AimmyV2.5.0.zip
- SHA256 bca98f86bbe7be81f58e25ac92884e86ec27ac70a73a735073424e7c24ea332b
Overview
overview
3Static
static
3DirectML.dll
windows11-21h2-x64
1YmmiaV2.exe
windows11-21h2-x64
1YmmiaV2.exe
windows11-21h2-x64
1onnxruntime.dll
windows11-21h2-x64
1onnxruntim...ed.dll
windows11-21h2-x64
1runtimes/b...eb.dll
windows11-21h2-x64
1runtimes/w...me.dll
windows11-21h2-x64
1runtimes/w...ed.dll
windows11-21h2-x64
1runtimes/w...me.dll
windows11-21h2-x64
1runtimes/w...ed.dll
windows11-21h2-x64
1runtimes/w...nt.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DirectML.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
YmmiaV2.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
YmmiaV2.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
onnxruntime.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
onnxruntime_providers_shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
runtimes/win-arm64/native/onnxruntime.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
runtimes/win-arm64/native/onnxruntime_providers_shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
runtimes/win-x64/native/onnxruntime.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
runtimes/win-x64/native/onnxruntime_providers_shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
runtimes/win/lib/net8.0/System.Management.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target AimmyV2.5.0.zip
- Size 63.3MB
- Sample260712-brglcsbx3n
- SHA256 bca98f86bbe7be81f58e25ac92884e86ec27ac70a73a735073424e7c24ea332b
- MD5 c9e66ab3f7fe0f712238a1c07cb4e1e8
- SHA1 e1110aca60b72171f72ead4bf26ba8559323e680
- SHA512 72099d65f9025d9a7c60329f1e944fb9d35f84c353ec3f4d9817f91b693ff0e0bb6b66aa0e3baa50ef6060a19980dbcbf69e6630a5fcc848880d55b0f6e892ef
- SSDEEP 1572864:jQf/wM+ekbAIU1PkLzqEvysSEGv71cjUtnBMbj3ZAsP:jQgM+eEHuPWv5GjQOBMvpAq
- TLSH T167E733FD24FFB093CA1E97240A22E0907782C955DAB2F09B2F990D6ED1E323F5915971
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 16 IoCs
Checks for missing Authenticode signature.
resource unpack001/YmmiaV2.dll unpack002/antwpf.dll unpack002/costura.dll unpack002/gma.system.mousekeyhook.dll unpack002/materialdesigncolors.dll unpack002/materialdesignthemes.wpf.dll unpack002/sharpgen.runtime.com.dll unpack002/sharpgen.runtime.dll unpack002/supercluster.kdtree.dll unpack002/vortice.direct3d11.dll unpack002/vortice.direct3d12.dll unpack002/vortice.directx.dll unpack002/vortice.dxgi.dll unpack002/vortice.mathematics.dll unpack002/xamlradialprogressbar.dll unpack001/YmmiaV2.exe
File Explorer
-
AimmyV2.5.0.zip.zip 63.3MB
-
DirectML.dll.dll 17.7MB
-
YmmiaV2.deps.json52KB
-
YmmiaV2.dll.exe 7.3MB
-
antwpf.dll.dll 1.2MB
-
costura.dll.dll 5KB
-
costura.pdb7KB
-
gma.system.mousekeyhook.dll.dll 60KB
-
materialdesigncolors.dll.dll 313KB
-
materialdesignthemes.wpf.dll.dll 9.5MB
-
microsoft.ml.onnxruntime.dll.dll 221KB
-
microsoft.ml.onnxruntime.pdb73KB
-
microsoft.xaml.behaviors.dll.dll 143KB
-
microsoft.xaml.behaviors.pdb471KB
-
newtonsoft.json.dll.dll 706KB
-
sharpgen.runtime.com.dll.dll 165KB
-
sharpgen.runtime.dll.dll 79KB
-
supercluster.kdtree.dll.dll 15KB
-
system.codedom.dll.dll 179KB
-
system.io.pipelines.dll.dll 75KB
-
system.management.dll.dll 71KB
-
system.numerics.tensors.dll.dll 432KB
-
system.text.encodings.web.dll.dll 69KB
-
system.text.json.dll.dll 628KB
-
vortice.direct3d11.dll.dll 344KB
-
vortice.direct3d12.dll.dll 500KB
-
vortice.directx.dll.dll 356KB
-
vortice.dxgi.dll.dll 89KB
-
vortice.mathematics.dll.dll 121KB
-
vortice.mathematics.pdb62KB
-
xamlradialprogressbar.dll.dll 25KB
-
YmmiaV2.exe.exe 148KB
-
YmmiaV2.runtimeconfig.json515B
-
bin/binding.cfg175B
-
bin/colors.cfg102B
-
bin/configs/Default.cfg929B
-
bin/dropdown.cfg377B
-
bin/filelocations.cfg33B
-
bin/labels/labels.txt5B
-
bin/minimize.cfg301B
-
bin/models/Universal_Hamsta_v5_Enhanced.onnx36.0MB
-
bin/toggles.cfg762B
-
onnxruntime.dll.dll 16.4MB
-
onnxruntime_providers_shared.dll.dll 21KB
-
runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll.dll 69KB
-
runtimes/win-arm64/native/onnxruntime.dll17.3MB
-
runtimes/win-arm64/native/onnxruntime.lib2KB
-
runtimes/win-arm64/native/onnxruntime_providers_shared.dll20KB
-
runtimes/win-x64/native/onnxruntime.dll.dll 16.4MB
-
runtimes/win-x64/native/onnxruntime.lib2KB
-
runtimes/win-x64/native/onnxruntime_providers_shared.dll.dll 21KB
-
runtimes/win/lib/net8.0/System.Management.dll.dll 306KB
DirectML.dll
- IMPHASH 0eb962894c1f1cf400b452799094c50a
- SHA256 9c9e6d822561c6c41b90e6994b3e8857cf1d66dbfb1e0c4c799c7c89b4e92da1
- MD5 abc458767c27ab4691e8910714d47ed6
- SHA1 a9cdf72540b949520045ef11d7b44879e2181c79
- SHA512 97af8aef5fbd25e87012351d93129e8a0a64a96569c4f8f458d5389f1ffc49239f6a14d9bc99f8b0a41e915ef12ee1fd781e391fae67f9774c08311b49005131
- SSDEEP 196608:/AZfeTLx3Ohq0Ytzn7OBdzIkRnyrQAH5+sM3TKC:K80hMtz7oZIkByrQo5QTH
