1bd58a0c48
- SHA1 1f1ff78d2eae799e2abf06252265600eab3f4551
- SHA512 e8f9be815ab30a158dbd050085e1418307ef86f0cfdf8833afdde44c52fca66d7ad452e159d1cf3cb96ca32ee60c639998a6eea6d1933f6a34f06b41a5d99710
- SSDEEP 768:sCV1YEh1QGs52809gKO0aiZnVbZnkN2661tq:sCVCEh1QGs5m9gKOonP66u
- TLSH T1E8F26B523B5502B1E6DEC1362486D7278D78F6306FE38DA3AB0786665C613E27E3831D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:86:f7:f1:c5:65:6b:35:be:e3:c6:3c:61:d0:64:72:d1:3b:59:ab:19:38:a2:2d:0c:37:15:8c:d7:ea:b9:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
Chains
Dec 22, 2021
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Subject
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
4a:53:8c:28
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 7, 2009 - Dec 7, 2030
Subject
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Serial Number
4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Issuer
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2021 - Nov 7, 2030
Subject
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
Serial Number
5a:34:61:50:30:94:33:f3:02:f6:ec:f2:31:43:1a:6d
Issuer
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 23, 2021 - Dec 1, 2022
Subject
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
Serial Number
35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Issuer
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 7, 2021 - Dec 29, 2040
Subject
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Serial Number
38:63:de:f8
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Dec 24, 1999 - Jul 24, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 22, 2015 - Jun 22, 2029
Subject
CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA
Serial Number
8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 22, 2020 - Dec 29, 2030
Minor OS version
0
Major OS version
6
Entry point
9552
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\qt\work\qt\qtmultimedia\plugins\playlistformats\qtmultimedia_m3u.pdb
qt5multimedia
?qt_metacall@QMediaPlaylistIOPlugin@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QMediaPlaylistIOPlugin@@UAEPAXPBD@Z
?staticMetaObject@QMediaPlaylistIOPlugin@@2UQMetaObject@@B
??1QMediaPlaylistIOPlugin@@UAE@XZ
??0QMediaPlaylistIOPlugin@@QAE@PAVQObject@@@Z
??0QMediaPlaylistWriter@@QAE@XZ
??1QMediaPlaylistWriter@@UAE@XZ
??0QMediaContent@@QAE@XZ
??1QMediaPlaylistReader@@UAE@XZ
?request@QMediaContent@@QBE?AVQNetworkRequest@@XZ
?isNull@QMediaContent@@QBE_NXZ
??4QMediaContent@@QAEAAV0@ABV0@@Z
??1QMediaContent@@QAE@XZ
??0QMediaContent@@QAE@ABV0@@Z
??0QMediaContent@@QAE@ABVQUrl@@@Z
??0QMediaPlaylistReader@@QAE@XZ
qt5network
??1QNetworkRequest@@QAE@XZ
?url@QNetworkRequest@@QBE?AVQUrl@@XZ
qt5core
?trimmed@QString@@QHAE?AV1@XZ
??8QString@@QBE_NVQLatin1String@@@Z
??BQCharRef@@QBE?AVQChar@@XZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?dispose@QListData@@SAXPAUData@1@@Z
?append@QListData@@QAEPAPAXXZ
?isOpen@QIODevice@@QBE_NXZ
?isReadable@QIODevice@@QBE_NXZ
?isWritable@QIODevice@@QBE_NXZ
??0QTextStream@@QAE@PAVQIODevice@@@Z
??1QTextStream@@UAE@XZ
?atEnd@QTextStream@@QBE_NXZ
?readLine@QTextStream@@QAE?AVQString@@_J@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?endl@Qt@@YAAAVQTextStream@@AAV2@@Z
??0QUrl@@QAE@XZ
??0QUrl@@QAE@ABV0@@Z
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
??1QUrl@@QAE@XZ
?toString@QUrl@@QBE?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
?fromUserInput@QUrl@@SA?AV1@ABVQString@@@Z
?isEmpty@QUrl@@QBE_NXZ
?endsWith@QString@@QBE_NVQLatin1String@@W4CaseSensitivity@Qt@@@Z
?resolved@QUrl@@QBE?AV1@ABV1@@Z
?isRelative@QUrl@@QBE_NXZ
?fromLocalFile@QUrl@@SA?AV1@ABVQString@@@Z
?toLocalFile@QUrl@@QBE?AVQString@@XZ
??0QFile@@QAE@ABVQString@@@Z
??1QFile@@UAE@XZ
?exists@QFile@@SA_NABVQString@@@Z
??0QFileInfo@@QAE@ABVQString@@@Z
??1QFileInfo@@QAE@XZ
?isReadable@QFileInfo@@QBE_NXZ
?atEnd@QFileDevice@@UBE_NXZ
?bytesAvailable@QIODevice@@UBE_JXZ
?bytesToWrite@QIODevice@@UBE_JXZ
?canReadLine@QIODevice@@UBE_NXZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?close@QFileDevice@@UAEXXZ
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?fileName@QFile@@UBE?AVQString@@XZ
?isSequential@QFileDevice@@UBE_NXZ
??AQString@@QAE?AVQCharRef@@H@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?permissions@QFile@@UBE?AV?$QFlags@W4Permission@QFileDevice@@@@XZ
?pos@QFileDevice@@UBE_JXZ
?qt_metacall@QFile@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QFile@@UAEPAXPBD@Z
?readData@QFileDevice@@MAE_JPAD_J@Z
?readLineData@QFileDevice@@MAE_JPAD_J@Z
?reset@QIODevice@@UAE_NXZ
?resize@QFile@@UAE_N_J@Z
?seek@QFileDevice@@UAE_N_J@Z
?setPermissions@QFile@@UAE_NV?$QFlags@W4Permission@QFileDevice@@@@@Z
?size@QFile@@UBE_JXZ
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?waitForBytesWritten@QIODevice@@UAE_NH@Z
?waitForReadyRead@QIODevice@@UAE_NH@Z
?writeData@QFileDevice@@MAE_JPBD_J@Z
?shared_null@QListData@@2UData@1@B
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
??1QString@@QAE@XZ
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?toLower@QString@@QHAE?AV1@XZ
?scheme@QUrl@@QBE?AVQString@@XZ
?metaObject@QFile@@UBEPBUQMetaObject@@XZ
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
EnterCriticalSection
TerminateProcess
GetCurrentProcess
InitializeSListHead
CloseHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
vcruntime140
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_dll
qt_plugin_instance
qt_plugin_query_metadata
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qtmetad
Size
512B
Virtual Size
90B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=29118,
count=2, id=257, version=27412,
count=18, id=261, version=29118,
count=10, id=260, version=29118,
count=2, id=259, version=29118,
count=7, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=136, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
Setup/About/resources/scroll_triangle_down_dark.svg
- SHA256 0ba7c10647e9cfd14c371132d8d6950511c90add3bf3378653a28909bc13a928
- MD5 3f914cc186c1bcfc00f0c8da97602971
- SHA1 4d284ad08f39c1fa7f3ccf2622ca2d2427d0ee84
- SHA512 0d8743497e5ac773f21c81e8fd8b353aa73f58f48153651410cda8fab3b51f39583f0a765bcabb94fe422e3361792575868a4447784962e99575c4716d7867fe
- TLSH T103F09E4C8B419C789464973272FCAAD253322282D0D3198D98957AFBD9515715B4277C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_down_light.svg
- SHA256 3033ac4784bacfd61446b7c027684b629fa1e474b98fcdd5c80917cc10803d4b
- MD5 5c88ec9626b7a838cb5adca88c2411fc
- SHA1 9980728cb764f79ee23698763decbe6c55e948c2
- SHA512 15bd7f37dafa3dabfc839491eae22da78a627c474b7ec2e388522cea233c52201e16f89d3b518309f3e56a07aa0ee5a2af28b8cb5a0ca45f27203706c9dfb7f8
- TLSH T1C3F0054C8740CC789551C73571F8AAC7A3352182D1C30EDD88D53AB7DAD157A57816BC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_left_dark.svg
- SHA256 2a5b09c872e6e8b834d79dea8f5e05a28bbd89c983110dc37417144078ea1422
- MD5 191e63f31ec5bd58ba3c20e985c084e5
- SHA1 a5cd32c6f93c577441566b7b2e2c81477a752201
- SHA512 79088acf9d76801e4f3ffe25825648858cc7e26fa2b552b54729210942326351950bfe6ee21cf56e6aa51bf90e8c37cc9cd3993f65e353f12abee522dc140f7a
- TLSH T187F0C95C8B419C7892A0873572B8AAC2A33921C2C1C20ADD84D23ABACA914355B817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_left_light.svg
- SHA256 dbabb6e766b93dfe01415abca826255bb434de8e1c68b80bc60c74aae04f6261
- MD5 7bf67e0585675b193a124e03aedaf3ca
- SHA1 b4f2efd5954aec5f67a180a5d178ec1c6bcae49a
- SHA512 872ee6140c6a82f18fd80a872038231ecbd378c8d2cc872816c160ad1a77565518a857bfd43b93a603e306ca73b3d114aee9f90c1a1204bc63ff3a0641a5db03
- TLSH T19FF0C05C86419C789250873571BCAAC6A33521C2D1C20ADD84D63ABACA915755B817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_right_dark.svg
- SHA256 102aaea163b7253f2267cb0a2276e2f8bc50659623a25f510ef4afed69c4a810
- MD5 3aba77de82ba18a43c5667fdb1e75039
- SHA1 bcb4aa6e64ac361a4b3bec7649170e39c8e188ce
- SHA512 5b27f7c60c72dd8f13018beb4380e947539d054aa0f11262d769bb2e8bee0f98d627f9535e14827e9f992185cd3aa6332f6b108a6bb1d1cda218fe16885ed4f5
- TLSH T142F00E5DCB419C789260873972F8AAC2A33930C2C1C20AED84D23BFACB914755B817BC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_right_light.svg
- SHA256 389cb8ec31bd7644d8bc86b3285e41bb76d697f2115ac19c77a07947b1255ee2
- MD5 dfddf884b7c890b4d3eb62904ede2fac
- SHA1 8fa26919ff6e3d84d0710fd66db911cd2abdd4b0
- SHA512 f03c7b3ee9c8cd6a3db57110609a4b240a8f38d780024c8ff88b735979d5c492caaa0a109df2643570063abce212a02b662822887d0e7c4bd3d7c7f5b2fb638b
- TLSH T1C5F0C05D86419C789650873971B8BAC6A33530C2D1C209ED84D63ABACA515755B817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_up_dark.svg
- SHA256 61a32cad395d42a95e21df9d8a0e01b01ce6f538068a8a1f2359f84f80e07a8d
- MD5 e8adf0e474a5848212311147654fd4c9
- SHA1 f10c672887408df4de58cbbf7182acb483a2009d
- SHA512 2d3948a7d8de8ed0f8435be358ab9c276aebd718cae7adb4e4cd81830015c1d91d9dd29032ddc0988c0b87244c15176310d514d431e26143eb105c159f235e09
- TLSH T1B2F00E4C8B418C789164973272FCAAC253312282D0C3098D94997AFBC9514708B4237C
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/scroll_triangle_up_light.svg
- SHA256 25bb13bb5a9b6028753b24e7ffc17c646a3b55fd65edd87e06c2cfeda47a49a4
- MD5 349da26439a9aa4053650dffb41ce299
- SHA1 d0665fab7e5832d9eff19486e5e6fed0ecfa10a1
- SHA512 e4a6823ed81fcd7024fd4f7f85c2150a85a94ceee5331b0a91421494d9edf20cd476e3472046a45ccee992b5b906e9362b8550a75ee50cd5d118385448a37872
- TLSH T1E9F0C08C87449C7891A0973172B8AAC6D3352182D1C209DC84953AB6CA9557957817AC
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/unlock_coachmark.png
- SHA256 2e0d1bd80adbff7c04a1c18eb077b4976963f2f65744fc500b727a15294b13db
- MD5 f1e14fb7a3c338b043fe533f02f45caa
- SHA1 e2e529cf29aeffe9f754a034c2f6cdc0a79e3176
- SHA512 3ca9fd8c5a60957742b547bfdb14e58bbe396274596c6821298b1d57ef6ef998e163fa14a4f7903724b8bc82e73390b30ab039d521cc5c6c8bbd580770ba06c9
- SSDEEP 3072:rOQtXzyA83GtfwUxolgbnxj+AEO+xPoRB0OJWBN02att:r1y4bxoeZ+NpxwiW2it
- TLSH T171D312D3B75083DC6895DE0873F730458ABA6D9C988CD2E29E45C9E4F54828E7F4369C
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/About/resources/wait_32.gif
- SHA256 e1f054e0b00ecc690bbe35a8f945db9b50f1c0ff55df376dfe6d5e3ba4064f24
- MD5 65d6cf08fe060e6d6e81d22d7eaac66b
- SHA1 309a589011a3d750fb84e702fa75da1cc4392a22
- SHA512 4df0e9df25cde897f7b4dcccb215c43624b77dae744d1213a933e3cf72d44c1e931392ece9e71d94986d3dcd88c13643ee70e042ad26de2c6f25aae17fcb29c9
- TLSH T1FBF028C7E1B05312D4D920302486E20854C8AFF925AAA31E3808C5965E47A8DF15F7C3
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/wav_filetype_256.svg
- SHA256 c7b06af61a8feb4b64b08a2ec890b74cfb1b3a71192f176e8997d789d52e1d47
- MD5 1b10ba762982abdf242b7f236fa39814
- SHA1 7f90b48bee5932a3aa8c41018da84946c7a7e962
- SHA512 12cc96810a3f802b8ad7397304b55911a66a08db68d871e1f41487bd7e47f5588d90983e17a5b0a3298271aa2e8285b7d168508832bf703c09cc3b81a62b17c0
- TLSH T169710F29030D9AFEEF6D4394D6D45089B1F8D9DBA030F0C0F76B2802D48DCD86D5C6A9
- MD5 SHA1 SHA512 TLSH
Setup/About/resources/wav_filetype_64.svg
- SHA256 d3e40b9497b6b56be5658f90ed32b2c96f3e063ede2860961087a8397d50f0e5
- MD5 798a3d2b91832928dae01c2476bb4327
- SHA1 e0c110f4a4b5f0b58b89aedc37078c33f62d1a6d
- SHA512 a22fc573d1ae49f1288c67efe4483af5f159b697f04f50b06b3dadf468be3917cdb32c871c80b3003d4a51110f7105f1edab3d973b8c1b5c9c10d89ec1bedfe2
- TLSH T1FA61A93F030BEFEB586983189A5405C9B6D4DCCBE114B0C8B77B3C1AD4498D67C5D699
- MD5 SHA1 SHA512 TLSH
Setup/DAC/KeyFile/1033/sharedmanagementobjects_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/KeyFile/1033/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/KeyFile/1049/sharedmanagementobjects_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/KeyFile/1049/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/SqlUserInstance.rll
- SHA256 89521c05d50625512ef53b3c11cded25cdee1d7dc63ff539c2ba8a58a6361e13
- MD5 34a0d74588db4242b3166bcfe1c2cdd6
- SHA1 19630f066153012c3f2c79cd02ea6dd08b5f512e
- SHA512 883ea9084dbd82be0320f44a600393899877190535498d39d6be6095abd59caf6058a993876ece2449eae2814bfa5e0245c6fe0680f4e6c2b61bde6bfedc5638
- SSDEEP 192:zvGPWFxxWOBWULwu0Sc2HnhWgN7ayvWYjKI+XqnajlFQuY:zvGPWFxxWO7D/HRN7/+ImlQuY
- TLSH T1A3A25E898E6B5003F8622D70D3E4C4D26FBC6F8334A2713FDF05A59519D278CA691EB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9b:16:03:9c:04:ee:13:e5:75:08:18:40:6d:70:85:86:7e:2f:53:25:5a:95:ad:7b:48:e8:bc:10:88:f1:07:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:EACE-E316-C91D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4c:c5:4c:c1:d0:db:6f:3f:b2:00:00:00:00:01:4c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\dbs\sh\s19c\0719_152503\cmd\k\obj\x86retail\sql\ntdbms\userinstance\res\sqluserinstance.vcxproj\SqlUserInstance.pdb
Name
.rdata
Size
4KB
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27034,
count=2, id=151,
count=1, id=258, version=27034,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/de-DE/SqlUserInstance.rll.mui
- SHA256 5c078a9b5ef063d10f5059a37d0dea80d44a5297cd273e779f8b0a53fdfb8cb7
- MD5 b30fefc695f4444a893d567727b7520d
- SHA1 7c30c0664a6d7bdf5b74d6db49880b0412902a33
- SHA512 9e38cecf8b7866fda83a7c58982d8abf418cb67fd909e765727ea3e510713894a57426ce24de2c08e02dbee0b5736ef1623414704aa8952b04002ccde97ea338
- SSDEEP 384:NXe7Jj8tgZO3l3tBNADygiKWwmhGWbD/HRN7uDR1lT2X:NLHBNcRuzDvu1qX
- TLSH T1A7A2DB5287E95219F9F36F706EB892616FB6FDD2A838951E0240A06C1CB1F40DE70B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
97:cf:19:ff:6c:0b:7d:25:00:6c:f7:f9:9a:1c:af:24:74:4c:8c:d4:ce:4b:51:cc:ce:9f:1e:f3:f5:b7:25:4f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
- SHA256 f98754389a248c07098a28aadd445863ab73273497803cde52cc90ec6cebb359
- MD5 fc4f82a8de54ccb30de50d9981ac6839
- SHA1 7dd0063fd84285759731dd19299dab8a01c752d9
- SHA512 df1eabadbe157d27bb7182619e5a0b0461414d3df04359c30ae809d185d55b997eaf32254151f9c427d4cee48d730eb4f7c9878e8f9849ad967b86d4d550977e
- SSDEEP 384:0+wmn1FXuebMWyP545PWFtGWUD/HRN7N9R1lT7s7:8u3Yt8DvNL3
- TLSH T19092F8429BF85119F5F37F306AB995315EBABDA2A939C21D0240A42D1DB2F80DDB0733
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:d5:23:c5:ae:fe:92:9f:7e:80:90:b8:53:98:50:b5:e0:9a:6c:f4:50:b1:2a:e9:c0:1e:93:b1:41:c8:38:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/es-ES/SqlUserInstance.rll.mui
- SHA256 f9874030171972d18f3dc0613e66033b94c380570a43bccbc3c4f196c94d4221
- MD5 553937b6919c99be1c01f2573e0ceedd
- SHA1 064abc97a7c8b9ccca56688a853c2198bdb31d91
- SHA512 99caa8b06ae1ce3ddba98de5d9630374afc58e4f45bdc816eaa20b193a0a675900a860b96fd0dfbf09d7003fcb5d31884627000244ab72134897a8430479203a
- SSDEEP 384:mTuganLHNJ/EcTN0mq6uwfiq5oemXWfrGWtD/HRN7KImlQNv:9r1Dv5
- TLSH T1AAA2A8519BFC638AF5F37F317A7999215E7ABDD1A838841D0200A2690CB0F84DE64B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:d2:f5:8b:03:1f:94:8e:50:25:56:fa:4e:8b:a4:eb:53:8c:0a:74:0f:75:3b:88:78:9b:49:ac:2d:b0:71:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:EACE-E316-C91D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4c:c5:4c:c1:d0:db:6f:3f:b2:00:00:00:00:01:4c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/fr-FR/SqlUserInstance.rll.mui
- SHA256 60c405450b4a0dbad51709ae5c861d1294c4b086755fe3f9a8f27a6762ad3a27
- MD5 de9f74d85d098faad2e6a474da74ed5c
- SHA1 634c5df556356d4e28a6254e4151c9afa938e646
- SHA512 e9f2adf5c8c10e778b4892e3a4592df7ebd9d1ec67360b561a5f09f7ae7031d6d642372717afcd921ba543463b33584ea361ef75d24de2452518f791c5fd74f9
- SSDEEP 768:BMLOOyP53fXPDjLlxFJAmLGtJh1Zwbj6pVDvSq:AFvSq
- TLSH T141B27455A6E91606F6B77F30BDBD90915EBA7D8AEC38C01D0680A0981CB1F90DD78B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7b:66:58:e8:f2:f8:ea:7e:ee:34:3c:84:02:29:f4:7b:04:2f:02:6e:17:0b:ec:55:ff:f8:92:98:7c:b6:dd:83
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4a:a4:f7:31:c4:ff:22:a2:49:00:00:00:00:01:4a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/it-IT/SqlUserInstance.rll.mui
- SHA256 f58eec9cece4bbb1abe97241cfcbbee35a6ceafcf8a39afba122693af13a42f3
- MD5 2950c68d38391ab2c206e5ab231c0945
- SHA1 d958eb015858ee43674768449e2de6ede58d756d
- SHA512 b1e1b034b6e350476f37cb2f2545186f34e49d4cf933447745142d3e18381b3c7ca311ddb5415c4e8a2ee9fddb45f4603ed98deed0a89658b16a57c00bcedc15
- SSDEEP 384:+UrE1HsxSsSOr6q2NkBqRvVmhNW6uGWyD/HRN7wR1lTnc:mViuaDvIjc
- TLSH T166B2CA129BFA5205F5F37F306E7996255E7ABEA2AC39D02E0240A05D5CB1F90DC60B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:12:2c:dd:ff:4d:7a:26:2b:72:66:f1:0d:e4:e5:ab:83:2d:2c:b9:48:58:49:ec:c7:6a:21:bf:fe:12:a2:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/ja-JP/SqlUserInstance.rll.mui
- SHA256 16a6f34a270c3e78db03af615d4812ac4d7e1362899e21aa74c190cb85e4f3d0
- MD5 74e96fd0f188ad2dd3f91f2bb4dc749e
- SHA1 1a13ff7630023689ec9b04e509eca6da48e1e433
- SHA512 a21fe7a95fb72fbd3cc812aa10018eca8601eff9514b83f40630f1a7a6344a77fd64a8274cda70e6279445d374bde2f9c9d16d020e6186dac73d6d53b8f29e78
- SSDEEP 192:xPnb5mkmZnPGfIKyCk0PY4WFtGWRWULwu0Sc2HnhWgN7ayvW1xmZdGP2qnajldG4:KPGf7koY4WFtGWLD/HRN733Llfbl
- TLSH T18382A347D6F8141AF0B28D7047F8B0A17FBCFAE294A3406E0A45E45A2D61F88DF1077A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:a1:94:13:82:63:d5:d1:ee:5e:e0:8b:da:69:43:14:cf:bd:6d:c7:bf:57:fa:74:ff:f1:45:d0:bf:e9:a7:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:49:80:08:4a:bb:09:a0:33:0b:00:00:00:00:01:49
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/ko-KR/SqlUserInstance.rll.mui
- SHA256 626cc8832025d12f8cb79e11ecde52ad499053e2e7c9abaf785de5c7f5cc1ab6
- MD5 ba2e9ac880f22762db631e4f183d9d25
- SHA1 149b6440aa6005da3241b2520b555e0060fd18fd
- SHA512 0ee9016a31f0da0c645327bf2e691dbc3a4932e8f22416c8ba440a9ddb6d33c497476a0c4349837f386e3d11e57af23225d000f00fe9d0384cf459acd419757d
- SSDEEP 384:XVVcMFwHY4okRv8HYq33cF0WstGWUD/HRN7SmgR1lTC3:eYntMDvSTm3
- TLSH T1CA82B853D4BCE14AE472AA3067B89B72AFF9BAD35517501E4240F0582DE2FD0DD213AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:46:c6:30:7b:da:06:55:eb:10:30:95:ea:15:ee:07:2d:54:d9:2e:fd:f3:d1:c4:e3:92:d0:1d:81:22:2b:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/pt-BR/SqlUserInstance.rll.mui
- SHA256 658bf89a45bd5172c2ee761aede87798d5a3610fcec29a1150287b6977b5c186
- MD5 f89385dcd27c93b16915dcb29dbd5702
- SHA1 9fe13a9593a5ec8a5f1ac1ee68e81c16a79f2708
- SHA512 065eec8d5f50901ebde3097fb79acaa8c6ed34a9613df6a3a3041f2af1b0b11cca2dbae10f4d3684dcc2cd6b0b1f9a14caa90032d5a080811d0f54b27888d47f
- SSDEEP 384:7WvWvW0W+WaWyWRWhWvWV5WNWpWK/WfWXwLWWW/9WWlWQWmWnWPaW9WgW1W/aWrn:LxwWJuCDvgU
- TLSH T16CA2EA4297FC224AF4F37F716AB899319E3ABD92AC39911D0240A2691DB0F80DD74777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:49:aa:00:77:f3:c2:07:15:19:38:db:b7:a3:3f:62:12:1c:5e:f9:c8:a3:a4:4e:31:b4:b0:a1:44:19:d8:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui
- SHA256 0c9f35b1a60054e5455201ede66f021d5b4ede92d0ba2add88cfbc910c632691
- MD5 951e8bedf4aa6a878e98206d88b6d0e8
- SHA1 c43a4ab970d0feafe28022ff3c3817d0dffe39b3
- SHA512 f728eb9c2e3bacfc7b693d28171e73e5c6440e1b81dcbf80a3a6fd6b9ccd99d1181fddbe611a8f65c81b55ab499193ca1726342520d0a10e753a8dcdc489253c
- SSDEEP 192:mXNamfu34jsmRttCzdkzscVEvPAGWEqWULwu0Sc2HnhWgN7aQWDbCJky1qnajvH:mXc0scKoGWEcD/HRN7nR1lTH
- TLSH T193A2724FD9BCA011F565E5701F7284E329BEB790531894DB838FBC6424A9B70BB202DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
78:59:70:85:72:bc:1e:34:0f:d0:d0:77:49:df:f9:b3:2d:47:cf:fa:f3:6a:3d:e3:db:5a:99:01:a7:4d:25:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/zh-CN/SqlUserInstance.rll.mui
- SHA256 2f8ba9e830fb7937f34a1278525df941b684d453134a676f21c358b127070859
- MD5 fc5831d92a79c879d6da3a30351ebe24
- SHA1 758cad15e0952ba32690d0743a785622da63ca67
- SHA512 1d30a30b6db5bb743caa5f756a179611e63f2abcba240f6b6ff6200e98de3268db26134c0cbee49bcb5f7fc376e041bf8616466ee079c90a4b03bbc2a8a9f4aa
- SSDEEP 192:F/kfKz4FP3gsz8YWF2GWzWULwu0Sc2HnhWgN7aQWozRCJky1qnajvhgux:nqAYWF2GWxD/HRN7JzgR1lThgu
- TLSH T1E272B6428AFC2406E4B26D3067F9D5626FFCB6E3A56A401E5568F4242D61F80ED10B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
39:6d:71:e4:55:1e:26:15:25:de:03:8f:28:33:2a:d4:f4:c9:59:cb:e3:f4:18:4d:e5:33:f0:a6:61:78:9b:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4f:64:2e:75:f6:7a:03:5a:83:00:00:00:00:01:4f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/Resources/zh-TW/SqlUserInstance.rll.mui
- SHA256 53628cdc01c218e796e700033944e3acd9c9e2e098509493e98aaeaadfccfb89
- MD5 13142c39ab174fd96e34e90cb11faac5
- SHA1 647ca5d03a506eab70c1ec5d2df5fb5c58616124
- SHA512 4feabcde64c219817c79e6a7f889d3778a1eab557cc09fb1ec2d1df89a845d120d67c861cb9e9b6b840f369d9b8a60f3e373dbb1012690cf58c5d53f6daa2645
- SSDEEP 192:5EzY7R66aU1KUZtwTWiAGWSWULwu0Sc2HnhWgN7ayvWZJHI+XqnajlFQXW:5HF66n1LwTWiAGWED/HRN70JHImlQXW
- TLSH T1D972E942CAFC2805D473AD701BB9E8127FFDB7E11927901E05E9E8542EA1F81EE1537A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f2:b2:cc:93:41:50:a0:8b:48:66:49:f9:7f:de:aa:41:d2:31:f9:1b:ab:a7:ed:05:c3:38:75:26:10:9d:1c:26
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:EACE-E316-C91D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4c:c5:4c:c1:d0:db:6f:3f:b2:00:00:00:00:01:4c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/License Terms/150/LocalDB/Binn/SqlUserInstance.dll
- IMPHASH b0547bab9ed2aabbbfc847c2d4a998fe
- SHA256 ec41019a6ae2874e75d5856e845eb42b2ada2e738467b11e44868061f552c617
- MD5 26f2ffe2b77e18f02ad44dfe0976c084
- SHA1 5c53aeb7558e3ffcaa0fdae00575e65fdaa32e17
- SHA512 867db4e9f92cfcee9d36fe404a972880dc72748d45747a2e5afdd8ba5d98a1cdf2f3476f4e3b1b79b0d1173942ef28656bc1e08640c4d6a68043d6202b13daea
- SSDEEP 3072:gGhuUCVJUiOQIlJYSz4c/iOH5HgDFJhhsn6/8dTdrOWH6WtEHRRHwNdE4AAfJ15X:9QUXiObliSz4c/zZgDFJhhsn6/8xdOW5
- TLSH T1C1F37C207BE1D13BFAB316F025B4FA6A5629FD790B2044CF42C45E4A2AF47D19939723
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
64:97:7a:44:d3:6b:8b:ea:fd:1b:65:08:75:fd:a3:08:a1:92:ba:c6:44:13:97:91:88:95:a6:c4:b1:f8:42:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:62:d0:fe:02:f3:01:e5:cd:49:00:00:00:00:01:62
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
45600
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\dbs\sh\s19c\0719_152503\cmd\19\obj\x86retail\sql\ntdbms\userinstance\dll\sqluserinstance.vcxproj\SqlUserInstance.pdb
vcruntime140
__std_type_info_destroy_list
memset
_purecall
wcsrchr
_except_handler4_common
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy
_CxxThrowException
wcschr
memcpy
api-ms-win-crt-string-l1-1-0
wcsncmp
_wcsnicmp
_wcsnicmp_l
towlower
_wcsicmp
_wcsicmp_l
api-ms-win-crt-convert-l1-1-0
_ultow_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_configure_narrow_argv
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
shlwapi
SHDeleteKeyW
odbc32
ord24
ord31
ord241
ord75
ord111
ord136
bcrypt
BCryptGenRandom
kernel32
SetLastError
HeapFree
ExpandEnvironmentStringsW
GetEnvironmentVariableW
GetPrivateProfileStringW
CreateDirectoryW
EnterCriticalSection
HeapAlloc
GetModuleHandleExW
TerminateProcess
GetFinalPathNameByHandleW
GetModuleFileNameW
CreateNamedPipeW
WaitForMultipleObjects
CompareStringOrdinal
LeaveCriticalSection
InitializeCriticalSection
CreateMutexW
WaitForSingleObject
LocalAlloc
CreateFileW
GetFileAttributesW
FreeLibraryAndExitThread
ReleaseMutex
DisconnectNamedPipe
OpenProcess
CreateEventW
GetExitCodeThread
FormatMessageW
GetLastError
DeleteFileW
CloseHandle
CompareStringEx
LoadLibraryW
CreateThread
LocalFree
FreeLibrary
CopyFileW
IsWow64Process
GetProcessTimes
LoadLibraryExW
GetProcAddress
Sleep
CreateToolhelp32Snapshot
GetModuleHandleW
Module32NextW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
IsDebuggerPresent
DebugBreak
VirtualQuery
CompareStringW
GetCurrentProcess
IsProcessorFeaturePresent
user32
CharLowerBuffW
CharUpperBuffW
advapi32
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
