latest.zip
- SHA256 19b973dc9840eb085b625412174bbc674669f46e436e6b658e9e46e4eaaf0c89
Password
infectaded
Overview
overview
8Static
static
5latest.zip
windows10-2004-x64
1latest.zip
windows11-ltsc_2024-x64
1Content Manager.exe
windows10-2004-x64
7Content Manager.exe
windows11-ltsc_2024-x64
8acmanager.acsound.dll
windows10-2004-x64
3acmanager.acsound.dll
windows11-ltsc_2024-x64
3acmanager....ir.dll
windows10-2004-x64
3acmanager....ir.dll
windows11-ltsc_2024-x64
3acmanager....ls.dll
windows10-2004-x64
3acmanager....ls.dll
windows11-ltsc_2024-x64
3acmanager....pc.dll
windows10-2004-x64
3acmanager....pc.dll
windows11-ltsc_2024-x64
8acmanager....al.dll
windows10-2004-x64
3acmanager....al.dll
windows11-ltsc_2024-x64
3acmanager....ng.dll
windows10-2004-x64
3acmanager....ng.dll
windows11-ltsc_2024-x64
3acmanager.tools.dll
windows10-2004-x64
3acmanager.tools.dll
windows11-ltsc_2024-x64
3actools.ac...on.dll
windows10-2004-x64
3actools.ac...on.dll
windows11-ltsc_2024-x64
3actools.dll
windows10-2004-x64
3actools.dll
windows11-ltsc_2024-x64
3actools.ex...ls.dll
windows10-2004-x64
3actools.ex...ls.dll
windows11-ltsc_2024-x64
3actools.ge...ds.dll
windows10-2004-x64
3actools.ge...ds.dll
windows11-ltsc_2024-x64
8actools.kn5tools.dll
windows10-2004-x64
3actools.kn5tools.dll
windows11-ltsc_2024-x64
3actools.laptimes.dll
windows10-2004-x64
3actools.laptimes.dll
windows11-ltsc_2024-x64
8actools.ne...es.dll
windows10-2004-x64
3actools.ne...es.dll
windows11-ltsc_2024-x64
3Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
latest.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
latest.zip
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Content Manager.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
Content Manager.exe
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral5
Sample
acmanager.acsound.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
acmanager.acsound.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
acmanager.contentrepair.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
acmanager.contentrepair.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
acmanager.controls.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
acmanager.controls.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
acmanager.discordrpc.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
acmanager.discordrpc.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
12 signatures
150 seconds
Behavioral task
behavioral13
Sample
acmanager.internal.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
acmanager.internal.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
acmanager.largefilessharing.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
acmanager.largefilessharing.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
acmanager.tools.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
acmanager.tools.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
actools.acdencryption.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
actools.acdencryption.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
actools.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
actools.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
actools.extrakn5utils.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
actools.extrakn5utils.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
actools.genericmods.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
actools.genericmods.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
12 signatures
150 seconds
Behavioral task
behavioral27
Sample
actools.kn5tools.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
actools.kn5tools.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
actools.laptimes.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
actools.laptimes.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral31
Sample
actools.neuraltyres.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
actools.neuraltyres.dll
Resource
win11ltsc2024-20260706-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target latest.zip
- Size 7.8MB
- Sample260707-vs9hbaav2v
- SHA256 19b973dc9840eb085b625412174bbc674669f46e436e6b658e9e46e4eaaf0c89
- MD5 8a31f4e138cd96e76d0c0d74d3658e38
- SHA1 46468b9e73759a61f714d2d94572adec3e459e30
- SHA512 36abe662da6c6c308685a77dd54d4a6ec084d703147ce3ee41a027a519ce8778cd93c084b4864e4cdad61c92b12f92e078b1a61afdb1874eb06bf291c974f31a
- SSDEEP 196608:XdSSpo6UQLXSLWs83VqAynZOkU3L/jkmAz:Xd3ogpsgMRvavrAz
- TLSH T1408633179FAD674EF0A003B5397AA2BE724722E77E3D210CC91293A85991149C7F6C73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack002/acmanager.internal.dll ConfuserEx static1/unpack002/actools.kn5tools.dll ConfuserEx - Unsigned PE 40 IoCs
Checks for missing Authenticode signature.