- TLSH T18A17D01A6F6415A6C17BD23D9A534A43E3B6748A43706AE706F80D311F97BE05B3F382
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
47:67:45:19:2b:2b:9c:21:d4:1a:cd:b5:4d:c3:4a:8a:fb:9b:8b:fe:bf:71:28:19:86:eb:14:4a:41:02:6d:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:04:6c:74:06:ff:57:2b:27:72:00:00:00:00:04:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f2:3e:32:d7:64:ac:70:91:94:00:01:00:00:01:f2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
3186464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\build\x64-win-redist-release\bin\DirectML.pdb
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
DebugBreak
OutputDebugStringW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-errorhandling-l1-1-0
RaiseException
SetLastError
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-heap-l1-1-0
HeapReAlloc
GetProcessHeap
HeapFree
HeapAlloc
HeapSize
api-ms-win-core-synch-l1-1-0
WaitForSingleObjectEx
CreateSemaphoreExW
CreateMutexExW
OpenSemaphoreW
WaitForSingleObject
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseMutex
TryAcquireSRWLockExclusive
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetStartupInfoW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
TlsAlloc
ExitProcess
TlsGetValue
TlsSetValue
TlsFree
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
DisableThreadLibraryCalls
LoadResource
FreeLibrary
GetModuleHandleExW
GetModuleFileNameA
GetProcAddress
LockResource
api-ms-win-core-localization-l1-2-0
GetCPInfo
FormatMessageW
GetLocaleInfoEx
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetLocaleInfoW
GetOEMCP
LCMapStringEx
IsValidLocale
GetACP
LCMapStringW
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
EventUnregister
EventWriteTransfer
EventRegister
api-ms-win-core-libraryloader-l1-2-1
FindResourceW
LoadLibraryW
api-ms-win-core-memory-l1-1-0
VirtualFree
VirtualAlloc
d3d12
D3D12SerializeVersionedRootSignature
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
CompareStringEx
MultiByteToWideChar
GetStringTypeW
CompareStringW
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-file-l1-1-0
FindFirstFileExW
FindClose
CreateFileW
SetFilePointerEx
GetFileType
FlushFileBuffers
FindNextFileW
WriteFile
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
api-ms-win-core-rtlsupport-l1-1-0
RtlPcToFileHeader
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
api-ms-win-core-interlocked-l1-1-0
InterlockedFlushSList
InitializeSListHead
api-ms-win-core-processenvironment-l1-1-0
SetEnvironmentVariableW
GetCommandLineA
SetStdHandle
GetCommandLineW
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
api-ms-win-core-fibers-l1-1-0
FlsSetValue
FlsFree
FlsGetValue
FlsAlloc
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-console-l1-1-0
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
api-ms-win-core-timezone-l1-1-0
GetTimeZoneInformation
api-ms-win-appmodel-runtime-l1-1-0
GetCurrentPackageFullName
DMLCreateDevice
DMLCreateDevice1
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6.7MB
Virtual Size
6.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
85KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7.1MB
Virtual Size
7.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=29395,
count=25, id=260, version=29395,
count=10, id=259, version=33808,
count=15, id=260, version=33808,
count=82, id=261, version=33808,
count=9, id=260, version=34120,
count=174, id=261, version=29395,
count=63, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=141, id=1, productName=Unmarked objects,
count=280, id=261, version=34120,
count=1, id=256, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
YmmiaV2.deps.json
- SHA256 49df09352fe2fa0ed094a35ba5b7aba14e7c9da9370ff7e9dd87479756ba18c3
- MD5 8e2696e0b2ad2f5a93edb32ac2a7d834
- SHA1 4fdd403aca60cf67f990d897a0d6eb2197e6753f
- SHA512 fbf22cd00ef2dfd9e92d6ef18a35c7d3550bd3205ce943499e1cdc59fb311075b4b5a9b81bb2ab5a4afca1d47c320b3ec7a376dd03a55a51f66dba8d757ac556
- SSDEEP 768:CTgvpI7RWKuJXGRjVa8X4dNH3HItqO3zICvS5HL4:mgvpI7RWKuJXGRjVa8XyCmL4
- TLSH T15B33CE25DB88ADA309727BA614348192F321832F50116DDFB9FC118EDF73E8A5265F36
- MD5 SHA1 SHA512 SSDEEP TLSH
YmmiaV2.dll
- SHA256 35150f66d0cda782188649a5b195f89ab66038bd6834883ec346383fbd664296
- MD5 151790fbd054a7f345c37db0bb747dc8
- SHA1 4055fa029e76e6a48982682cc2f2cf2538656988
- SHA512 e8b16757a9fff3c68d641a64a55fe8b2ef5d3df37005fd8011013e2e02c43ae4b43a0684944afa8e953271ff5fb1fc9c51b00ded6659e9ff4194866002c6bab3
- SSDEEP 196608:+dX8cuzd4H2YpvrCSUVA2ECQdQEqsYX28E4SonDCjA7b+:4pvuF6dFqu8fS6DCcf+
- TLSH T1B876D0025D9D8824F2256F77F48E4FAB4D79CB49681111CABBCCB7CA9C21B35CA131DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
7.2MB
Virtual Size
7.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
antwpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe134ec0bd550c5c25656101cc291e695ad90a71a70c92e1c999104839492bbe
- MD5 ee2327932002d83e32c9154e32b7c74b