RegGetKeySecurity
RegCloseKey
RegDeleteKeyExW
SetSecurityDescriptorOwner
SetTokenInformation
RegQueryValueExW
AddAccessAllowedAce
GetLengthSid
ConvertSidToStringSidW
CreateProcessAsUserW
GetTokenInformation
RegGetValueW
RegOpenKeyExW
InitializeAcl
InitializeSecurityDescriptor
RegCopyTreeW
CreateRestrictedToken
OpenProcessToken
RegSetValueExW
RegDeleteTreeW
RegSetKeySecurity
SetEntriesInAclW
CreateWellKnownSid
RegCreateKeyExW
ConvertStringSidToSidW
RegEnumKeyExW
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
CoInitializeEx
CoCreateGuid
CoCreateInstance
StringFromGUID2
oleaut32
VariantInit
SysFreeString
SysStringLen
SysStringByteLen
VariantClear
SysAllocString
VariantChangeType
LOCALDB_PRODUCT_NAME
LocalDBCreateInstance
LocalDBDeleteInstance
LocalDBFormatMessage
LocalDBGetInstanceInfo
LocalDBGetInstances
LocalDBGetVersionInfo
LocalDBGetVersions
LocalDBShareInstance
LocalDBStartInstance
LocalDBStartTracing
LocalDBStopInstance
LocalDBStopTracing
LocalDBUnshareInstance
Name
.text
Size
104KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=26706,
count=26, id=261, version=26706,
count=10, id=260, version=26706,
count=4, id=259, version=26706,
count=13, id=265, version=27034,
count=2, id=262, version=25203,
count=18, id=257, version=25203,
count=197, id=1, productName=Unmarked objects,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Setup/DAC/License Terms/150/LocalDB/Binn/localdbxeventconfig.xml
- SHA256 93185d3e7a527c760f2e9b98704b8c93ae7a7e30ad52dfb21f1e1ea5238be7e2
- MD5 e880d4f5587eb5d0aaa1b3e9b6a67df1
- SHA1 abdc8cdf87375d70b5c135930737c50021d2cf2c
- SHA512 e6a365b32a4294fc0b68b1a1e47af5a14e081e78eb3b5c1428477f596719ac46c957f514317d95a204ded340ec585126a8da5a8dede1fa02b2dc8e328e4c24ef
- TLSH T10B31B804B7B79F66892C5D9FFF796411647FA9F3F1082180B5E8FE332A1B48A2453419
- MD5 SHA1 SHA512 TLSH
Setup/DAC/License Terms/150/Shared/xe.dll
- IMPHASH a717c506893e6eb4a4cd9bdf05e01b92
- SHA256 f724575de0ea9ec3cc15a1f10d6a936ef2ec6dd3790d0d1c39dfc1f9d31aece4
- MD5 9abbdab424f66a7f4c395fd8759cef0e
- SHA1 d08a1fe1ab2eb09827f26fe493994e8f064c74c8
- SHA512 2583f01afd894330c1e98a57327df14605b19c4baa06beba9f42bb63a0831f669bf495fc91c16041cd882169434a568b09fffa2d5f56edbd2b36fbb6a8ae5ef8
- SSDEEP 6144:atkUO5IjISRbo5x88oTPVXU+u/o6XPLFlDxzqKoAMl2FrbyOHgNf1UfD2t2BgCcJ:ukU3IBC823SLMkFrzgx1Uyt2mL0eUW
- TLSH T190D44A2066CA8669E4F315341779B25B533CF9254B22C8CB52A4596F1AF82F22F35F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7f:94:fb:b5:1d:d4:a1:73:82:01:c3:fe:01:54:f7:d5:a7:48:e8:22:9b:b5:cb:f9:70:b5:6a:a0:29:90:09:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 19, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:49:80:08:4a:bb:09:a0:33:0b:00:00:00:00:01:49
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
429968
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\dbs\sh\s19c\0719_152503\cmd\y\obj\x86retail\sql\common\xecommon\dll\xe.vcxproj\xe.pdb
vcruntime140
__CxxFrameHandler3
_purecall
wcschr
_CxxThrowException
memcpy
memmove
_except_handler4_common
memset
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
abort
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm_e
_errno
_invalid_parameter_noinfo
_initterm
_cexit
terminate
_wassert
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf
kernel32
lstrcmpW
CreateThread
LoadLibraryW
Module32NextW
CreateToolhelp32Snapshot
SetNamedPipeHandleState
ReadFile
TransactNamedPipe
FlushFileBuffers
DisconnectNamedPipe
GetCurrentThreadId
GetCurrentProcessId
DebugBreak
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
CreateNamedPipeW
IsDebuggerPresent
GetModuleHandleW
InitializeCriticalSection
QueryPerformanceFrequency
HeapFree
GetProcessHeap
HeapAlloc
TlsFree
TlsAlloc
GetUserDefaultLCID
VerifyVersionInfoW
VerSetConditionMask
GetSystemInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexW
UnmapViewOfFile
MapViewOfFileEx
OpenThread
TlsGetValue
GetProcessTimes
ConnectNamedPipe
WaitForMultipleObjects
CancelIo
InitializeSListHead
GetVolumePathNameW
WaitForSingleObjectEx
VirtualQuery
CreateIoCompletionPort
CreateFileMappingW
CreateSemaphoreW
HeapDestroy
HeapCompact
HeapReAlloc
GetExitCodeThread
HeapSize
OpenFileMappingW
GetQueuedCompletionStatus
ReleaseSemaphore
HeapCreate
SystemTimeToTzSpecificLocalTime
SetFileValidData
LocalFree
FormatMessageW
lstrcmpiW
SystemTimeToFileTime
GetDiskFreeSpaceW
SetEndOfFile
GetModuleFileNameW
GetProcAddress
FreeLibrary
LoadLibraryExW
RtlCaptureStackBackTrace
GetLastError
FileTimeToSystemTime
GetNumaHighestNodeNumber
GetProcessAffinityMask
GetTimeZoneInformation
CreateDirectoryW
GetTickCount
VirtualFree
VirtualAlloc
GetSystemTime
DeleteFileW
FindFirstFileW
CreateFileW
FindNextFileW
DeleteCriticalSection
GetDiskFreeSpaceExW
WriteFile
GetOverlappedResult
FindClose
CloseHandle
Sleep
GetTempPathW
SetLastError
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
CreateEventW
SetFilePointerEx
user32
MessageBoxW
rpcrt4
UuidCreate
shlwapi
PathCanonicalizeW
PathIsRelativeW
PathFindFileNameW
PathRemoveBackslashW
PathIsURLW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindExtensionW
PathCombineW
UrlCombineW
api-ms-win-crt-string-l1-1-0
_strnicmp_l
_iswprint_l
isxdigit
isalnum
_wcsnicmp_l
iswalnum
iswspace
_towlower_l
isdigit
_wcsicmp
_wcsicmp_l
_wcsnicmp
strncmp
wcsncmp
api-ms-win-crt-filesystem-l1-1-0
_wfullpath
api-ms-win-crt-convert-l1-1-0
wcstoll
api-ms-win-crt-locale-l1-1-0
__pctype_func
advapi32
TraceEvent
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
EnableTrace
RegisterTraceGuidsW
QueryAllTracesW
UnregisterTraceGuids
StartTraceW
ControlTraceW
ole32
CoCreateGuid
CoCreateInstance
oleaut32
VariantClear
SysFreeString
SysStringLen
SysAllocString
VariantInit
VariantChangeType
api-ms-win-crt-math-l1-1-0
_except1
SetAssertHandler
XEGetEngine
Name
.text
Size
456KB
Virtual Size
453KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=262, version=25203,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=26706,
count=10, id=260, version=26706,
count=11, id=259, version=26706,
count=21, id=261, version=26706,
count=14, id=257, version=25203,
count=194, id=1, productName=Unmarked objects,
count=56, id=265, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Setup/DAC/License Terms/License_SQLNCLI_ENU.txt
- SHA256 9cfec87cb1fe913126aa50811a09d34f494d9917b2958ed2b9056744aed26a35
- MD5 3666ab3b60d527211ba53203bef9f911
- SHA1 f63f946eb36414c845b4faa826379b5d84fd8f11
- SHA512 bb5c4515ae0fbf10094e638ac6ddd033a6c72398ded656e02448aaff77e4c5c936a7584fd66b9838e66edd5b85d0c7de3dd456422c3a0a9348b87d2b24c47eed
- SSDEEP 192:8JZVu+P8MXkdg3A8ehborIKzXdIotKlSCkk8Z8SfZn82Cb3:8JrLk+KhsrIYaotKtkzBfgb3
- TLSH T1AF52A951A3FD5618F6FB3F506EB966684E3ABCA2AC3DC65D1210004E09B2E80DD70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/License Terms/SqlUserInstance.dll
- IMPHASH f2b222e5b77bb5e02c203c041a4e8c66
- SHA256 b62fab3be134e7765720c0eb579be5a65ae719771b1e39c14ac39958d554b90e
- MD5 423671a408eedd5e51f4d4f6a3de4589
- SHA1 7a96a2c6e2381e78bdd152e3caef75146460f488
- SHA512 4e9aa8c9ff248d4ec86d79b8515dbe51fa30aa5b28124a2c1872270c30e7887c1d49c573116237f393c29ef431b97110212fdac9d3a27134b6effdc5d373c11c
- SSDEEP 3072:bm07GntHw9i1pCiY/cYCuyaBeipTCl/0YgPjGWuwLWW1cQFaNWpVfxTdv7OH3UCb:k9Y/cpascTg/0YgPjGWuwSW1cQae5TdS
- TLSH T117E34A20B7D9D036DCA229B015BCB96B14ADBDB5071881CFB3A44FFF29706D25A38617
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9a:0b:c2:36:d6:5f:e4:98:4c:e1:d9:34:1e:ac:93:34:85:80:73:24:7b:ab:cd:e1:78:6b:1e:63:fb:e1:e5:c1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
b4:c2:d6:ad:f1:7d:f0:e2:01:67:a9:54:16:61:48:9a:cd:d1:c0:e1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
58432
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SqlUserInstance.pdb
kernel32
GetPrivateProfileStringW
ExpandEnvironmentStringsW
DebugBreak
GetProcessHeap
HeapFree
HeapAlloc
VirtualQuery
GetModuleHandleW
GetProcAddress
CompareStringW
SetLastError
CreateThread
LocalFree
DeleteFileW
CloseHandle
ReleaseMutex
GetFinalPathNameByHandleW
WaitForMultipleObjects
CreateEventW
GetExitCodeThread
IsWow64Process
LocalAlloc
EnterCriticalSection
GetLongPathNameW
GetLastError
FreeLibraryAndExitThread
DisconnectNamedPipe
CreateFileW
GetModuleFileNameW
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
FormatMessageW
CopyFileW
CompareStringOrdinal
LoadLibraryW
OpenProcess
GetProcessTimes
InitializeCriticalSection
CompareStringEx
CreateNamedPipeW
WaitForSingleObject
CreateMutexW
CreateDirectoryW
GetModuleHandleExW
GetCurrentProcess
LoadLibraryExW
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
Module32NextW
CreateToolhelp32Snapshot
Sleep
advapi32
RegQueryValueExW
RegOpenKeyW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegSetValueExW
RegCloseKey
ConvertSidToStringSidW
RegEnumKeyExW
GetLengthSid
ReportEventW
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
AddAccessAllowedAce
SetSecurityDescriptorOwner
RegGetValueW
RegDeleteTreeW
InitializeAcl
CryptGenRandom
RegGetKeySecurity
SetSecurityDescriptorDacl
ConvertStringSidToSidW
SetTokenInformation
InitializeSecurityDescriptor
DeregisterEventSource
CreateProcessAsUserW
CryptReleaseContext
RegCreateKeyExW
CreateRestrictedToken
GetTokenInformation
RegDeleteKeyExW
CryptAcquireContextW
OpenProcessToken
RegCopyTreeW
RegisterEventSourceW
user32
CharUpperBuffW
CharLowerBuffW
shlwapi
SHDeleteKeyW
odbc32
ord75
ord24
ord31
ord241
ord111
ord136
ole32
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoInitializeEx
shell32
SHGetKnownFolderPath
msvcr100
__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
towlower
free
malloc
_ultow
wcsrchr
_vsnwprintf
_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
wcslen
_purecall
_wcsicmp_l
_wcsicmp
swprintf_s
wcschr
_swscanf_s_l
memcpy
_wcsnicmp
swscanf_s
wcsncmp
_vsnwprintf_l
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_unlock
__CxxFrameHandler3
_lock
_onexit
?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
_CxxThrowException
oleaut32
SysFreeString
SysStringLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocString
VariantClear
LOCALDB_PRODUCT_NAME
LocalDBCreateInstance
LocalDBDeleteInstance
LocalDBFormatMessage
LocalDBGetInstanceInfo
LocalDBGetInstances
LocalDBGetVersionInfo
LocalDBGetVersions
LocalDBShareInstance
LocalDBStartInstance
LocalDBStartTracing
LocalDBStopInstance
LocalDBStopTracing
LocalDBUnshareInstance
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=171, version=30414,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=188, version=30716,
count=1, id=189, version=30716,
count=10, id=193, version=30716,
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=196, id=1, productName=Unmarked objects,
count=1, id=152, version=20115,
count=4, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/LocalDB/Binn/Resources/SqlUserInstance.rll
- SHA256 d7d10ad1711329a564b3d20345ea9e69c44cbec7e24403151d709a7b5b586b15
- MD5 dabb199cb733f6236556ef45e68d2be0
- SHA1 d72dc1aedff38328b84d377b2925a9e6b7fbd111
- SHA512 242be5356be6a083be05ebf44b12875acb07eefd968563708a777168863a6383ed03bfb82fddba64627cd4536146f1896e412a288fc3c54db16c09e9a4d133c1
- SSDEEP 192:0PW5xWkJ2jwObdhG369/LpBjSebyaAqjkKiTbeR31lL0WEOU6juZVWQ43WcS7qnb:0PW5xWPhGeDpBjTeajCyPLmvZV7lHMoM
- TLSH T1D68218828EBC9083ED839E7022F8D9837C3DDBD31924556E11A9F5D929873D1EB1462D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9b:16:9b:4e:69:80:e0:40:32:15:13:97:6d:d3:5c:85:10:29:ec:c1:8e:32:c0:a3:a2:62:82:56:a5:25:5a:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
c9:33:e1:a8:35:44:e9:cc:07:16:d4:64:67:b8:aa:67:cb:3d:94:68
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
- SHA256 5efc9e3b0c3c4f826564912966e5644517d3a5d55631a02a0caee97b985e8c33
- MD5 da1da0f1cf8ba8b78b5e4b88a166ac69
- SHA1 9af8739e780a1e21f2459a4f48a276304d74628c
- SHA512 a2ecd4726f9035c915b7b1592f42d3b839b977fc14535757b7c37169a45549ed0ee64ee0cf0a976b5af6c73ba2662f1665e9b702603f171f740a1fc02d7dd379
- SSDEEP 384:K+wmn1FXuebMWyP54UPWVGWdhGeDpBjTeajCbavZQ4JlHMDm2:Cu3HFMGAdaq4T8
- TLSH T10EC24F428BFC510AF9F37F302AB995625E39BDA2AD39C21D0240A05D1CB2F80DE60737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e1:e0:2a:1c:0d:63:54:10:5d:30:3e:23:27:cb:f9:10:67:da:21:fa:7d:a8:36:d4:4d:ee:02:cd:f9:02:a2:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
e2:7d:10:d9:92:1b:50:5f:93:a9:15:db:3b:05:fe:b5:b3:c7:72:e9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui
- SHA256 e6d60c5b7eb4ad78d1eeb5ed06039e769bdb77d1f91935dce75cf6cce99a8fa3
- MD5 86d55bd2bace7a81239146494e573ed1
- SHA1 be7af840f320d9684c65d5bc03e369978b07b6e5
- SHA512 2b892621ae546649efc31aa4b9808edfe33f47964b39a4205b731c701ac1c31f13cf9c32e661d7b47166392599cefd058b33e57904386994d73207a8d4071986
- SSDEEP 384:bXc0s8oGWGhPapBjTeajCer/SxvZWolHMjV:bs0spOGA4rax3g
- TLSH T174C2C64FD9BCA011F865D5301FB284E3297DF790571894DA838FFC64246ABB0BB2429B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e0:09:e9:f0:06:6e:48:76:7e:03:dd:92:63:49:fb:22:43:6d:5e:22:4c:a7:7c:98:0a:fb:2b:b6:e0:d0:f7:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
60:58:75:36:d9:8a:a1:46:db:41:8e:6e:2b:2a:6a:ab:db:be:32:f2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Setup/DAC/LocalDB/Binn/SqlUserInstance.dll
- IMPHASH f2b222e5b77bb5e02c203c041a4e8c66
- SHA256 b62fab3be134e7765720c0eb579be5a65ae719771b1e39c14ac39958d554b90e
- MD5 423671a408eedd5e51f4d4f6a3de4589
- SHA1 7a96a2c6e2381e78bdd152e3caef75146460f488
- SHA512 4e9aa8c9ff248d4ec86d79b8515dbe51fa30aa5b28124a2c1872270c30e7887c1d49c573116237f393c29ef431b97110212fdac9d3a27134b6effdc5d373c11c
- SSDEEP 3072:bm07GntHw9i1pCiY/cYCuyaBeipTCl/0YgPjGWuwLWW1cQFaNWpVfxTdv7OH3UCb:k9Y/cpascTg/0YgPjGWuwSW1cQae5TdS
- TLSH T117E34A20B7D9D036DCA229B015BCB96B14ADBDB5071881CFB3A44FFF29706D25A38617
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9a:0b:c2:36:d6:5f:e4:98:4c:e1:d9:34:1e:ac:93:34:85:80:73:24:7b:ab:cd:e1:78:6b:1e:63:fb:e1:e5:c1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
b4:c2:d6:ad:f1:7d:f0:e2:01:67:a9:54:16:61:48:9a:cd:d1:c0:e1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
58432
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SqlUserInstance.pdb
kernel32
GetPrivateProfileStringW
ExpandEnvironmentStringsW
DebugBreak
GetProcessHeap
HeapFree
HeapAlloc
VirtualQuery
GetModuleHandleW
GetProcAddress
CompareStringW
SetLastError
CreateThread
LocalFree
DeleteFileW
CloseHandle
ReleaseMutex
GetFinalPathNameByHandleW
WaitForMultipleObjects
CreateEventW
GetExitCodeThread
IsWow64Process
LocalAlloc
EnterCriticalSection
GetLongPathNameW
GetLastError
FreeLibraryAndExitThread
DisconnectNamedPipe
CreateFileW
GetModuleFileNameW
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
FormatMessageW
CopyFileW
CompareStringOrdinal
LoadLibraryW
OpenProcess
GetProcessTimes
InitializeCriticalSection
CompareStringEx
CreateNamedPipeW
WaitForSingleObject
CreateMutexW
CreateDirectoryW
GetModuleHandleExW
GetCurrentProcess
LoadLibraryExW
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
Module32NextW
CreateToolhelp32Snapshot
Sleep
advapi32
RegQueryValueExW
RegOpenKeyW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegSetValueExW
RegCloseKey
ConvertSidToStringSidW
RegEnumKeyExW
GetLengthSid
ReportEventW
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
AddAccessAllowedAce
SetSecurityDescriptorOwner
RegGetValueW
RegDeleteTreeW
InitializeAcl
CryptGenRandom
RegGetKeySecurity
SetSecurityDescriptorDacl
ConvertStringSidToSidW
SetTokenInformation
InitializeSecurityDescriptor
DeregisterEventSource
CreateProcessAsUserW
CryptReleaseContext
RegCreateKeyExW
CreateRestrictedToken
GetTokenInformation
RegDeleteKeyExW
CryptAcquireContextW
OpenProcessToken
RegCopyTreeW
RegisterEventSourceW
user32
CharUpperBuffW
CharLowerBuffW
shlwapi
SHDeleteKeyW
odbc32
ord75
ord24
ord31
ord241
ord111
ord136
ole32
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoInitializeEx
shell32
SHGetKnownFolderPath
msvcr100
__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
towlower
free
malloc
_ultow
wcsrchr
_vsnwprintf
_vsnprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
wcslen
_purecall
_wcsicmp_l
_wcsicmp
swprintf_s
wcschr
_swscanf_s_l
memcpy
_wcsnicmp
swscanf_s
wcsncmp
_vsnwprintf_l
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_unlock
__CxxFrameHandler3
_lock
_onexit
?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
_CxxThrowException
oleaut32
SysFreeString
SysStringLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocString
VariantClear
LOCALDB_PRODUCT_NAME
LocalDBCreateInstance
LocalDBDeleteInstance
LocalDBFormatMessage
LocalDBGetInstanceInfo
LocalDBGetInstances
LocalDBGetVersionInfo
LocalDBGetVersions
LocalDBShareInstance
LocalDBStartInstance
LocalDBStartTracing
LocalDBStopInstance
LocalDBStopTracing
LocalDBUnshareInstance
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=171, version=30414,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=188, version=30716,
count=1, id=189, version=30716,
count=10, id=193, version=30716,
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=196, id=1, productName=Unmarked objects,
count=1, id=152, version=20115,
count=4, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/LocalDB/Binn/localdbxeventconfig.xml
- SHA256 93185d3e7a527c760f2e9b98704b8c93ae7a7e30ad52dfb21f1e1ea5238be7e2
- MD5 e880d4f5587eb5d0aaa1b3e9b6a67df1
- SHA1 abdc8cdf87375d70b5c135930737c50021d2cf2c
- SHA512 e6a365b32a4294fc0b68b1a1e47af5a14e081e78eb3b5c1428477f596719ac46c957f514317d95a204ded340ec585126a8da5a8dede1fa02b2dc8e328e4c24ef
- TLSH T10B31B804B7B79F66892C5D9FFF796411647FA9F3F1082180B5E8FE332A1B48A2453419
- MD5 SHA1 SHA512 TLSH
Setup/DAC/SDK/100/KeyFile/1033/sqlsysclrtypes_keyfile.dll
- IMPHASH dd949f9c2ea8d8f2d9dbd7c28c3ed8dd
- SHA256 c51a51d4e3734765d1352dbf09511e49a2773b3d6bd9a704ee664fb8e3059e42
- MD5 166a4eb063fbff4d85b7647b9b3819b0
- SHA1 1738ea07615836656f9d5579e1de65a1a9fa6ca4
- SHA512 d178a00dd133698bc04c9d641c4c77cd6547c05e2fb4b81d9b86db53b12ee49def2496360eee2d8b84c7461adc1db8cc0f1632d6bd8938957fb34880e8df992f
- SSDEEP 192:eezaYKTBCxaMQk3X7rrqYPWhRmWQRFGQKPnEtObMacxc8hjeyveC3cgYBv:euKT4wMdrrxPWhgWQKLXci2jpvqBv
- TLSH T13A523A868F7DC10AFD970EB0A3F4D9D33E7CA7C31B52A09F5651E64408A67D08178A79
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
24:0d:f8:e2:37:3b:15:c9:8e:61:45:06:5e:4b:6a:70:6a:a6:b3:6a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
5333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr80
_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=1, productName=Unmarked objects,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=3, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Setup/DAC/SDK/100/KeyFile/1049/sqlsysclrtypes_keyfile.dll
- IMPHASH dd949f9c2ea8d8f2d9dbd7c28c3ed8dd
- SHA256 c51a51d4e3734765d1352dbf09511e49a2773b3d6bd9a704ee664fb8e3059e42
- MD5 166a4eb063fbff4d85b7647b9b3819b0
- SHA1 1738ea07615836656f9d5579e1de65a1a9fa6ca4
- SHA512 d178a00dd133698bc04c9d641c4c77cd6547c05e2fb4b81d9b86db53b12ee49def2496360eee2d8b84c7461adc1db8cc0f1632d6bd8938957fb34880e8df992f
- SSDEEP 192:eezaYKTBCxaMQk3X7rrqYPWhRmWQRFGQKPnEtObMacxc8hjeyveC3cgYBv:euKT4wMdrrxPWhgWQKLXci2jpvqBv
- TLSH T13A523A868F7DC10AFD970EB0A3F4D9D33E7CA7C31B52A09F5651E64408A67D08178A79
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
24:0d:f8:e2:37:3b:15:c9:8e:61:45:06:5e:4b:6a:70:6a:a6:b3:6a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
5333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr80
_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
332B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=1, productName=Unmarked objects,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=3, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Setup/DAC/SDK/100/SDK/Assemblies/Microsoft.SqlServer.Types.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e272e45652092622db856dca4e840389be109abcaefd1f376b0043b450a801f5
- MD5 e3f6937bbc9f71fe87a931adfb92cecf
- SHA1 91d3f257a6bbfbf8c50843011db6ce6535d998bf
- SHA512 0d535416d4e3c485a4d133a23270c31d4e0e9f6e59a53c34fbaf0475dce0dc1004d329d3d7d58bb5c6a8f2b4b189932fdb90ce1294aa1d5ffb9c285711882210
- SSDEEP 3072:X9ZHG6aeJrHhGKyoE8GoPxjdBiFaAGWjvGiPP2EpPZHqjm1Dkkr0v9o3:X9NbaeJrHhGKyoE86/KZ8
- TLSH T1E964981DEFCC1226EA76F374CAF4447663227A13663DD7CF40425E8D0A6B6814AA077B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
32:71:0b:07:1e:0a:38:31:e9:79:bf:fd:12:c5:9b:9b:b2:a0:e3:4a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
305546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Types.pdb
mscoree
_CorDllMain
Name
.text
Size
294KB
Virtual Size
294KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/100/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69841056dc8d96096196fb08c79cf7d3b9d4659b5e7e64d13e47fc3c403e3f3f
- MD5 92ba39e66c3d5894a23b110da092bbc0
- SHA1 3c25e7140e6a59bf4af205c7ccaf7fe5907326e4
- SHA512 7055ada1eeeb954e5770fce83469ecddd2c9bc2aaae05887ea899042ad22b2513550de20242f5af25cd2338093e085a2d2da4682363a37834b83c01294348177
- SSDEEP 384:9iua0XKriuQVqDvOo/dHoqWZLXci2jpvMUqR:9ium7QQDvPahMi2jpvGR
- TLSH T19413745297ED1449F2A2F937D514FE067CFA6AFE3F2A931A10182D7E34F2550C628329
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
19:ae:c2:0a:1f:39:f4:3f:98:d8:70:ae:77:0a:f4:ed:63:11:f1:c9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 3, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
29486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.ConnectionInfo.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d8a81e198a721ad8baaab4e4f90103a8407965454ca4ff46c966e9b0d948526d
- MD5 72b11c28883297caafe65e7812266375
- SHA1 69035f03c363f7d70299da5e4b0f491c52d479ef
- SHA512 34d5e14a23c1678d348a4d2f82c6b0de381bc5e1abc73b73ef99b77b6cca8bc08b0cd4b1ba22bd4923c7e6f9514f1b16bedc77997b3e6657f7730133aaa2587a
- SSDEEP 1536:0dfbfkgSuKg94LsuDRNWuvHYftTRjUuzXzb8Ujeavw1TeIDF:0dfbfkgSUhOTHYfHUuzDgUjeZT1DF
- TLSH T101F3D69617ECA802E37B2D3538B1F89407F2F6E649FAC74A5028C05E28B77551F12B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6c:5a:1b:c6:00:4b:32:70:c9:50:3f:fc:78:ee:a9:10:7a:2c:f2:a1:26:a7:2c:9f:f0:f6:34:af:1a:a4:bf:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
db:de:d4:14:b0:81:bf:f6:5c:c2:f1:f3:3a:f4:fb:2f:5c:d0:a0:02
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
150702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.ConnectionInfo.pdb
mscoree
_CorDllMain
Name
.text
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.ConnectionInfoExtended.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e034250b84721dd48cf90eb8b62dabc2a341a340ef7b7061cb4f5050a563628
- MD5 2af76f89fb11cd819f2fb2b7247a6898
- SHA1 3f3fcf37ec8c348a0f30d23d25c2253718bd7819
- SHA512 b38d9e667845dbc360124a9ecdec1f8bbf18c323dad2ec9e8b0f7523e56d50a6333c0ccafc8742547208287e95aeec3d1e92f528381290017bbd24ed1d99f2da
- SSDEEP 768:H635u1cMD9s6aJPl+ldPpb5qm7T06eLgIbh2TaJgDGAxp9:H6p2Vm9CPpn06eLRhrgDdp9
- TLSH T18BB3759217E9A412E3662D723CF5FC9517F2F3F288F98B86512CC05A28AB7161F11D6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
47:28:dd:c6:34:10:85:cc:c0:f9:1a:82:b4:46:31:37:ed:5f:ff:4e:aa:eb:ad:b5:3e:b4:c4:c1:4b:c3:44:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ae:25:b5:17:99:db:1b:21:5f:36:40:06:1c:bb:6d:bc:07:cd:69:a9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
87102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.ConnectionInfoExtended.pdb
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Dmf.Adapters.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58089b6ef0821ceaeb84adf2fa8f77a90e418aafbd0a6ee3d28a8cd6f8a2d74b
- MD5 c022fd9c28c1c415f4bd504fda03d6cc
- SHA1 f944e164f620f98a3a7a46ee710fe181b4de128f
- SHA512 41d902f9c8074f6979637b957c6723ee781d0091a35f97b470078ff1a70c99969eccc9a2927097a55eeedeebe60c8d2ca09fab56c1f91108f490212536131124