resource unpack002/acmanager.acsound.dll unpack002/acmanager.contentrepair.dll unpack002/acmanager.controls.dll unpack002/acmanager.discordrpc.dll unpack002/acmanager.internal.dll unpack002/acmanager.largefilessharing.dll unpack002/acmanager.tools.dll unpack002/actools.acdencryption.dll unpack002/actools.dll unpack002/actools.extrakn5utils.dll unpack002/actools.genericmods.dll unpack002/actools.kn5tools.dll unpack002/actools.laptimes.dll unpack002/actools.neuraltyres.dll unpack002/actools.render.dll unpack002/actools.wheelangles.dll unpack002/costura.dll unpack002/firstfloor.modernui.dll unpack002/hardcodet.notifyicon.wpf.dll unpack002/hidlibrary.dll unpack002/htmlagilitypack.dll unpack002/icsharpcode.avalonedit.dll unpack002/k4os.compression.lz4.dll unpack002/licenseplates.dll unpack002/megaapiclient.dll unpack002/moonsharp.interpreter.dll unpack002/naudio.dll unpack002/nbidi.dll unpack002/newtonsoft.json.dll unpack002/oxyplot.dll unpack002/oxyplot.wpf.dll unpack002/sharpcompress.dll unpack002/smartthreadpool.dll unpack002/stringbasedfilter.dll unpack002/system.windows.interactivity.dll unpack002/timezoneconverter.dll unpack002/unosquare.labs.embedio.dll unpack002/xxhashsharp.dll unpack002/xzune.vlc.dll unpack002/xzune.vlc.wpf.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Content Manager.exe
File Explorer
-
latest.zip.zip 7.8MB
-
Content Manager.exe.exe 10.8MB
-
acmanager.acsound.dll.dll 13KB
-
acmanager.contentrepair.dll.dll 56KB
-
acmanager.controls.dll.dll 1.2MB
-
acmanager.discordrpc.dll.dll 29KB
-
acmanager.internal.dll.dll 156KB
-
acmanager.largefilessharing.dll.dll 81KB
-
acmanager.tools.dll.dll 2.6MB
-
actools.acdencryption.dll.dll 6KB
-
actools.dll.dll 536KB
-
actools.extrakn5utils.dll.dll 148KB
-
actools.genericmods.dll.dll 29KB
-
actools.kn5tools.dll.dll 181KB
-
actools.laptimes.dll.dll 18KB
-
actools.neuraltyres.dll.dll 36KB
-
actools.render.dll.dll 1.8MB
-
actools.wheelangles.dll.dll 49KB
-
costura.dll.dll 4KB
-
firstfloor.modernui.dll.dll 1.2MB
-
hardcodet.notifyicon.wpf.dll.dll 95KB
-
hidlibrary.dll.dll 40KB
-
htmlagilitypack.dll.dll 114KB
-
icsharpcode.avalonedit.dll.dll 592KB
-
k4os.compression.lz4.dll.dll 64KB
-
licenseplates.dll.dll 23KB
-
megaapiclient.dll.dll 90KB
-
microsoft.io.recyclablememorystream.dll.dll 37KB
-
moonsharp.interpreter.dll.dll 358KB
-
naudio.dll.dll 10KB
-
nbidi.dll.dll 312KB
-
newtonsoft.json.dll.dll 477KB
-
oxyplot.dll.dll 468KB
-
oxyplot.wpf.dll.dll 140KB
-
sharpcompress.dll.dll 521KB
-
smartthreadpool.dll.dll 65KB
-
stringbasedfilter.dll.dll 26KB
-
system.memory.dll.dll 138KB
-
system.runtime.compilerservices.unsafe.dll.dll 16KB
-
system.windows.interactivity.dll.dll 39KB
-
timezoneconverter.dll.dll 24KB
-
unosquare.labs.embedio.dll.dll 81KB
-
xxhashsharp.dll.dll 6KB
-
xzune.vlc.dll.dll 111KB
-
xzune.vlc.wpf.dll.dll 53KB
-
Manifest.json32B
Content Manager.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2367612db7c754bf4f07a0f71188c0cc7ed0e39bef12b7dc3f4af3d0b3ec5bd4
- MD5 60ed4bfbd48a0d1c161d123749ba6586
- SHA1 f21f2d4b038602ebf923fadcb4cbe07cd3b4979a
- SHA512 3e11841e4c1c65ec8d19ff125c515d4ba1f3afc61a92ae18aa8466ae50dbeba4b9ee179211ff3b7b47f31675f761e02bd6cc00fdb373d979b7d10c2d297540db
- SSDEEP 196608:frtCBAX8r+YmyLN1cLu481HQSMj2f/ZaZR97IB/Nv1:DtCBi8yY5b4+wS+8GLi51
- TLSH T199B6E04863FCC92CE4BF4FB1B97150514B797E4A5F82D39F1904786C2A723828BA6367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infectaded
PE Signature issue
Digest
8f:81:fb:9f:8b:f6:3c:82:d3:f3:89:0a:61:f8:e7:88:27:cb:e1:13:6c:eb:a6:58:19:5e:3b:a8:15:c1:a1:e8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=AcClub
Chains
Oct 17, 2023
CN=AcClub
Subject
CN=AcClub
Serial Number
25:b0:93:49:8c:5a:54:8d:49:b5:1b:2c:80:8c:ab:4f
Issuer
CN=AcClub
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 31, 2016 - Dec 30, 2039
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
11189870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Development\actools\AcManager\obj\x86\Release\Content Manager.pdb
mscoree
_CorExeMain
Name
.text
Size
10.7MB
Virtual Size
10.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.acsound.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a1ae2bc213bd35998885f914a95520830ca226c767305350a1cdc9e21420524
- MD5 87706599406900c42ef8a393160a3447
- SHA1 17585d2839cfc18e52fb82613dbfe5af829a424f
- SHA512 42c012cbf8399b3f2dbe72e89c55625ebf5ab2955204df25af350cd083d9bf51ae99d76e336b9465e5b025c02e3c524599a08ba659ee81757df66968a295caf6
- SSDEEP 192:wMjDqvJ8L3tNX8cro/79g0OkK+p8Lj/Nq1t21flEgMALXy5gIDtiMyMHW:Gqrt5MX8vSt2BlEBjstMHW
- TLSH T13B52E94EA3EC4336E97FABB6697212510F71FF22A422DF9D158C90495CA73440F22B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.AcSound\obj\x86\Release\AcManager.AcSound.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.contentrepair.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40b295b589042bcfe068a7de4916eca5c7bc23066d9f5d131b797aa87ade7a30
- MD5 62203dfe72bf31e422f3d6594edc4992
- SHA1 44b4e8fe36b6ea65873526c601aa05849e330fca
- SHA512 e87caa3c1c6ae71866518acb0b22872f74e78664153a04f86a880762a8ccc16637e5c463b591d8cf0c09e053e023697625e91e83cd986bf1c1f96720c215c90c
- SSDEEP 1536:8L970fJ0DB3W3S1R79FqSdLLUzf9yhsDb:8l60AOFqSdPUzWK
- TLSH T108434A0163FC4275E6FF7FB9AD7492554B74FC8AA432E70D5C5860EA09973428E20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.ContentRepair\obj\x86\Release\AcManager.ContentRepair.pdb
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f7d2b258bfcf7d53659786df2a901982ed85187a8126dffbbb04b3295f014471