- SHA1 f387c00dd7c9a5e38c0db6b9141db74da433103a
- SHA512 347f4610725912863e7ee50195aef7126a170c7db1948a095a21c80d550d37227cbfb8afea679ffad5bbb8ab19808b38edca5fcb2ed940d5bc0f7940c5313e12
- SSDEEP 6144:NQofqus06ZnImR8PjjhjLUuRiWrBLUi6N0RoUtTbkZRyoHuzv:7L4hO
- TLSH T1DE45483C5C16973392BAC268D089495BF1A0856BF6321F4D61CF4B8AB50B24379C5FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1216966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Users\mumto\Source\Repos\AntWpf\AntWpf\obj\Release\net6.0-windows\AntWpf.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a9e767ad824afa2c1b0aed513fe1cf2b8dac6d40f24e7c4075af32b1cf23a20
- MD5 109bd38d2107f41573c48544992ead99
- SHA1 028e9832f421f11f9497c610f1734e0f3d868037
- SHA512 459945f338679c77acca8f1192907cd3ce8e19f270589d34ce8227b8eaf0c7c8c9922e52b8310d037c4d5c0c639de42a6e3b0f7d44d493fc50644b6fcf7cd4e5
- SSDEEP 48:6gMX2nhx3BTjtRiaAVLEP4iZ6iMtTg70uElaQ40JFuUPtomCH9gWk1qyFVA2IbS:HHtRYVLEmYZEZ9ruUPqJmW/2
- TLSH T10BB1FB2867B8573BEF7B4BB65863534257B4B950CC279B1F0985B3166C223544931732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\CI_WS\Ws\274459\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.pdb
- SHA256 fbb47bfd057253e9461bc7fe661eb8ad273451782f3e227b8db8f88b54cea186
- MD5 dd3394a0ba6f7158d029e1c3a31b7a85
- SHA1 806f4c19b2d7fd9e3b836269ec07647019a29e95
- SHA512 2fbedae58d16bfe20954094e5c7541e1b25310107571e94f7bea35b2217aa634197ef147afb9ffbd9c59aa0f7e209cf2a97349c3503077758502bf7a776e2575
- SSDEEP 192:yMD/wix+PI6jMai+NLy5nj4SCBg5MRkCIFQkC8g7AHOuXk/N/8Hu04:y8YPI6jMai+NLy5nj4SCm5Mz6QkOAHO/
- TLSH T1A4F1B33F5748C463C89959720521C49CB6B343202670ED78F3DB2608EDAF69AC7B5772
- MD5 SHA1 SHA512 SSDEEP TLSH
gma.system.mousekeyhook.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 832697933e55aec4be0694106846ebfa6ddc06bedf3897e96785dbaf491328d7
- MD5 5b5544681fda3d2d0b35e931bb4ac4c4
- SHA1 64244d464bd1ede5ec94b327d120449636b68063
- SHA512 3c4243e2bab183b1d0fdf755f1b95c46d11237cadc39e96eacbe0d1496c69db528a212318062da8c0b20bf0684aea6a5a0f0b82750933b1f7ed6fce3403a613b
- SSDEEP 768:lMkiClqdHzdGA4fto3rrCFY+ta8zmy2zEfbc9ofAvZAXa+e/bit5xXK:TnAhrsna8zf2zic9ofAhOadDui
- TLSH T11B533A2413AC07B7CFFE87BAB4A6810187F2CB067843D79568F890B119537655A326BF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
materialdesigncolors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ef0f4fbdce3125fb303f23cbdfe83041716685eddcab1a32137c3a721f549b8
- MD5 98e5a284fc3e8c100264b4b151ef7efd
- SHA1 bb013cf6c9221f96cd0920dc597532028139378e
- SHA512 46f7e7dedbba3df21b9e7eb6c07255e37db74912fa9e134c9e5aec16be29527af23d62b992578af5cbf115764f298988e2aff0d238aaa58a28e19a9e9ecc15ed
- SSDEEP 1536:qvDI+NEr29DEz2L4VdcggiHckW4LNgXDBC2+7C6:2I+NH/cda8cB4LNgXDBC2+7C6
- TLSH T1F464835C235490FED81B52710438719972377A7AAB998F4BEE6E33FDDC1600B8B235A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
326026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\src\MaterialDesignColors.Wpf\obj\Release\net8.0-windows\MaterialDesignColors.pdb
mscoree
_CorDllMain
Name
.text
Size
310KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
materialdesignthemes.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4bd171bc15c69ddecc1b81b093d8d2256ddef6f1e6c4119c8603d25c7a31793e
- MD5 cc1003dfae182fa11883380b23cd8d6b
- SHA1 bf66d48c68b9e4e664701a4621aa73f2a4877597
- SHA512 d41d144a1541915f935c8a11ec64ce596a59bb86db8d40b8b4f32f8762570297f0a815bc91311ace8c693671a5de30f34807ca3e64cacbb1e0cf83604fea5549
- SSDEEP 98304:tvqey6fXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCi:u6pnJ45/9iD54+V11bFv4z
- TLSH T1C9A6C82CC905A727E2B7C164809E0A17F5A2856AF6395F0E70CB1B693247A433F85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9966550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\src\MaterialDesignThemes.Wpf\obj\Release\net8.0-windows\MaterialDesignThemes.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.ml.onnxruntime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 09dd38a994759a148748d475a8a9661585e7821d7951d11dc95f3eb7f44a823d
- MD5 8fd18d77743ff30414851de7e2412120
- SHA1 146f684dda4cfc511ecce8c090e66782b204a782
- SHA512 eef51f5e779b905b882ca655113b33f72cd58cf796a575b6acda44f3dc7b4e7c0b5f25a918a86d2795d7e75fa793a311af0b6e1185ea4d53d80bc489a0a25229
- SSDEEP 3072:awEEcvKoRnhmh9gDi1AfUwiY/V4HVzd1wT6pyjHzBCFRz8Rj1EgiR3QUTTns908f:6EzVb1AswsLy6K1EgX+6F
- TLSH T175242A40B7C54EB9C1DD9B38ACB210111BB4F64B7163EB6E218DA4A61B13780A4F6FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
87:5f:86:2b:90:62:0d:f0:6b:b6:f7:cf:ce:e8:46:38:2b:9d:bc:b9:62:fc:ee:f0:a5:c4:29:b2:9a:f0:5e:02
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 26, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:84:98:e2:12:e0:78:a3:31:5d:00:00:00:00:04:84
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f4:17:46:85:c0:cb:3f:39:e5:00:01:00:00:01:f4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