- SSDEEP 768:DQqnl8Ic1JfvrstaQ+3POuE+Bh65p6TtzE6f7KJL/fJCT6GA7gub:cqnl8IcTBmuupw2JLm6f7b
- TLSH T19C63184167EC561AF2BB5B31A9B194839E35BF966820CA2D0469905F0873FC0CB71B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
23:4f:b8:f0:b5:e5:cd:66:c6:46:eb:65:d9:a2:37:91:92:ba:d6:78:4b:2a:6d:f9:4e:d3:46:77:29:70:08:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
61:4d:39:a6:55:25:1b:d8:40:5a:9c:88:06:02:dc:00:d9:82:67:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
51566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Dmf.Adapters.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Dmf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a8da5ec5ce0306cd94cca8bfaf2619aa935dbf8674045b3a6a0f1633f39b741
- MD5 ecc11d792b3a559ed1f205db294538ac
- SHA1 61cb13ccfa4471cb584bd3d487aea20685ae88db
- SHA512 4cad46fe8455a1749dec49b85583afa4970acd447c8a0869fe62f4c49c19d62a0a55f5aae01401faad39e1325cd5c542fb1864aeed04022d608fc20edf0cfb65
- SSDEEP 6144:kn8Qx0//m/Jkq21yj2ZfiRpAmHHZAatGEgrYr+vm8lAleluWetFSkM5RunO2Sy4:k7j3rnD+cquWetFSkM+Oll
- TLSH T1DD74064523FC8A4AF2FF5B76A87495118E7ABE9665E2D35C0C4854FE0D23B408E12B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
28:2c:e5:16:1b:34:b4:d6:2f:76:89:b9:09:0d:93:c5:e3:14:54:d4:a3:bc:05:45:ab:c9:bd:99:d4:6c:ad:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
1f:2f:02:c9:1f:97:17:3e:3e:4d:bd:70:6d:99:3a:88:42:ed:a2:7c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
342190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Dmf.pdb
mscoree
_CorDllMain
Name
.text
Size
328KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.DmfSqlClrWrapper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 34ff1dbf243ca29aedce198f54be68b9805edaf4716de28c8f172436e18856a9
- MD5 0bdac977b6d6997ce2820b6112ba659d
- SHA1 ea83d2bc201ca67f671a594e3c54132811e5bcab
- SHA512 14475302be0d050b5d379b6caa064e64155276766c363dcf28cdfbf57a718397dac787212188560e13d0750b3d80ad470a39fa3498074f29f357e829648152af
- SSDEEP 384:DSkKuXHW5U3W4hGeDpBjTeajCD9TvZIclj+u6:sUp9MGAVVte
- TLSH T1C6A21885DBBC8193ECA29E3016F4D9C37D3CE3C75924AA6E0199E18D1D833D1EB24A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:67:76:52:78:23:23:f0:09:ed:5d:a1:1b:50:fd:ea:d2:4f:53:69:61:3e:5a:0d:b0:e2:ab:7b:2b:49:68:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ca:cf:14:b9:12:5c:60:94:1d:d3:52:5b:ae:c2:db:7f:98:06:05:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
13086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.DmfSqlClrWrapper.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.Collector.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d237665f3f1d3d0b185ec263e35d576a6ff48eec8274de24bb5432032c7ebef
- MD5 580448288c249572eefc0c18f9f85ebe
- SHA1 4d65633b1666242e13f0213d8e332e8c4745f563
- SHA512 63b41006259a6ce81ce23cb4f42212de1ac88bf962c34af4f6735a7aed62f5763c968667ece7c100fd7c1d54592de8e23e446571c8b75740208d530e993b8652
- SSDEEP 1536:d9aD0DZgpl4Swrl6I8x8we64cw+SfYzPmfzsjMP:CuFrl58x8we64cw+SfYzPszsjMP
- TLSH T19BA3E64067FC522EF2EE6B75BDB255924C35BE6E6622D72E1C50909F0832B808F61737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:df:5a:fa:ff:58:35:9a:60:30:3d:dd:b4:ab:43:d6:05:ae:10:25:c0:3d:41:08:b2:38:ce:9a:a4:10:3f:9f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
4a:9e:4d:31:e8:1c:b0:5f:b9:33:c4:72:d3:6a:9c:61:e4:9f:1f:c2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
77870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.Collector.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.CollectorEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c6a8728609f3cd7c94f08d291593f59234a1019e930b74b2085dc849fff143b
- MD5 c6e10bbbc19a9edd691882550e2aef38
- SHA1 dd0972b15684486d43f30a73a1c854955583abe1
- SHA512 924a81091e3be045e2d2632639360bd75648718fa4124241112e03aae57deb5db34e201e159bb939a948c3fa0e39eeedc3d6ee1e7630906ee84900a1fad72118
- SSDEEP 384:4yRsNA38hUFKRWONcBrn7SZ1OwZ9B/yrFQLofyCxd0+qUYTnZ0z5YbiA2W7cdWIL:zi3L2KzAbGAxddOg
- TLSH T13C23E601F7ACED16C4E6093091B5E9A2ED3982930630501973ADD39BEF237D4A626B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c0:5e:7b:0c:14:bb:97:50:59:22:b5:d6:c1:eb:51:cd:1b:17:18:5e:80:b0:44:2b:8a:24:40:64:49:e5:c2:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
34:1e:14:88:40:6e:03:17:06:44:a3:bc:52:44:e5:52:3c:11:fb:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
26270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.CollectorEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.RegisteredServers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1bf101e47535042c85354c0fede653d6363b0742858375000cff3371e0eeb503
- MD5 e4a0bd5bd0b815998e91740e528d0cd1
- SHA1 175ff0ea7415e179bfbc0c82fe3074489b9cb29d
- SHA512 54366eea74ac0bcdaea93001db4bec3f47518f9f9a2647a6ee57a143b0f0ce6e44987c94aef2aa45edf2a74e4a6b1d7059d2332618ab9ac6dc5fba7295fb0da2
- SSDEEP 768:sPRfeTkp0FOa4JYYAZL+HVIfqaPQbtXUyBAOjbg6GwqzXBLb/3jegi2B6uGJGA6x:+LJY3+1IfStXYOI6LqzxLbTegJsJuEW
- TLSH T116934C1163EC85AAF1FF0F746470D4415FB9BA8225A1D72D4E84E1AB18B3BC0EB3175A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:bf:4b:0b:73:43:c7:f6:ee:fc:aa:88:91:c8:7b:ac:cd:ae:ee:fa:f4:21:d6:14:5d:c9:36:ca:c4:1b:e8:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
00:56:dd:61:cc:47:21:a1:a7:74:1d:56:de:aa:9e:4f:1c:5e:e3:2e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
69038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.RegisteredServers.pdb
mscoree
_CorDllMain
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.Sdk.Sfc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28f0ce3aefd6ab09fae7f9bcfd8ae3a1748770eb25f5830291770c042e3a9721
- MD5 3c66719f51c279c7bcacbdf9ec4a1919
- SHA1 1eb20c43358bde51597d7079c1f1164b51716666
- SHA512 74743fa02ad1b8a9365f5003d3db6b2af666ed9bb2348d8220f43388302655e4c40addbe1d4deed56e0f9a6d734c88407a9ffaacbeb24c031d0cef0b04e23d35
- SSDEEP 6144:on9VM8k+AAoJtrbi/bQBH+hNKXfBVqMBrjE5MSm9GogdqRYS1X7K:UTrIHyGBi1mUoNNRW
- TLSH T193B42A01B398C7B2C56D1372B4315C559AB59297219CD3B477CCC2AB9AB3FA1CF22263
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:04:12:e3:d2:0e:1f:47:20:28:19:96:2c:0d:ab:84:65:10:13:0f:33:5b:d5:de:c2:16:94:62:2f:84:27:03
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
8c:6e:bc:d9:05:cb:f2:ac:68:48:b9:18:e0:00:82:cb:ac:a9:0c:a2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
484798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.Sdk.Sfc.pdb
mscoree
_CorDllMain
Name
.text
Size
468KB
Virtual Size
465KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.Utility.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bea7f1daf7be52b25eecc290f7c493b1d6dbc105d47ac8a688b048e9c8ed3876
- MD5 8364112dd878e1431ba9ec985cc29930
- SHA1 3afff05810474e2266493bddb2e20353e680fff5
- SHA512 f0bb17735d53e0308979302dd3ea99f2cf73bf2603f01f82789a08869744da9ce79f0a592263548cfed5629739024993f08622fc06d29e7706753ff6279d61c4
- SSDEEP 3072:1kAUporemFO1QQzOlgnm+WVmBs9XFOJ6uiI3gnPuhzW5aSMowCcBRebJdTVNBlar:PUuamFmQJNIsuhzW5RMZCnViWK
- TLSH T13864824123FC1258F6FB1B75BA3594A04AB7BE9A6834C65C185C504E0BA3F94CEB1B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4b:58:23:50:2b:01:5e:c2:88:e0:13:3d:73:1e:f6:21:24:6b:5e:52:51:e7:ca:52:0b:b9:c6:1a:85:c1:ac:ea
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
8d:df:b5:5d:38:63:02:c1:1e:82:86:c3:13:b1:85:1e:96:01:f4:38
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
310110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.Utility.pdb
mscoree
_CorDllMain
Name
.text
Size
296KB
Virtual Size
294KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.UtilityEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96a9d99d31c5190e3880a7e9d6961cd4996cc76d5a3d560d1fb9c558228fc807
- MD5 85730af402ff84288706edb626e726fa
- SHA1 15bd32b6e78b569e3f0178b9be7fb3b1f2e3b632
- SHA512 3a586d5a94749e87edc1d597cc7cb4494a241a54f81e112d787d094cfb6ecb29293333ec900c5892ca5dece55157f29804c6c65873f43f3e3928ea6b7bf5a597
- SSDEEP 384:1JuahJy5hVPcOLQQ6yaiLuJ0ciA0WKK+WqhPapBjTeajCuvZlHEBlHM7:jh0tbcz7KGAojkLO
- TLSH T1D7535313F79CCC19C4E10B70A660B961DD2483634A30149577ECA3EBEB52BC9A503BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
67:0a:0b:1c:aa:ab:20:4b:1c:d8:87:38:a0:4f:48:b9:2c:48:44:64:1d:9e:38:19:76:ae:0e:12:0d:0f:a6:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
10:aa:fa:9e:0e:e2:79:f5:e9:13:90:08:5f:1b:6e:96:a9:6e:52:95
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
44974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.UtilityEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.XEvent.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d5fe7ba1077e37ec47e87b82d68bd49cc614faef72ab36d31b322e5b2bbe9bb
- MD5 9b7a765ce1bdebb515690e72991488a7
- SHA1 7a9839be80f3518d00211ef070ea5f39e7b6f2ce
- SHA512 3b7666c6f70fe67a06a53f5b47bf40c1faa8244dde5616080b4d6832992881398425a0a24fae935926f0b5aa6b6ba3218fef9a4e26dda812341683e91d3b442f
- SSDEEP 3072:1/+ODiNphW6Jcbml+0a8jOCNaOZhz2dYGXpW8UzuQg4KxblowZg:9+ODiNphW6JcbmMKjOCNjZsJAcMwW
- TLSH T13BF31B1437E8835FDAEF46B2F47490558639FD6EB162F35A7CA0A0F608333444AA16B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:a1:dd:81:bb:89:82:51:64:23:3f:0d:79:87:08:70:23:4b:23:bb:ae:e8:1e:20:c4:f9:07:6d:9b:e4:98:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
d5:65:55:9d:95:e7:55:ae:cf:be:48:96:6c:50:29:0a:69:a8:4f:71
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
143166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.XEvent.pdb
mscoree
_CorDllMain
Name
.text
Size
132KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Management.XEventEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f81c53f48d114e1971bf0d53892af4595b8e9aebaa854a753f8c2a5d08ef8bd
- MD5 9cbf86fbf930b0c7c13869cf61a45169
- SHA1 d05ab4e393a1cd147e716f5be34de917b54db846
- SHA512 7aa904d8a7c4f551a13728b56a9b956faba506270916357e8194c205127634e624bedeb02296e9376eb2dfc72fcdb92ecfc7c9e2a3e57b9729719630716ae54a
- SSDEEP 384:1f1mJkMuUvqKMBxkMm0ge5ONixGE+jhdKxA/Kh7RU/PiAIJWrpiW1hGeDpBjTeaL:x/nG7UxYKhWztJMGA66tg
- TLSH T1EA43972AEFECCD05C4F51E31E290E861DD3482A21A3018A177DDD3D6E951AC6CA27B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:cc:d5:23:e9:a5:29:8f:63:be:02:f1:bb:c8:42:de:a9:83:bd:da:bc:d3:4d:f5:7b:77:60:f3:18:c7:93:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
db:7f:28:f6:20:f6:8c:81:6c:f5:c5:2a:10:c0:1f:ea:33:da:a5:96
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
35918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Management.XEventEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.PolicyEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e5e0d084ed8de6d7160d12155701449e6b23ab3898bce9477f0dfc9491ce3b1
- MD5 bd9b59cfba17d0036cff233327b0fcfd
- SHA1 bc8e1f40d84ae45e6b50dff9f9990495d674b9e1
- SHA512 bbf8d7bfdd56feac2eea20615d4a055972b9ee26074524cafd28e8f1c99a65389074843e7a3dbcd1b66595663cb063549d68b25b72c00c220dd4a80899f31f3f
- SSDEEP 384:Au1H0hEsIJWX8F7RgaWn/lFoZCgiWbcfXeg3/c0z1h4mbjLXHIJUpXNeWDeLWDhv:dDcL9KiMGAx/o
- TLSH T1F933E702E7ACDD56C4E20D70C5B0E9A2ED3883520A30546473DEE3ABEA537D99607B5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3f:0b:82:01:52:12:7f:b9:70:0e:8d:2f:74:08:fb:84:a9:a1:82:9a:b2:41:aa:f1:20:dc:08:65:a5:03:01:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
bd:0a:f3:53:e2:65:38:72:a7:57:14:90:06:84:d2:34:d1:a4:05:39
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
28894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.PolicyEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.RegSvrEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 84aa625ce6e72edc3a6c59630117ef35ef4951f53f828a96026dba10b653e1fa
- MD5 67373cc732008e4994d7cfa9394cb0e0
- SHA1 b847e0e2e35e7cbd9b40d96f3fbfbb00523d8411
- SHA512 869b18c3fe6e564843781561b3d4cb502bfec24872933af0127344535ff259a040544193d19b26ffd7a69289bb8389e77f3e7e3946d657d2e00a0cfe18fb7130
- SSDEEP 768:eFs7OrM8rjYrg8LSp+yKWys5JGTttoZuCMGA4dV:6s7OrXjYl8+yKbsiZC3dV
- TLSH T15A8329425BEC8913E7EA1E3538B8FC4506B2F2A649E5DB4F0D58D0AA2C673914F10F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:ea:cf:72:81:37:ff:2b:b6:06:16:36:b7:ea:f6:9e:c7:cd:c3:98:cc:2a:74:b7:56:1c:64:d5:44:f8:e0:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ed:09:31:c0:9e:25:a6:83:92:db:06:f9:b8:d6:47:cf:a2:aa:69:3c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
62414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.RegSvrEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SString.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e72db19c34536428706409e1e5c4bb41e8d22492d6076854f565db19fa6c3b19
- MD5 5441b981c0893e8f5766257bbb85170a
- SHA1 1320c23c0b15d926db16ed1901769f6b9a717769
- SHA512 75b1eaece2507bfb22578d57ba612fa2b53276f3b87e0536c179ecbd4d3d761c6aed8208357b5e8b8e441855299731fd9e9c1225ee603ee768ae1a59243a594d
- SSDEEP 384:0lqB3Kf3a23a23aguJ/AerhW+TdRqP92KzwzuWdzGWkhPapBjTeajCmTtvZkHlHv:lDLLserY+Td01IFsGA2tSpSo
- TLSH T152136B4C9BB89193DFA78E70D1EAD8873D38D3C25C62976A0ED4E1E509433D89713A2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9e:c1:04:5c:6d:80:84:b0:9a:ff:24:17:96:90:08:e1:85:2a:cd:21:cd:81:38:a5:c0:bb:4e:5f:68:0f:6a:bc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
bb:41:d3:7e:ec:74:f6:56:8c:1b:0c:d2:76:f8:3c:92:be:b3:f7:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
22334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.SString.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.ServiceBrokerEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a22480335f902f373444900d424563df8ee7fe87092c48edcf96ce0c66e2de9a
- MD5 ea2fb6ee4e5da5c05315f80ef4b66db2
- SHA1 775e8280bc20663ae429ff37f946b88a33425adc
- SHA512 b57383d80883b4282549976dc516b35a9fc9a9579ad93218abd80bbfc6eeab8d0485dd47cbb5a9e3e86f8cfe1a92097cede70b905c7b0d58ed2952c1d1e76fac
- SSDEEP 384:EASpuEf1o3tZp/NtrYCHCkV5rcqoN0QEkxt4SEBsi39zRX3jt1QMXHpRARQg5B6W:RC9XHBKwbUGAyMT5u
- TLSH T15B43C601F3ECDE66C4D109308971F862EE39426219342424B3DCD3ABFB92BD95A1B75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:4c:23:a8:a8:2e:11:74:b6:0c:cd:94:fc:2b:97:a9:cd:45:27:a8:7b:05:c5:47:df:33:e5:95:22:c9:15:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
c6:c6:15:8c:9d:ad:46:69:a4:93:40:1a:fb:d2:68:33:dd:90:ad:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
34526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.ServiceBrokerEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Smo.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da94df6df6b07b0fa84923c0fea229b8fda2243b10506637d1abee066ba5a0db
- MD5 62afcd9cf3d16c3e6fcfc03bb25ae4bc
- SHA1 cecd97b7f226baf4101e43a7b301ab97ae33359e
- SHA512 e6fdf8723a03e81e4e0e07651fc55d3479d84deeb90508d3d4a4d812630a87e022101f803ee7adfd4707012cccbdcd1d699334744e051f0607f6d903a0cca336
- SSDEEP 24576:3ac843VRxz32FZTyIyeE24oX9A+2lnNrMwk4+4FleCiDE:qhTZolNrMwkb4Fle6
- TLSH T199F509422BEC5A5DF1BF5F30A67490544E76F9AA2A21D31E2850E11F1861F88EF72373
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4a:fd:69:43:a5:ad:3f:1e:87:5c:08:e7:a6:74:2a:1a:17:bd:c5:68:64:de:37:71:26:b0:89:a2:a7:13:dc:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
57:94:1a:79:e9:db:23:59:ea:63:3d:ed:f7:80:ea:7a:54:f9:b8:65
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
3593838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Smo.pdb
mscoree
_CorDllMain
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SmoExtended.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82e20463ecbe2eb8d1439a7d5bb98eddfdbeb40ce49347c9cd8df199ae7d3079
- MD5 9cacccbbdf4d35ebea8344779ed7130a
- SHA1 0fe7d3bad6cf74d55be87bb7a13680ec7a857c3e
- SHA512 2c68c6389d858549b1a9b133965413c29588d6cb7d14600013fab5ae53b735b50e7752916e768dd90e9f38a54c6f3e7d9a539e22073ed368b14d173eb6739c2d
- SSDEEP 3072:Fh9BnbYJJ9QjtVlW1qCrLef38XIpdgbpJxZ0B:NBnbmrALKq6Lef38SQpZ0B
- TLSH T126342B9623AC991AC3AF2D72B8B1F89543F2F2A7C0F6D74A5814D0DE2C763505F03969
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
07:90:8e:dd:aa:5a:be:64:33:27:fb:41:f4:ce:95:4b:0d:93:7f:f4:a7:72:85:b5:15:40:56:e6:c5:d0:27:54
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ab:a8:01:e3:6e:e1:77:cf:fe:e9:61:ba:11:c8:13:d6:8e:48:8a:f2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
211726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.SmoExtended.pdb
mscoree
_CorDllMain
Name
.text
Size
200KB
Virtual Size
198KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SqlEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 08b6bc199d9fbe5720906cc2dcac17ca7f18154f1254299c0b278caa20be537f
- MD5 443d02f94074380ae287280cdf9d7d03
- SHA1 341f88607e6d056fe10dc16204851e0bffe7a41e
- SHA512 1cddf82de8dcbb8563ff54e497e0cde2e813145320fabc3ce118eb3974e917436610b9014a5b49da03a0e854f02f2ac0c170aec5ff03e3a58aacb10e4b3e75d3
- SSDEEP 12288:7wB8t7nUWjjlVELu3i3+34A0ajD21bMPhA+FDnqqKga0FtYH6Ml4rYESZjOy1jlo:7wB8t7nUW2y/OH07db46RRfMk
- TLSH T18A55E902F39CED15C0E21672D974B8A0DF69D1251B712460B3CCE7B7EB52A888D1B76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bc:c1:5a:e7:37:1b:1e:48:7d:e0:89:17:9c:b0:66:9b:02:9a:35:e7:d4:7b:be:1f:fe:95:3d:f8:31:8a:28:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
fd:36:d8:ea:08:79:ce:ab:26:e5:a3:db:09:d1:05:00:53:bb:b4:9f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
1298158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.SqlEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.SqlWmiManagement.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 982ebc8d7c9186c7b6a181b308a540dd6cdd1fb2f874cfe5a0c100cb03838a10
- MD5 9cb67c8356e30edf2607f7a21f1c972d
- SHA1 527d29288669b6452ad89ef7adce187468d5240e
- SHA512 473521a8d678bb1374512235a9d507ab91be758bebdbfe73fbddec158aadb167a9b69cfad8657f9a204ea9cf9c71ea0f03765e23b44c54cf45de8bf474035d7d
- SSDEEP 1536:m7mfQspwbV696AUP+PYQOgr8eD4ahDkDWH02Dt+v1/Hb1XG7ml9LJXEtCEwbbKBO:RpcVA6AUP+PYQOgrxDphDkqUQZPQWOB
- TLSH T11704E74227ED5815F3FB2E7239F5FC544BB2B6A255F6C74E1528C09E2876B100F21B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
59:73:6a:04:a8:ba:df:bd:4d:68:10:60:0a:0c:6c:c4:e3:5f:a5:48:96:4f:a7:0f:46:11:e4:e6:8a:1d:67:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
6c:3c:27:d6:b9:42:29:8b:68:61:96:55:f6:e4:5b:7c:c2:de:c1:ba
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
157054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.SqlWmiManagement.pdb
mscoree
_CorDllMain
Name
.text
Size
148KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.TransactSql.ScriptDom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4efdc459492b8a3ede761cb733f7d69a0dc94215f94812542741110f40abd094
- MD5 515a692785f4f9a59ed8174cf2f7b3e8
- SHA1 b9708d762b24aaca22fd79461d8ee8752ebb97aa
- SHA512 81c680cbb93d50d30f659b9793460c14af5bbad74a72facebadfcb8beb6fb8639604c9c5352b9a1a323970fd0549c5982edca3eae0c62fc925914b3482d9ae75
- SSDEEP 49152:Aws5oX+QgFYoCqK6/sA2xVo7FCs/Z5ErGD5N:AzZ5E8
- TLSH T117B5D711B5FC572FC80EE3B8A0E3403662F58169ABD1EB870D4359D74A99315CEE22E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
76:35:e6:cb:38:81:4f:27:ce:43:ef:ea:a3:18:ec:e5:e3:aa:71:0f:dc:7a:d9:8c:e5:ac:b6:80:ab:65:f9:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
b2:c8:17:f7:b3:9d:d9:1f:23:d6:3c:02:84:80:b0:87:88:91:1f:06
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
2370398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.TransactSql.ScriptDom.pdb
mscoree
_CorDllMain
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.Types.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36c3e5efd0731ccf5ac9a341c488b4fd14c69747f5a3f6e4cd976a7c1288b3b0
- MD5 25656a196ed967bcd4b152a4073b8b44
- SHA1 a9b64b8a42c9da3243378f2a17a9ff8057154116
- SHA512 3903556d2130a219e9795856a14eb28926e3b798eabfe96353300ccc1c11925aff2f417c9ca588f2ddd0df47d6a64517980a39752edade9ad725f6ee4aa16383
- SSDEEP 6144:OVcpT4frcU6MM6Hymh8qME8h2x1mobeug:vMFRx105
- TLSH T1AA84E81CEFDC123AEABAE374C6F04475A366BA62663DC7CF44410E8D05276C186A177B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
fa:09:ec:f7:3e:6f:98:00:88:b7:5f:6f:fb:c2:67:df:80:c8:78:ad:48:a7:ca:dc:15:19:39:fc:c5:ab:4b:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
40:df:31:d6:b2:52:e4:f9:2e:53:05:32:01:d3:f5:da:70:6e:22:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
368566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Types.pdb
mscoree
_CorDllMain
Name
.text
Size
356KB
Virtual Size
356KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Microsoft.SqlServer.WmiEnum.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e57d10b38aba9ed41f17409e5478554674bf92382991581436325d6ad3dc00fb
- MD5 d576355d5dd6e02dd2c683fc67b6b3c2
- SHA1 8cd6e40897249f6a408f5d7b3e5826fb23f45203
- SHA512 3bf5bb530c13363cdcf7cc07ff6ec86e7b21031183d4dac5e5e0d73769defbd5c9b9b626514bd24584f86d077bc9598422d07e4d705a49b3159a67b46131edf4
- SSDEEP 384:xj1pnizDV1snpZg8Uidrd8pIgUmpHNQ07KO0/0NWocx7vEjJ00TMPqIWLzQWYhPs:xxN0yUIrd8ptTHNQl+YqiGAMwUvt
- TLSH T139432A03B7FC8917E6AA5E7036F0F8D65E7AB39648E4C72E0928D19D18737909B10E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6e:7d:16:92:57:34:cf:58:e3:f1:cc:d3:ea:dd:a0:e9:65:1a:3c:81:a4:10:5e:17:75:6e:16:ee:40:0a:0d:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
d3:97:69:35:1d:f4:ba:97:a6:57:85:91:bb:15:ee:4c:15:c2:64:bf
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
34526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.WmiEnum.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/Redist_TSqlLanguageService.txt
- SHA256 b574e73c5c3f65df0099e958fc5b9959738daae7b2b8854e78815ccb08f564a8
- MD5 975f1a1e9506cb4ecf67908349f93d70
- SHA1 b4ef860be2eb4b48beec790fa24aa93e75e526d6
- SHA512 aee94612c838beed21be31f04482440a0357f5de9d1e426cc7ef0dd2deff9c15a912d19b0e83c10cfbeea044dcdf5b45e582a16e8a0e5027a133c885dde602f0
- MD5 SHA1 SHA512
Setup/DAC/SDK/Assemblies/ru/License_SMO.txt
- SHA256 c53071322a5d6e161ef5105fbb5ee4129a848e0bcb1ecb0dbba11d351ad1cf13
- MD5 839cdfa87b30840faaa1d05f3f0014b6
- SHA1 17c218e688e8c3176869dcab452ca362404f8bc6
- SHA512 ade8eb1e2a1e1dfe3ea7b3f0b7fe28b06e3996a39b4d17164708d434f07967fd8809418ed5a0c4ff1f8b0fe0bc276e8c773e030f361fe9fb09d75e3e2e607550
- SSDEEP 384:npOLYOgyl/WCbVTxyOFHzjxzpoBZy2KkZ3Nj0is6sfzVpObY0PCbVTxyOFHzjYzk:PIQgZ8RN0
- TLSH T12203595FFDBC9525A9A0E2111F124AF710AB77006328A5C9E6CF7DA890AC53633357CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/License_TSqlLangSvc.txt
- SHA256 80a47b479eaa4807a7a0fad4398b65fa830542802e00b9293660107a091d8aae
- MD5 015500391eecb049e857b8b354bb8aa9
- SHA1 d4a886b73c656a3aec5e31364281ac1005acfd05
- SHA512 977aeb8ed179393b0ad06ec08e78edcfb220c60ff123b5bed8b444f102fc8279579cadbc287cd3dc8d29054c7d4f903eafcd6640df251b8de9675b7dc6c17b72
- SSDEEP 384:zpOLYhbabVTxyOFHzjxzpoBZy2KkZ3Nj0is6sfzN:mQgp
- TLSH T1C782595FFDBC9525A990E2111E124AF710EB7700A328A5C9E6DF7DA890AC53633317CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.ConnectionInfo.xml
- SHA256 e42e07d5da0b682b1dbfed487bbb443fb50b9a52de67d4055c2182b3ea1061ad
- MD5 405026dc487bd5fc0c3ee23fea55fd72
- SHA1 545fc40823dda63fcd319bb301df7a17d23d3d08
- SHA512 c7847f36ab567be85e0efa9f6330d9df38ab795acec7ff792e369407d71ad04505d12f443fbf3764e07c87ade8dcd7d754caa73bf93db900d3b9e211317e039a
- SSDEEP 3072:6qvs0CSla1BLMGbOOO1RtXJxL7Fr2Qo3vVElaD7m7d:6qvCSla1BLMGbOOO1RtXJbrPMQ7
- TLSH T10204BC64B6C544560592B0179800BD80BEBA0AFF2B5B9AB6365C3C3F3BF3992D33B515
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.ConnectionInfoExtended.xml
- SHA256 af62e11a7e65b0d168a36bf350f05d8ba19f583f97f8730f7e10b59fe20ef54b
- MD5 dc0173e14682196f8efc27b79074affd
- SHA1 2080e6275e6b8700659c4e5b706f9e57713d2aa0
- SHA512 babb90d03ec8d41fb4b5214dcee1d4d7b894e76b407b1b8da6e9ca418ab0b3e0ee6d896635da39378c8387a24812a7e098b816b8fbe5ee51bbe2b5cf6de0dfc1