- MD5 4f175f2dcf8e3905988d39d48dcfaa34
- SHA1 2c66858e278790b3461bead92f8033fd0f096785
- SHA512 54ede8c27b9f6de6ba7b8672d4d0ea34dbc5e58dedf73a90e5af1c2e18a2bb250948f4c1f6b708d3002ca80335684fc77dad6e37d76c46c106a25fcdeead10b1
- SSDEEP 24576:HSu81Xqh+tqzsFeqvXdqAGrbDvH/UHzLItJRp1CncTTQAxMg60XQ:yT1aoSkqAGrbDvH/UHzLItJRpjQAxMg7
- TLSH T143559D4463FC8A3CE5BF4FB934305924A73A790679A1C78E588D6D6E1CE37424E523A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1285706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.Controls\obj\x86\Release\AcManager.Controls.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.discordrpc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7554b0bfe77591432379d8dac816ec0b24618a50ff400ac4f0efa54691a803e0
- MD5 0286ecb652b2e63527553bc7e12086ec
- SHA1 e2f9cc72ec73505cbec83909a4f823374bd64c84
- SHA512 77d8aba0aeb2f8094ab9c23e2fe05ac2e994f57582e881733405fdb8049eb5916b3bf6dbdaab4e64ca5f3300b5f7a45dc679a84c5da806cbbee418af94555e26
- SSDEEP 768:zw4dWpRnzne2Yo+tuEoamWc7UHknUJZD+1/GP:XdcRzxYo+oEcF7a0Uyi
- TLSH T1D8D23B4C77EC8627FEBF5EBAA97052434775A72A7412F74E188C90DC5CA23808901B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.DiscordRpc\obj\x86\Release\AcManager.DiscordRpc.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df56b589ad01ab2c2dddbbf15ab649929744dc8d583cb9a48f76656e3411aaac
- MD5 a3b692f2a2e6f4566475cdb786877114
- SHA1 4b8081086584d8c266da5cce95fab7924fb8a5bc
- SHA512 92b1311e94fc2a417462490a0c8b1c87844f2b872e054823fdfce11f1757745142557fb59cbf32ce9f433d701126dfe2a0e8d9930623a7931993a6d9fe819f8f
- SSDEEP 3072:waAnNmeIB2MZsIZqP35FK1HSZSYaThWqZNa1F7ve9:jGmHZfEPuHSZSYaThWqZNa1A
- TLSH T1BAF3C29C3654B2DFC86BCD768E682C64AA60A477430BE243A45716ED8E0D9DBCF150F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
165678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.largefilessharing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9564b40d62505a9d4521698db10972fed1ecf1ff5a6b6e0e2e411776294d57b6
- MD5 e51cfda10eb431b630131dc51755265e
- SHA1 f1a7d615560c36eff15393233a51b287eb17e8ea
- SHA512 f90cd4191d3a294d9eeb936bbe8493b1d77c3938ef6b264853fd7d95d2f675aeff9434aca3e23f2cec5a1b394fe5d1d7ead7debbeb9fe5a8c2c8bab427bbed8b
- SSDEEP 1536:X4QcugzCRuhSoFs4dYREYW7FGk6fvuu8Uq4pY6+QErQ4Wnl1Ux:X42wrFhdYHesuuRq4pYZbx
- TLSH T133832B4573F84A13F6FF6BBDB9B452444A75F606AC1AEB8D184C95DC0CA27408CA2377
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.LargeFilesSharing\obj\x86\Release\AcManager.LargeFilesSharing.pdb
mscoree
_CorDllMain
Name
.text
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.tools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c72622d754f1881e0f851046935a2fd2c9e850b26cfed3b38bca0387628d10cf
- MD5 0a42515ee78b3846a229ac10cb77d0cd
- SHA1 abc8574b3fd6ece83bd90526937f2dbed76ebdf3
- SHA512 662541d4203dabd10a8a925f83bdeca9e0dcbbc09500c7c7f5efc989ac32e113a62588c0eff549778828bd53bfaec70e416d521dd2d7ad39459086d4e9ffb5c7
- SSDEEP 24576:Db0aC+zfThXNC6uMOn55jrTuJfyfn4FuNSKy0o+i48mDZYC0pbr/GBiIb5/6UoVG:Db0a7In55HTuGNcbr+N/6UQ3Ot
- TLSH T169C55811A3E88F3AE4BF6B79B47440351B75F8525B23E38E2A45A0FD2D72390AC55723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2743762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.Tools\obj\x86\Release\AcManager.Tools.pdb
mscoree
_CorDllMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.acdencryption.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b534ab585bb6227a715c70fe3f16ffbf5f66e3bd1c0723cea0e7bf4221cda36c
- MD5 67adb36b27cefeb03d20c81c0ab95099
- SHA1 c742931f520da674b28ea4bb4c24b616a6137f39
- SHA512 7fd6496ad7fac47f3cc78badec9d639d66305170a1c0b2a1344e6a8af2af3736d669120978eaf082bcafd7e1d7287ec0cd84a041ded81e77b48640b6f498aa9f
- SSDEEP 96:ONdUtlWX4mjb+WiT0mquwSdTQY7Z+c7hBhRlhpfWcp5NbFK:OHcihChhwSyY7kc7hBhRlnucp5G
- TLSH T1BFD1A41167EC8771EEF70B32ECB6916157B0FF68DD23A76E0C4405066C2AB914972771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools-internal\AcTools.AcdEncryption\obj\x86\Release\AcTools.AcdEncryption.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d444c32fbd948057f061ee39a4b483323acb7feb30420edd554f878502e060d8
- MD5 e1510c5f691a7d42461bec1c3893dedc
- SHA1 4c6e81b6cbf53533071886a6f98c0fef14c6d0bf
- SHA512 6bedaf9d7a7ddf12fe2a4f41ff8e47c030b35fbfa7f5416595c56f51594e124d92133f3a80ae025b01874bb56efd8e7549247705b2eda29f7edacd170863a848
- SSDEEP 6144:5RR0gLJdrEehemjK9wcmbTP2byAHsequofmT4XTBYQ2MloZslD/CMqjTbZZcvr1/:50G7rJImXOhuvfkMloGFqsvR6IQ
- TLSH T1E6C47B15B3E81A2AC4EF8BB9E4A40D595370E329AB6FF71B6954B2F40DD33454C027A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
554226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools\obj\x86\Release\AcTools.pdb
mscoree
_CorDllMain
Name
.text
Size
533KB
Virtual Size
533KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.extrakn5utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a987475417b7d7e40ae7cf56d60975b39e5db117c7dbf0177229e79ffdb4bcac
- MD5 7bb00160f8d37ffc4d6ac97bf35953b7
- SHA1 1889d1ebbe29f28266939be1fc8ba4b03aca81dd
- SHA512 801d16e1fefb09de967a0afeb24a5e1287543eb1a1560c5d67ad0e4a48c5cd4330221eca090dd935bb3909f8a60dd56035d262e5492688550e5247b84ed5d4af