221458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\_work\1\s\csharp\src\Microsoft.ML.OnnxRuntime\obj\RelWithDebInfo\net8.0\Microsoft.ML.OnnxRuntime.pdb
mscoree
_CorDllMain
Name
.text
Size
208KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.ml.onnxruntime.pdb
- SHA256 8cf7de153bcbee8218b9d5dae16278436d705a995dcba7bf84eb8987c10c0941
- MD5 439843e1d63e2e1e4518d71084816293
- SHA1 db42f31baff3473aee90a680c432b4a1e6540ab6
- SHA512 96c4ca1086c341078c3d0dfbf602ccb9356f9fdfd21069459d2c8b8154e964c63ae67623426f98e490f459e9c982fdaeb63de319781056c585dcb308e059e25d
- SSDEEP 1536:jkEfUblsjonHhuMn+T4RqwRroRX8uMkh4IhA4EzKSnO7rzfG:xs5rq8oROkh4+KO7W
- TLSH T1EC73096BA3948726C5151A3248FB974D3B35C304A7078F12F2E8F3BAE45B72417A766C
- MD5 SHA1 SHA512 SSDEEP TLSH
microsoft.xaml.behaviors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 acf2664d35f432ab9ea003040e5154ae8bb40a8f07d3eebee7093e97f44a96ea
- MD5 ccb74157fc6351497a0f5f514a668169
- SHA1 63bc35a0c27bb49e31012f55ba3e40145b0ea87c
- SHA512 e0f121c8802ae2020f62fc8d3ab3102f1686cf4d50bc381de00fd55b6409dc3ff7f490aef0883541231d4f0974ba0faa47ac501244a3f499e8ba361b930a5a36
- SSDEEP 3072:NkdbKTg58+1uIv640TPFMXT4Y7zu5i1dIXcBN425rFj8FXZ:cK+1robS0Y7zua+p
- TLSH T181E34CA053FC8F2AD7FF0635E0B452208736EBA3B563C75D5AC492AE046338296517B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
54:9d:c4:a0:f2:68:f2:db:cc:33:fb:b6:63:98:26:cb:cc:57:5b:a6:d9:5e:72:0f:51:da:fd:9e:d9:b8:3a:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 28, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b5:ad:1a:df:d7:85:70:6d:13:00:01:00:00:01:b5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
142314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net6.0-windows\Microsoft.Xaml.Behaviors.pdb
mscoree
_CorDllMain
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.xaml.behaviors.pdb
- SHA256 19e35f9012b50a07dab69bea1cdbc2f653da710c24cd2f772357b7a421be3086
- MD5 ad768c324ef543f5fae3f19cd60a3fcd
- SHA1 1a0e397f6ec5d0585af6089d3ce86711b9162ed7
- SHA512 c74bf5ae66a2e75466a75cebdd4da472851bfacb1946e6f87a0b1ef130042f5edbdaada3907d850f4f8de84bc888db10c3442d59217636700d7bce7b6639a2dd
- SSDEEP 6144:DgxrCis0IKc51eQdzXYpOKnNi3aQdzcKnNi:9GSXYpHS
- TLSH T16EA4B322BF44C633D91A94381ADB8F1D123CE3CD5B43AB4F6B85B11C6EE23996D47294
- MD5 SHA1 SHA512 SSDEEP TLSH
newtonsoft.json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a28c251dfe36d881e9e2462e171441b8b0ec156fe3f452602c9149b1b9efe05b
- MD5 c252fe44b67a08e6dab4eade3764db49
- SHA1 fcf801c0915cb47f400c74b1b459eb55ff4a5f9d
- SHA512 40656f812e273cd828b41ec58cba21dfe0cab186b8f5847744602005a9ba7caf1267729af8d37a420ea26f50221dcda85cc9695019a83f271fb81b6c32afc9c8
- SSDEEP 12288:BJJdZj8K4VopGZ5kYNkx8mJ0YHlyGBty0PJxqDo+3:B1J8xNe8MBBty06
- TLSH T159F46B0533E8CB2AE5EF6775B4314A1547F6F41AA2B2E74F6904A5ED0D83BC09D40BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:69:79:e3:5c:70:08:83:fe:bc:7e:9a:7d:cc:6b:4a:a2:9f:06:b4:df:02:3b:79:7d:fb:2f:07:8c:1c:fe:e5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 16, 2025
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0c:0d:22:a2:ef:64:2e:b8:88:c4:4f:a0:18:f0:0a:1b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 4, 2024 - Nov 3, 2027
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:4b:a1:b1:ad:e1:59:fc:e7:34:00:00:00:00:00:4b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 26, 2024 - Nov 19, 2025
Minor OS version
0
Major OS version
4
Entry point
715818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
692KB
Virtual Size
691KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
sharpgen.runtime.com.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28deb56e87ee908dce10094b666c5b603e3f01ef5b1c92603b0e7ed49b9b60ae
- MD5 e031e4ef7900f661c5d1fb7cf2ad6fdd
- SHA1 cadfd587e7d2f3e6533328fc5d85ffd71b27e978
- SHA512 69feab2511bd8a24bba0cde7c59fbe1392b90d8ac686ab0b41f33a9ed0b7e80d27e10b521fcc1c1d791971f1568351680c4f532c4a84ce393562f1099dde319b
- SSDEEP 3072:72IsQblPoGYsM16XSAIrn14b0p2nIrm7yHz/aIdWHuA37K8oBQ:7BdYsM1qSAE/kIq+H/dWOfz
- TLSH T164F36BE3FA0016B3ED0E8BBBAD92D1134AF092053D160B9E7984644B69FF6C465367D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
174542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SharpGenTools\SharpGenTools\SharpGen.Runtime.COM\SharpGen.Runtime.COM\obj\Release\net8.0\SharpGen.Runtime.COM.pdb
mscoree
_CorDllMain
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
sharpgen.runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 409aa1b082136c5fba1fcf363ef91739551691979f237c9bc0e93cf6778427b7
- MD5 c5bb7f64c5f61fcbfdd25ce130f9c9d7
- SHA1 605fac68335fd692a666f5e560299f4851ca1cc1
- SHA512 646d18cde3a1129738c7658cc6f0cf3aca7b2f1db91d99ae59abb4e6f32954515f5813667433815b732980c88e14f6ba0e89e74ea441a54a5e2d7cab16a96e3e
- SSDEEP 1536:ZJQ0mLMy0zbYcNSGFGZauC0Galmbvfpp5hurNpvjP6ERlZdeiOp:HuMyYhTe3lmRJurNpTrRlKv