- SSDEEP 768:qASe5+5G5K5m6kczsW/V6WBTWfxdLXtY9xAErt8jF2ZnNjqa/LO1p+UulmGqGMzc:+HkM6WhWihBj8Xo
- TLSH T194639E70B6C5849A0991B1178800ED41BEB54EFF7B5A9A36365C2C2F3AF79A6C33F414
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.Adapters.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5efb3de427e369bdbdadb01d7f8f72f4d76a086b68af148e8771b43303b99a53
- MD5 6547e53eff377a7fe5927150db6894e9
- SHA1 979c4c2247d09e239a702ab14467839ab5532f53
- SHA512 40f51fa157abb81f7283ecda4b38481941b295c5bef0295cb9660f0201fbc19a02215fbef59924018eba7778b99d90565719abefee7c10540e2307fa5d0f2d46
- SSDEEP 384:eOHpjEIE8afBdDmYq+vduijkWOhPapBjTeajC7awivZ/lHMX:TJYjRfAGAZawiXi
- TLSH T12003CA9146FC105AE552B9319534DE873C3ABAFF3F21922E0464786E38E3790CB38639
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4d:c2:29:cd:38:63:3a:04:16:61:6f:f2:e3:2d:3e:b9:15:bb:34:b2:cb:f2:93:fe:9e:97:68:95:26:53:25:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
d4:a7:7c:f6:99:e5:30:65:81:38:ef:fe:d6:4f:e0:d2:6a:82:20:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
20302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58bf3f60a6e600b818937b0f04503668258472b466ea35aecdd62e6ade2e1fff
- MD5 7e649c8d1bc71af97cf8c004815b7ab6
- SHA1 e5f60dd53e7ba495a749aa78cb409cf8d51b01f8
- SHA512 64cfc9db9d5a499f727169e2d6ccfd73c84ce797bf9697706032928c1ac607937c2c8326d453108cb41d130ad0ee61ae761ee10d2ef744e1975e660247ec80e4
- SSDEEP 768:UyAy9zf1J1D6FCaV5L/bH7wohyTITDofwMHuMGAnoW:Uy/1WncTITGwiuAoW
- TLSH T1C643866147FD6095F162AA35D93CAD063C7B7DFE3F65831E0414296E38F36608A6832E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
95:5b:cd:7c:5b:1e:d7:8d:55:f4:0e:9d:08:44:30:e1:4c:94:84:9f:a8:5b:83:17:12:38:2b:a5:88:88:84:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
76:ae:3a:fb:9c:94:12:55:4f:75:ef:8a:af:a5:3d:93:37:98:d7:81
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
34734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Dmf.xml
- SHA256 696e051ef2ce74216db8dc6c4f02781e282d9b468afa466904f331134d0305f6
- MD5 d46ab0c0c89152b70920c989fc3bc55e
- SHA1 7e24bc256d6cf76d391e62af0246017095322aa4
- SHA512 fa695bcc1b2ca0e8df53642eb946773b327e13e52f364af8a3558928aaa8cd39187d0b36cd893c7c682327a4d4c2ef2b099a7eaae747996049f4fae7159a3fae
- SSDEEP 12288:o6uXsPsLsEorNGg0nyGGIdTZnv56RXMmDOqVRjg266aAu:+b
- TLSH T1CDE4BD70B6C988460492B0175C00FD41BDB54AFF3B5A9E7636686C2F3BB79A2C37B815
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.DmfSqlClrWrapper.xml
- SHA256 a85e832209133d641ea1d4ab163a7e1e4d98af4bfeb2f87b8a1887835e3ec7c3
- MD5 cc99959805117ad3f6c38a7cd91d7779
- SHA1 f4a49c09588cc0a0b0618fcb76f47cd082f0b59f
- SHA512 c77f6ca0fb434f977099d9a5aad97ad60c533a2a03bb12057fce559375f28e34bb016baa746fc6cc0781ff3350bbb219c59cf2ad0e6ff38ba9dd63986989f156
- TLSH T1CB31AA34669488020542222F6C15ED44B9796ABF3F579E3936982C2FB7739A5D337808
- MD5 SHA1 SHA512 TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Collector.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d49808ccc6685f911296f498b82aa56ae2e27ebd191ee52cb01c43baa51de92c
- MD5 d829449eef017a0c9c777e3063cda7da
- SHA1 648bd9c9b0e3f800dd4f5024c7848ee8cf68ee16
- SHA512 1e8774fc98f89ada70d61c45796afa4aa11ae9f8f213b425390b93061119983ec6042bf22142ec57d4885200f5bb581b49890d45bf4a441ecdba0c917fe50ece
- SSDEEP 384:75dnDbttJRGGD7XW1hGeDpBjTeajCgSPvZllHMjDy:7fnJRtIMGAHPhaG
- TLSH T10FC2C6914BFC5096E552EE30E678E8577C3CBFFF2E14812D1429645E2CA27909B2863B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7d:95:4a:97:ce:f0:2d:22:ba:74:3e:ec:cf:77:e7:75:a4:98:d5:fc:e1:5b:5c:28:2b:79:1d:e5:88:a9:5f:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
4d:6b:5f:c3:e0:11:57:68:6c:a6:ec:f3:4f:e5:9c:ae:0d:91:a6:08
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
16734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Collector.xml000
- SHA256 7a5a288d52896d3a0dc0cb042053ff9fe2a78004e3e43c4ccdb01dcbff7fbb14
- MD5 af5f85be422b5b0552d5a484039a521d
- SHA1 50ee75d16eb1f3cf49c285bfd632d6445b769e9e
- SHA512 4081df501f27392d1a3c8186345e9a482f09c9cc4e834a7ac0b4bf64fb873c5e14fd078a92f98a1459fc0b8b1a25f0ea122bbab88befb5782e2e8f95f2692abe
- SSDEEP 384:lHt8VMjPLDHWva72+yggjXVpV349xZ9VE8i:lN5LW2i
- TLSH T156739D2472CA495209D9A0139C01FD90FE7645FF6A7A9A75316C3C2B7FB7462C33B826
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.CollectorEnum.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22ee683d767ab6db0720368f492a702df0bf66508b4ab4f20cb5aa0d1439b3c8
- MD5 d635bf17d8e0d92cf5e241986013e81a
- SHA1 bcdbf71d277edbf80121b31e54846cd2cdcb384d
- SHA512 64eb1827b5a6860c57c95f155d30f524d735a676cda8d38b2bb321b5e95f135708eabeaa6876b14d83dfe8d5085f279d93720fc8b9148dd81f4a759585d3766f
- SSDEEP 384:2hx39sKd7CSMslDoRVxPu3JOwpZVYftBE4IcpUFo+3q21W6HNpH8WIhGeDpBjTed:T57+b2MGAA2h
- TLSH T10C13C702F7ACED06C5D60A309274E9B2ED3982A30630105573EDD3ABEF627D46A1675F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:ac:bf:4c:7f:a5:d0:75:bf:3a:35:f9:50:1e:32:8e:40:cc:50:2e:79:6a:06:60:b6:64:f5:f0:ff:06:90:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
81:f0:ec:c9:d8:cb:2c:28:f1:ac:c4:04:a0:89:68:c7:74:60:d1:1b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
22206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Sdk.Sfc.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8d37fadc38ad42c60a001f2e1068f1cf60678a2325a53f73b46563e3c1d314c
- MD5 f5c22ca3d5b02e055be2c2ce3a9db1e7
- SHA1 762bc7e6db05b42e43ee9036abe8526b24ce8521
- SHA512 7701022805a4847231b213c10f97f9693de2b40e95aba0e18e350900e79c4c2451b7b2bf02aa9e91bddca7382307a18e9224e6cc4c8aba29f1bd519acfa76bf1
- SSDEEP 3072:hQBHenBLSS0Urzs7MnTKdBrt9nR1qZF1LW:hQBHqAwLW
- TLSH T122F36D05F188DBF2C9582272B8118D91EE1A43DB159C56B0739CC25BE7B6F72DF32262
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c0:96:a0:a8:35:39:f7:76:2a:29:de:5b:4c:58:43:8b:79:3a:7a:67:c7:9b:61:a3:16:fd:5e:46:1a:f4:79:6d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
a1:03:92:e4:33:64:a2:2d:a8:fe:9e:6b:55:26:d6:a6:e1:45:50:fa
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
142462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
132KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Sdk.Sfc.xml
- SHA256 6a63f6462d698253d0a95387d278ee0cc2ec57af45a47c11a9f109246913b61c
- MD5 cbc260866772459c24f03ed7bd79eb22
- SHA1 378fcd2a7265fe766f3471c9815306111f6a976f
- SHA512 b4d949935b46ca0c2e2c257ac806b40325b9b4aefd9c8e7c6e2a91cbb4eb1f1a7e88912ec005ace3e1c347cfcf3d6474c0912f9e025d29738ff3e829eefde4ec
- SSDEEP 12288:Fhw0tMjRZczlsUflER0SlNnk2wEl2URS2EPgGyfb/n/A:x
- TLSH T14A35B9206186189A05506003DC14BD85FE7648BF3EAE9376365C3E7B7BF25A2C77F928
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b3283f8813584aef08a8c1267821f50e0b781a1a01ce64e4dc3c92924434962
- MD5 3f6240a971fe3591c283f75ed6214dd7
- SHA1 64acd1458a88df28cf9ef795fd0b39593468eb7c
- SHA512 559bdf6fae4f70856c0bc95ce3115c110d2ab9f2eff5c04a0874bf5f6fad886a38f116dcdc5af10a3bcf85a8bb725b30a2f7024ed0dcbee96d5d7c70fa68a9f8
- SSDEEP 768:/toRlBTyKkx3e3hnRV5y2xNOYTK6lP2IxCYhYdXUg9iCfX3h3jGAAInMnSX:QNR+YhY6g0kJjjneSX
- TLSH T15D63415117FD208AF162B937DA34AD097CBAB9FF2F65821D1414286F34F2660CB38766
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:da:4d:2b:6c:21:a2:f9:0c:df:ed:d3:bd:b1:7b:91:92:d3:f2:65:0b:a5:19:c6:18:5f:e3:da:b9:af:e4:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
b3:14:48:68:9e:70:7f:33:0a:03:fd:06:b4:c4:ad:57:7a:1d:79:cd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
52750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.Utility.xml
- SHA256 ef8af5a5a8df5dd376332f98abed42a774fb6f7a779cfbc55388c4ca9a155b26
- MD5 5f431a4926dd446bdb8d806dd0e3fe8e
- SHA1 b53957f190f910c017d0b8539114bba780db05a4
- SHA512 22ce08234969178690f8891857eb18c3c239688b6ca475cf7540054e48b85bece24fef503d8eb0048538957b474f4cb68df00f352c18a27dc73ab6feb9fb47c7
- SSDEEP 768:sxPciv86dG5lMNZFHn2wJ4GxvhGoSETWXW+W2WW7j//KwinCY1qvsuWwWfctWhEn:sxzR2b7hTDXol90DCG
- TLSH T191F3A960B3C954870095B017AC04BD41BDA549BF7B6A9E75356C2C2F3AF3AA2C37F921
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.UtilityEnum.xml
- SHA256 5ba31a46176fb73a065ec88fcad2058ceafff5000af329cd88e61923d5be0817
- MD5 da938c42876ddba8011792eb7df56ad9
- SHA1 c60eb8a7871047991a91298c841cbeb54258943e
- SHA512 b48b9cc3e04927c7f28dbb27a952d63ded100261d14c4c4bbc35b0dbd677314a5ab5cd1dc7deda2cfbf7d8bee0b1a137525c9bddbfd202e6dff8e68907edcf3c
- TLSH T1A2C08C01B220D1278B00242B2EBFCC18732C332B68BC09654115563B62623A83760820
- MD5 SHA1 SHA512 TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Management.XEvent.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0be14db54d5416c19214a9d134f611dd100871cdc8d2639cb2fa123b09de8f9
- MD5 aeaf10add3973e83f837fca0b228d849
- SHA1 52c737453a3cc60e72d23eefb30f1c479b2c492f
- SHA512 763d894dbe4e915052ee7cbee48d9f8f9b8d33872638660447d4d929b01f106c5823ef8473c3caba71a618eb9279ab64e4b7f7ebb5d8e8e798d7b31cbcdbbe59
- SSDEEP 384:lBq19Gl12cos+wLxA9vdy/rjrNmEsDvBBj01QBBjI+4VREVREVRNFVRaVR2VRxUE:vm9s1zoLd9Ijr2Ds1PQdIDuSNGAIC08
- TLSH T132230AC176DCD056E8534933A538E8463D3FEFFB2670621574ACB53B2452BA0DB2C22A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
58:70:e4:0a:5a:09:f5:c0:97:7f:7e:df:6e:4a:f9:98:ce:76:ed:17:a7:62:1b:89:5c:d4:75:0f:a1:5c:82:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
e5:3c:b0:23:9a:a0:20:d8:bb:c3:a0:71:3d:25:77:a6:b0:3d:21:8a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
26766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.RegSvrEnum.resources.dll000
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 376ae73797be14f549dd624c42cb2fc912668edd30fd65e2e2525b884020ba03
- MD5 c9cbba1cad4aa5a26387e74636fb81c3
- SHA1 1e8d518e27c6fe2c154e01732ef70f35b0b22433
- SHA512 586f2dc3d74fdfdb4e6223a04f36389f04540a1c08f14aa103416828b1b740047c2ec4b24789376011e8f90eeeb5cabc43616c6eabc2c4c8627495591536969e
- SSDEEP 192:I6Gor39Zrg8+VnFW6/jwObdhoAapBjSebyaAqjkKiTbejPWEOU6juZVWQ43W0jl9:5aVFWUhPapBjTeajCEzvZeYlHMsI
- TLSH T135A209829BFC9043F992AD705678DD833C39A7EB2914925E0569F49D2CA33D0EB2462D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:d0:9e:a1:63:98:33:4e:37:c5:79:b1:ac:90:f0:d7:14:8c:f1:2c:c9:d6:93:27:09:30:f9:19:2c:33:60:49
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
1f:7f:d0:a5:e9:9c:a0:3b:04:41:10:5e:e8:c8:38:4e:ce:23:21:c9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
11998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.RegSvrEnum.xml
- SHA256 44a39b127b33cb8a2826dcdb405ff75478c8b2098ff5eb71aab24e0542bb6038
- MD5 ae0aea529c4de1c3588e0ad5c5cde555
- SHA1 aea8b8c5d790112910f87d902cff28cd29bc47bc
- SHA512 01b17137669d200f81cdfe73b7ff144db80f9199ed66764bd1ba76ac7271c2bb488de3de4078cd21207c7eb055c65069d2daa32161abed2686b97f190e94c914
- SSDEEP 192:9qzqeeqCqHqSq+v+SqTqOSqJq7fqgBWN+C6A45sim0wWbHW7P3EqzE6VhVCDsMRS:o7WV4s73PD/N+gVJxaAj
- TLSH T107030D20A19668AA144671078800BC417EB609BF2EAEC774375C3E7FBAF3651D37F916
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.ServiceBrokerEnum.xml
- SHA256 e63fd633020b5bd198fab9f70ffcfe5307bc36e46cbd2e84492b6037288191b4
- MD5 8b9153e2f28f69dfd5c700c717dfc5a0
- SHA1 bf052506033674d26a0abf1858f6351e58bc10c8
- SHA512 83425c651f30d0c039c35a90916d414cea72ddc9b1bddc5ef318d033d4b5d1b522611eb2b6dafbc97f7e84a4ce67f9f07887dca63093cfa87a00894224aab5ce
- SSDEEP 96:9YAKCPeb//JXH//ztk/JDCx+ktV2zUpQzS/4Pq0dcEifWfU6fhHxf0oI9ftsfF9T:MjZTtk8Js8rY9imUahZiq7
- TLSH T1EFD19B11A2C46C9A09513063EC10BD94F9AA0AFF3B5A6735371C2C7B3BB2556D77B221
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Smo.xml
- SHA256 b98e083be658dd8c1ed03e8ab546f3f6dcfaa6c1e9742f57ad6c555becac18ff
- MD5 f06d9b6ad7e9099d4115000f3d56b297
- SHA1 1b65c789dc67fb84d865edc3315eac67a33a7b49
- SHA512 fb7e03620c597ed1739091b8b6f69c6cfdfcd632461f00650645389bb113f30b6c6c8f46b0cba4f045bf609a3138feab76acef186f192789dc638d6aece2f2ec
- SSDEEP 49152:v1zGPohIw6hcxSwBrdswdEdmN3K6LLtmkm8XmkmKmyFZ3CCCydCDCByLo7IOcONC:o
- TLSH T1C456DE65A7C958974091B0179C00AD41BDBA0AFF3B6E9A7237683C2F36F39A1873F514
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.SmoExtended.xml
- SHA256 6e8f9b8400a81cc79e5d530de91f7924f3940340c3de6def754b193bd1ef7c0c
- MD5 f03a2a39380b39cf235fade7b7305c4e
- SHA1 86c3e7ea00eaaf4de3076d78c4d27d4c4494a969
- SHA512 a30bc6140c67c4469c6c926c4c8e5306574bc3550d33bfbbe6830210dd0758104d21523336de353d5c48cbc8d3ead30776e1ec1731c0eca35f0102f08bb93d02
- SSDEEP 6144:cJPLLJjbMucFyXTa2UveT8T0h831CxhpgsEMprsVLr/vDN3T8Ts:cJPLLJjbMucFyXTa2UveT8T0h831Cxhy
- TLSH T1D8249C54A7C9589B0551B0079C00BD49BEA64AFF3B6A8B313B6C2C6F3AF3462C77B511
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.SqlEnum.xml
- SHA256 1d5ff14ea0baf17b2a1dbc9d0ebd768ba0234bfb9c75d2d42cb73ee833e4e082
- MD5 aa8dde32613cb1ca52c25a52da397c15
- SHA1 f12464a960fc45cb54612ddf2d313f21f0a569ac
- SHA512 aa49d07232597cba15fc1fb03ad91c8b8ac297be2687c44eb330ad3d68803e5378f95ceca7b6aa65d5210261ae813b47558afd9ac47e983b67a8d41fafbd5e3f
- SSDEEP 3072:IGa4nyKiUSItWrkugUkS/dr+0qXAMfrtsOSV7Gr7ckgNlkPWf+ON3UCTKUCXMzIL:IGa4yHgUkS/dS0qXAtCPWbN3UCTDKQO/
- TLSH T1B8058A2596C454560595F01A9814AC84FCBA0FFF276BAA373BFC2C2B2BB2995D33F414
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.SqlWmiManagement.xml
- SHA256 60cbfcb1f4c55b80e8c7a6bc249380e918dcd1ae5c8f92ce5807b3661bc95ee0
- MD5 3160c8e820e8c8c02b2575b9246a01af
- SHA1 4c3ab24812814aafd24ae3243d730c4b42716fb9
- SHA512 d9c9a99ccb67e845a85b0330eff98314e9ba029ac115cf906fb275314af872964df1891e9dcd8ff98bcac8985a95177afce762b9e9c0211a31db9a9263bbfb3b
- SSDEEP 384:pnXBXHpPELWEi/9H/97Va8SZNIYURQ0c0LJBvKGwAtuEY158oo1YTI5vzzdY7l/2:lJlzoav53uh9BsP
- TLSH T150A3CC22B389A8D6409070475D00BD80BDEA0BFF7A6E8A71375C3C2B76F75A2877B515
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.TransactSql.ScriptDom.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a7b8128d6ac2c1338c999d9fbceffe41de1a258ef348885943c08276b4e46ad
- MD5 8f6441e89bc570ef2a2f70ce84503823
- SHA1 77801da5f4aca4ad213a7a446f096c178d261c04
- SHA512 cb902f13d41722d55c303bce19a99f5537742dc51bd905f984de11e95e890472561309c429eac8ea791d2c6fb3f21db214b908bb2058f87e439e0bb6e3e39e9b
- SSDEEP 384:ecGSgp1EETUwP+RBOR+9Lxzp+8s1islYsWXhPapBjTeajCcCJvZrlElHMN0:lgp17T1m9lzp+gZGAXI80
- TLSH T1BA03646186EDA45AF122ED32C964EE473D7B92FF3FA4921D00592A7D34E32A0C734709
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
85:a4:95:01:50:ff:33:35:0b:87:2c:65:50:49:e9:f3:6a:db:5b:6c:a5:01:9c:23:d0:85:7a:8c:85:23:13:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
49:6f:1d:43:90:e8:e8:9e:d7:e0:30:a2:86:08:2e:b7:8c:ef:12:8c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
29070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.Types.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ee9253f96926c3aeced3f0228aa6540e651885294c9206ea9b790af128ed597
- MD5 338f6249d89d1f08a492a61d9100ab1d
- SHA1 5dbe1b5c859f047407de278e0e40209fa52ad84b
- SHA512 6841e55cb2667c20d8ed22d8db41f6907d7344b07e8ab9cf6f1d03492edf10ff6d1c564a041b2e16c99aca326d402289651eb572122c4d5b0b97479495c5c977
- SSDEEP 384:RiF3JxhFi+OjN2gMSGeDvHkbjdoqWShPapBjTeajC1vZqlHMI:RiF7hFsjN2KGeDvEeuGA38V
- TLSH T10C43B75296ED1489F192F533D518FE067CB9AEFE3B25931A10582D7E38F3650C63832A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
e3:f5:97:53:87:6f:9c:37:80:91:3e:35:ee:f4:ab:07:ca:31:91:e8:8e:a8:5a:bd:2c:2d:4a:fc:21:ff:a7:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
37:01:85:4b:7a:64:06:64:28:a0:58:08:39:4e:70:60:2f:cd:0b:0e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
36190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/SDK/Assemblies/ru/Microsoft.SqlServer.WmiEnum.xml
- SHA256 fea48685c688b7e014b0bdcf81b4b199fef07d400d6abddf94d6f89066dddd8b
- MD5 bf6781f6b0d3140443c7d6692b22e41e
- SHA1 1157062d126ed5c1df3aaa6ff7c2aa17cf8d864e
- SHA512 4580c7a081086ca96da9958e6d04af35765d75e4d978e1de67b7e8b848f02c45b06fa6b30c049c84da7338e31f9681fd0ef8d76894211fbe6693cb0e26d72ff6
- SSDEEP 96:QZRGfHGFHNGFGjGCG1IMxGEGkGPGu9HLHvvxl/eA0xYK924VykD0DEZ7DSPOPXDd:nfmFUcad1AnH+UrMvN1
- TLSH T1EBD17E0AB39C7AF74C5111935D35ACD0337F0F97905E6AB92B80AC3362D5A9B6B3B460
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Include/sqlncli.h
- SHA256 c456a690db999e90100b20ba464ba06670310fc16959553cd6991ff411387b67
- MD5 e18728306ff50e10128b78b1996c8fec
- SHA1 b1213ebd3c35ebc9c364e06ca9daa05a1f1a660a
- SHA512 8016b045ca325b2f05417a398e4ed0262bc5dc162377f2adaa33df02101f177bfa1aeee08972b3b6fe01b475c5190f1d739e6942ff06c5e6296459fc7ab8596f
- SSDEEP 3072:rnBb6ds1q3r33ozc3FRHKf5Ba/T7vQW7aoC2nHBZpioWAmiA/8Op:rnBb6ds1q3jjT7vQW7aoC2nHDpioWA9+
- TLSH T19704C79C6FC2957A4136F115A3792020E917E937A3A28198389C4D5E1F35C49A3FFACF
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Lib/x64/sqlncli11.lib
- SHA256 ae6cef1c8164775bef8202c367e45c69f09b92b86d04876f45f7befc4196e4e8
- MD5 8af8f618a6b6063d18ef5dd016b5a08b
- SHA1 1c95ba05a02294d0945b0d88b378100442ad7330
- SHA512 abf4b25e3b071d1c8490c81181b7f7a4c341f41348c5230548ceddd3749a70170877594c37ffb2185105e7352ccba7ce3dc1b89eb71ceda73534bc57a0e3ea9d
- SSDEEP 96:Qgf+2NI0QpsyHx2FbdpXZEKf+EK1KfKyeuj3FTk/Yx:QgWH0QpsyMbjXZEKWEzj3FTk/Yx
- TLSH T183D18E3AA8F24C0AE62CE93AF398E0ECED7DDCB562815113755C85835FA501ABC778D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/SDK/Lib/x86/sqlncli11.lib
- SHA256 ff52761730b58b81857dfe330bb240b90e948910025d92eb3369eae3af18f8fa
- MD5 1fa6ee9c2e84b4a46127df1af4c09b7d
- SHA1 62fbf0018de9bffab8e0eb4fe297f0a76b8a12f0
- SHA512 0919e58ffd5df98bc801044e03cca67878924b45f2bec0a20219de08afe969d591af77ff678343d4889f62ec64c2b74c2f627bd4be670fa0df24ceda9937f789
- SSDEEP 96:VVZzw5mOqjLw/Qv/MSasj2A5wA7ZYKVKCKL5q4N1R5zxnV:XZaqjLw/PSasj2UZGN1R5zxnV
- TLSH T148D1993648B2CC09C75DB537D209D4DDE908ACBA668364233D3CC9136BED05BB9B75A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/Shared/Microsoft.SqlServer.Types.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36c3e5efd0731ccf5ac9a341c488b4fd14c69747f5a3f6e4cd976a7c1288b3b0
- MD5 25656a196ed967bcd4b152a4073b8b44
- SHA1 a9b64b8a42c9da3243378f2a17a9ff8057154116
- SHA512 3903556d2130a219e9795856a14eb28926e3b798eabfe96353300ccc1c11925aff2f417c9ca588f2ddd0df47d6a64517980a39752edade9ad725f6ee4aa16383
- SSDEEP 6144:OVcpT4frcU6MM6Hymh8qME8h2x1mobeug:vMFRx105
- TLSH T1AA84E81CEFDC123AEABAE374C6F04475A366BA62663DC7CF44410E8D05276C186A177B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
fa:09:ec:f7:3e:6f:98:00:88:b7:5f:6f:fb:c2:67:df:80:c8:78:ad:48:a7:ca:dc:15:19:39:fc:c5:ab:4b:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
40:df:31:d6:b2:52:e4:f9:2e:53:05:32:01:d3:f5:da:70:6e:22:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
368566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.SqlServer.Types.pdb
mscoree
_CorDllMain
Name
.text
Size
356KB
Virtual Size
356KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/Shared/Resources/1033/sqlevn70.rll
- SHA256 4790c4c828d21865b556b48bdbb0dc84fec7e49e8fbccfd5e75c9dcfb86cae5a
- MD5 27d0d43f7ee9daefc96eef48620bdb4c
- SHA1 83c84ce3c517871dec311500001db5c501d25be3
- SHA512 fd651fb3cb9335db0a26fd58bc0831a0e91c437ca1a65355b968cf0900fecab1289b6660e64220c330b00c456e1a40e6536e8ad0a3df3f58021f6c1a47861530
- SSDEEP 12288:GgNYGl0T5TJ4IkbB84tgpciKgYLtXU558:GgNcTQtgVKS8
- TLSH T126C5694267F99208F6F73F6069B816A00E767C9AFC79C25C2280945E1DB1E41DEB4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ac:95:30:7d:ce:9d:1a:9b:bb:d9:4b:23:7e:11:9d:3d:b4:fd:61:03:c9:1f:f1:93:d9:2d:07:49:f0:ce:39:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
09:04:c5:ba:d8:d8:61:20:7e:8c:96:65:57:98:28:ad:40:1d:4a:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/Resources/1049/sqlevn70.rll
- SHA256 09c875779139587ede45c49cf14173d7ce1b68246471a4f5b67dad021e5085ff
- MD5 35e743c24d8eda76966acf60ed8b337f
- SHA1 9eacb67db44b21d2091a50f2d7a7ba7cfa7bfbea
- SHA512 a25e279baca808528e8d9c0d824ca008a3666eb62f483dc3c9f81c503c97d22689c4ef8e525bf45844f865200f85a3b0a9b1911535fc427e51269043f5983a5e
- SSDEEP 12288:Y2LLINEgCKk8WfQV8vdjH6m9csYVkTzwx/1:Y2pgn8vK1
- TLSH T187D59B0FF97C9254B964E2600F7685E311AA7340632895CAD68F7DB970AC63677383CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9c:92:ad:50:36:26:4b:9a:09:95:f0:2b:2c:fc:cc:17:c8:ae:e3:0a:a1:85:9e:7b:e8:2f:ec:b7:d0:1c:03:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
f1:d4:ca:84:8f:57:ab:06:5e:99:5b:39:ff:80:a4:4f:a0:1a:7b:33
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/instapi110.dll
- IMPHASH 5527b371750fc6d80eaa5449ea813923
- SHA256 fc988b3fad95fd8ad36d829c9bfa2f36dcd517de674705a3928ad3384354f34f
- MD5 f9ee4c23a7bdbbb94bbfff3da087b431
- SHA1 b8dad015dcd170bc84e8ae333c66e40c7e4090c3
- SHA512 9ba5b2865854929f6ce41139c0a2db61ff49291b0a4e8a0ba653ed622406c0cd9eaeaa4df44fccddc03f0ad621ae75db071d93b76454d4be468334069d8bf5dd
- SSDEEP 768:6YNhRVG+vZ0Q3V0qOflcSpvxxqGdhO2zUGA1el:Nt48Z0hcexKEUJel
- TLSH T1C4231A02DB90928FD49594B0227C917A7C3C9AB2134060DF5B67F6DA38F53DA7B3075A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f8:5c:8d:e0:e1:7e:89:10:e0:74:f6:4b:42:36:23:49:63:8e:eb:73:10:e9:33:bd:b2:4b:74:6b:be:3c:ce:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
d4:6d:37:76:ff:39:92:b9:72:4f:67:9a:66:5e:cd:2c:76:bb:20:14
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
26446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
instapi110.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
memcpy
_swscanf_s_l
_snwprintf_s
swprintf_s
_vsnwprintf
wcsncpy_s
wcslen
memset
kernel32
lstrlenW
CompareStringW
GetProcAddress
GetCurrentProcess
SetLastError
GetComputerNameExW
VirtualQuery
HeapAlloc
HeapFree
GetProcessHeap
DebugBreak
GetModuleFileNameW
ExpandEnvironmentStringsW
GetPrivateProfileStringW
GetFileAttributesW
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetModuleHandleW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
GetCOMPath
GetInstRegKeyAccessMask
GetInstRegPathByID
GetInstRegPathByName
GetInstRootDirPathByID
GetInstRootRegPathByID
GetInstanceIDFromFTSApp
GetInstanceIDFromService
GetInstanceNameFromFTSApp
GetInstanceNameFromID
GetInstanceNameFromService
GetInstancePipeByID
GetInstancePipeByName
GetRegKeyAccessMask
GetSQLBinPathByInstID
GetSQLDataRootByInstID
GetSQLDataRootByInstName
GetSQLInstanceRegStringByID
GetSQLReplicationRegPath
GetSQLRootRegPath
GetSQLServerByID
GetSQLServerByName
GetSQLServiceByID
GetSQLServiceByName
GetSQLServiceTypeByName
GetSQLToolsDirPath
GetSQLToolsRegPath
GetSQLVerSpecificRegString
GetSvcBinPathByID
GetSvcBinPathByInstName
GetSvcBinPathByName
GetSvcInstRootDirPathByName
GetSvcInstRootRegPathByName
GetSvcInstanceIDFromName
GetSvcInstanceIDFromName2
GetSvcInstanceRegStringByName
GetVerSpecificRootDirPath
GetVerSpecificRootRegPath
IsDefaultInstanceID
IsDefaultInstanceName
IsNameAgentService
IsNameSQLService
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=84, id=1, productName=Unmarked objects,
count=3, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=189, version=30716,
count=1, id=184, version=30716,
count=4, id=188, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/lssyscat.dat
- SHA256 7cb429032be391e6f01065bb772aaf00f979ce7f1766b71d541fa53c58988f27
- MD5 8079e21b5980d3089761d2366d1c0828
- SHA1 77d8430339e0d384a50064697846c8f818f0176c
- SHA512 96cb7f455fb567ba5a4e1cb019114d0680fcd338b78d6ed0a2cdd442809d4611cf46bfa95be39e0657b245a1e8c5913d21c53b1f35ee035d4b98af6b51657438
- SSDEEP 6144:4uubPKb5VM8Jyg2T/XcwNOwBfZpM2+k2+E2NzzSJrNtdMBbHmT02Jh2vfRYA8hI9:4uubSPrZM
- TLSH T163259B42B3E45414FAB31F74ADF496952B6ABEE21E3ED52E2181524E0DB1E48CE74333
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/Shared/sqldk.dll
- IMPHASH b0e1af33febb4cf653d41034da247b81
- SHA256 5ab3dfd1f5c303688593e8779dca3fdeb3075647cc675df4d3a23a0a3f90f84d
- MD5 9284cdf83b7b75720344b616864e8766
- SHA1 0ff8fe5eed78440044f1b6afe117e91d2453744a