- SSDEEP 3072:j5wmuSJM+Y0QqojZxLq2xEwZDjkyU7DHQ+Tw0m3xjp4pW8Ao:jnucY0IjZxLq29nDUxbA
- TLSH T161E37D2977EC0A62C9DFABBAF4B0501403B0FA17D56BF74F894CA5F80952B815922377
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
156670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.ExtraKn5Utils\obj\x86\Release\AcTools.ExtraKn5Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
145KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.genericmods.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e3c236ed733641b46dec02176111fc69dd91675d7b62cd5cd4168a742df3ae3
- MD5 b10b83445b31ee63d16f186f2b54979c
- SHA1 0af77a13f91df71c21d50ec9c4985b759c84cd75
- SHA512 1f0878f16037b417880d9ba25db5ba5d1090081a4ba656755600b8b072a903695d65e2bf441633508e1bd180867c56db57ddf5ee83192e73bff26d5b66636273
- SSDEEP 384:vc5rsXBY2jEGpFQILHA3pgZYiEOrHKtV3KdDVkV4VlPu5kPFSytvtMHeCDCyjlmB:vc5oXBFjEAQFWOOrwVodibEEmRFC4a6
- TLSH T115D23A4237FC4372CAEE5F7A69B5A1910BB1FA67E903EB5C1D8C20D61C52B4006217B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.GenericMods\obj\x86\Release\AcTools.GenericMods.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.kn5tools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d9b05a94651823259994cd67e27d580667586b1c947c4c6c72c4597146060f2f
- MD5 44c3b0f4f45485adc8f01b00667ae705
- SHA1 aadaccc7d004039d5b69d36b06ef4fcc6da4e928
- SHA512 47866367fd9be883ae22b2d57ae0be64f121d463bdfbcbe1d0aef459647b32529ea5d45ce3380d18acfd087d523610d3a02dbeefb8da4f9ed50d18e7c3a75c26
- SSDEEP 3072:fuI4FA4bgdNct2kNP8yPGfFAEFJMJNozatoZYjPD5MLMk8/RyJ5h:fuI14cdN+240SGfCOJMJNozatoZYjPDa
- TLSH T197043D9D3654B5DFC867C9768AA82C64EB60B47B530BE203905716EDAE0D8DBCF140F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
191726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
179KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.laptimes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a29a9b1fecaf8e1be8a787927d7945b7e84c6acfe0019d5ca92dffd74aa6a4a2
- MD5 ef418d88be5ac5eefeebdcbe0df09772
- SHA1 e78299edd91bd352701f2a40d055581e416a8db8
- SHA512 c4698dfd0028e94dd50f7dfae59f00c5108f554e9c883428831aee9e0c3733ac39d2d0469da660fcc0263f74e92c4a2485301be2353b82c3d20b1cecb450b654
- SSDEEP 384:F3aYJUP/YScTW2mOR4eoKNfXY3ovqnM3Vdxowj7kncM26:FvJoY+sRtNQ4vTSncMd
- TLSH T1D682280D6BEC9366CEBF0FFCE8B1019407B5EB536517EBAC4CC966A56C677010820A27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.LapTimes\obj\x86\Release\AcTools.LapTimes.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.neuraltyres.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5af41e4038cfc477ce66c647699df23701599bf29c6c102ebc70bec915ba0758
- MD5 5ba2a314c84d8fc2b21eb83347851882
- SHA1 a742d183c6c6984dc3f7ce30300c85a928b84608
- SHA512 26b13bb1f7ada88998b76cabd9470bb9180b5b4cc494b0f99357ebf2661912b8d761dbae0ee87960aa79fe0e18ded58ca9287771e5951e7a26ecb183c0d1a052
- SSDEEP 768:F2s0oibIueu8EZTHYDU7kPC3Q3CKybtpY2W/nRX5Rbxr+688IqZWxFnJ6gjT+V8P:Fh0oibItu8EZjLk8Q0Y2W/nRXzbl+681
- TLSH T1F0F23B09B7EC7723EB6F1BBE5AD9A0454335F8136412EBDF2C8C50E9092A7914D107AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.NeuralTyres\obj\x86\Release\AcTools.NeuralTyres.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.render.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 035841a8fa3738ba26dc261ad536de2b2d6d57bdceb2b975a81483a884125e73
- MD5 bee0ff95b6b62b1907b45fd03ad1f5f2
- SHA1 ca83d4e76e558d2a6df9b97e57654661503b9b4e
- SHA512 3da1f4dc377a356078a6f458c63650903237cd04243b2bd468d69f52f88ae3afbf0991a0210340d17a14e40b6a7603e6b4d41ce640f934064d3eeae2977a48e1
- SSDEEP 49152:bWr1kpuVCMl1D9Sev4fPNvUx3FYF/vaCfn:6rBSev4nNvU9yF/
- TLSH T1D795E0967BF49A3BC5DF037A9071482483F6E64A93D2F39F8115F5BD2C82B908C446A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1874938
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.Render\obj\x86\Release\AcTools.Render.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.wheelangles.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dd6aed8028a1a6d53570df7a6e08cfa0265509ef9aed6b18e985e2f9e25329ee
- MD5 72e580751d4d71819322bd3212997ef2
- SHA1 fc44ea2f2df43f0bc455024edebb788c457fd645
- SHA512 553113aea7cf7a29c92346d29c68bf717faf4774bea13262b5284f819e50c0e0f69453410c94d0e8ff150f091b1f8242f4b7c223f38860e38467cb39019931f7
- SSDEEP 768:tGBuizruDih7ztTMYlH6ANbT1p0l96tHOWfuxaRuBOM1Xmo+oI3D:ZYYAND0Lxxmo5S
- TLSH T11D3329853BFC062AE7BF1B7DF8F211230D70FD932921EA5E1A9516CD8952B5099207B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.WheelAngles\obj\x86\Release\AcTools.WheelAngles.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36b7f832b1510accb1b1636dd4c588f59a5b2b85a555c0e13d25efb23329503b
- MD5 5d6056e02771114eb946c6637bee6c31
- SHA1 a35c10a32940a387b06ba18af54c7008f2eaf1fd
- SHA512 3b8dc1fb94e3e754f098083fa624660cff859ed12e486c022aca86d4e5c224bbb9e79a51a90634cc9776a2dd15fdfa97f3e6b6b9780422fee695527b5de27f39
- TLSH T1C981742193F80676E9774BB2ADB743112375F960DE36D72F064161056C237544E32B33
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Code\Fody\Costura\Costura\obj\Release\net452\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