- TLSH T132835B2927C94B2BDBDDD379F8F11129C334E2092673F31B6688A0B648173652B563F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
86778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SharpGenTools\SharpGenTools\SharpGen.Runtime\obj\Release\net8.0\SharpGen.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
supercluster.kdtree.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a198bd6aee87a2797d36f7b4fac96ee440a6a2243d122f7608bafb37b16c5ec2
- MD5 02e4bb4f3ddd030ce9856138b7fed981
- SHA1 3501061214fb5b3143e584831cff8d3c7216dc70
- SHA512 432d0205157a1725765e4c70cff5bdd4fa951935a784482460ea64cc19faba86ce5a94b2c3cd89968025cd7dfc2c7c43e1c4ced9e655dd6fca49847095b2f2b1
- SSDEEP 384:O4760qPNBDiY83X2EBttMZlZ1JePbdHs:t7WjD83X2J/ZCPbdM
- TLSH T104622A0462D85237DBFF5F77F83100B10AB5E6127902DBDD88C88ADA9C677A21E2176D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Eric\Documents\GitHub\Supercluster.KDTree\KDTree\obj\Release\Supercluster.KDTree.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.codedom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2211f23bde4ecf88b9ab58ed2cab76c8d88e59e99eb3ed77231f34577f1b6d95
- MD5 32a5a7c06951eee8bf17b1e87686db25
- SHA1 af77d8b9d421894be4be81d4763476c6a7490f18
- SHA512 0a17b3df8c441e07844e6b07a3e5f593c418bc32dd9fca6aff78e7454ee85b869963b9060ba7c82bea172b688248845b12b6bf195c5699b7b10b67a337bcc5a3
- SSDEEP 3072:cguoL64ILt8TyvhrUkufnNdO5KUPSl4bru9RYSH+lHMh1gBWT:u4ISevhrRanNlsu9CSKsP
- TLSH T182042964379C83B7DBAEA131E474065566FCA50E3282DB9F8D4664F55E23BC0FD20A32
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4e:86:c1:3f:eb:9f:35:27:c2:32:fa:86:78:c2:ad:45:60:2d:6f:18:38:35:69:74:ff:d7:a9:fa:51:ce:4d:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 12, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
178962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.CodeDom/Release/net8.0/System.CodeDom.pdb
mscoree
_CorDllMain
Name
.text
Size
167KB
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.io.pipelines.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a397ebf43b555e03189aae23879f4d4de132bc1d0f7c46f7e2884204148b343
- MD5 4a494a111dc186e0af040666f8fdce80
- SHA1 d0756172c50cedd0c9332f158882137622c2c167
- SHA512 a7f13edb2edb61e70b2fccfea304eab2b0e19d21308202e0ed8f32d0761f185fc7913fe2955002099b66572182885d851310932260e85633ccc1c1fff89760e8
- SSDEEP 1536:ZcXU2Qn3G7y3nXerqXVR2wLLCC4bgN0xmR9ewEWT1zIkC6tOiPzG:QG3vRWC4bgN0xmR9ewEWT5IkC6tO86
- TLSH T13E735C6893EC8717EBCF09BDA1B191130BF2DA516913FB4EA88CA89914C73D006252F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:f9:bd:d1:e4:25:a4:76:c8:25:17:f5:87:61:95:b2:14:51:d2:38:0e:f0:de:dc:b6:f3:49:d2:f3:fc:2f:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f6:83:2f:26:6a:54:5d:22:c1:00:01:00:00:01:f6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
72606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.IO.Pipelines/Release/net8.0/System.IO.Pipelines.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ed3c93b441992e1ff0f2ea9c7c4430e712d30669aef6dcf6ee5f11df1325cc4
- MD5 f2057988a60d6dfeb3ffd1dbf4308c54
- SHA1 12b789b4543990c9b3cda126f14a5bc1acae4ef1
- SHA512 146894ca64be12c795b473329910530b0adca86ee31615f1652d95717f1d38cac953f60516e031cca85ba387e65733a3d5f27346a524138fb9ba09ed965ada1f
- SSDEEP 768:M/jDXm3gh3nbNhm/I7TVEnthoQcjkiSLJKdbfy1rDjS9zHi:M/XXmEnbNDnW2QcjxS9yDyBuzHi
- TLSH T14173B411EBE88779CBE70670B47083746E74B6C72D22DA0F291B221D187AFC05F61E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
66:ae:b7:70:b4:22:30:37:6a:f9:4f:e1:07:28:31:25:b3:82:67:b4:66:2a:85:c6:47:62:58:89:bd:dc:65:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 12, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:05:3c:75:6c:82:44:87:cd:fe:00:01:00:00:02:05
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
67754
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Management/Release/net8.0/System.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.numerics.tensors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e59eb423d5a7d82998a0537653565d05033b07c606d59ed0756c2ff028343da
- MD5 6f4d6a74a187be94d04a11ed52095567
- SHA1 d948f74b30da3df7354478fee608a7b675df539d
- SHA512 79a3149938d67c0dd374b2ec265a6a0acd2876a00e73c460264ec00b97bbcbbac3227b9723fcaef93825978cfc792def29bd307c9bf0400dc97bb4ae25e72556
- SSDEEP 6144:Pvm6T8/QrwxwVIk4BoEOMblkZVpE7M/z2Vwk+OUZgFfznrKgu2:PvAPJsb20Xg1znrD
- TLSH T13B94F8903B9DEF16D8CF1F322C94224456299F82DA7E62AF785071F96DBC51C7900AF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:ff:33:92:dc:9a:90:a8:a4:35:70:df:85:1e:66:5f:dc:38:46:0c:0d:1a:5a:e3:18:a8:53:7c:b9:27:af:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 29, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
421414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Numerics.Tensors/Release/net8.0/System.Numerics.Tensors.pdb
mscoree
_CorDllMain