- SHA512 6b9fbcbafe732720e3bc7b4ff15a1349b55d46fc760ab2961193c4103439aeaa1313a950436de80fa6d2c78e9e4334a1d64c157046ec4ce41c2ce32c6df2665c
- SSDEEP 49152:aBTO/KEiThdwXGn736mpSLa2CWtvhpW6xaf+MBAm7PdQJDdwczf4jW:ZyDThKmWtvhpW6xaf+MBAm7PdQJDp
- TLSH T1BC754A21ABD78039DA2235701EBDF37DA13EFD85022AD71FC164C5661EB1D02A606E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:44:ea:1d:8a:dd:7b:d4:a3:49:83:55:90:6c:f9:b2:bf:ab:11:fe:ac:32:15:91:d8:22:e1:75:9a:0b:29:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
00:f6:a0:29:a8:1e:2c:c7:3e:72:17:fb:c6:89:ac:df:50:df:a0:64
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
89340
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
sqldk.pdb
msvcr100
?terminate@@YAXXZ
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_vsnprintf_l
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
bsearch
free
_wcstod_l
_wcstol_l
_errno
isspace
strncmp
wcsncmp
_strnicmp_l
_wcsnicmp_l
_iswprint_l
_wtoi64_l
_wfullpath
memmove
_vsnwprintf_s_l
_printf_l
qsort
wcschr
wcsrchr
_snwprintf_l
wcscpy_s
malloc
_resetstkoflw
signal
_set_invalid_parameter_handler
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
rand
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_clearfp
_fpreset
_controlfp
__pctype_func
_isctype_l
_vsnwprintf_l
strncpy_s
_beginthreadex
_wcsicmp_l
_purecall
_vsnwprintf
memcpy
__CxxFrameHandler3
_CxxThrowException
_CIsqrt
_CIexp
setlocale
_get_current_locale
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?exceptions@ios_base@std@@QAEXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
sqlos
GetTlsSlotInfo
kernel32
LoadLibraryA
GetProcessHeap
LocalAlloc
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
DeleteCriticalSection
TlsAlloc
GetUserDefaultLCID
ReleaseSemaphore
CreateSemaphoreW
MultiByteToWideChar
GetFileSize
GetCurrentProcessId
RtlCaptureStackBackTrace
GetDiskFreeSpaceExW
DeleteFileW
SetLastError
GetTempPathW
FindClose
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceW
GetVolumePathNameW
SetEndOfFile
SetFilePointerEx
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
Module32NextW
CreateToolhelp32Snapshot
LocalFree
TlsSetValue
DuplicateHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReadFile
WriteFile
SwitchToThread
ResumeThread
GetNumaNodeProcessorMask
GetProcessAffinityMask
SetThreadIdealProcessor
GetNumaHighestNodeNumber
PostQueuedCompletionStatus
OpenFileMappingW
CreateFileMappingW
SetProcessWorkingSetSize
VirtualQueryEx
IsDebuggerPresent
GetOverlappedResult
SignalObjectAndWait
InterlockedFlushSList
WaitForMultipleObjects
GetLocalTime
FormatMessageW
SetThreadAffinityMask
GetSystemInfo
GetProcessTimes
GetThreadContext
GetThreadTimes
OpenThread
RaiseException
DebugBreak
SuspendThread
GetThreadPriority
ExitProcess
CreateMutexW
LoadLibraryW
GetVersionExW
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemTimeAsFileTime
GetCurrentThreadId
WaitForSingleObject
CloseHandle
CreateFiber
DeleteFiber
SetThreadPriority
GetCurrentThread
ConvertThreadToFiber
SwitchToFiber
WaitForSingleObjectEx
QueryDepthSList
MapUserPhysicalPages
ResetEvent
UnmapViewOfFile
MapViewOfFileEx
VirtualQuery
VirtualProtect
VirtualFree
GlobalMemoryStatusEx
GetModuleHandleW
CreateEventW
GetLastError
FreeUserPhysicalPages
AllocateUserPhysicalPages
VirtualAlloc
QueryPerformanceCounter
GetTickCount
TlsGetValue
CreateFileW
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetProcAddress
QueryPerformanceFrequency
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
InitializeSListHead
InterlockedPushEntrySList
SetEvent
Sleep
HeapAlloc
IsProcessorFeaturePresent
HeapFree
InterlockedPopEntrySList
OutputDebugStringA
advapi32
TraceEvent
RevertToSelf
ImpersonateSelf
ControlTraceW
StartTraceW
UnregisterTraceGuids
RegisterTraceGuidsW
EnableTrace
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
QueryAllTracesW
SetThreadToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetLengthSid
GetTokenInformation
OpenThreadToken
OpenProcessToken
rpcrt4
UuidCreate
psapi
GetProcessMemoryInfo
winmm
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
?NotifyShutdown@SOS_OS@@SGXXZ
XEGetEngine
memMgrInfo
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
147KB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
AssertDa
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
CONSTSEC
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=185, version=30716,
count=2, id=156, version=30414,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=296, id=1, productName=Unmarked objects,
count=1, id=152, version=20115,
count=13, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=184, version=30716,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=122, id=193, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/sqllang.dll
- IMPHASH 16a8bdf7eba9c8eeff2c4a1eeede524d
- SHA256 f51cf85cfe31f0b447ad5d6000d176b64de50b5e7a09a0af9f59c0a23cbc729c
- MD5 29f692b545d0493d4d2257439c6969e7
- SHA1 fccfcd17acf600abafe4671be0a1e0d9c06ce3f6
- SHA512 dccdd19aba438f40fd944988f4431a905633cd29048de3b45c924350db67ad481bb221546c41145de93bc1f210c5c9e830a6dcb95127c04f8c80924647f027b0
- SSDEEP 786432:bNCDpdcZRUQeXCcIOwpjfUwLMusl6xVxKwDu5ZKj0YPmSRVYUzFLSm9GPW22hlcB:bNSWaQeycIOwpjfUwLMusl6xVxxu5ZKu
- TLSH T15D477D327B97C02AD57226B0167DF27EB03DBD6A163CB60B9184FD251D73902AB05E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9c:27:c2:dc:73:a4:c5:c7:2b:e4:5c:88:e2:e9:4e:00:81:6b:af:ff:0d:46:d4:07:18:ac:53:ba:92:40:39:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
79:2b:e2:6c:4d:66:fc:3f:3b:8d:54:54:b6:5f:35:35:15:71:fe:bf
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
1661148
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
sqllang.pdb
msvcr100
?set_terminate@@YAP6AXXZP6AXXZ@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
modf
_atof_l
strtok
strstr
_scwprintf_l
_snprintf_s_l
_fpclass
_vsnwprintf_s_l
_wcslwr_l
_wcstol_l
_wgetenv
_strtime
_strdate
_iswcntrl_l
_iswprint_l
_splitpath_s
_swscanf_l
wcscspn
_ltow_s
malloc
_iswalpha_l
_wprintf_l
__iob_func
fputws
wcstol
_ui64tow_s
getenv
wmemcpy_s
_itow
_ltoa
_itoa
__pctype_func
_isctype_l
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_ultow_s
_snwprintf_s_l
_iswdigit_l
?set_unexpected@@YAP6AXXZP6AXXZ@Z
wcsrchr
_itow_s
_ultow
_snwscanf_l
_i64tow
_isnan
_wtol_l
ceil
??8type_info@@QBE_NABV0@@Z
_wmakepath_s
wcsncat_s
wcsnlen
_controlfp
_statusfp
_clearfp
_fpreset
qsort
_wcstoul_l
bsearch
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_wcsicmp
_wtoi
_errno
wcscat_s
_wsplitpath_s
_vscwprintf_l
wcsncmp
wcscpy_s
_CxxThrowException
_recalloc
memcmp
_iswspace_l
_wtoi_l
wcstok_s
wcsstr
_wcsupr_l
_ltow
_swprintf_s_l
_vsnwprintf
_time64
rand
_snprintf_l
_snwprintf_l
_sprintf_l
_printf_l
memcpy_s
memmove
wcsspn
wcsncpy_s
memmove_s
_vsnwprintf_l
_atoi_l
_stricmp_l
_vsnprintf_l
_wcsicmp_l
_ultoa_s
strcat_s
_strtoul_l
strncpy_s
calloc
_sprintf_s_l
strchr
_iswxdigit_l
_stricmp
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_CIexp
_CIlog
_CIlog10
_CIpow
_CIsqrt
floor
__CxxFrameHandler3
_wtoi64_l
_wfullpath
_wstrtime
_wstrdate
memcpy
_swscanf_s_l
strcpy_s
free
_wcsnicmp_l
_strnicmp_l
wcschr
wcspbrk
_towupper_l
_purecall
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?setf@ios_base@std@@QAEHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?exceptions@ios_base@std@@QAEXH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
kernel32
lstrlenA
lstrlenW
HeapReAlloc
GetProcessAffinityMask
GetSystemDefaultLCID
SetFilePointerEx
GetPrivateProfileStringW
DebugBreak
SetProcessAffinityMask
GetProcessId
TransactNamedPipe
CreateNamedPipeW
GetSystemDefaultLangID
GetDiskFreeSpaceW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
WaitNamedPipeW
DecodePointer
EncodePointer
InterlockedExchange
OutputDebugStringW
SearchPathW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
TlsGetValue
QueryPerformanceCounter
GetLastError
GetProcAddress
FreeLibrary
CloseHandle
PostQueuedCompletionStatus
LoadLibraryA
GetSystemDirectoryA
GetVersionExW
MultiByteToWideChar
CompareStringA
FormatMessageW
GetCurrentThread
LocalFree
CreateEventW
CreateFileA
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
GetTickCount
WaitNamedPipeA
SetNamedPipeHandleState
PeekNamedPipe
ReadFile
GetOverlappedResult
WaitForSingleObject
WriteFile
Sleep
WideCharToMultiByte
ResetEvent
SetEvent
GetSystemTimeAsFileTime
CreateIoCompletionPort
VerSetConditionMask
VerifyVersionInfoW
GetComputerNameA
LCMapStringA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetLastError
GetComputerNameExW
GetComputerNameExA
GetModuleFileNameW
SetHandleInformation
GetSystemTime
WaitForMultipleObjects
CompareFileTime
GetModuleHandleW
GetSystemInfo
QueryPerformanceFrequency
GetCurrentThreadId
LoadLibraryExW
GetStringTypeW
FreeResource
FindResourceW
LoadResource
LoadLibraryW
SizeofResource
LockResource
GlobalMemoryStatusEx
VirtualQuery
VirtualProtect
GetModuleHandleExW
SwitchToThread
HeapAlloc
GetProcessHeap
HeapFree
CreateFileW
GetFileAttributesW
GetFileType
GetFileSize
lstrcmpW
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
DuplicateHandle
GetModuleHandleA
FindFirstFileW
DeleteFileW
FindNextFileW
SetFilePointer
GetFileTime
MoveFileExW
GetSystemDirectoryW
ExpandEnvironmentStringsW
SetEndOfFile
DeviceIoControl
SetErrorMode
GetDriveTypeW
CreateDirectoryW
FindClose
CopyFileW
MoveFileW
LocalAlloc
IsDBCSLeadByteEx
GetPriorityClass
SetThreadPriority
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
CreateEventA
InitializeCriticalSection
GetThreadTimes
GetProcessTimes
LocalFileTimeToFileTime
GetFileSizeEx
GetLocalTime
SystemTimeToFileTime
GetVolumePathNameW
GetDiskFreeSpaceExW
GetSystemDefaultUILanguage
GetTempPathW
GetTempFileNameW
GetComputerNameW
FileTimeToLocalFileTime
OpenProcess
CreatePipe
CreateProcessW
GetExitCodeProcess
GetLongPathNameW
GetFileAttributesExW
OpenEventW
ResumeThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueEx
GlobalSize
QueueUserWorkItem
GetCurrentProcessId
lstrcmpiW
IsDebuggerPresent
GetThreadPriority
CreateToolhelp32Snapshot
Module32NextW
Module32FirstW
GetLocaleInfoW
WriteConsoleW
GetStdHandle
GetConsoleMode
GetModuleFileNameA
GetDateFormatW
GetTimeFormatW
GetVersionExA
RaiseException
GetStartupInfoW
GetThreadContext
GetCPInfo
DeleteCriticalSection
ReleaseMutex
CreateMutexW
InterlockedCompareExchange
ReadProcessMemory
GetVolumeNameForVolumeMountPointW
QueryDosDeviceW
CompareStringW
GetConsoleScreenBufferInfo
GetCurrentProcessorNumber
TlsSetValue
GetFullPathNameW
IsProcessorFeaturePresent
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
secur32
GetUserNameExW
InitSecurityInterfaceW
QueryContextAttributesW
FreeContextBuffer
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaFreeReturnBuffer
LsaLogonUser
LsaLookupAuthenticationPackage
userenv
CreateEnvironmentBlock
LoadUserProfileW
DestroyEnvironmentBlock
advapi32
AllocateLocallyUniqueId
QueryServiceStatus
ControlService
GetTokenInformation
GetLengthSid
LogonUserW
FreeSid
AllocateAndInitializeSid
InitializeAcl
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueW
RegOpenKeyW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueExA
RegSetValueExA
RegSetValueExW
GetSecurityDescriptorLength
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenThreadToken
OpenProcessToken
EqualSid
GetSecurityInfo
ImpersonateNamedPipeClient
RevertToSelf
GetSidLengthRequired
GetAclInformation
AddAce
GetAce
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
TraceEvent
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
DeregisterEventSource
RegisterEventSourceW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
SetSecurityInfo
CreateWellKnownSid
LsaAddAccountRights
CreateProcessAsUserW
LogonUserExW
QueryServiceStatusEx
AdjustTokenPrivileges
ConvertStringSidToSidW
DuplicateTokenEx
InitializeSid
LookupPrivilegeValueW
LsaClose
LsaNtStatusToWinError
LsaOpenPolicy
ReportEventW
ImpersonateLoggedOnUser
ImpersonateSelf
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
ConvertSecurityDescriptorToStringSecurityDescriptorW
AddAccessAllowedAceEx
LookupAccountNameW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
AddAccessDeniedAce
DuplicateToken
SetThreadToken
CryptGetUserKey
CryptDuplicateHash
CryptGetHashParam
CryptVerifySignatureW
CryptSignHashW
CryptHashData
CryptSetHashParam
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptSetKeyParam
CryptDeriveKey
CryptGenKey
CryptGetKeyParam
CryptExportKey
CryptImportKey
CryptSetProvParam
SetEntriesInAclW
GetSecurityDescriptorDacl
CryptGetProvParam
CryptAcquireContextW
CryptGenRandom
CryptDestroyHash
LookupAccountSidW
CryptReleaseContext
CryptDestroyKey
GetUserNameW
ConvertSidToStringSidW
CopySid
IsValidSid
netapi32
DsGetDcNameW
NetApiBufferFree
NetLocalGroupGetMembers
NetGroupGetUsers
NetWkstaGetInfo
NetUserModalsGet
sqldk
ord926
ord927
ord916
ord915
ord914
ord913
ord923
ord924
ord922
ord1020
ord1022
ord917
ord1021
ord1001
ord1016
ord936
ord1004
ord1003
ord938
ord934
ord1005
ord937
ord974
ord1006
ord997
ord996
ord964
ord930
ord994
ord374
ord954
ord953
ord988
ord982
ord965
ord961
ord973
ord951
ord935
ord970
ord963
ord1013
ord983
ord928
ord758
ord1009
ord975
ord978
ord979
ord959
ord931
ord992
ord966
ord608
ord607
ord751
ord750
ord732
ord1010
ord1011
ord1012
ord737
ord710
ord727
ord716
ord730
ord721
ord746
ord740
ord718
ord734
ord739
ord728
ord717
ord748
ord714
ord715
ord753
ord986
ord990
ord1002
ord976
ord493
ord640
ord147
ord103
ord50
ord51
ord507
ord52
ord706
ord822
ord230
ord829
ord830
ord241
ord889
ord100
ord45
ord627
ord628
ord191
ord620
ord800
ord465
ord277
ord623
ord813
ord833
ord219
ord802
ord79
ord436
ord427
ord418
ord624
ord492
ord491
ord782
ord234
ord895
ord426
ord318
ord901
ord265
ord781
ord156
ord278
ord429
ord78
ord268
ord424
ord445
ord435
ord447
ord446
ord577
ord376
ord511
ord379
ord510
ord378
ord463
ord480
ord518
ord57
ord56
ord96
ord41
ord344
ord399
ord67
ord407
ord403
ord893
ord894
ord275
ord77
ord459
ord131
ord76
ord501
ord411
ord788
ord293
ord805
ord134
ord274
ord865
ord112
ord74
ord705
ord291
ord809
ord264
ord284
ord256
ord300
ord584
ord882
ord801
ord615
ord141
ord240
ord248
ord280
ord258
ord138
ord137
ord282
ord461
ord62
ord161
ord113
ord75
ord772
ord266
ord163
ord785
ord210
ord133
ord70
ord471
ord457
ord331
ord573
ord670
ord864
ord167
ord333
ord238
ord276
ord213
ord832
ord776
ord777
ord382
ord328
ord892
ord531
ord102
ord47
ord290
ord704
ord757
ord394
ord553
ord551
ord803
ord512
ord752
ord823
ord519
ord888
ord816
ord756
ord815
ord617
ord814
ord116
ord80
ord218
ord631
ord190
ord622
ord251
ord410
ord425
ord431
ord301
ord53
ord355
ord316
ord193
ord648
ord158
ord302
ord904
ord676
ord682
ord128
ord556
ord541
ord127
ord125
ord135
ord243
ord405
ord400
ord396
ord397
ord433
ord215
ord357
ord863
ord65
ord365
ord762
ord299
ord698
ord252
ord853
ord858
ord876
ord598
ord242
ord114
ord866
ord878
ord690
ord46
ord101
ord535
ord884
ord249
ord387
ord687
ord681
ord267
ord292
ord151
ord259
ord808
ord581
ord296
ord244
ord298
ord289
ord890
ord783
ord881
ord658
ord136
ord129
ord85
ord880
ord879
ord189
ord372
ord774
ord754
ord920
ord311
ord664
ord877
ord644
ord599
ord146
ord346
ord675
ord911
ord295
ord178
ord793
ord247
ord444
ord838
ord239
ord362
ord306
ord443
ord666
ord366
ord48
ord755
ord257
ord246
ord283
ord250
ord696
ord594
ord22
ord887
ord524
ord697
ord621
ord152
ord654
ord767
ord886
ord388
ord555
ord885
ord273
ord297
ord574
ord245
ord657
ord192
ord647
ord415
ord157
ord395
ord831
ord559
ord852
ord458
ord254
ord408
ord656
ord212
ord629
ord840
ord626
ord159
ord614
ord841
ord824
ord348
ord373
ord21
ord305
ord110
ord63
ord919
ord358
ord473
ord188
ord363
ord636
ord625
ord232
ord585
ord1018
ord7
ord905
ord896
ord468
ord578
ord579
ord385
ord907
ord775
ord441
ord386
ord912
ord490
ord653
ord908
ord217
ord520
ord768
ord61
ord109
ord350
ord548
ord160
ord49
ord1019
ord925
ord470
ord375
ord115
ord304
ord910
sqltses
ord338
ord593
ord594
ord646
ord422
ord167
ord503
ord175
ord331
ord339
ord592
ord340
ord151
ord484
ord482
ord483
ord218
ord192
ord438
ord583
ord586
ord534
ord535
ord600
ord464
ord548
ord100
ord554
ord620
ord95
ord94
ord565
ord254
ord536
ord456
ord366
ord281
ord196
ord355
ord152
ord308
ord437
ord435
ord436
ord500
ord499
ord501
ord498
ord160
ord266
ord544
ord523
ord358
ord357
ord249
ord117
ord307
ord425
ord283
ord118
ord284
ord329
ord271
ord264
ord636
ord502
ord645
ord513
ord279
ord336
ord335
ord261
ord677
ord634
ord230
ord667
ord184
ord658
ord655
ord662
ord660
ord121
ord123
ord294
ord353
ord470
ord112
ord91
ord111
ord90
ord182
ord392
ord393
ord394
ord398
ord397
ord396
ord317
ord316
ord570
ord568
ord60
ord315
ord58
ord170
ord59
ord527
ord661
ord632
ord69
ord515
ord68
ord75
ord528
ord145
ord478
ord524
ord512
ord333
ord614
ord476
ord285
ord641
ord71
ord161
ord659
ord138
ord269
ord386
ord215
ord213
ord210
ord208
ord187
ord212
ord199
ord380
ord223
ord150
ord53
ord48
ord43
ord38
ord407
ord65
ord66
ord477
ord475
ord273
ord578
ord579
ord580
ord581
ord589
ord587
ord588
ord585
ord590
ord582
ord330
ord323
ord669
ord428
ord572
ord521
ord466
ord127
ord561
ord555
ord622
ord162
ord191
ord259
ord542
ord543
ord390
ord36
ord341
ord225
ord630
ord638
ord631
ord244
ord227
ord207
ord663
ord349
ord441
ord54
ord49
ord44
ord39
ord408
ord83
ord84
ord86
ord545
ord114
ord547
ord416
ord418
ord575
ord474
ord559
ord626
ord166
ord557
ord624
ord164
ord201
ord468
ord556
ord623
ord163
ord666
ord427
ord430
ord195
ord639
ord270
ord372
ord122
ord74
ord451
ord450
ord345
ord233
ord34
ord650
ord139
ord674
ord552
ord551
ord643
ord141
ord134
ord656
ord672
ord538
ord383
ord301
ord314
ord371
ord676
ord133
ord671
ord348
ord596
ord143
ord147
ord146
ord148
ord144
ord509
ord541
ord274
ord321
ord319
ord651
ord302
ord362
ord102
ord529
ord72
ord414
ord73
ord105
ord505
ord379
ord381
ord70
ord106
ord566
ord389
ord571
ord104
ord120
ord564
ord644
ord563
ord567
ord678
ord268
ord194
ord193
ord673
ord429
ord186
ord185
ord135
ord530
ord657
ord569
ord256
ord257
ord359
ord606
ord378
ord232
ord202
ord109
ord85
ord129
ord169
ord540
ord410
ord87
ord149
ord653
ord110
ord533
ord532
ord115
ord80
ord253
ord312
ord347
ord313
ord518
ord303
ord132
ord251
ord517
ord250
ord446
ord402
ord400
ord387
ord79
ord89
ord395
ord88
ord391
ord78
ord246
ord81
ord467
ord108
ord82
ord156
ord142
ord369
ord178
ord299
ord252
ord56
ord51
ord46
ord41
ord411
ord497
ord137
ord197
ord229
ord228
ord239
ord238
ord237
ord236
ord222
ord220
ord219
ord224
ord531
ord496
ord221
ord136
ord455
ord457
ord611
ord613
ord595
ord119
ord604
ord384
ord332
ord403
ord368
ord374
ord665
ord306
ord231
ord131
ord277
ord324
ord463
ord612
ord286
ord522
ord558
ord625
ord165
ord471
ord382
ord485
ord35
ord320
ord519
ord610
ord200
ord174
ord360
ord318
ord420
ord168
ord480
ord157
ord265
ord267
ord101
ord235
ord240
ord598
ord431
ord442
ord439
ord621
ord560
ord126
ord549
ord243
ord440
ord546
ord278
ord618
ord245
ord461
ord247
ord453
ord573
ord159
ord217
ord190
ord537
ord37
ord96
ord404
ord481
ord675
ord305
ord304
ord413
ord405
ord494
ord493
ord399
ord409
ord55
ord50
ord45
ord40
ord385
ord460
ord158
ord642
ord103
ord465
ord605
ord370
ord113
ord97
ord282
ord679
ord140
ord495
ord262
ord507
ord297
ord458
ord520
ord346
ord296
ord388
ord664
ord681
ord504
ord242
ord334
ord574
ord421
ord255
ord298
ord234
ord652
ord506
authz
AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzInitializeContextFromSid
AuthzInitializeContextFromToken
AuthzGetInformationFromContext
AuthzFreeContext
wintrust
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext
Name
.text
Size
22.8MB
Virtual Size
22.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
682KB
Virtual Size
768KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
AssertDa
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
CONSTSEC
Size
512B
Virtual Size
76B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.sdbid
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=109, version=31008,
count=4, id=109, version=41204,
count=3, id=125, version=41204,
count=4, id=185, version=30716,
count=32, id=189, version=30716,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=171, version=30414,
count=2, id=156, version=30414,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=2884, id=1, productName=Unmarked objects,
count=1, id=152, version=20115,
count=15, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=184, version=30716,
count=2, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=110, productName=VS2005 build 50727, version=50727,
count=2, id=188, version=30716,
count=1137, id=193, version=30716,
count=1, id=183, version=30716,
count=1, id=151,
count=1, id=186, version=30716,
Setup/DAC/Shared/sqllangsvc.dll
- IMPHASH 8581aee75ffbe7fb63801df171450a33
- SHA256 b5108ecfc1dd73e8023d609d5edd8e6dbc5279991a0ae1628f0ca2932b61010b
- MD5 fe645bdecf22601e9fdc293aed23ba0c
- SHA1 a665dd12847f2f19a18e68329c98ec543e295027
- SHA512 43ac5d53d58c18c0983cbee628ff31dd3ad643b6b9e2ae1bae6d604885538a6733eb05551984dd7cbbb2ae00904e43ba3755ee007c83f874d0627d891e4162b8
- SSDEEP 384:3xZhtomhKV3lOIEPiswqIWqmxD/lmXruk76OeyO4tepvgizbPVHMgBqPWbdWEWr3:DhteQ/RxlcrP9evjbdH1nlWhMGAedt
- TLSH T16A333D523E28D042DC926DB01AA9EAD22A3CAF851F1051DF3259F3DE2C717C29F7056B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fd:ba:4d:c7:82:63:cf:21:bd:25:aa:d2:5f:d2:19:69:a1:e3:ca:e7:80:25:b2:e1:ab:67:c0:0f:2c:d3:8e:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
7c:9e:f2:7e:32:98:f7:fc:49:11:75:c7:a1:05:d1:c6:7c:1c:68:b9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
21588
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
sqllangsvc.pdb
msvcr100
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_purecall
__CxxFrameHandler3
memset
kernel32
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
sqldk
ord896
ord976
ord1002
ord990
ord986
ord1011
ord471
ord48
ord22
ord1018
ord188
ord49
ord331
ord905
ord473
ord358
ord363
ord7
ord457
sqltses
ord101
ord78
ord508
ord35
sqllang
ord6
ord13
ord7
ord8
ord5
ord12
ord9
ord10
ord11
CompareStrings
CreateProject
GetStringHashCode
InitializeSqlLangSvc
ReleaseProject
SignalMetadata
SqlCompileText
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
AssertDa
Size
512B
Virtual Size
110B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=185, version=30716,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=228, id=1, productName=Unmarked objects,
count=6, id=158, productName=VS2010 build 30319, version=30319,
count=10, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=17, id=193, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/sqlos.dll
- IMPHASH 0bc8dfc0b9221d71b827dbb163cd86f9
- SHA256 c8fe018e57adbb1a5328192e8e9be4a5eb15829ff5ab2713b00c6be7dca98e1e
- MD5 d5678b23d062bd0acdc4b6d9e88c9585
- SHA1 0f9ea289f11eec5b5bc8a00f70d36b84b33f8455
- SHA512 353669e3d65153425f45fcf0c63b603de96a1213aee9db824865c2a80955c465b2e382f01dc91baf8505ff8b970555cccafacc88f4fb4eb20d32bb1f75703d90
- SSDEEP 384:XkA5+yhXPVGfPPWY7W/hPapBjTeajCCcwvZQlHMv:RhXdyL+GAISm
- TLSH T15FB21982EEBCA043EC825E7012A8E9C37C3CABC32B6550EB1559F1D928927D1973457E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:b2:8c:72:aa:74:3f:cc:4d:52:56:1a:fb:aa:c1:51:a7:d3:46:f3:77:a0:e7:da:7c:ce:0b:e5:12:ac:d8:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
7c:5e:a5:37:3e:27:af:72:8a:58:3f:52:7b:29:c9:c3:e9:86:cf:25
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
6133
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
SQLOS.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
memset
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
TlsAlloc
TlsFree
CreateVersionedSOSHostObject
GetTlsSlotInfo
IsHardwareSupported
SetCreateSOSHostObjectCallback
SetDllMainCallback
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