firstfloor.modernui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 35af6f83efea37180a2613057cc38587dca36e9d21c77f85bf83c34c9f6efc20
- MD5 7ffa87d916e487b7654bff6caf8aa774
- SHA1 89963c386bdc901145f5f8afe4af11410237717d
- SHA512 83f4d982595d9ec6bb4040814f9b7c0e0134841159076d591a76f5709a55facac2aec52e60cb7c5de5f869fd9dbcdbacdd8ccf824921647059eab63adc58a70f
- SSDEEP 24576:mPuJGP3gj2ks/5I+DiacbnYEO4H3x/lW4tT9EP8QPoUI7Ae8ZJHvHZP65sSH6NXD:SuJGPQjxKYYEO4a4tT9N7Ae2JHvHZP6u
- TLSH T12F558D8133B88A69D5BF0B75B8655458A730F84597DAE70F688D9ABC1CCB3424E403EF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1293606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\FirstFloor.ModernUI\obj\x86\Release\FirstFloor.ModernUI.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hardcodet.notifyicon.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ff1781b13697746afb16273e77cec2accb8250a0c8238d95d4840391cfb8233
- MD5 19a7b24aa7b0571a7275c871074029c3
- SHA1 3a8368af2139cba5e3a74424c3a7566ce5981b96
- SHA512 563e572bafc0bae10e0df3a44b835bc648b3781217c89477e67e66dba24fcf6757b19b84dd281c0172e8771d9a890a15e8637d63df78f1846218115c52c827be
- SSDEEP 1536:Tn5gJMjd1gS6+/9PZzKrgqO5mFpGQXiJJh4JZsUEeTVVhXDSsxSg34:T/gu/9xJqtT30J2ZsUZT3Zm6L34
- TLSH T13A93CF8523FC8126C6FE9A34B5B523208331FE527A71DB594A80D6381AF77C956903EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Hardcodet.NotifyIcon.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hidlibrary.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d209557220702603dd34f5c060baf8bb2ee4956fb5f833c90e618333cc9d9458
- MD5 eaac31f6cb4b87232f415e1cb3e3652b
- SHA1 dbc1c5f94d1a99542466cbba497347fb6b79e938
- SHA512 4aa75cefffd35f46369c872ec44a685286ffc81f55fedbb64832e3db30088bb8d98622f52a5ed20ac229f7046654af16c9481013fc0c7149e7af089cd16b0f3c
- SSDEEP 768:G9z2zzuUlNpJg5NsjguAaK88hCFxSrJYtbLqLBz9zkz:VQ5Ns4LOk9cLqJmz
- TLSH T1D8133B64279CCB33C7DE1A7DB8A287005BB4D65AA302FBDE4B8CA4A53E577D105D02D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Development\HidLibrary\src\HidLibrary\obj\Release\net45\HidLibrary.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htmlagilitypack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b41dea3b725f426cc6b59b7ba2f654b4206f4f22a530f35f32f8e2974053b32
- MD5 366de2b01eb91fd2bdab0eaafecfd40c
- SHA1 2b66d395d2047a1b1873456ace095d837b484cb3
- SHA512 e3c0ba11047399c216441f57018fa5ddc1d1335bea22f6df9a154ee3051c9048100ec33a46995a64815f7bbcbb0b8f9f5a8fd0e0738ce4ed005d02e08590d710
- SSDEEP 1536:nNfrnJNjFp0IO156qjs0lPykuCEBlFXcglELWPGr1Y7KGYDpSSv0Gxi:nNfvF7O15VsUuDBcwwpSSbi
- TLSH T16BB32A15B2FB4723CF9DA6FFE4E4506947B1922B7103FB4A4C9870EE98623D14926E13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Jonathan\Desktop\Z\zzzproject\HtmlAgilityPack\HtmlAgilityPack\obj\Release\HtmlAgilityPack.pdb
mscoree
_CorDllMain
Name
.text
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
icsharpcode.avalonedit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2bf6079c143f177d954731db2ffde515bee8fbd6261e0d338ba8e7c8df1ab658
- MD5 d7467d0156f22feb4b22cc5f74d7bd60
- SHA1 bcc1d959786ba4253491b67d448f97cf5ad709ed
- SHA512 f13092a4154524226900c8f3089ef776932cae601cb21cc10af1111014aef97a1183a2344da3f5b8f5b9fbe8b4b420412d79b71e97a1b4ed2ec384b502ba1c28
- SSDEEP 6144:64Gybj4PJqJZD0JOi0Av5+ENJzHLeDjN3kNHjoJAo7gOfwlflvuSn:6i4PwJZ1szeDjKRWwl5
- TLSH T165D43B29769C5A2BC2AF1777E1711105A3FBFC46726ADB8F284476FE29837134C016A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
600750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\GitWorkspace\AvalonEdit\ICSharpCode.AvalonEdit\obj\Release\ICSharpCode.AvalonEdit.pdb
mscoree
_CorDllMain
Name
.text
Size
580KB
Virtual Size
578KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
k4os.compression.lz4.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 781eed9f4ea0d61d336a6e771ddf0979193e304f894da9999bfb7316ebff5c00
- MD5 a94106d177dccae3143a77aa48fca695
- SHA1 5053514bfe5c3a9c6556f26bbd1aac55ed74c27f
- SHA512 912da19724b598c67ad758a3556ae6e3d26b1026ee9eedca816f97c26445e6a784ca816249cf25cf60e759282918ebfba17bd4d81522191013a38d047f3aedf3
- SSDEEP 1536:vXvFZyTTb+xFnafu0jmtMQEI2rKNQ8S7rSYnqLFel:vXvFZyD+xFuu0jmKZI2rc/YnqQl
- TLSH T1B7535C6C5BEDDB36C88C07B9509981CAC271D227E243DB2B76D888316D837CC485A7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\K4os.Compression.LZ4\src\K4os.Compression.LZ4\obj\Release\net45\K4os.Compression.LZ4.pdb
mscoree
_CorDllMain
Name
.text
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
licenseplates.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 286e7467102bbbaaa0e1692b4ea27763e3918a22b2c3ddedf56c1a4a5f283008
- MD5 f8d31b7cbb2c729d87fb194e9710fe4a
- SHA1 a155899b8698d155ba6c2d131764093e69062ef7
- SHA512 640dd72ffcb78e00ebd4fb652a2f3eecf4a7eccf41728c6240cea02058a8282364110391ee23fa52f8de0fa004b8326fd2afdf3c3c235c7bbf924ac4351455b8
- SSDEEP 384:pPOs0qtmWcoqnM+Zsl/Ny9nNGtnVX/zvBwxZ9HjCPn3aejqx2Kl9gezL7f:pLPtMoop0ly9nItnF7kXDCK0wJlpzL7f