Name
.text
Size
419KB
Virtual Size
419KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.text.encodings.web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6be651fcd81a92ab4b0e1157e46ff13f69b66e581def1495f767147e51a1afa9
- MD5 e4e13058953b65cd91857b721eb58873
- SHA1 9d0227a32a2a74c8f105a5015c25bcee6eb787f4
- SHA512 00c3d63244ac401fb105094f45c44800e4283d73917464c799b359d54608d3cf2f7e106f7c3da75972cecad226e5724cb587b7b47b06a92375956bf979822850
- SSDEEP 1536:8SLlE1mZD00tqhmtB7FW5kvxgsMy4gOl3Jti0z:5E4JVc8oOlMRgC3Jt/
- TLSH T104636C10B7C8E619D75E06341CE080709BB8AFDB4526A6C72C857A5E1BB37C8AB1D1DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6b:f3:dc:de:9a:fc:07:97:d5:8f:05:0f:9c:c6:12:b3:b0:42:81:53:96:ed:43:9f:28:4f:bc:46:d9:61:5a:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
65038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Encodings.Web/Release/net8.0/System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.text.json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 793d646a2440e427f7897740b3ab9f1f692b31b419b3254e7ace17275baa8613
- MD5 82b5147c8e41afa2e866a00abc4385ce
- SHA1 f89ac5753db55f75602adc28e204031878eb91e6
- SHA512 fda021323572dd4f109298a975e7fbf059370ef2267868cc49c9fc72c790da5438dd620cd56c0d461b10c241720b6d5ca7c95174f90e47e51f72faf70051c6c7
- SSDEEP 12288:Ov6T7sdHBPuvlJfxkFW9S2lHAcCGnT25UMfdRv7M3qqfHFUV6y:OyT7sTPuvlJfxLS2lHAcC+T25lvYMR
- TLSH T1B0D47C11BBDCAB3BE9DF4776B0704021A7B6E55A67AAE74B492050F82C437807D41BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:ca:0e:0b:b1:1d:54:cd:5b:8e:33:8b:fd:d4:23:f9:1e:67:3b:48:90:a2:e4:e5:52:5b:13:71:cb:e0:13:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:00:0b:d7:aa:7f:1b:2a:17:56:00:01:00:00:02:00
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
637358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Json/Release/net8.0/System.Text.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
614KB
Virtual Size
614KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
vortice.direct3d11.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df63a41073486ae64e3ca46a80c02845f6f6ede5a98e435c0af3404be1c6112d
- MD5 cd5a3d4d8d26889fc750461c9c787bd3
- SHA1 aeb5cfe023582d4870605d99a7cdd342f876d794
- SHA512 d01139fa8e63cf67d2ec6b9e2fc52690da05e3e9af10cb0e0b7b30edf3dbcfd0403e36114928f5a30dbefee9f8b1db027809db889adbef21ed22731ed9876f94
- SSDEEP 6144:CQHD8orssEZaZhizPtb1ntAf5i52JN7DhB1LdUuOlRY6nFUU1d:FGzp1SBQ+q
- TLSH T1B2743C02EA8CD623CA4F53BDB062980643F0D818565BE74714FAC67D1EE37E09D1A7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
357898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Vortice.Direct3D11/obj/Release/net8.0/Vortice.Direct3D11.pdb
mscoree
_CorDllMain
Name
.text
Size
342KB
Virtual Size
341KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
vortice.direct3d12.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cab1615d3248d4d144b56fe613b4f5b87d7a8434a4427ed6215522289491921d
- MD5 fced70d6c645b30f9de42eef389d50c6
- SHA1 a1bec8599359082edb5d840fccff24110a33855f
- SHA512 a65d422e2bdbc349dd8e5d477cab41095ab709b2d3db749000477bf7ae7b0ef50726bff6c0ab8ba659aec0af2f180c5d61bece512d68148a63e0fa23ce90a023
- SSDEEP 12288:0aKFQtBRRtnVawcv7yc8CMO3p4P/mDeAw9ND+ey:3PtVdmGCvWND+ey
- TLSH T146B44A12BA799723CA9E027AF951A82701F1C508652FF70B14C4D9B95EC77A4CF1E2E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
517958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Vortice.Direct3D12/obj/Release/net8.0/Vortice.Direct3D12.pdb
mscoree
_CorDllMain
Name
.text
Size
498KB
Virtual Size
497KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
vortice.directx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de7a1fc387d5189c77557759cae58a2c3d1a2772e4fe10c0f52f7c39288d5866
- MD5 c73343eb809489e5cd449a4d57824ee7
- SHA1 f85b55d750af635fbc37cdaea7cca8154f2c29b6
- SHA512 15f106fa53c45be5a508a0e657dc6d120834236ea4fbc736556eba8b66219cddcf7bfc24e5b6f584a9aadccfb4858bf865ed0427b72faad1eb274e13496a947f
- SSDEEP 6144:j0LTFsOJdvGc0ZUaeFFFFF8FFFFFKFVFvFF2FdN4lc4dAsUhYdlSOm0GLTUYqAiz:j0BGoa7N4lcKAsjG3LTU5Ai8G
- TLSH T183743913BF241823EC4B2A7F59A8450B1EB3F03498D6649D3B47936C54CE684B9A73DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
369754
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Vortice.DirectX/obj/Release/net8.0/Vortice.DirectX.pdb
mscoree
_CorDllMain
Name
.text
Size
353KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
vortice.dxgi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a421736fe8280e6873ea39774a4fc974720967eb1809aa2ba02dd79ce3e5ca5c
- MD5 933f29d4d448bf44611b4ec3b9ac9d3c
- SHA1 40df8c59642941be047c51211684a169a2046762
- SHA512 4e23ac8eb73d9523882e445faa530e33e52c11f28f7bc3cfd8332a81a3ed6236ecb5a444dc35b96188992b786b0584d29b6e9121ae48e9ac4c637f6fa134918d
- SSDEEP 1536:tq7h10q8ZTrqupvMpbsqtu3lmqMsMn1yut61:tq7jivqupagkrqmJU