404B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=32, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=193, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/sqltses.dll
- IMPHASH 22c59a5d4dc0a08dd9bb21e7123d5ba9
- SHA256 ab859a1d945cb99e2e52e218ef442234d1436f9aa9a81b76ebf85068ccdebc05
- MD5 344479af61cacc9c64bca055297afec1
- SHA1 cc5e66e6dffa8a243193a8d25424dd81c8d85eac
- SHA512 cf76823c207ccbdc298a863b123c9a84e28e3e41c796ceb55d77fdebaa0ed9f7eb5262efd39bd393cc86319d98275a485e791d3d28b2f92a8d9d69866ba946e7
- SSDEEP 98304:Pcd0ZA68mlyCINfopv58AROqst91tJ/maN6oOv58ALBU10BV:ksZOGJROqshtJ/FiJLH
- TLSH T195869E62E34BF189D4972831625FA3392034BF3FF419B5A563C6BD35DB10A23B81C95A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:fa:e6:dd:93:7a:a1:ec:d3:5f:7d:0a:9c:65:a3:9d:93:d5:30:2c:fd:bf:1a:bb:cc:ff:0e:f5:38:af:8c:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
c6:84:bb:a4:57:57:f8:44:d1:1c:c4:45:99:41:27:58:69:0b:d3:d7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
68924
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
sqltses.pdb
msvcr100
__pctype_func
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_isctype_l
_initterm_e
_amsg_exit
_sprintf_s_l
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
strchr
strspn
strncpy_s
pow
_set_SSE2_enable
atan2
sqrt
qsort
log10
log
exp
sin
cos
atan
asin
acos
ceil
tan
memmove_s
free
malloc
_vsnwprintf_s_l
_snwprintf_s_l
_initterm
memset
memcpy
floor
__CxxFrameHandler3
_CIpow
_CIlog10
_CIfmod
wmemcpy_s
_wcstod_l
fmod
_snprintf_s_l
_iswspace_l
qsort_s
modf
_fpclass
memcpy_s
_statusfp
_clearfp
_fpreset
_controlfp
wcsncmp
_iswalpha_l
_wcstol_l
_iswdigit_l
memmove
_vsnwprintf_l
_wcstoul_l
bsearch
__CppXcptFilter
_purecall
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
sqldk
ord53
ord976
ord1002
ord990
ord986
ord626
ord1011
ord983
ord355
ord22
ord840
ord629
ord696
ord136
ord129
ord363
ord473
ord358
ord188
ord85
ord305
ord362
ord306
ord110
ord63
ord46
ord101
ord25
ord21
ord24
ord373
ord48
ord316
ord476
ord474
ord245
ord621
ord697
ord386
ord49
ord925
ord1019
ord1018
ord7
ord905
ord896
kernel32
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
TlsGetValue
IsDBCSLeadByteEx
FileTimeToSystemTime
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
GetTickCount
GetLastError
MultiByteToWideChar
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
rpcrt4
UuidCreateSequential
ole32
CLSIDFromString
StringFromGUID2
CoCreateGuid
oleaut32
SysStringLen
Name
.text
Size
4.4MB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
AssertDa
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=185, version=30716,
count=2, id=156, version=30414,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=311, id=1, productName=Unmarked objects,
count=1, id=152, version=20115,
count=12, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=103, id=193, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/Shared/xe.dll
- IMPHASH e6501edb409e29f49e6545f67c74dd4f
- SHA256 0ec09cd7d58aeb260fe82ca79ad16c353d7053a665d98f4deb26eba5e2b6e9d3
- MD5 063ca314262d277a92189028a9e094fd
- SHA1 3f8fb62d6b38ae258dbffda4d9470c78753c3814
- SHA512 0ef025c85545377d67562bef8744c0966262fd5ffe7fded4a9958ad01cab19e319b7f29fb45d4187a4930611d6b0dea0be32097cb78ae8423934080f7038193f
- SSDEEP 6144:w92cdRECvTmwWWx3t7893HQPRe/3maKQM:wYVCbm7m3F893HQsfmaKL
- TLSH T16F9409716A89C23BEDF22AB90D7C756E102DBAD61B3080CB93585BFE9A741C11E34717
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
77:38:ea:66:d6:52:48:7c:f2:20:d1:07:87:93:89:7d:25:c9:f6:72:04:11:0f:26:f3:d9:f3:93:56:f4:9a:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ab:d3:5a:68:e5:7a:c1:44:ad:56:ae:f2:c1:1e:73:7c:18:6a:19:2a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
292800
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
xe.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
wcschr
_iswprint_l
__pctype_func
_wfullpath
_wtoi64_l
_vsnprintf_l
memmove
_wcsicmp_l
_purecall
strncmp
wcsncmp
_strnicmp_l
_wcsnicmp_l
abort
_vsnwprintf_l
_vsnwprintf
memset
memcpy
__CxxFrameHandler3
_vsnprintf
kernel32
CreateEventW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
HeapCompact
HeapSize
HeapReAlloc
CreateIoCompletionPort
HeapCreate
HeapDestroy
OpenFileMappingW
CreateFileMappingW
ReleaseSemaphore
CreateSemaphoreW
VirtualQuery
GetCurrentProcess
GetProcessAffinityMask
GetCurrentProcessId
GetCurrentThreadId
DebugBreak
Sleep
LoadLibraryExW
GetProcAddress
FreeLibrary
GetModuleFileNameW
GetTempPathW
SetLastError
GetLastError
DeleteFileW
WriteFile
GetOverlappedResult
FindFirstFileW
CreateFileW
FindNextFileW
GetVolumePathNameW
GetDiskFreeSpaceExW
FindClose
CloseHandle
QueryPerformanceCounter
RtlCaptureStackBackTrace
GetSystemTimeAsFileTime
GetModuleHandleW
FormatMessageW
FileTimeToSystemTime
CreateToolhelp32Snapshot
Module32NextW
LocalFree
SetEndOfFile
SystemTimeToFileTime
SetFilePointerEx
GetDiskFreeSpaceW
GetSystemInfo
GetSystemTime
WaitForSingleObject
SetEvent
TlsSetValue
CreateThread
IsProcessorFeaturePresent
HeapFree
CreateMutexW
DeleteCriticalSection
ReleaseMutex
OpenThread
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
VirtualAlloc
VirtualFree
GetUserDefaultLCID
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
ResetEvent
MapViewOfFileEx
UnmapViewOfFile
LoadLibraryW
GetQueuedCompletionStatus
GetExitCodeThread
advapi32
EnableTrace
ControlTraceW
StartTraceW
UnregisterTraceGuids
RegisterTraceGuidsW
TraceEvent
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
QueryAllTracesW
rpcrt4
UuidCreate
shlwapi
PathRemoveFileSpecW
PathRemoveBackslashW
PathCanonicalizeW
PathFindExtensionW
PathAddExtensionW
PathFindFileNameW
PathCombineW
PathRemoveExtensionW
user32
MessageBoxW
SetAssertHandler
XEGetEngine
Name
.text
Size
342KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
AssertDa
Size
512B
Virtual Size
465B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=147, id=1, productName=Unmarked objects,
count=10, id=158, productName=VS2010 build 30319, version=30319,
count=13, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=171, productName=VS2010 build 30319, version=30319,
count=39, id=193, version=30716,
count=1, id=184, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1028/DacUnpack.rll
- SHA256 9b10d6038bfbfd7c4e734acf48b152a16cd8d3ff69f06b1b8aca008842dba34c
- MD5 9adaa0c7942bfcb41bd036f6e695099a
- SHA1 58309e42ba125a518bc7e02bda0f235d15be8360
- SHA512 87b98c099c5ce6d07b7630cf8e3bdac1d9dc8dd004684d48aa4503c2a073bf313006d53445036f95f55a64701691795985990db26e51a5aa220c4dabf9df65b0
- SSDEEP 768:gzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWg:8ooFyAJWnPhC+I2McFkpHgTqmAArZzQT
- TLSH T170D344D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a7:a3:e9:d8:e0:2e:99:81:9f:ef:1f:cb:a6:85:45:78:8c:af:75:21:24:a1:49:97:de:4c:53:02:a7:16:8e:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
2d:af:66:a1:5e:ce:a9:68:35:6d:11:6d:a7:8f:a0:c1:9c:c2:95:c3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1031/1028/DacUnpack.rll
- SHA256 9b10d6038bfbfd7c4e734acf48b152a16cd8d3ff69f06b1b8aca008842dba34c
- MD5 9adaa0c7942bfcb41bd036f6e695099a
- SHA1 58309e42ba125a518bc7e02bda0f235d15be8360
- SHA512 87b98c099c5ce6d07b7630cf8e3bdac1d9dc8dd004684d48aa4503c2a073bf313006d53445036f95f55a64701691795985990db26e51a5aa220c4dabf9df65b0
- SSDEEP 768:gzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWg:8ooFyAJWnPhC+I2McFkpHgTqmAArZzQT
- TLSH T170D344D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a7:a3:e9:d8:e0:2e:99:81:9f:ef:1f:cb:a6:85:45:78:8c:af:75:21:24:a1:49:97:de:4c:53:02:a7:16:8e:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
2d:af:66:a1:5e:ce:a9:68:35:6d:11:6d:a7:8f:a0:c1:9c:c2:95:c3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1031/1033/DacUnpack.rll
- SHA256 19aafe771556cbd7d451c47799a73b9d6d96471bb1a8be680ee87f095be58ebb
- MD5 c5a5829bbb06b3182f204a0fbd0a3b8d
- SHA1 cbc350bb10ec20c07f652f65974b60b4e875a681
- SHA512 29dd3f078b93296b0dddb80853b59c7f018cb537cab27373b7f25431218f5043cc7582f53aeabcc716a3102b0678c1402e20e424a100faa8d90f4b0d4112d09e
- SSDEEP 768:jzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWd:PooFyAJWnPhC+I2McFkpHgTqmA5Td4P
- TLSH T1FED345D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:81:d0:7f:bf:e9:2d:0f:f7:a8:7e:78:1a:f0:3f:92:22:c0:98:c2:4c:2b:a7:04:61:6e:25:f5:47:8b:f9:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
a5:87:f7:ac:6f:f8:03:bf:64:7a:69:b6:f3:02:ff:2e:13:98:f4:e6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1031/1036/DacUnpack.rll
- SHA256 73e72e8a60458e165401dc2b5ab0cbc7444dcf806d5201780ada797f3ead3a83
- MD5 6e2f9cb3c0ef70c9e0971c76bb30e1e3
- SHA1 7088440e88c458b43fa7d186f3783589db86bfbc
- SHA512 f7e402ba1585fba3d73e8303ace86f91c983514f8f5ab8925dbacf782a6f259342c5aec8148d11e3472588bce0e1ae41f1c49f5da55e78bb74685ff4b2ed101a
- SSDEEP 768:tzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWw:FooFyAJWnPhC+I2McFkpHgTqmAwYezj2
- TLSH T1D3D345D0F199A8D6F81B54F2497AD470158B9FA8D47C961E2086B32819F339320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:20:f3:0e:c7:5a:3c:96:fe:51:c2:36:44:89:76:2d:44:0f:3d:aa:35:07:38:68:24:0f:d0:93:79:d2:36:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
11:53:79:01:54:3a:83:38:51:bf:c7:55:aa:ff:f9:5a:17:c6:61:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1031/DacUnpack.rll
- SHA256 4cff81278fcea270fc4f6b0680c8589e58c35d316f7021fd04c97d6d09b2a06e
- MD5 7501a7fa382250754067e00d27b8e0d1
- SHA1 4beb8d0cf27fda82671586273c27b576c1959237
- SHA512 287f7e377d8bd42e7b9e89e2e1d5ad9806a15a4ce278a524064a2ce91ddf83207c6607de4b2924fc93f9d3603f8a0809e5c8a60cd8d629d4ecfe12898828f9b7
- SSDEEP 768:qzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWH:yooFyAJWnPhC+I2McFkpHgTqmAyaJnm
- TLSH T131D345D0F199A8D6F81B54F6497AD470158B9FA8D47C961E2086B32809F339320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
27:13:a6:2f:9e:bd:07:34:d7:fc:cd:a6:be:ab:45:fa:bf:8f:fc:ba:9a:62:e6:18:2d:1f:69:92:3b:be:86:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
64:4e:4e:b8:05:0a:3d:2e:7f:13:77:61:55:65:90:9f:8f:ff:46:70
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1033/DacUnpack.rll
- SHA256 19aafe771556cbd7d451c47799a73b9d6d96471bb1a8be680ee87f095be58ebb
- MD5 c5a5829bbb06b3182f204a0fbd0a3b8d
- SHA1 cbc350bb10ec20c07f652f65974b60b4e875a681
- SHA512 29dd3f078b93296b0dddb80853b59c7f018cb537cab27373b7f25431218f5043cc7582f53aeabcc716a3102b0678c1402e20e424a100faa8d90f4b0d4112d09e
- SSDEEP 768:jzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWd:PooFyAJWnPhC+I2McFkpHgTqmA5Td4P
- TLSH T1FED345D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:81:d0:7f:bf:e9:2d:0f:f7:a8:7e:78:1a:f0:3f:92:22:c0:98:c2:4c:2b:a7:04:61:6e:25:f5:47:8b:f9:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
a5:87:f7:ac:6f:f8:03:bf:64:7a:69:b6:f3:02:ff:2e:13:98:f4:e6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1036/DacUnpack.rll
- SHA256 73e72e8a60458e165401dc2b5ab0cbc7444dcf806d5201780ada797f3ead3a83
- MD5 6e2f9cb3c0ef70c9e0971c76bb30e1e3
- SHA1 7088440e88c458b43fa7d186f3783589db86bfbc
- SHA512 f7e402ba1585fba3d73e8303ace86f91c983514f8f5ab8925dbacf782a6f259342c5aec8148d11e3472588bce0e1ae41f1c49f5da55e78bb74685ff4b2ed101a
- SSDEEP 768:tzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWw:FooFyAJWnPhC+I2McFkpHgTqmAwYezj2
- TLSH T1D3D345D0F199A8D6F81B54F2497AD470158B9FA8D47C961E2086B32819F339320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:20:f3:0e:c7:5a:3c:96:fe:51:c2:36:44:89:76:2d:44:0f:3d:aa:35:07:38:68:24:0f:d0:93:79:d2:36:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
11:53:79:01:54:3a:83:38:51:bf:c7:55:aa:ff:f9:5a:17:c6:61:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1040/DacUnpack.rll
- SHA256 768032356acf9575018fa6b3f7ba8af8305423c9839c5d61254e611487b48dda
- MD5 8f9842b373d6711ee09b32b4d0ba59e9
- SHA1 a2cd2a37d6b98c91d8a317c9594c96cfdc92b45c
- SHA512 4372a0fbc37c3d8e1d90db0c48be61965530092e275ce5d8a4f899e3babd525719fde94c7f4d7fef37798e141f1adf1689b5c53b62b83a59fc9ed95affe4e6cd
- SSDEEP 768:fCzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcZ:CooFyAJWnPhC+I2McFkpHgTqmAsKCEeI
- TLSH T119D345D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:51:3c:18:9b:34:ad:34:ca:23:45:41:0d:f9:3d:0e:d8:81:a4:22:bd:cb:b1:2b:0e:cf:97:57:35:5b:94:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
54:50:2a:68:d5:12:8c:b6:0d:21:8c:20:0f:91:ce:1d:92:ac:8e:39
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1041/DacUnpack.rll
- SHA256 444f6e9bceb2b652d13a6ce674b5a8509f06f231d6614b344167ef15a1fec27c
- MD5 6aca6d6d5eb78203c625a9c68601db8f
- SHA1 fb6704b5622ee1202ce9fc22bf0a1e7b6f8b5d5a
- SHA512 ecc667f325f945be4f6c7fc36f47aa213182e59dfd1451ed1bf737d768b0f88fee62bee0c66e70162df2d02513df09d5a3c56fcc91a04c377dd0a4bf1eb99d84
- SSDEEP 768:Dzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWG:vooFyAJWnPhC+I2McFkpHgTqmAq1UVBz
- TLSH T1D3D344D0F199A8D6F81B54F6497AD470158B9FA8D47C961E2086B32819F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
65:93:cc:90:9e:d1:d6:4d:67:4d:b2:8e:83:85:16:69:08:74:ee:c7:6f:ca:a8:1f:e1:f7:ce:7e:5a:52:98:ec
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
39:93:ce:dd:9c:95:e5:6a:b5:68:69:73:3d:8a:04:35:74:d0:b3:7f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1041/KeyFile/1033/sharedmanagementobjects_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1041/KeyFile/1033/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1041/KeyFile/1049/sharedmanagementobjects_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1041/KeyFile/1049/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1042/DacUnpack.rll
- SHA256 4d97a7c5f891a41aaf0a05d1480e7ab9c7b6a52fa6b9425ed16d670db274673f
- MD5 7ed9b6f284bf1ea06e0c5b43cace68d1
- SHA1 25c157d787bc3ae776c12263bfba770f7a6f099f
- SHA512 4c68bc6302408143ee872b3d9f9e733170117ee10904c77afcc6e1426d59df6e5cc9061e6bbe7fccdb73534df53cb98023dde15341f1bbdc651e9b3031962077
- SSDEEP 768:Bzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcW/:ZooFyAJWnPhC+I2McFkpHgTqmA7bDNzE
- TLSH T15FD345D0F199A8D6F81B54F6497AD470158B9FA8D47C961E2086B32819F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:22:73:33:46:4f:06:a5:7c:d9:05:d5:46:0d:5c:61:2c:f1:d1:ce:68:3e:7b:6e:5e:8e:02:9a:ac:b8:1e:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
6d:cc:44:5d:db:14:f2:0b:b1:b6:21:1d:08:59:32:4e:77:30:60:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1046/DacUnpack.rll
- SHA256 0e59142d66f68bc49dd42ac86005d981d9f7e372cc2782c0c2c74ca8a1ab3fca
- MD5 31b1de8b51e2e49404af9043b7272537
- SHA1 4096f97960d61fc39cfd37bc9a1176128c08b516
- SHA512 7b17b866138bbab7d3fedd329d1c3f092f000a71c8a7704ca61f4d8a4392ea1e115b2e06dfa2aebd7cee66280c3b904040b2c8c458d4a6ee2d0d4421ed62bb4b
- SSDEEP 768:Zzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWK:BooFyAJWnPhC+I2McFkpHgTqmAJO7jy
- TLSH T131D345D0F199A8D6F81B54F6497AD470158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:c9:71:17:c7:b4:94:b8:b9:46:6f:01:12:56:74:48:50:17:9f:2f:e7:83:34:48:37:52:70:13:92:b7:e7:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
3e:2e:d5:fd:01:39:7f:45:ef:c9:50:81:ab:fe:1c:e5:ce:8b:55:08
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/1049/DacUnpack.rll
- SHA256 64f5c8ea4cbbeeed2a9927532cdbabbdfc752970a159bdf3bc0547e014667697
- MD5 7bab0bb3553552d2c3f168c619cb58cb
- SHA1 9cbd9d3f76228cbb57c051b81b4a9870d2d61028
- SHA512 7743a1efc24e03db25a9cfb401078def79e59bc8b96440acdb23011ddba779da103b94356dd2c6f0f2e53f5c116cc7cd0f61605d93c7d9d2bd969662a6ab3af7
- SSDEEP 768:0zb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWj:QooFyAJWnPhC+I2McFkpHgTqmAwStp/+
- TLSH T12AD345D0F199A8D6F81B54F6497AD470158B9FA8D47C961E2086B32809F339320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5c:3b:37:d0:fa:bc:10:32:8e:eb:b1:8d:0e:23:39:52:8f:d2:ae:e0:7d:fa:cc:c0:cd:39:04:e1:8c:19:b5:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
2f:74:12:f1:9c:ec:2b:0b:fb:bf:f8:a8:97:35:a2:cd:04:08:23:c4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/2052/DacUnpack.rll
- SHA256 78881b052bdf8709f866213ddfbbe78a66ef605f8c99d07c8d82386323750d12
- MD5 10ac709bcd591fdab95cbd2a4f65f316
- SHA1 1d55a0977776d5535cfefd62ae575d86f2eaa2ff
- SHA512 168ab6064eeb174ce9238ddda45ea948bde1c070f922d870b58f67d563383f33994354882913230694f48f0a58af7ca25977dc2324a2137126daeee13ecced84
- SSDEEP 768:Pzb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWM:LooFyAJWnPhC+I2McFkpHgTqmAuORK0
- TLSH T190D345D0F199A8D6F81B54F6497AD470158B9FA8D47C961E2086B32809F339320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b8:02:54:02:4f:1e:3b:84:38:cc:89:ef:d6:c5:57:a2:04:b2:04:37:e2:f0:02:3b:f6:c1:c3:39:36:a2:01:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
32:51:9e:05:c0:0e:ab:42:8e:09:c7:c9:bb:88:02:46:74:07:c5:85
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/3082/DacUnpack.rll
- SHA256 3e2c37784cc2a3a145bb2b94c7ec3d1c807376ccc849af6dc2e6b44177972c4f
- MD5 12c01da8b06e337f27379286e0cc9955
- SHA1 ec479a180b02f271e2295e1069e9ca66545cef17
- SHA512 ce6a41923e4da33cdb0c07c69f556363e781c9a15826d1b4fbe289cb5bba0a637ecc06caf5488a3401cea8edbee4bb354d24292e1ed591da14d32e7007452c51
- SSDEEP 768:Azb8oJYg8Hf48aWen+TVP7CUB8h8CgG/yHGpGBIV1SbMcFpypHgkatQi9GfYbcWz:cooFyAJWnPhC+I2McFkpHgTqmAog/FGT
- TLSH T1CAD345D0F199A8D6F81B54F6497AD471158B9FA8D47C961E2086B32809F338320BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0f:df:34:ea:f3:59:b7:a9:a2:99:ec:38:c8:0e:0c:8d:86:0a:d1:cc:88:5a:9a:12:d7:41:90:e2:cc:97:cf:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
19:6d:cc:a5:e0:10:4b:22:ae:5c:25:fa:da:f5:ff:cf:e2:1d:95:b8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
117KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/KeyFile/1033/sharedmanagementobjects_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/KeyFile/1033/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/KeyFile/1049/sharedmanagementobjects_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/KeyFile/1049/sqlsysclrtypes_keyfile.dll
- IMPHASH 7ccb9c5f3f9fc1eda5b1015ecdb98e95
- SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
- MD5 5e54cb9759d1a9416f51ac1e759bbccf
- SHA1 1a033a7aae7c294967b1baba0b1e6673d4eeefc6
- SHA512 32dcca4432ec0d2a8ad35fe555f201fef828b2f467a2b95417b42ff5b5149aee39d626d244bc295dca8a00cd81ef33a20f9e681dd47eb6ee47932d5d8dd2c664
- SSDEEP 384:84k5u5z7PVXPWNgWJwzzvhPapBjTeajCxnvZTawclHMrm:84Rz7diEzvGArnhax+m
- TLSH T152B239869EBC9043E8869D7013E8D9C33D3C97D32B6091EF16A9E5D92D833C1D72466E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Digest
dc:a0:90:d3:a8:27:17:2b:2f:1f:f9:01:b7:30:41:d8:0b:17:31:1f:f2:98:19:53:7b:61:23:ad:a6:44:a3:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
eb:f5:d6:0a:a8:5f:f3:c9:fa:66:6f:ce:63:70:f7:79:13:f1:7c:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
1
Major OS version
6
Entry point
5405
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
KeyFile.pdb
msvcr100
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=29, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=184, version=30716,
count=1, id=189, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Setup/DAC/bin/Microsoft.Data.Tools.Prototype.Dac.Service3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1749d4bcf7c722fca432a7b16e05ca232f9f9e53a6cf9f24eea6be4900d69b5f
- MD5 153adbe7f8fb93f0b5b294f5a4f28928
- SHA1 c668f31ac14112eb62e4db51e766b6a1f7f3e1dd
- SHA512 6949864fa330afe42599b11ec2af4a800774558df254352423ff35c90b82cd8f6330f7023019b394a06d4f3086392ce3a27c8d805fce7f7e9dd76129b05fef77
- SSDEEP 1536:2l7z8NdFCJ8ntllV/j4eJUDa/W3ffDs9l:2+Fn3lFj4eJUm/WP49l
- TLSH T1AE93A412A3BD050AF9F76B713AB1F0D41ABBBE679DD5CA3C0128555D1432FA08E21F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
35:45:eb:d2:cd:5e:d4:13:00:34:79:c2:69:aa:67:fe:1b:c9:17:f8:82:71:6d:5e:69:5f:b7:59:cc:56:54:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
04:69:6b:8b:32:4b:77:41:22:cf:3e:80:db:29:6d:5b:90:21:c1:88
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:34:12:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 14, 2012 - Aug 14, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:ea:3e:00:00:00:00:00:10
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
79342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\bt\525\target\retail\i386\Contracts\Microsoft.Data.Tools.Prototype.Dac.Service3.pdb
mscoree
_CorDllMain
Name
.text
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/Microsoft.Data.Tools.Schema.Sql.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4766b371110ea2677d3338ce6d70a08857076419c8e28c660eb274e15c74baea
- MD5 a63b6868f74d9d5217a6403ff6d431c2
- SHA1 1252ab9365a30ca0c1a292791a538b2f43f67233
- SHA512 55aa2fba758b8f3254b7beb652c58310d92a3e58d1251cce9a4d703e46215dd102cd06701be0404c295f97e49f2f7ffe58c2e8cef7fe7cc1aa9814013260fa56
- SSDEEP 49152:73N6fiLri0oyVURdHyhJm02MQI3hGHNY/pcXzZZDMVKWB8s:7NPLvUDH/s
- TLSH T12676840177E80A19E9B72A25ED715468AB77B99A863AC31D314CA24F1FB3F004D63773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
31:7c:78:01:9d:8c:e7:5f:ad:2e:72:67:66:a4:84:55:cd:a0:31:a9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 2, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
7321358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\bt\9391732\target\retail\i386\SqlData\Microsoft.Data.Tools.Schema.Sql.pdb
mscoree
_CorDllMain
Name
.text
Size
7.0MB
Virtual Size
7.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/Microsoft.Data.Tools.Schema.Tasks.Sql.11.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b882a90871bf2d7c9f04a716ad80887b26010066438f1d8eada2a19d37b132f7
- MD5 33ff7073db9201f345351046c93ce196
- SHA1 86dcebc5f25411186d7fb9749d1c534fc8f6feb0
- SHA512 4b0e5e4e1af1472a59c79a2b8b2538ae5b4a66f2a3f42fe85d48525759882438141294036824d286d4abdc91738e6177218ac0d4ad101b70b9be78ca72e7d35a
- SSDEEP 3072:61W/fe/6jjx7EDpf6gbThrzzL5GrHgh5gadWO68xUjKW5CH52Zp:3He/CjpuJRrHL5GrHgh5gad6p
- TLSH T13CE3195253E8869DE6FF2935F43084255EB2FB173451D3EE8E84E4DE2863BC0A5126B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:8b:9f:dd:b9:33:f7:97:44:46:07:a8:d2:7b:19:bd:a7:1e:89:b9:1a:3d:08:f4:70:aa:85:5c:88:72:83:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ed:d4:f9:c3:fd:c4:dc:48:3e:a6:a0:af:6c:d1:c0:bf:b5:fb:5f:98
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:34:12:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 14, 2012 - Aug 14, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:f5:0c:00:00:00:00:00:11
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
144014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\bt\525\target\retail\i386\SqlTasks\Microsoft.Data.Tools.Schema.Tasks.Sql.11.pdb
mscoree
_CorDllMain
Name
.text
Size
133KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/Microsoft.Data.Tools.Schema.Utilities.Sql.11.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f566507f94911651b4258bcb64408c7ae748892f7c0ea1782ef358c73027e193
- MD5 725d060649c1b9727f45d9c712c5a915
- SHA1 e759cad4ff7d015750099068d24a8acb0f2d6816
- SHA512 5f30e09ea2e1d3021efc14e46084733488d2daa1275474b84a8bf7ee76df088b83d112f3aab7c9b70907308053ed0c2d5b62d470bfb74c7aeb256395ca6ec70e
- SSDEEP 12288:nv01lsIzWig2fKgLYwG26Zcc40c7/9b0gZ/+YODm8o3gnsao8c0RpsiZThmKWMXp:81lo2fdbcDc71AgZW1sgnk0T5i+OeUx2
- TLSH T1E345B41127E8BD0AE0BF13B6EF35E8DC15BDBE019D9486AF914072591CB1B427B136B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cd:f3:e7:c6:e1:44:d5:53:a8:37:eb:c2:20:f1:76:64:5b:b8:02:9a:09:58:a7:8d:0d:6c:9a:96:17:82:2d:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
3c:c1:0f:d6:53:a1:fa:e8:e7:13:47:18:5c:24:a6:01:49:06:91:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:34:12:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 14, 2012 - Aug 14, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:f5:0c:00:00:00:00:00:11