- TLSH T165B23C1D7BF85737CEEE0BB964E201810371E556B903FB981E4D70DB48ABB801A156EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\LicensePlates\obj\x86\Release\LicensePlates.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
megaapiclient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8aaac4693169b77eda6ae21e512b08cca528dce38aa08fd8d9b87cdd8785e07d
- MD5 4e6e1f6b2581a87bbcd90ef103a49c52
- SHA1 075d01facc33ab9a38167c9a8d78f42ba9a2d447
- SHA512 48633eefa8ce977bcfe7cdc8844a69d5b26a89547149a55514cf6c6f7d550a760f4fa7d5aacc7f7d762c6d8ad684555614c55548c8eb0ac3fbd30003bdde6ad5
- SSDEEP 1536:vkiAmpgUL8920YM3sD81oA4LFgd3fflItwL/5:vkFmp3L8920YM3u8oAtd3GtwF
- TLSH T199935E397FAC8367C76E4B39E4B242540379E1B63402EBD79D41B8A92D13BE12A017D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\GitHub\MegaApiClient\MegaApiClient-4.5\obj\Release\MegaApiClient.pdb
mscoree
_CorDllMain
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.io.recyclablememorystream.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9b458979f8b56a3c81731ffb7b93fe50b99cc26c5965d6127656ac0390f82f6e
- MD5 6e6954ce4fa2742edde7eb6d2e674c3e
- SHA1 3649d885328f3fa466abbd72ff8a1602d93ca1f3
- SHA512 5d83fc5ad59bbae482672e3a846738615f7151fa63b059b3dd55bea6ff03793622a797c81d73d31eb89967e09e8f475d4c4e54faca1e87db4a9f7930360d5321
- SSDEEP 384:stogu8xcMjE0oplMAt1u7WVoMqZUkKMkROT4oLzARlex4f9d9/GJ2/wW+iFWqD/r:SC0opq61u7WIC3K9LUbfzDDvDvP
- TLSH T1630329145BFC4617CBAF3B70A9B496921B7AE6C27822D7CE1808F5DD2C07BC24511B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6c:84:2d:04:e3:f3:91:ff:84:68:13:ca:ef:1f:1a:40:74:b3:64:33:ed:99:93:82:42:f3:1f:a7:0a:0c:e8:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 10, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:3b:12:1b:92:23:52:02:5a:a5:00:00:00:00:01:3b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
34798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\obj\Release\net45\Microsoft.IO.RecyclableMemoryStream.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
moonsharp.interpreter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1db76110f21698639f55d28e21bddb536c0c497ceb741dee49fedcca9bcd1588
- MD5 699cc514aaf6f46a51f4ed2511274d8e
- SHA1 7e83cc467941d335c9b19ddcc28ae7319f5e3928
- SHA512 bd0b5545065585fa7215fe25627ad10f94dc8b124ee5a9c278478a03e45ea24a730ecf6b0ffff96fb59e81f900a05c3d22ef2a34a1586bb4a121344fda11a8b1
- SSDEEP 6144:QUJj6CVrONhcwlfwBCX5yJq61H901drh/IqqwAt:ZJjdrkqBCpk1C/r9tqw
- TLSH T1A4745C3567FC8A1AE2EFA730E47404098BF9F817766BE74E4D44A4E91E5334298213B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
372010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Z:\git\my\moonsharp\src\MoonSharp.Interpreter\_Projects\MoonSharp.Interpreter.net40-client\obj\Release\MoonSharp.Interpreter.pdb
mscoree
_CorDllMain
Name
.text
Size
355KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
naudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e912b951c90708553db3c90c600c28a1aca7dc7713080ee8312a0536ab23d4d7
- MD5 031f114f237d84f95220bf867ee289f8
- SHA1 e0b781432e75d2adb18104133bb4322d4e083a79
- SHA512 4f0e21100c98dfceb31efb8b3faa3d9985f3f4699a1b7b45443902e3d40654c59d4e6bd2d8279515e0f3ee9ebeab6b4d42005f1ef62373cec505421674835639
- SSDEEP 192:X7xve7xBv0vOQ9mOI4NbKn6tKpU5XoVt1fO5LUnUlqfaAMnfkhwPj4agd2sM9veB:BcYOEMgleEoVDOMaAMnf6wPj4a/veP3p
- TLSH T1C522E711A79ED336CCDF0BB9EC63129013B5EF6065239B2E26CC125BAD637054B2176B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\NAudio\obj\Debug\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
nbidi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb8c6923ff00a9ec32ecff01e67af2e9c9620051de01cc9d9eda09ff08c4fb25
- MD5 4f388ff5f625885c89a7ce83746e4218
- SHA1 c933c85f2dfa1d1d72c76ab58bf7658ba25f0f53
- SHA512 2245ad598fc4a2f2e0a1fc09c215b77de958b646329ac672edb24884ec7cc72844b7030063421f801ce1f16f8e0975a7f61816975e890c441f00811e2c34bc66
- SSDEEP 6144:m6xrl6gz5BuK2UybtuYTRMeq00RMrHs5e7FEmVGhRtzXaZMgZs1VENU:m6X1w3fIgSa6f1
- TLSH T1D064B431B70F56CAE7DEC73EC9A6931433E18C480CBAD7BD8D8A39CDD8253516A42865
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
313694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Itai\Documents\SharpDevelop Projects\NBidi\Trunk\obj\Debug\NBidi.pdb
mscoree
_CorDllMain
Name
.text
Size
300KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
newtonsoft.json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ecff736f35bbf751499efd43839da020452afc8ca3435516abe821e691b4e88
- MD5 984196e96f92a1d640e877c530551845
- SHA1 21dcdb00c6f31f83fbd9cf1845dc425aff17f7ff
- SHA512 e94d031c4ea7c1f7beb2beb5ae2d8bd9f4a655d411d07e7c2f07d43748ad26743f0c20517a2bb693addec4f63790741b9a951c043e7234f3b89333d7bb0b1f46
- SSDEEP 12288:OUGn1nz7qTxWv06ZydWMfGPXB/eNRCyQEMhr:bGdz26ZyfIB/erC
- TLSH T1FAA45A1223FC8729E2EFA772F0340A545AF9F816B2B6D78E2941D9BA1C577608D50373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
493838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\GitHub\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Net40\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
474KB
Virtual Size
474KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
oxyplot.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f26a61d2d085a226a1e8f86da1568124745ed8631fd0e094b6cc133738db8eae