- TLSH T133930A124A899786DACF573AF9B2814983F0D30790B7B71B948460E2EDD33D4D627673
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
96890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Vortice.DXGI/obj/Release/net8.0/Vortice.DXGI.pdb
mscoree
_CorDllMain
Name
.text
Size
87KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
vortice.mathematics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 525a67f1f998b557d35554406ce5744a26c8d1abd5321b383a07fad8e86ab8dc
- MD5 edd77ff2619675bbea6190561d990a82
- SHA1 0422904d0f3bece42d3f9d4c4597685cad701dee
- SHA512 46169812f5a71ab04de3cc0ed2dd1cbbeaafa1b56c1a2581683266b941e3243dea987c786ee70dafadb4f0d11d61ee8b43d82a3983afddb08cdde1b0fa1a06bf
- SSDEEP 1536:+uj/rdacgcCw84r71oLcZKtECRq/30U9c59aHOfXkzlm:+uj/rdxgbKhoAZ9CRqMUL8L
- TLSH T1CEC3E8152B9C9A3BC66F4ABEF4940C29D334E167A733F3E7468980F86883785D8156C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
129018
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Vortice.Mathematics/obj/Release/net8.0/Vortice.Mathematics.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
vortice.mathematics.pdb
- SHA256 82b471b2333f35e0ce191b6482d812d9359c6b0a9e0b4e71b9c629a91012a659
- MD5 8d12e671811651c5ebb437e7f96ef6e5
- SHA1 e909e08db5a6226ae12371bcf8a58390da09bbd8
- SHA512 425333b92be9561cbfdd78c8e8b62146bb59eb5260353f1f7ee21d18f41e02ea5baa63abb56e776f8157eee64d7d98e927a75fd517995deea0a25bce04eef635
- SSDEEP 1536:AcReAsOvTUprBnA+7PynRcErrqTGZSfsvMe7tTCoCCTI2dA7Oer1U2:AcReHvdMrQoMubIV7Oer1U2
- TLSH T17A53E9368B448326CA4D8C335157837E53BC8391CF8AAF2B639463719ED97944EBB634
- MD5 SHA1 SHA512 SSDEEP TLSH
xamlradialprogressbar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac884b765f869f144d93f4b41a15ec87243456de3d05fb3d5ff263c25a8ddedf
- MD5 e099c0231ad61aa4ba8f4bde1b09f1e3
- SHA1 f2d7f1dde295000855372f6eebb991f43397c6ba
- SHA512 241c57f5e5024b143046522607bb1069142ccd8a86d1f74a89e1de5fb176362ee6250d99da030cde84519df48e71058c02747ea6e5ef4285516f27db27fc6db6
- SSDEEP 384:Bl3eljdq3NY9xWv/ax4gkTYVWV+vEGbR/WVgQADtoV2PjuLOnnzHEiqT3K60Nfxn:3eljQdEyUWT3nI8aL
- TLSH T1A7B20B8933B1851DEADE0A346E630324873AD5537963C71926D022F99FE7B530CB26E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\MyProjects\RadialProgressBar\RadialProgressBar\src\XamlRadialProgressBar\XamlRadialProgressBar\obj\Debug\netcoreapp3.1\XamlRadialProgressBar.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
916B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
YmmiaV2.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 4cfcd9df73030e8d372145a180bccc1bdd8f581cc7baaa54ddb5150a02af8dbc
- MD5 c2a8838b8a8e5c9f927122ad96bc8a6c
- SHA1 15a8c0170e1c1e993c187135b4c556b0835c26d3
- SHA512 c8a33b925bd9815238d32f6d506eae3d0f80433b2d18d2caa5b85572c37f50541a12588988ba15e45635d8c510dbb7cc99662f438d17e4431ad0361a91956f09
- SSDEEP 1536:t9YXnq9YamgiYSoGR6+k84vKqIzjiCBs86Q6LRwqzm4XqIY01NTJZ2bo+W26mCIF:8qvmgiYSo4k8uIPzlSRwa/5B26mCIgm
- TLSH T155E33B07E6A851BEE1B7C679CD924C41FB7378594B71A7CF07504AB60E63AD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33140,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35217,
count=1, id=258, version=35217,
YmmiaV2.runtimeconfig.json
- SHA256 89ad1ea5c9c20b6b266547ef27c0ae3840cab5642d3c2aedf06b7026245671dd
- MD5 e0f6f18f9b152bc2d8c710b0214805d6
- SHA1 ae3d39e59fd6edc05792a76cdf4f02a637f52e29
- SHA512 80a6a9ff925bd1ba6f57fa1f7dd40de962001af97f8c2477d0b502728e23b6f412c74134e33efb36ccfeb08bbbeb678beb7e2e52fad24a763967eba8cf09b29e
- TLSH T1BDF02069CA106DB708B937BEC62AD183EA30536B00041D96B9FC080C2F776A22112F89
- MD5 SHA1 SHA512 TLSH
bin/binding.cfg
- SHA256 06a6e95d015213e070b4dff5e42a5cb09855dc85273497f72a5e7c9b1049c365
- MD5 5ad83e70ad26acd358eecfea4f4634f8
- SHA1 3755ece10b8f943b57bfc6039ca7b676a448e060
- SHA512 eca09617c52591d0f959a2cd16047d18fb2ecd8475175566f747d3ad75597cb6df56fab4a95b6153acbef4ebcf772541edca57d8881580befb31b383a3336efb
- TLSH T19FC012231B4DAD1316B50765CDF5323F32C4DE8A413B1C8E6073D40402CA4474084F75
- MD5 SHA1 SHA512 TLSH
bin/colors.cfg
- SHA256 7867be1d14fe34f057e29970b77ab00c13ebf3320c6c91ac5abc39a24c965888
- MD5 0f9057863d0f9a0226c9d1412068bc51
- SHA1 23fbfd65808ca0fb07997b78ca6d4c8a20aaeb4e
- SHA512 8ff3b18f86af741c591ba22804d8fde5fc8cc59bf0f3c2ca1a2945ab92669da3e99acfc54d88b547eac86586226e3e885a3719d787bf59ecd643ef24cfe2ba3a
- TLSH T12CB0920A2F4C292A032B4289101000007006BA4A08A84CAFA823848C602826C88523D4
- MD5 SHA1 SHA512 TLSH
bin/configs/Default.cfg
- SHA256 c5fb6ad1ea0335c12d357e0972f7b42ee466f66173ef416fd718b3ee0cbd775b
- MD5 3e51fd8b431a3c613fd7f17c6955b1d1
- SHA1 98026289b7c50d63e5bd513a1a6522cc661f55f6
- SHA512 d8a1d1db3d6aaf2c1f3e5045d77786bb4b54d7cc938cbd82b381e1395c028953a3b043279bbb467a31a2f74c6472af74ee4c4669ac842db13e45cc38b15d229e
- TLSH T16A118827792940BF34FE93E45137D417B5942F4A13706E2B3BBB4A289143C772A537A8
- MD5 SHA1 SHA512 TLSH
bin/dropdown.cfg