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
1191198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\bt\525\target\retail\i386\SchemaToolsSql\Microsoft.Data.Tools.Schema.Utilities.Sql.11.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/Microsoft.Data.Tools.Utilities.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 67bf75f01f05c3513eaf0b8c59ba7af2f3c6d16683e35e60611682a3cee11be4
- MD5 ee9325bbffd98406a70232f94d46fa66
- SHA1 ed7518e353e17ba096164874a97fffa82f30df1a
- SHA512 092f702dc33a836fb0e43615341d43276259f10dad2f607c04e7b6482ba607742112fd72b75578e64f63c3be5641a8c08327d0f2c69616b2547f92840dcf8c1c
- SSDEEP 6144:1Xmkii7qtD6N9RmmuQkDzTU54HOh0Jtl8j5QZoPwBw1RU7fGWyO9pMJOZp5Kx:1XDiieF6NWDzg54uKJL6Zcw1ok0Kx
- TLSH T1D69439213BEC841AE6BB1B30EEB4E4CD5676FE166C94CF1F2544760D2872B518E21F26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
93:d1:d4:be:67:82:e5:2a:f7:af:f1:e4:a2:d4:46:a9:fc:5f:5b:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 2, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
440558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\bt\9391732\target\retail\i386\DataUtilities\Microsoft.Data.Tools.Utilities.pdb
mscoree
_CorDllMain
Name
.text
Size
422KB
Virtual Size
422KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/Microsoft.SqlServer.Dac.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66f00aa86086642962121fddb44b0c0d44e751b94e67e13136e11045340c45c6
- MD5 a1c9840db0a92154bf04bfe16dceed7a
- SHA1 0af2fe497e21c86d85a9ddfab3cadb4055df3753
- SHA512 36b1284ac27958c61a2c06f0f1f8cd3d30b76d90da003e168ca542b8980b62be7d62410e857f1b253cda0a6768ef5812846c9f2b4955c3ff115810214261598a
- SSDEEP 3072:TxdAPj7LMMb89U69jBN6J/20iAvJG+A2f4ix5SF5U:Tkj7LMMY9U6Fy/G203rPa
- TLSH T164F32A69D37C896BCA9B15BD6414408423FDFB876D12CBADEE54E4DE0523F83A701263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d6:33:2c:34:ba:d8:0b:a3:b6:45:32:47:67:e6:e5:67:8f:9d:f1:5e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 2, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
165726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\bt\9391732\target\retail\i386\DeploymentApi\Microsoft.SqlServer.Dac.pdb
mscoree
_CorDllMain
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/Redist_DACFramework.txt
- SHA256 16f191e6355d32099b7f25945270f621bef6f92b3e5c1da178bc21e60912b470
- MD5 1f2cb924ab7c6c964d77c6a61098ff57
- SHA1 efa42f9dc9d3c95179613c1afabd7906e86d4a42
- SHA512 7aa55921af23ae4b9456cd3317391c8d8b927e266ef41a0e41c89a68798d7c53c62f730ee71977f3d465be3c8510a68e5ebabde73ea183b4c94af867daa209a7
- MD5 SHA1 SHA512
Setup/DAC/bin/SqlPackage.exe.config
- SHA256 811e339d7dba2ae86d54101a98a29d8ac8606d770f312d0e70026f34727b0095
- MD5 ffe0695e7763fdb4feabf9fc57681c5f
- SHA1 36d43ac5ec94ba79ac6b41b38e6fddc1c663c2ec
- SHA512 a769aa01815336748c6522d173af883663a708900c9cf0443e74454557afafd8a7bd276f07efe7a31a8bf3896d97962bc13273571b68406c43fe00d559a86bd3
- TLSH T1D801FE0982C49F334C721313B9B08580DF71EB6B62471884B5DE72A70F328A98713B72
- MD5 SHA1 SHA512 TLSH
Setup/DAC/bin/SsdtCompatibility.xml
- SHA256 ad528ac2cfd8ed91d21630b0704a48a2329384a30742c1a64dba507601041a17
- MD5 c0b33b632c771ed5aca8dd8f4fc3bcf8
- SHA1 d63cffe2111d9ddac63e8ac2f76dac1ce02f1d14
- SHA512 078cc8ab22b35b4028bd5c2cdb7dbb31356e038e671c256fbb3e301f4d7fb489647723887026b01df62fae98a75c28dc3785260a2d13ded3617ec99521177f63
- TLSH T140C09B445103D465BD591957172DE62CE3F8774F2C1C041CE411495D06E7E3C0746AA4
- MD5 SHA1 SHA512 TLSH
Setup/DAC/bin/bin.rar
- SHA256 89d2d22e097c047b360be62ac0f93d0a646601eba5dcea9fbc6ec8bb9ec01d61
- MD5 2c1819d31f2fdca3d387b1da4ff6ee0c
- SHA1 685f36b986d61ce9c2e3054ffc97fe4ed20d96fa
- SHA512 ee077998513d236c49a1f02a39b5e14ca9d0f55a25dbb27a4a8b9c8df12726b51945300abe1084e82396439033cd0515d7655f5f5e2d7469a529c7a7fb7469c6
- SSDEEP 786432:d/tTNOTViGdQETdxyBovRXlEtMgtmMt/UnoL1xydYhAB6PG47YQOpbgXqyX/o2/:pdN+ViGQ+2ovsPtmMtsnojydEp+pb+XN
- TLSH T10FA7333A15B625B948BEA8BD5683128C384D3E7852E42F516FEC3C0E0BB4CD1A51F5E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/bin/de/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b403120e7790e0ac101a19829bcb554d12ebb0d0d1601f423bcc0f2ad6d11abb
- MD5 119cddee6653662c588a2606546e0107
- SHA1 79389c631538b75f2474ee75d0361ed608b7cb0b
- SHA512 04f0d8d1542cfce9525a1e99036e17b51511b629e8416f44dddc08aa1745558f3f7f42e8bc4bbf4f90073a73e690a12174635ea0e7f855d821df5a45d9ba7cb7
- SSDEEP 1536:ykO3vUooFyAJWnPhC+V2McFkpHgTqmAp9dwssX68:y5QFHWnPhC+VYOlwssX68
- TLSH T1F5E386A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:76:dd:9b:1c:cf:c0:f5:63:f6:a5:3b:b3:8b:de:f0:94:20:e0:57:38:0b:28:c5:76:d1:86:a3:13:44:14:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
0c:32:58:e9:ad:ef:69:a3:1d:25:e5:d9:d6:bf:80:60:c7:ff:47:7d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/de/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9351676fe10e5393e98c27d27a94236d28843fc47feb60d0ca3240d0bf0a31db
- MD5 6ddcc2524072254376a795af1eb5b000
- SHA1 127e9a49ba06b6ea5fb1b11d39d2181a60438b2b
- SHA512 ab285ba7f28a93472df236a6eca0277ca4bfa74b37d1d1e2573c9ac7c689a6c048737b87c665d935a90aef5e6654aac2ac10921690931702b04277fbd3da8ced
- SSDEEP 6144:4aVAyBxfzFjEeZLpyomxTkggNR5urA4BHswVeoJ83pnV/IXQZw8mC1+PzNZezxMs:FVbzFjEeZ1WzZcXK/UZRcm
- TLSH T194458AA025D52F12D2B5073B9A35B9AEFE66C9A7431E10A8FA8C73077F79E430563350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
39:e4:55:78:f1:fd:fa:f3:40:bb:c8:4c:8e:6a:6c:75:07:33:8c:69
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1253422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/de/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 af55eb0c01623a7b3b9ef8125d03cc8a54b764527c7f4bbfa899cf8bda3b1a0d
- MD5 071f4576ffcc629eca9010606a4a4137
- SHA1 ac45e2cd2c69d372df59f340305823a10c009197
- SHA512 c12eec9c2475352adee6087d938c4b0e2b8d838c21dc9b323206fab4043fd339feb71b3925716d289284905189df086ee8742fb75f3f7c624ee592a6b3ef8e40
- SSDEEP 768:aIxJyrYJ50T+NdEq8LagJscKYGX4mnyCFjXefh/1lVQBb6FjXHUB:Bg8MElFcx1lVQV6FrHUB
- TLSH T111E25041BBFC651CF2F31F35AA39D852AD3EFE9A1912E42C1459A05E0076E44C9B4B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
51:74:92:bb:3f:1c:e5:e5:36:c6:10:39:5b:96:02:a4:a7:e3:2d:9e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
31630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/de/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 980c4d4408a6179e6bc4c54e88876ce36002395d4baa2876cfdabc8bed4103cb
- MD5 be5eff958f7b8c574538957120f45f88
- SHA1 7976f0123aa7c4dc87db64574b60a3fc425cecc7
- SHA512 9fdb75c30b69291932d36f23fb09d083c8ac66d73e1dbd5dead2e0fcc52234b78ce42cd3410d0f8141150e406751e3350d7ac92d1990d17f6fa0174d22ee20cc
- SSDEEP 384:/qUTZmwgZuPeqOgRz3b4tXIXHiHxRFjnK6WUo9HoWKLb6Fjpv:vdC+Nb4tXnKFH8b6Fjpv
- TLSH T16682A4426FFEA049FAB34BB46A75D8623D7BFA521A11E01D4148611D0473FE2CD68B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4a:a9:bb:5c:23:06:68:d7:c4:67:88:ea:2d:d4:b8:92:3b:fe:b1:7b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
17966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/de/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46d51e31727f89cb589578f8bec8467fe77f78c181af21967bebaee902e8771d
- MD5 2117846f368d71cb9a7f099c44d5a3b3
- SHA1 3c8b4c61be8ece1bfe8bf9c541c92c903b4a1d40
- SHA512 5f485ffb24b4fcc66985c6b7bcaddcee58c7c505d3640de4b17315a1cb044481e58a088c13f648a2eab82f8d02777889ad763aba8d7647be81511b7ca4c7e889
- SSDEEP 384:9NMzuGC/xCb2Pa8z1wYWDMarvLGWYo9k8W5Lb6FjpvM:bG8Cb2i85wYWX/VkLb6FjpvM
- TLSH T125B2A541ABFD6059F5F30F74A778E963793AF9965E11E02E0058901A0532BA1CE7CB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d3:4f:1f:21:e0:ee:fc:c9:79:98:92:c4:09:0d:84:1b:83:32:c7:ae
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
23150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/en/License_DACFx.txt
- SHA256 fba02491e20b9de7ed50476145904f4a130aa2ad6de15c4e55b63368263f6fe8
- MD5 5331bac43e1da20a9cf5b9bd4ee4f83a
- SHA1 83f5cd92320abc367e4215f98c78ecaedec5f56b
- SHA512 0806679ecb8c5ea459092cbf7d5b030ed41eb596399f95770f5b4e95b3a70f46b8099c29cbfab292398b0bc03e76b0ad049a29ecb49b7aff81bca84dede4d2a8
- SSDEEP 192:MXeJZVu+P8Fg3AMehbVPoIszXgIBtClbZkk8Z8Sfgn82Cb3:8eJrlahxoIi1BtCnkzBfxb3
- TLSH T1B252AA51A7FD5218F6FB3F506EB966684E3ABCA2AD3DC65D1210004E09B2E80DD70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Setup/DAC/bin/es/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 79df8f32d3b306949de9bffc0168521cade134c1771fa7bca455f10d49d5dee9
- MD5 7bab77165ad3b841c5d2c7a0e3614c97
- SHA1 897eb653ed8e4604910e587b94b93f456f75bcb7
- SHA512 c3f57b80f84b2b32a07a5d6c4e7413b525fa0a9b45264e2e23439401e1530df5cb5c34d6b6b73710fa7632c1eefe87a3901b97fc48d0ddb019515a13f22968a4
- SSDEEP 1536:OxpJooFyAJWnPhC+V2McFkpHgTqmAepeKWdmt6:OFFHWnPhC+VYOmWdms
- TLSH T1B6E386A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:ed:27:5d:04:b4:4b:1f:54:77:29:a8:f0:b1:7c:fd:b0:dc:b0:c7:92:94:d3:07:e2:8f:81:05:53:3d:3e:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
bf:5c:c5:c6:fd:73:dd:40:29:bd:53:ec:f7:45:d2:59:82:be:99:5a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/es/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9172ee6046785edf6210463456337f8dabd3eb68ad0a8a9cc1b4f9170264b6c8
- MD5 d015649fd4ecf35f46e6fa1d3a0ee3f1
- SHA1 2813fa66edd0221f7591128cbe4a9d74963e5669
- SHA512 2ac2737bb0c77a0a9784edc97c48af29382497470c8e85515c5da750e0be9bd199652a42fd8c53ac1a48098f2a5c28e737fa05671e1eca14ec55088c26ab3243
- SSDEEP 6144:c4BVwOGa3OBkgyV9CUBV3zWnqzXqd+m5tPgRywWYYLE5h1kOIUoQhwTWIQYBHgOc:XVmwBoa
- TLSH T13B457BA025D52F12D2B5073B9A35B9BEFE6689A7431E50A8FA8C33077F79E430563350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fd:74:5b:5f:5f:8d:24:df:2d:2b:55:d6:25:29:df:d0:8b:1f:7c:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1249342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/es/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 05f62b735637183cab4e5d0e13e166e4963d6d5b253c337ab87cadd7e5aa3766
- MD5 7c565c5568c4df2767df6917e58684b4
- SHA1 2b8806a667499c7f15ac5ab778cb78a0f6e2816f
- SHA512 89b2de8ae66018c43f8f804aaaa4fdc8e29d80a68280d3ea803f93541c201b7b1ff44a7d949d47a73b956fa7c31ae683affc3bd7d1322fe43318072655721dc5
- SSDEEP 768:4IxJyy76bjCDfw/TBr8xTgY/TB2GvNcKg4/7Cqb6FjXHUGX:ngrcNcj4/7C26FrHUGX
- TLSH T1A3E25F01ABFC2A19F1F31F38AA3AD4539CBEBE892811D46D2429615D10B5F48CDB0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
e7:ed:04:2d:43:d5:1b:17:fc:ad:99:61:46:38:4d:62:40:b9:8b:ee
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
31646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/es/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e0d42954a9f8888837ce9853573a5ff8480af82fba84463e0cc1040b09807a7c
- MD5 702dd90cf31a5732778fb9e8feaf0a31
- SHA1 9a6b82d7967218b1938eecc5d4c42977c3c0064e
- SHA512 77aa94b71b520585e73f19b841d651716b818cba8770269df265477a28ef7528c0a8689259dbf31aa6c0e26f1999d0be29fc4d1ab800603485f08fbeac8fe509
- SSDEEP 192:XeA25rX2/QAFPVSFJrUyh4Oi5KxQ5ZWahoWZQKPnEtm3EFxJhjeyveC/OeM:X01wQwrhO0QQ5ZWahoWZLb6Fjpv
- TLSH T1E582B142ABFD9406F8F30FB86AB5C873AC7AFD412910C05E6568964D04B9F85CE20B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5a:8a:22:45:65:3c:b6:72:a9:91:49:99:08:92:d0:bf:17:23:3f:6a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
17550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/es/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aec9039b33d7d5c15c46cd50d416dda64fbc0c94702ea180f8ab2716104a913
- MD5 31fe109eb7acc3e5055e2c31899df910
- SHA1 c3fb74351fa8c2a358341be760fd2d70b945f3b4
- SHA512 c4fbbf40027f217eb7182b85ec051c397ddb5e4b7563027224d5d60660a2b10a4a3559712dd0ef21f0432ad79cafef393811a4778f2137803b19c7d70aadce6c
- SSDEEP 384:nMrwPwz32AFVzx1wl99Bld+MosGuZWeZ8W9Lb6FjXHUQRD:Co8hhzw9Tonu/Xb6FjXHUS
- TLSH T124B2E44157F85047F4F30BB86679D993ECBAFD8A2911C09E24AD428E00B5F48DEB2736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
22:d4:25:d5:15:0e:03:3b:e9:2c:d7:dc:6f:7b:35:3b:61:eb:1a:c0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
23134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/fr/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37900233a1f49c0ecb83be93b3c38f261e9318bd1dbaa673fdcb1257074ab749
- MD5 335dc82d727abdce114bcf090bcded1c
- SHA1 166dd08e4de4b1c238e8827c5fb30784b6dbfb19
- SHA512 6d5edf08abf56b19b3d45102759c278c073de9e9840dbe61354d28d14ef0ffb444b12afad859789d0f73a6c5d674eb94da86131054c483ad55db5b3d8df27549
- SSDEEP 1536:XxpNooFyAJWnPhC+V2McFkpHgTqmAIWkdp58f:XxFHWnPhC+VYOudp58f
- TLSH T1D8E387A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b0:8f:ff:77:78:72:b3:ad:6b:22:08:2a:7c:af:f0:6a:45:6a:83:5b:9f:d0:da:4a:1f:93:fa:00:ca:86:73:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
02:8e:6a:7b:51:bf:2c:3b:98:60:1d:47:5f:9a:1d:c9:fa:1e:d4:4b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/fr/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 44699cd41e8e1b46cb964e39ab80ca169b8c5411b0baa40f8fb7b1aa8003d810
- MD5 08aea77a547f418b126beb2cbe6e83f3
- SHA1 32034ed7fef24f0e8a8a26aa23363250893942d7
- SHA512 07ccd46de2db4ca92c1bc42399611f443f907c24b39c6c18c89bf1df4f0c6ef9775183d682511c4cd77782c0ba93396a1a9f5a7becbec5f5af86c3c16ddcd298
- SSDEEP 6144:jGG2HvMaOYCZWj2tx+yxgc3shLbl9txmyawSan2q/8EvW+P7dOok6YDX2fWyJQtK:n2HvcZ9Hr2F+E
- TLSH T117457C6025D52F12D2B5073B9A35B9BEFE7689A7431E50A8FA8C33077F79E420563360
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
78:38:5c:93:c6:11:0b:b6:87:b4:7e:73:34:49:eb:e0:b7:ff:cb:7d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1256030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/fr/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5da1976a56e09780e70648f8f63ce7d1434dd16d72c851629e54f494858d7de
- MD5 30ab6ae3dfae390bd6247451f6697a82
- SHA1 57be38d8f1be04babd8cf0fb3c97cd2a04c004b2
- SHA512 42e16091e94169c7bdab32c8a45c75f755d5e6c2c6613e8f011d9cb3aaefc312e8ff50bdeae18353c45741940fb178ca83731cefe1a17bd55413a2dc42196f73
- SSDEEP 768:WcUwcIxJyoBvdyxHlnXbLYtNvVZIYNJDVYzmMgVdQDac67/oIEEX4EUnSz9dJEwB:WcUwrgxznmMgHQDac67/oIEEX4EUnM9V
- TLSH T1B9E28145BBFC2209F1F31F75BB3AE9429C7EBE892912D41D1859614D04B5F88CAA0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
16:a5:46:41:18:46:38:11:af:73:e8:5f:a1:e8:79:9b:62:0d:6f:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
32158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/fr/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 235ed6d18adfdabc7ca5f1ef625f483fe0f7f6737e168a9d6a6b76840a2457ba
- MD5 d20dbf784a37189b75bd05d8e7625790
- SHA1 eea40ccb14ee8df15169c21b8044a16b686fc377
- SHA512 d2574857638b303b8ab414649ff69dc6409bbfc7f016ab0f5c96f0f7700b79f618bb1f92c2aa7a5b6ffcec626bb26247776b6577fb4055df3793565e39e7c1e7
- SSDEEP 384:RCs1stIi2IA9J97wUuQ21p2YG5/ca2yy5Bul15XM3a5dWbOoW+Lb6Fjpvfe:+2iBA9JddKp2YG5/caby5Ul15XM3a5X
- TLSH T17382C446A7FDA202FAB30FB5BA72CA239C3BFA513921C01C5A54610D1972BD5CB12773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
fe:b3:cd:8c:be:9b:a5:fb:96:81:4d:30:28:0c:a7:7c:6f:a6:36:32
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
18078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/fr/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e450ff5f4ac3ddbb1148555fa057982ad4b9c168d7247132bd7c50b98c5a013
- MD5 4a1bdcb903cd29e12f2b50ee6779ea19
- SHA1 5073292a2a97d4ca3f0cba4f826175c8f63178c8
- SHA512 a021667fe2db0654e6cb1d4ae01b4b792f960aefafda7816052a89ad92e07d4cf3080fd2fee31534999fa6a21df14830e28ef6ee16ab95973bee68786b43b8df
- SSDEEP 384:OMK0zz39dQzNuc1MG52bcoYMi+iXUciEfB52fNbU1wl7+Gibl2GMly7kT9S14IcK:Bzz39uzNR1MGIbjYMZ4XiEfBIfJuwqbt
- TLSH T14BB2D68E97F85046F5F30B757A37E613AC3BFE461921C20D0569918D00B2BE8DBA2772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
98:9f:0c:7b:84:55:fe:75:3f:7d:62:38:41:e3:1d:7b:d9:b6:a1:09
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
23566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/it/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a06d7b32cd9df7c6c8bde43bf36198488de046393e63421a04dfb530dab5d151
- MD5 8eb108cb899f91a7719e57251fa20b0e
- SHA1 1daf818a148c215cdf20a4d884573bd30cc7fc6a
- SHA512 77cc8aa6367a9720e3b527f32f06abff0fcce78275a63a96ba3ac2b11f595c403898a05656cffc14eae585d6701d7a395bfa6db8a8c643bcb69269d6b727cf07
- SSDEEP 1536:fh1MtooFyAJWnPhC+V2McFkpHgTqmADutfRdPE:fOFHWnPhC+VYOwRdPE
- TLSH T181E387A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
98:74:f8:67:2f:22:94:35:68:91:c7:e4:28:f6:fc:6c:e5:24:ba:52:f9:2f:cf:77:f3:2a:63:aa:d6:13:f5:91
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
82:69:82:55:a6:61:d1:dc:20:87:5d:42:95:d0:c5:1c:6a:c9:ac:d4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/it/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5f29cf5ceba2efdfd683337ab00d601e0fea076075b4d86703e8de389f02abb3
- MD5 197e2fb3e0d732a92774456984977a8d
- SHA1 a4433ea98bd9b12cf07acbcbd88a71b55f4caa04
- SHA512 f3d46b7567e8e0d9054cf473b891debd04bf7e04f1c7342d42db451918d55cba13ee1c6dcdb8dcda89deba3d4f03e9e32657ee615a1e381afafcb746a01c1416
- SSDEEP 6144:lJsx+lW5aLMMgXe4kOoxcF++AmOnGe7qoSDGswfUg4Qhm9ujrzaT+IrI5iNCdTst:3sx+lW5aLmm4zIiOZzlnlyf
- TLSH T14A457BA125D52F12D2B5073B9A35B9ADFE66C9A7431E10A8FA8C33077F79E430563360
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c4:e6:70:19:f7:44:ef:a7:35:09:4a:36:a7:42:60:ca:7c:85:20:f2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1248878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/it/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d0763d82aa18a0168da0787334ccece35548fa307e05fa36dba663275f3bb349
- MD5 53d1e598ecab25e52177f20d3e7c50e0
- SHA1 dcfaf00c8d5764f4107d214397f32ace029d031c
- SHA512 c9111a21aec8f4b77af433c92633b3b2ecd6e95669db795e48115fbcae5a710927daaf42c2be7f1a2e61b95911307f5c3a4ebf4846936ecd8ff0fb8d3d9e1b8a
- SSDEEP 768:YIxJyP2gxnUNMkmUC4QbiKeYhI7S+NuX8Tm2RZaZb6FjXHUAUA:HgR+N9TmeZad6FrHUAUA
- TLSH T180E26015BBFC6609F4F31F78AA3AE4459C3EBED91D12E52C2459610D10B5F448EA0B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
1e:f6:6e:fe:ee:ab:1e:f4:a0:fe:7b:f4:87:86:f4:df:6a:14:0b:e4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
31342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/it/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d2225e936f37663d14dd99d764233b319a66747a535c05823caa36ddf79b1f5
- MD5 21805649ea4e150617b7134fd9f60525
- SHA1 0315e481c2be6ce466deb44d5e2904be92550d75
- SHA512 edceea631b88ae3b5445db8d2663e7f4d6bb1755a6be5a7d96f6918fa34bb02a66b2eeff44efa176f65c27968d0a040a7cd4ec78af3681e66a06b1c2039518fc
- SSDEEP 384:PEGygwbgSCYLzRoUjxA3/z/dWDboWLLb6FjpvbD:2TZCYLW4xA3/z/SFb6Fjpv
- TLSH T1EF82C85227FC8005FCB30BB86A75EA616C3BFEA62922E01D5015630D067AFE1DE5573B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ad:33:22:4c:de:f6:46:3b:1b:c7:58:46:4b:5b:df:56:aa:f5:c4:03
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
17566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/it/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c84943c57f8910c2ae0c2956ebc9759e38f9cdb04ec7b855b2c1879ce494745
- MD5 4a5c4e06501a313e720dac85436452d0
- SHA1 8d89b1e2d2b663ca8905df28e4ecad5ca01adb63
- SHA512 8ee52d0b305a5204b3981025ef683c776b38f06188b2f383b0b66840a8e8b5a56a86ab2937d619ecc5dfc70fb161b2fcfc6a65aa8491fe04d2a8b191f7bb01dd
- SSDEEP 384:4MWdcr2phg6HvjXldWe6SDnMC1wwGNn6aUljLNa3XJovf7nvrWf4jWxLb6FjXHUD:WWre/pMQwJn6/lj0XJEzTgb6FjXHUD
- TLSH T100B2B32537E85004FAF30BB4A679B542ED3FFD87BD21E11D1099A14E00B2B90EDA573A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
10:be:22:c0:7e:9a:ae:57:bb:d0:c8:16:6d:24:f8:f6:69:c4:23:cd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
23086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ja/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a3ff4a296f74634ac8295e97b673b9860ff9a4d77e0834d16fb3ca52850e93d
- MD5 f64f50c9172b7843771a32c089138384
- SHA1 c078557db404b3ac3c4b10704c3ace48eac928e6
- SHA512 4128022843e11678ce2329a482033ed17377976b5e19f988da4635d53fe19dc15150a3b560d3b0b5c523ff10e420649b535f38199be77175b4d4bcd5ddcb5fae
- SSDEEP 1536:J21FbooFyAJWnPhC+V2McFkpHgTqmAptkVyCIAPA:JmFHWnPhC+VYOIV7PA
- TLSH T17FF386A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:a0:a3:fa:00:f0:3d:0c:c8:53:0e:7a:5e:b4:d2:8e:6f:d5:80:c9:3f:20:5c:14:60:6c:fa:cf:5b:4e:90:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
69:9d:13:36:64:df:85:24:39:f1:98:6c:29:cc:1d:d4:1d:2a:4d:65
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ja/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9353bdd8fba8a25871845411037ec00753702b0c1ce05638ea6c2c5a69254af0
- MD5 3a46ac2412b5f372ae30e70ae979d99c
- SHA1 fa0f3c8b60ab030ba4784e418825c28c86c51e48
- SHA512 4d464a4eced5b9804ba5d62eecf60974e372ff0b58ae9db24b8a3d98275bbefee54236faeafdd95ec7aa4b5aed08151d43693f0849ff93bef6ac8e783b3e92b1
- SSDEEP 6144:vL1SdZHww0HSSQUdNVrPOvftUQdoH/SazGX9dyagxHgCZf8u/WtUPqp4bajjZ1oW:zMHww0HFQVKPbg5
- TLSH T1B24579A425D51F12D2B5073B9D29B9ADFE668DA7831A10B8FA8C73077F39E424463370
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
be:64:2c:d4:42:c0:00:a5:cc:31:59:5f:ea:ac:8e:2d:bc:df:c1:8f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1272846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ja/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d97f6cf3bca59c1374027058f173a695f64c8fe74562b1d5d240a2f4667a0d0e
- MD5 1bcf766ed70123c1177b03996b4f4758
- SHA1 35487f70a7c9c06e5853e439fbf50bfaf16d568e
- SHA512 a95a74ac9bd90966d9f4867407b41dd3a3b0fae72a8eab08f9195e02857b53e7c9a62ccd9fabf25d6bd4f643f15a9f9681b2ce849b1bd284fcf2a2fe64d3a77e
- SSDEEP 768:2IxJyRKVHLm66qPnQYRUozAXY3qk0GIgXSMb6Fjpvf5:dgSLMkSo6F5x
- TLSH T1FBF24E5DA7FC5519F5F31F356A39A881AC3ABD8ADD12E52E102ED01D1831F8CC960B36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
63:0a:51:91:b1:9e:ac:9c:33:20:12:ef:8e:46:c6:e6:f8:bd:fa:fd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
33838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ja/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0da3662c2ad5b0144d0f9abb2b86fdbda00df1ae7d6502b413aa40ee86936f69
- MD5 f685dd6f80bd94d6c813e988df6854aa
- SHA1 143e93a38f26000151a0cd61ed6dbf7ac41a153d
- SHA512 37447d8fbbae66087d8a2743f8fc2b806422a703ce22d7934e1aea3c1cd1d1c3da28ed55837da03b4ae2eac6f9fd6652621752b09569a31418c7375a073e798f
- SSDEEP 192:Zerdb2/tFrnG6QhSAqPjCDr5mxuhxWWUroWAQKPnEtm3EFxJhjeyveC/5FgJ:ZehwX7k3rWWUroWALb6FjpvGJ
- TLSH T16992864D93FE8409FD730BB2297DD9A1A93AFE56E821E03E512DD0591831BCCD920776
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
df:45:5f:9c:3b:48:bb:b9:e0:7b:e4:3c:bc:9d:eb:81:d2:a4:8b:02
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
18958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ja/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e86467ec24dcf3662dd419703991ad75e9c9ec0c395a22f3badd41ac4748f23
- MD5 09ed72cce10a765cc04f15adbd82c0af
- SHA1 e6cac7021d57dbc0506215858c9ce83a670f9aaf
- SHA512 72c62a576ca7af69a1153433d9c37cf4c5db4f9b861a0c120fd612b2132941df9947c80c8eac6a020b5d04f243e6ec80a21415bc00494240cdc47d6034cd8462
- SSDEEP 384:FMbFG8S3eea1wriRm+QdKbQ6daWoo8WNLb6FjXHUT5u:MG8YowrvOZrb6FjXHUlu
- TLSH T167B2514DA7E98419FCB32B35297EA591E83ABD57D832D13E202ED0590C70BCCC960B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
48:75:92:61:ef:74:06:d3:ba:79:05:db:33:b4:32:ef:af:5f:f0:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
24974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ko/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2ea19bb5d9285c40533308818e46b53abb3d06d1f1f2cdbfc1d6a1244317bb73
- MD5 f9f32b551260683f68f9b3b0b72bf637
- SHA1 eb4ce1d114df2517204d56bd3dfb027a19a9ab6b
- SHA512 102b0ac8ccb3e7ee3965947f4c33eceac1d0e1f2ad70e1c4df022528e3b25316166e27cff315457b06e875c5245b26d5cb8f6c55ce2e7d6e17a3de2e22b931c0