- MD5 9f98fae75f3277eee100dba0257a4aba
- SHA1 c182696f1bb17f6f4f01e5a630b29d9946834afd
- SHA512 e9297ac88a75e592e118f9dccb63824106ecdb896a3cd616b94ea6478c3c02f480d2a1dd7f96c66247a4c2e671096b6f4361bf4a50dce63fab23aab0dd4e4d13
- SSDEEP 12288:a1F7uQ+ipsaryyWP9PWqgSa8G/zYcaahNO6Q+0:a1Ssyypd8G/2ahNO6Q+
- TLSH T15EA42A1D27EC977BCA1F573AD0B0142962BDD10577D2F7EB8A40A5AA2D87782EC041E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
485838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\oxyplot\Source\OxyPlot\obj\Release\OxyPlot.pdb
mscoree
_CorDllMain
Name
.text
Size
466KB
Virtual Size
466KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
oxyplot.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 760fefddd0489e5d7d54ab3f02a4c0082308b1c648647f39d7ed51e6f01dce9f
- MD5 73fd78eb95ecdfcc8b4342966025512f
- SHA1 455d7a2ffac4626e655f0ae8d407f7294a90b49f
- SHA512 17e2bfe95333633ac0e4de304f8a47cdef73c55fe75dd7ccea990f56d56b42b4c4259e481e691293368dd1c0d141771f590cbfe0efb12df1c4daa343583ec6b9
- SSDEEP 3072:X938P3++PAclwfTFPhwucw7Rk93AWGC7dNE:CPh4TpSfKRUddN
- TLSH T185E3B6F57379CE28C79E1770B8A427344730AA23BAA1C39D66D493FE418FB02A5512D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
149246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\oxyplot\Source\OxyPlot.Wpf\obj\Release\OxyPlot.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
138KB
Virtual Size
137KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
sharpcompress.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7293d866e34c189641124ba6d68766ad793b19dbafa5c5c3c59d3d0a97e9b370
- MD5 a8cc292d376ed04878ff093aa76096e7
- SHA1 70f41bf2baa694d4393d87b721486b8783b65ade
- SHA512 81216204df4a6c381f1dc0302c003a7f9341ed7dac4d1dcc156ebd7d645832ee8b0fd2201fd7863f8d50fee44f91a68c1bec4fedc2f13c1ee6899ffaac1c930c
- SSDEEP 6144:a7zxs/S0wm/zFiGGVieey5jL/P+qXj6DNlbQN7QTW5c9vgRQ0aZYNZei:GP0w3R5jL/GqX+hlbQN7JcR1mZf
- TLSH T1C6B47C1037EC6B2FD6DD47B1E0225C6DC3F1E1696687EF8B99407ABA1C97B418C006A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
519662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\sharpcompress\src\SharpCompress\obj\Release\net45\SharpCompress.pdb
mscoree
_CorDllMain
Name
.text
Size
518KB
Virtual Size
518KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
smartthreadpool.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27f4e01100886d0a425eeebee3c803bd6132393df87026d19e7b7b7a64442474
- MD5 6ef7779d2552efa5fb43984d4e731602
- SHA1 a73b79196a0d3a3d9d76d8a7192e8a48df74900d
- SHA512 d35e927e76fc9bc4663b42eff6293f9e333178f9c67f3ea518210acb31ed550e8ceb1413eaa71f78c6968a1775085646b16863f0700cf27e4301db8956b45713
- SSDEEP 768:8WmXz98qbYpyeI3xCIsDhuXCiP4i5I0NSXO1Qf0NeiQEWXh91nqbu4BNWsgyKJOz:8W7eYpDnWxR2GeXBnqb5BN+Kw5H4B
- TLSH T1B6533A2447EC4B9BDB6E4AFD99F515A907F6B3863263CB4F8C48E4A82C533810867317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\Dev\STP\STP.git\SmartThreadPool\obj\Publish\SmartThreadPool.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
stringbasedfilter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eab5b111ee57909c5d3d03957062a2d47a864da873164782e9ae013f8566777e
- MD5 d60b84e84381d892a342f511247f5497
- SHA1 7f9119ff563d9580a5c3af989543a574af16ef3e
- SHA512 4fb7e88ca99bbfd1b77c37504523cbe815666711fdc9409bdd284e4ebdd6acff02630a6262f3e85cb096dc1d24c0f63889df8da720f9aa3007505f5d14ff63fe
- SSDEEP 768:7EjT6uGtkfWF0Ji0dfYoNrZ/kxUd89eh:7RuGtkfUkflNrZsG
- TLSH T1C5C23C19E3DCC2BBCFDD4AF9ECE012405372D2522523E7169E6CA1E42D5B77D0912A93
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\StringBasedFilter\obj\x86\Release\StringBasedFilter.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2e3949fcf3a3b3a20bb9a568a4da582d9a90d64f34c0bdc07c9029bfe8f1858
- MD5 df29f9a876f042b588bd291d5dd7bef5
- SHA1 d23f11cd8f96af1e76c847260f9ba6a32e62bd08
- SHA512 2dd463513ba5dcaa04cbf3c7d12e44e705ca31d889bab5360264004527aa25995c10dcf3511ed1c5b62d9e67ce57f5585e82197b0417587912b4081725d88e8e
- SSDEEP 1536:Xxi8ae06y7Q0kSutmvEmFk0pBa/+h8k/6jY2F8andhqABtX5y4W2IMW:x0vDkSutmhFeYq3DqAn7NIr
- TLSH T15FD34CA42BD9EA67CB5FCC70F0245155A730852B4652BB7B1CCCB4F16993BAD240C3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:77:5f:34:39:1b:70:a8:1b:14:ef:a6:df:e2:33:5a:8e:94:de:b8:0d:fa:24:3c:c8:71:b3:7c:cf:d4:5d:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:1e:0e:bc:e5:4b:16:a2:03:1b:00:00:00:00:01:1e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
136282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netstandard\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.runtime.compilerservices.unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3cadcb6b8a7335141c7c357a1d77af1ff49b59b872df494f5025580191d1c0d5
- MD5 9a341540899dcc5630886f2d921be78f
- SHA1 bab44612721c3dc91ac3d9dfca7c961a3a511508
- SHA512 066984c83de975df03eee1c2b5150c6b9b2e852d9caf90cfd956e9f0f7bd5a956b96ea961b26f7cd14c089bc8a27f868b225167020c5eb6318f66e58113efa37
- SSDEEP 192:erLXx0hyLsbb3rxVj7WU2WLTYoW4GD5dHnhWgN7acWlbAkWD7DiqnajKs3WoHpZ:Ih06sbbVVPWU2WPY7dHRN77RGlGs3jJZ
- TLSH T18F724B45CBEC4607ED232B7085A8D583FF38A3D75816A32929C5F67C0C9A7C5AF21638
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5d:cb:7e:a5:69:25:4f:af:a8:12:26:de:6b:e9:9e:73:3e:09:68:df:fb:5d:fe:9e:c2:d5:81:e1:60:48:4c:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 20, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2d:2e:4d:41:ca:63:65:33:a0:00:00:00:00:01:2d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
13198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.windows.interactivity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aace8c8a330ae8429cd8cc1b6804076d3a9ffd633470f91fd36bdd25bb57876
- MD5 3ab57a33a6e3a1476695d5a6e856c06a
- SHA1 dabb4ecffd0c422a8eebff5d4ec8116a6e90d7e7
- SHA512 58dbfcf9199d72d370e2d98b8ef2713d74207a597c9494b0ecf5e4c7bf7cf60c5e85f4a92b2a1896dff63d9d5107f0d81d7dddbc7203e9e559ab7219eca0df92
- SSDEEP 768:6MazwAgR8/XJ665bKZdxuB8DCuL5enM7JxKjuMlZCZN+R0E7E:63wBccZdxuB8mQen6JxKjrlMZgR0Eo
- TLSH T18603F71073EC422BD6FF0A78B87562200675BAE5B953D39CCE88D1EE48A37D049A1777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
timezoneconverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e9c35108e4b0484fbb28006294ede97698803e18aae412f37e87e8166953430
- MD5 33dad5df652e4082d3d9312135f364fb
- SHA1 06712a445a0c2c5f1f8b470a34f86fb079879388
- SHA512 883b6bab6c1bfa7ba45cec2e2ad8adea8ce184822f16fa3a5910b99bc459c3ca478cdd4fdf01b46c317ced395ada30837ae7a9402c3797673ac0762332c870c4
- SSDEEP 384:5jBUtfZcutCE1hXcyVADOQ+rpMi98kOjvRodUDfZryc4RfXIXC6++QYxwhj+cTsE:5jBGXtC9ByUDfZryc4Rf4ynY++cTbff
- TLSH T16AB25C54E7EC9732DCFF2BB858B6A2050330FBB19C21CB6C989872455926B1495707BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Dev\oss\TimeZoneConverter\src\TimeZoneConverter\obj\Release\net45\TimeZoneConverter.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
unosquare.labs.embedio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 765cb5686c2a833775b9a9418bf9077021007b727ef94b287c461fad999ae7b3
- MD5 e379ae5b75fe158b62daaa23aef5bce6
- SHA1 302b144f04cbfae95892916a4496cd1487d6df3c
- SHA512 aaf890b99ebe5daf7fa004220ba9a0a8630c5216c0a5e697413c079f4ac3c8e44d8eba47f8339f17d39a31889ecd118a33cba8e056c8f8f644dceafb98e98ee4
- SSDEEP 1536:1FCNMG2NLtHFEKvzccnc0/xAnCdsMqu25GhDmr:1FLGAvzccnc05AnCtquzY
- TLSH T18983914537ED56F4E1FB8F7DACB135050A7EB84DE815DA4D2C1A208D04B2B7AA852F23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88506
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\embedio-master\src\Unosquare.Labs.EmbedIO\obj\Release\Unosquare.Labs.EmbedIO.pdb
mscoree
_CorDllMain
Name
.text
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
xxhashsharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cbc0d23b9647bf7f7da1ee73c0c83c4d587f84fb6f786a69feb0414cb0d94e43
- MD5 5d7633de49d95f74b130733f33cb831f
- SHA1 17f384663eb71e012898e31bc1875ce636348063
- SHA512 f22ead90e39f17e716bff372ee1368b1d6b8c40663d8d0ed0cbbd27022b246bbb2c02f4fcca7cc754a7babc06dd6269653980e3351d8d1cd177340938b9ec090
- SSDEEP 96:f1cJfiQ5PWuUUDKPAa0yFvhYaJtWWRBDKtOjM5z:e7OcDKp0wvqPW/DKcjM9
- TLSH T103D1701457CC0733ECBB0B7E99A7121B17616F20DD62EF6D489C06195891E642F33BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\nori\Source\Repos\xxHashSharp\xxHashSharp\obj\Release\xxHashSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
xzune.vlc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 29c9e6e62f4d5424f8dd6580477f078a74207f39e84099e68869e5f96a8fa3fa
- MD5 fe59245a7a7273511483607c750b96db
- SHA1 cc5aff2124e949c691c1bec56adc533d1d9075a8
- SHA512 f8b7c9544e8bd41bd98e8d256fac0a34206afffa701f62142bd50944296076fc680299468db20d0cd2f6e8cfea893a1ef0643c3b33c2aad38a129bc0df73f426
- SSDEEP 3072:0vxHKw7PgzguQpJksQSS+p7XtJmMGRQtZsqpEBmQX4fJlZ:eqigzguQLCShNdsdatZsqpEBmQXY
- TLSH T157B31C613BC01EE2CFDE4E7AB022406942F4F7426436D73B655CB3F86A9B384446B5A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
119966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\xZune.Vlc-master\xZune.Vlc\obj\Release\xZune.Vlc.pdb
mscoree
_CorDllMain
Name
.text
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
xzune.vlc.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 23b749b8c6fb27c9ac92e6af1aafabb726e5641756c07dc38b00c5d1632ceada
- MD5 ff191771159c4674e061e71facb77d4d
- SHA1 87151528b9b4301b376f2d96ca0c6ba38a494b38
- SHA512 68f43f2803108aa620bf99a3ebd68f98278f3bbf4a3274dfc1ae6a96bb99604d440fb4ce5d6e3c0e67a766752213f32b6f654c7c4f9bab82f11146a00cadbe23
- SSDEEP 768:JE1Z5zk7c3AfKGkTMjY7zUwnIxWTDcds5yhESrkkNAxaBDWZ7chjXa6:J6k7cakTtzUwnZx5yhjrkXZ7ejZ
- TLSH T15B332C7057284B6BCA9F4639F464662141719F863253DBA9EEC4A0FA2D5B38D0E04BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
59974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\xZune.Vlc-master\xZune.Vlc.Wpf\obj\Release\xZune.Vlc.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Manifest.json
- SHA256 895e9a6e99d13aa0ac020431bf86d40872229bb5b635bbcd860e04513bade235
- MD5 1f972d82c979c873f15a756305c525ac
- SHA1 d04530abc301acf0e564f9734cf5d726f81be158
- SHA512 94549ceb6a9eaa9ece099b128058155f866b77385d17d52021576ce10a3c77b58f8e3327c00e981b49bbf24e4e8ace58c3d3a599b09eb8c9941869d7bff0fbc9
- MD5 SHA1 SHA512