- SSDEEP 1536:vGamBooFyAJWnPhC+V2McFkpHgTqmAoEWZxY7o6J:vudFHWnPhC+VYO+Zx49
- TLSH T1E1E386A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2d:31:9a:19:3e:af:ee:1f:81:1f:21:db:57:f7:c9:7c:89:d7:51:37:99:da:2e:99:06:59:f7:81:2e:30:52:a9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
a6:f7:be:16:d8:1f:1c:f9:31:c4:7b:f0:ef:ef:27:c1:c4:e3:2b:30
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ko/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 89a98a601b68762df9949f5840fc10c8a4d18248f42c7c3dc046e02dd6c09dcc
- MD5 26bb4e6e385798fdaecefff5bc1ef011
- SHA1 a0bd0b7b59929b843b01a99121eca102caf3e2c8
- SHA512 ebf9dc1442f10a54bfc01a25b4e9b219d9e5757965bb419d4f02a23c62aa928d01450597769e150a439aa35eef8424bd4817b6b978ce8a7effce147a9e38bf2b
- SSDEEP 6144:QeC0x+GdrcTGlNrwBGkdnvA8ghQ8kQ6hWZsy39q7Tk6acm9jgdiy8UtTQbYe5zH5:nC0x+GLgWznhclRE
- TLSH T1864589A025D51F12D2B5073B9A39B9ADFE6689A7431B00A8FE8C77077F79E430563360
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
1c:ec:82:8c:a3:17:2c:db:7b:42:08:e9:5f:33:35:47:5c:ab:23:1f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1253822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ko/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d75ed202d67f82e69c58afc30dcf4acfc11761c26bdc2e939b70ff6b9b40dcd2
- MD5 72b3c22dfd5fb3373a35eae4c8566d87
- SHA1 daf4bf5e23a7c86682bf9b5c9589846f7f91c91a
- SHA512 b93efb1426f23d75221ee20d99c70d6afcefb2acd90d3c14b64ea412192932bf3f29e24723879c1491bd9c4c0c94377e6622cae9a9a9952c7a29e21ce866f416
- SSDEEP 768:cIxJyCSAfn/lXUU/LUxXBo06nYHZhbMlVROvaap0YaOr7sfb6FjpvX6G:rgenVUWGV7sj6F5XT
- TLSH T176E2608277FD664CF5F31F35AA79E4414E7ABE9A6F12C02C2814980D1875E448EB0B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b4:ee:52:7b:85:02:bb:0e:da:1e:7e:a4:e9:12:83:da:68:19:81:e1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
32094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ko/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f900bfdfdf91de1cbdd57c6ca84ae54b865f4868ec16d1234f6853e317e7418
- MD5 26a64ddf2f4ba6fe153f2b46d8a05740
- SHA1 ab9efaa15d4ad94024f2606521e7cf9e6d0198cf
- SHA512 51f036f0524b129c725b1076a0752b4ac9da35634a9951b8c44ac8df92b17879704dff71c68d6bbca83b5b7f3111996d42dce02a0ddf0558ad66bb079c47d609
- SSDEEP 384:4z7qUw26Mhms3gq/9WK6WlUoWUTLb6FjXHU:66xFbKScb6FjXHU
- TLSH T17D82C48313FE5588FDB34F756A74E82219BAFE661B53C02C91146E5D0836B918E21F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
98:a5:15:ee:7e:80:81:e4:65:95:32:8e:5c:65:76:de:e2:02:25:19
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
17854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ko/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0d90f73d099d2ae022b80319a09215cf3944c2875d30ecf42412f3412cdcbe93
- MD5 495bb2bab5df30048fac50f756ae0b45
- SHA1 3f3819226d98f5c0ff1b8631f72758b3da686472
- SHA512 083daf95caf9875b6382fc502c2d492fe4b2d4341f7bcca9ccf98cfa2b97a7eeaf33b944d0ed587059c78689efd1e03efae5ee3bef3a95242dae5d5a7d48444c
- SSDEEP 384:/IM+w64dsARuasBjz1weRIx/zayShWZn8W2Lb6FjXHUa0:/G425wNzaN8Ub6FjXHUb
- TLSH T1F0B2A7C223FA0649F9B71F703AB5B5624ABBFD6B9F53C00CA5158D480875B81CE50BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
10:c0:28:78:b9:01:64:6c:df:59:7b:a5:d3:36:da:6d:66:00:73:59
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
23598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/pt/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 94faa7c1d0d27860a103da5c096218392d63bd474543c3fe7f2a435079206cd0
- MD5 4f39c8e01652d75d5090e53c98ec7a66
- SHA1 43a276fe55a85539466e131d8b639ae5c24e2f72
- SHA512 31f77e5696529c206bce6753e6aade0bf2490c62e8209db51dedd64d71a58d6ea049954abf0d35fae023599ed300740febd4e130e65242bd30c30906ada63262
- SSDEEP 1536:hgulzooFyAJWnPhC+V2McFkpHgTqmAjpn6IWra:hgQFHWnPhC+VYOx6IWra
- TLSH T1F7E387A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C4DF334321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3d:2d:9e:6a:7c:27:74:53:fa:34:bf:35:c5:85:a8:2c:2a:b4:3f:c2:12:fa:b9:66:ae:46:9a:88:a7:ec:74:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
54:a4:1d:53:ac:4d:43:eb:a6:3f:bb:c2:85:72:36:9c:1c:23:07:d6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/pt/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e6ebd0e30cca93ed0273dec92b17ffc9f9f8f5c63750b9cdd2722031eb8d5b6
- MD5 1aeb5673204ad9c97e1fae92629b26f4
- SHA1 1c8a487056e071973ebbfe6aca13db5942be19aa
- SHA512 3cbc174a3b84fa22fb5a00e94ee625466d7f6bee5cb4d525ae5b252a8d80a0225d81c8742a5b84a0a82eb35eefa1a985bb778f7ce7e84ada1623e0028087eb36
- SSDEEP 6144:FOsT1xkvnxnZI5XagwztH1Na8qTLUV515JtTqR3axAw5Dx+40WnoelTxdEjPqT2B:xI7Ra
- TLSH T1D6458B6025D51F12D2B5073B9E39B9BEFE6689A7431E50A8FA8C33077F79E420563360
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
e6:f1:04:d1:94:68:30:20:3b:cc:67:ff:64:37:8c:ec:08:3d:1d:0c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1245502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/pt/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 280a0bcaa306e3ae5c04208f7bc1eda57747f5907f51e79e936838c9d9fcd4bd
- MD5 9ccf65745e820446e2fa7453a3da0ee7
- SHA1 ed5d2bcf8886d990227c7bfc4ff7ba5bdd1b99a6
- SHA512 9725852cea12b6db3a2fe971be544ef8f0b01a0fbd2a7f63b2f760b089c0dbfeb0d8f05e5626dfd8d2305bbcf2758d96009def06632860308de55c0221189353
- SSDEEP 768:B8GqODs097TzXRjjqghloY3x66uwSTR30peYb6FjpvL92:WPBwSdEM86F5h2
- TLSH T1CCE25E05BBFC2608F5F31F74AA3AD9529C7EBE991D11D46D2426510E10B9F84CEA0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:8f:1f:65:62:b1:36:08:65:3d:55:3e:10:ae:b9:ce:c7:20:4b:ba
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
31438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/pt/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f5378eaee719f7d87cc28804757fd030db3d378eafb35deb22b7842b5cb4d88
- MD5 8e9c794128506f5a859320362feddc02
- SHA1 fa3e9f54c903330dfd398fe97a13dca00076cfa0
- SHA512 73f545fee1387994c431cb9c211a14ba793a7f525a387edfe2076c535b83803f9ff521bfaa8be020bd5989c07be861b0d949e8e6fc4442d1b845e91ccd21e04c
- SSDEEP 384:uvJzw5wa1ZpJPlNFWdFloWDLb6Fjpvke:izwb1Vklpb6Fjpvk
- TLSH T1BA82C20667FD500AFAB34BB1BA35ED23A93AFE216D11C05E6155660A00BAFD0CE50B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
00:83:9a:f7:af:9f:9a:34:bc:18:91:37:f3:2e:c3:83:1e:44:f3:02
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
17598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/pt/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fed2e526885beb71e854f474a2e9c2101ddab38897b1a2765e0e7b5730307623
- MD5 540aea1bc88df55387e602c5a853e4cc
- SHA1 bf148e1539e8ca6ee9c4401fa8cb514a8d2f06a0
- SHA512 1fa9fa75c929bca75e4f8f9ebb4f6a379a006deabbf467cb9f3c2508a90b38a09fc4af7e0624b03a38fba743d6b84b2ab56677c289e006e737fa820c2b68bd17
- SSDEEP 384:HM9KCOm50G1wRELjnbFtWBFi8WLTLb6FjXHUkrp:2zI8wwjnZQidnb6FjXHUGp
- TLSH T1D3B2E71927F8000AFAB30BB07639E993AD7AFD562E22C11F555A564E00F5F80CEA1777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0a:1a:9e:c3:93:46:48:0b:78:cc:fc:1b:56:79:39:fd:be:51:c8:2a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
22814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8a0bf5f48c468cc5f1973e278ae9689ecfcfccdfe96c36c9efd2c9d6b1bff59
- MD5 415528ff8e4b3a0ad1bef3fa74183074
- SHA1 428a90747734d62b64994b67b6c1c4486e899f41
- SHA512 c8b14570b229b5a781b53e506b5b56890ee3aac8ef8f093c1d09c38358dca052aeefb99c1a86dcacd78f59473c74ce9bbcbf594caaedb7a33d60bc4c179b64de
- SSDEEP 1536:0e09ooFyAJWnPhC+V2McFkpHgTqmAKJZrENbp2o:0/FHWnPhC+VYOdNbp2o
- TLSH T130F387A0F199A489F81754F20D7A9560159B6FA8E47C972E2086732C0DF339321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:5d:36:2e:26:ba:af:be:41:33:30:aa:cc:25:56:67:2f:1f:62:13:44:ac:d8:1f:fc:8e:80:a1:11:38:fc:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
a7:fa:91:62:b5:28:c3:71:dd:07:f7:9d:b9:66:07:9b:d5:2b:55:4e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3c3ce0405e889f3ed0555b7c2a16f347a58e1013283d3131af7faf5a1f27b553
- MD5 a16763761c250ea61f3faf11495e7d47
- SHA1 ee4dd489e2cd163a41ff20d4350dff3fa858d448
- SHA512 83d75cc1f18c1520afeb0aea7f5abc9f3c2eb02c38a479c8d4e17518368fc27f876e635d1cc192961956e78f30b314908711c88a49f7dcce3fdee11d494e7f46
- SSDEEP 12288:2C2hNbKWwICrHE2uWs5I99k+dDMAGcLyKEmi8NPl3wd7i:zmi
- TLSH T1BD55CCA025D52F12D2B5163B9D29B96DFE7689FB431E01A8FA8C370B7F7AD420563310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4e:ff:4d:23:af:10:e8:26:6d:a0:00:32:3c:43:76:79:cc:e6:9c:9f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1316702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Tasks.Sql.11.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 26bd54cdea64076a8d0218a2de4b4027cfb214b8e8ed2af07b666afdba06f98f
- MD5 4853a157fce27514d39aa95677473028
- SHA1 7b8586c63b4e18753314eeb13a82d9001b176f65
- SHA512 3534db81e55e8bb95484ee16beece6a5f85c9f59ba4d7df3b12ccaed1e88498984be3e2eaaa21811efec29286ec3d79ff186cc3063aae70476a362162a220d6b
- SSDEEP 384:97bsbOTVOOACEdG/VwAWxbnWB1ae00GftpBjIEDHRN7CX/kHlXN1pc:N2lddTCasi5DHvc
- TLSH T1CCB2FA518BFC9046E5A3AD316A64DD477C3ABBFE2E2193190054B9AD28D33D0D634729
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
88:0b:63:93:94:85:2d:1b:5a:23:ec:39:3b:03:f6:66:6d:22:09:0f:09:e7:24:47:f8:7d:11:36:b4:77:5d:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
24:46:40:2f:e3:f2:12:cf:a1:2c:0c:74:d6:cf:13:cf:68:0f:71:fe
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:34:12:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 14, 2012 - Aug 14, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:dd:6d:00:00:00:00:00:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
15246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/Microsoft.Data.Tools.Schema.Utilities.Sql.11.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5e6872049b828b1a350bcf9fd5f044b8ece7b04c7b9d5459759166bfa11cd43e
- MD5 c758fb67adf62e3167aacb2b2317669b
- SHA1 2eac23db4791707d89af387349963976880800c5
- SHA512 c3495b8af768aa9d2672d3dfe9d5949de6940fd4999c264e9eab1f67f683a0e83edd2c057b239e06590b4e45df3fe5816bd9992a25e9140dadf0dfffb620c1f3
- SSDEEP 768:BV0VwQGDscFT3NhWuK5EVc3qiGuhYz1Dzg13EMrGaw1fEMJkgWi7D4D5tHP:30VIgUNAWMrPoJkjssD5l
- TLSH T13A53625167FD2059F1B36B36A938ED056C7E7DFE3F16D22D1424282E24F2A10CA6473A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
91:2b:d9:63:28:38:ca:5f:0a:43:fd:c7:ad:7b:74:28:b2:9d:2e:c3:17:6d:65:13:04:a0:ca:7c:75:71:ca:1e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
50:04:59:2b:6d:04:64:10:de:e0:40:a9:94:77:cd:8a:e4:64:15:43
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:34:12:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 14, 2012 - Aug 14, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:c8:30:00:00:00:00:00:0d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
54414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49c2ef2b377048c54eeb5c065e81499b34cba34d3bd63dac542d492dfd084377
- MD5 13d385f45b444e98f88e666cf6dd8f21
- SHA1 3d3b0bf4da0fbe16273866b3f398164e6de98824
- SHA512 5a4f3904404cdb09e769be7c8b469b79ec14dddea167d974d96ec10f46cfaee979e76bb453ef23a746f4968769f89070788a0144d07b752b5d0c91b173eb6f66
- SSDEEP 768:HIxJyzS1apqVjI1gB4rWOC61Y/hn/pu34t8oG+i3b6Fjpvc5:wg21n5jt8ohir6F5c5
- TLSH T1CB03205167FD245DF1F26B36EA38AD052CBA7DFE3F16D22D1414282E24F2910CA6473A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
32:b2:b7:ca:d9:df:c5:20:c9:de:61:e8:44:a2:21:4b:4f:31:60:95
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
37022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b4418f80f21de754fe8916055e9b27482e848f4474440f0f35cd7f3a29fcd477
- MD5 f32724a67e2943e58c0600c8e2e264bd
- SHA1 40ed0d0f4d2fc12301a5fe11c1570e41b64d399a
- SHA512 2e4fdeb75c343871998141205541f118399465f6be39d2c274357d4f2d293f0c2d35d4b6e0fdb9bad92e649184fc4ac859591cef5f5423223ea1d7c6b69b0676
- SSDEEP 384:zn4wGqy+6NBAb6JdCCOvWOuoWMLb6FjXHU:aqyZvOOOb6FjXHU
- TLSH T1CF92704117FD504EF57369B6ED34DD1A3C7AB9BE3F2AC20D0115292E24B2B90CA3472A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f2:01:1c:4e:d4:a6:43:78:a6:ea:85:61:ab:7d:70:4e:7a:3a:e6:0e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
19806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/ru/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8f1848d86e4e42cb705a32fd45a687a0665f280cb2d287dfecdeacde197c2e2
- MD5 3c441dccfcb8fc12d4c6706268218394
- SHA1 e983ce4f041c1199d3931cf7604a5c4ba71acc24
- SHA512 536baa84ac0e65c151f8dbc98517c9b442f4b0f20b63e24cff2046ea4700d1823b442520b98a176b3801ad7ba88eb60814134a091e40a58c114a7045e4dbc454
- SSDEEP 384:SkMv7A9+eCCk0eL1wxbflVQhMIniJVxbWAS8WRLb6Fjpvispnb:S6+eCCnexw/LY3b6FjpvRpb
- TLSH T16FD23F5113FD444DF6636A369924AE053CBBB9FE3F36D22D1455296F34F2260CA3832A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
44:90:5a:b8:03:fa:b8:31:46:76:78:5d:a5:e7:de:ea:41:0b:c2:1e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
28302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hans/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ec8ecafe67fd3ba8f258e5d08e913af38f5c185e930c64890cde67df07b0a44d
- MD5 a423d8ad57fb6e1d4132956e1afd3161
- SHA1 9156e07f04394a065fca36c8f61a7fd807de8bed
- SHA512 4423f2e62793c4d2330143d2c26fbec7403bea1df4eb0bf8e6254f20185a72a15bb694d36507d23c359f3fcacadb0258ee55076c3f2b772c5efa129f7baf2cd6
- SSDEEP 1536:m6ORpooFyAJWnPhC+V2McFkpHgTqmA8V6iEmWCOB:mnFHWnPhC+VYOHiEmW3
- TLSH T189E387A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C4DF334321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d6:ab:45:15:72:4f:c6:64:a5:cb:5e:40:1e:c1:1d:9d:28:37:ab:4f:37:d8:3c:1d:46:1b:b1:0a:87:bf:85:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
0d:87:58:c5:1d:a5:1c:d8:51:0f:51:d7:c4:40:83:15:29:92:cf:e1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:13:36:00:00:00:00:00:1a
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 24715d66bc5e1a24b30aef5fad5b3fb3e3361abb03558597eb0e69602336e396
- MD5 adf78c8208e35b381c40dea357b4bafa
- SHA1 92c53a909a011b469464bc9597ee32b9cb2ca2be
- SHA512 46f5517cfa9386bcfb7d67b349018c63747572e34a3232d9d7b2737d701988cb676df911b4b9232e8127818bec26d7460fe96485433f58663cecd21e3b134072
- SSDEEP 6144:AniZx1Ev1ftLDqPq2sFmsm2O2fw7gbRLeHdb1YtcAd0kfT+KCKlY4blTrC6h499q:4iZXgHu5F7Y
- TLSH T178457BA025D52F12D2B5073B9A35B9BEFE6689A7431E10A8FA8C73077F79E430563350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
43:3b:46:f9:4d:e3:4d:a9:0d:8c:9d:49:d6:af:d9:f1:3b:c3:91:2c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1220510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hans/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69e44b4ce198e7bef0d9771157147ba60946d440298c82069e3caf53bd90869c
- MD5 c08fd1ad777a2fc559e0187e1ab440a7
- SHA1 67c0c8e889731d8f3b330a2a845e02903c5c83f0
- SHA512 a994fb3dfbd6f1c96788fa64baaec30cc8060689dbc9dc18bf0bd1bd14896bfc05509c4c5ce83ff3e943b6c01c421c7acf8dc8626fe196f4d72ee3b554af6ba0
- SSDEEP 768:NIxJywiSuEz39OUbC5bowjaYy0BCAIgA79gP1Igb6FjXHUk:ugfEAA79i1I06FrHUk
- TLSH T147D28142BBFC665DF1F31F35AB3AE852AC3EBE9A1D02D42C2415A54D0475E44CAA0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f7:c3:35:a4:c9:5d:da:06:ff:be:4c:87:ed:d7:f2:ad:b1:03:f2:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
29582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hans/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3bc1cf6470f371d1596896cf6cbe4a023424cbab86c8340c08fcf600fbe7ee7
- MD5 db454f82a5e26749f15923ff9fae09bc
- SHA1 92c70a994f222e8978af856d8a2e02ad5a2e3f91
- SHA512 3238e9072aa252ac6dc6837208766a5a2d7a92ac703438dcf9a4b4e43e1476067f858b79fd9242c43285f8af35e07fc4dfc2680d8b374a92187243b118d5671d
- SSDEEP 192:QeD4gOa2/GFNuu27stIosUhdLN+uxNW1toWwKQKPnEtm3EFxJhjeyveC/FE:QYHwiglUhZNXNW1toWwKLb6Fjpvs
- TLSH T11B72D68167FD8849F9B30BB8AB39D8326C3AFE661A11C06D1214744D0876BD1CF90B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
34:a8:fc:3c:29:6e:be:a6:80:f6:fb:ea:51:59:45:2d:2a:01:8c:de
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
16254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hans/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0eaee0c905811a0e7841fc3adb4c24e792a82df2875477b4d761b14bc12c4ed1
- MD5 5e7f2751e3666839576959a6dac488f0
- SHA1 9a70a9d877d2e25cae8fe367cc96e8332d49db83
- SHA512 53a0f61432c6be932b2dabdf8d9fcc5c1860769368a21767d09cfdbfb564030bffe452db6c9ae37c88507ac9cdaa89197a160cede4312befba13fe47f5e40cf2
- SSDEEP 384:dMec9dHRgMK421wL47nSCubOlF7WJV8W5Lb6FjXHUW4:tUtDswpOL4nb6FjXHU7
- TLSH T1DBA2C54617FC8589F5B30F756B79E522EC3AFE664A25D02D2159A18C0D32B90CEB0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d3:a0:b7:87:7d:9a:67:07:44:d6:f5:51:bd:e2:cb:47:6e:01:d9:ab
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
20974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hant/DacUnpack.Resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ce3d817e505741eb8c3fc49ff9220861967b31c7b9815f506d6e4c0946b85ce8
- MD5 9b45eb935ec37a3a549c6c9cb9b6ab67
- SHA1 e263728733b6e6fed132f022a9350667594779bc
- SHA512 e0daa655db2c6b379da7c98f1576ec59f8e79b179ae0ae3b93dda20831583a1a79ea1aa43a37bf313b52a82809f008eb6af764f1db5f7eb9036922761532a81d
- SSDEEP 1536:V0ktyooFyAJWnPhC+V2McFkpHgTqmASVKF85aF:VzcFHWnPhC+VYOBF8wF
- TLSH T138E386A0F199A489F81B54F20D7A9560159B6FA8E47C972E2086732C0DF335321BFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f7:f4:aa:98:2f:8a:19:21:99:7b:96:b0:aa:9e:bb:67:ca:1b:3c:a4:bf:55:a6:37:62:2c:22:a2:8e:64:d9:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
c8:2c:06:37:3c:aa:28:84:d0:ae:73:20:41:8e:e2:b3:2c:62:69:e8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 11, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:1a:f5:ea:00:00:00:00:00:6a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 1, 2011 - Feb 1, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:9E78-864B-039D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:19:96:00:00:00:00:00:1b
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2011 - Oct 25, 2012
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:15:08:27:00:00:00:00:00:0c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 25, 2006 - Jan 25, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:49:55:00:00:00:00:00:0b
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:936C-7AEE-74AE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:4e:aa:00:00:00:00:00:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 15, 2011 - Mar 15, 2013
Minor OS version
0
Major OS version
4
Entry point
147294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Schema.Sql.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6bba34da2e35483a00c97d48c646924eca3a8b4b6cbde847b846378ddf0e5c52
- MD5 3c2137b70dbbe7628ddb60e542714b18
- SHA1 1e8ddfc53d772dc707ae433745610fa2378f8100
- SHA512 49a9ecb152f08855808d24d94ea7e54a0eb3716dee6dc2fe75e6656d683ea91b92968734bbc372f00a8efdbfc5e6be754806b9b97d745b746ac63db67458080e
- SSDEEP 6144:TI/N/0qRwCt4qzO3UrZyQhfiMXqIDqgQS487O6hAMRla19TGJ+F1NuRvTDxxPYAr:0/Lvbu8vWat
- TLSH T192456AA025D52F12D2B5073B9A35B9BEFE6699A7431E10A8FA8C33077F79E430563350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
83:de:5b:ab:ca:23:b5:9e:30:05:67:20:0f:f2:59:f9:3e:75:9c:50
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
1223182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hant/Microsoft.Data.Tools.Utilities.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 78a34f5c3644894c5d99e8c37d769252105f08c5522c20aba33c259d42373430
- MD5 8ddb03bc77e767df5a18f3c42cb72409
- SHA1 1b2d1a65f8c5f4462cc1ca98b7d091642b513dfa
- SHA512 286883ababc9dcd7a4c1e03aa6429ddf9aa2564d763d41ac1cc7f395781fa869a68981b878b09f8634937be5fb2f41a1499ac0dac99335371004a3f80bbbcc0e
- SSDEEP 768:5IxJy7H8Rpf4yKR23hDUk5h4uYK8PPl7XyaMBkb6Fjpv3:ag2437XyaMBw6F53
- TLSH T18BD25E45BBFE2A19F1F32F34AB7AA4418C7EBE992D12E42D2415A04D1475F448EB0B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
8b:8b:6d:19:b7:3d:9c:77:67:86:ea:ae:47:3c:a2:e8:2f:a8:0d:02
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
29854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hant/Microsoft.SqlServer.Dac.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5e4e0f7d05602e3b387d4ce63d05505f03e7ab9df0eb22be9c9c36e63f0b654
- MD5 1380d31a38e427c150e727cfb28cf792
- SHA1 a2ab5709fc85ad787043684bce0d9779d5f05013
- SHA512 3bfdd5d93dbe7b921c04ec3b969d9672035f89b8e00136c0b6f2b524363494626edac2e326cd9633851bbf2e84f082aa3840d50df7cd4a572073efbba8d49abc
- SSDEEP 384:W4NvQfOw7OQGssleYWeqoW2Lb6Fjpvkt:XveBTYleHEb6FjpvM
- TLSH T16972C5422BFF4809F8B32FB46B75D9611C7BFE562921E06F0159798A0872B91CE60337
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d1:86:96:04:f1:11:53:c2:ed:49:ac:41:10:35:0b:eb:e3:cd:d2:7b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
16622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/DAC/bin/zh-Hant/SqlPackage.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17986b87648aa39be2f8aa72e6e5c9ab5c5a8ed64721935828c8dae756532802
- MD5 5c86fde3a87a62f04b51a247d5f2bb9c
- SHA1 80216bfd6f94d6255afc28a79fdb5c06a93df801
- SHA512 e6ac65088f19268ceb240d2b837163232ffd86b76a1696b086dd3b52789acdc8b1bc8b23022a58f00a35877f0bfb8fd5da4925c3a7bfceae4ea9670af5e74051
- SSDEEP 384:+MAeVE5Lv/iY1wdd2qA021vWTWu08WXLb6Fjpvcnlz:PO5Lv/zwdP2+Ixb6Fjpvcn9
- TLSH T152A2C6816BFE9889F5B31F3867BA9516DC3FFD5A1D21E42D2018E10D0A72B90CE61727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
ca:7e:5a:84:fc:47:8f:ab:c1:b4:08:76:cb:98:8b:5c:f0:3e:97:92
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 16, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
4
Entry point
21006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Setup/LICENSE.txt
- SHA256 dbfa2004255f43828428a26b226e019dd6b08b93fb3d280789945b3f4a8efdf2
- MD5 85a5c1320f7e24ef7dcc9e81d2904e66
- SHA1 b28a63a5b009cc71e93f0ea4dc65caa3daa61f12
- SHA512 8378a69e995aa1419199b21460493e1fa95148504548d5a7976ee5c5b3048be734db470a9fc99cdd0e29f26b0e4c6610275d0d0ac2cd029c50372767ac9f4c29
- TLSH T1902183B6B0425BC3ABE01B003B811DD0B5AF505E3E636D1030FAD209777722CD1AE814
- MD5 SHA1 SHA512 TLSH
Setup/Léame.txt
- SHA256 4d2a46ad9f541d4cc2ec8c88a9b5b77de268931205ba472dae3be71c1c5d2f9a
- MD5 7de0065545100f4f789f39e60f9b5854
- SHA1 a5a573b878015c80342373054e828cc3d9ebd97f
- SHA512 ef574b38d1f168aa7e216d06ca40b66819af882d3d7448abaecf267e18a6e9bebc64b0f14eadde5384903929288ed07e2d3f2abd737aea2dbc2063c6e66d4931
- TLSH T194B01203845503C81ED050941D41C881A5C784C9150B8480096D2261D50484484561C7
- MD5 SHA1 SHA512 TLSH
Setup/Setup.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 40db7fae8b7a2196a8df464a9a59ac648530328ff501124611c720ad3ce48e82
- MD5 b33f631e1424294862d50c328b0405ed
- SHA1 fd8836a7f52abff5ebe5cb274ddd535d08b26a3b
- SHA512 ba14516d989fac8e219e47900da1a7702b8d6856947fbfaa9438b99c10cf3154ecacb86bb822d3d00785beafd2556c67a38742bd4725fd0c31a4a80a1d8d9199
- SSDEEP 49152:LzxJVazeQMdz670lPZe5PO5/dsaOUo0W8A1k:Lzr5Y0lPZe5PTarmdO
- TLSH T178899D177CA109E9C4AAA33248B752927B35FC490B3277D32E90B2783E767E19D39744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
96:aa:19:0d:af:ac:46:9a:90:24:7b:c0:14:2b:0b:ed:26:56:ee:50
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=eataly.com,O=6ygsFSj3KF8WG7G,L=qteHe,ST=ApCLELWx,C=US
Chains
Jul 2, 2026
CN=eataly.com,O=6ygsFSj3KF8WG7G,L=qteHe,ST=ApCLELWx,C=US
Subject
CN=eataly.com,O=6ygsFSj3KF8WG7G,L=qteHe,ST=ApCLELWx,C=US
Serial Number
03:14:63:80:05:1a:ff:50
Issuer
CN=eataly.com,O=6ygsFSj3KF8WG7G,L=qteHe,ST=ApCLELWx,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Jul 4, 2026 - Jul 4, 2027
Minor OS version
1
Major OS version
6
Entry point
473024
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
816KB
Virtual Size
815KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
54KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