- SHA256 a2ccb18af4e3fe2528ad8856a3c4f9989695313c66e834b926ffe26f479d5dd3
- MD5 6438059225fa7c730124f1fec71a9f18
- SHA1 5dab3ae20f409506e3a9332a17badd8ba2f94c96
- SHA512 d1f51d2b9bc2f4bd18d6d1948e6629a60869c9e829b8dcd975eb22219a30846e1008219f5a5fb99a46dad6856c3d4450b1b849df106b3832bfae1154d57d5c8a
- TLSH T144E0D813B455901F40FEDB9A50B2845274681F9F13742E0B38B79725145AD366307FB4
- MD5 SHA1 SHA512 TLSH
bin/filelocations.cfg
- SHA256 ebe03a109b30ee4ece2dd8f47ed3c4774e3b01dc351aa17b2f97b426b7dedfd4
- MD5 7db3497fb33adf23cd657c5ee41578f9
- SHA1 03f6cf91f9458f28f4605a69a9baed952ce2c875
- SHA512 62258b7ea95bd4f2fb39097c35495a8b791373df71d31b18d117b473bc699557a84345c0a061c867d9bd9bb72b0bfeed40b7574135aa6e71d4c0ef0c10d379c7
- MD5 SHA1 SHA512
bin/labels/labels.txt
- SHA256 0021d5fe20a08754dd965d947e4830740633aa94b4555d03067aaa6a3e6e1214
- MD5 8c6d21187fb58b7a079d70030686b33e
- SHA1 a25632f8f4ff9659997a848c2ebeef27d0974164
- SHA512 2b9f6b63d16cddb68715a3438171e729fa3be22506014034f03aa5631b72eecad7921cb3fc6a00c5b1e9aa78623b95a80d92920d74affe078658d262b37f0bf3
- MD5 SHA1 SHA512
bin/minimize.cfg
- SHA256 f78570aeea48173d444b362cb35501ffcd6c74387fb4e90f9102c271c0e979ac
- MD5 3316fa3c0cec964b1da72597724a1c40
- SHA1 ce3f3783715719830987f60b157215887594504f
- SHA512 ba17d80eb63ceacf84adfbb38d01ab0c95e21a3617a18d572419654c783936212f6bcfe016bfbc24702c9f185216741b965a320771240c87339f9beca747317b
- TLSH T1F0E0482AE88145FE24BD262DCE07D2615B519F6165780C2BF0FF60293739AB12291FE0
- MD5 SHA1 SHA512 TLSH
bin/models/Universal_Hamsta_v5_Enhanced.onnx
- SHA256 a37ccf513bc4e837f1a305a3c25d693a30d6223451f686a5270de672701d77fc
- MD5 6fcf23fe9bff714da1ca2f8f0722041d
- SHA1 07c6b068a5826653d36c257bd20096ff13ff229b
- SHA512 6d838af64051db3785c45fdec2ec32ffee4b472fb622d52cb740c72b119017e64186603116119ef9456532e051c1f1596621c75a477be9a10ebdaba9fe4ffb79
- SSDEEP 786432:Umde8+yEGkBqdhuuqpEylQsqVPsEGXeG6UIwjWinPdkcm1eV2ON8AGgGqcL5rPSd:tEwE1Ydh84sqVPdGuGNIwjWqPrm1e8p2
- TLSH T11C8733A460BA9FC9CDDF057BFB5188492BD251F04FB31869276B3C8C8C1EAF15C4469A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/toggles.cfg
- SHA256 9bee0429f890f983bfeea000d54612b5f982a6c32552cc0daeebe0bc4070b84a
- MD5 62258d336a26cb9a2340fa95688b4893
- SHA1 3f12238bdb4d4e6213d5439637acb688c966eab8
- SHA512 2abcc82f2cea5f496520491ca3c1b21362d8eb91641777ee28d2ba89da7e8a5ba23b6605b18fe474982be5a1fa35c47d4b7be2234b9d8f1450e69eb32e6113d8
- TLSH T17C01F42BEC8984FC64BE426DD808D512ABA04F6030311C17F1FF650836B483E3411FD4
- MD5 SHA1 SHA512 TLSH
onnxruntime.dll
- IMPHASH 84c8c136541fae5d8ab677da1563827e
- SHA256 f5131591edac6b0a8090d0e329040a49319d7a689cb5b465235fbf7030fa8027
- MD5 d8ac57622ad4ddcf862cf9c3771b06c4
- SHA1 7dc228ecb5ebc1c75630c3fdaf766635d4660f1e
- SHA512 10083a06dc102e671c3342fbfb076d70f53e885e2ac192a7c2da3863f694a6366156bbedea8aa45a58a2a183381cea6c2358693f72a751dabf4f9fe307155794
- SSDEEP 98304:GbIKR+DnS96WQXVGgp4WKvUs8jRKcuwTqQesMDsmH+RxAOjbFwDcFRRULg8Bn:GbIKsLWQX8g6WQact6dRMwLxxUg8B
- TLSH T189077D26769902ECD1BFD17C8A4B9903FBB1744903756AEB02E141A61F5B7E09E3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f1:36:59:50:92:0c:fb:8b:cc:60:6a:a3:f3:9c:df:3a:d3:d3:47:fb:f4:9e:89:91:95:62:10:d8:15:5a:11:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 26, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f9:1f:67:8d:75:ab:a4:f1:b1:00:01:00:00:01:f9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
12336240
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\_work\1\b\RelWithDebInfo\RelWithDebInfo\onnxruntime.pdb
kernel32
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
WideCharToMultiByte
DebugBreak
IsDebuggerPresent
FreeLibrary
CreateEventW
MultiByteToWideChar
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
ReadFile
FindFirstFileW
GetFileSizeEx
FindNextFileW
GetCurrentProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
GetModuleFileNameW
GetEnvironmentVariableA
FindClose
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
GetModuleHandleA
Sleep
GetFileAttributesA
GetLogicalProcessorInformationEx
GetCurrentThread
DeleteFileW
GetSystemInfo
SetThreadGroupAffinity
SetFilePointerEx
CreateDirectoryA
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetCurrentProcessorNumber
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
SetLastError
GetSystemTimeAsFileTime
LoadLibraryA
IsProcessorFeaturePresent
HeapFree
TerminateProcess
SetUnhandledExceptionFilter
CreateSemaphoreExW
UnhandledExceptionFilter
RtlVirtualUnwind
InitOnceExecuteOnce
QueryPerformanceCounter
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
RtlCaptureStackBackTrace
GetLogicalProcessorInformation
GetModuleFileNameA
CreateFile2
OutputDebugStringA
GetMaximumProcessorGroupCount
GetMaximumProcessorCount
GetStdHandle
WriteFile
RaiseException
VirtualProtect
VirtualQuery
LoadLibraryExA
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
GetFileAttributesExW
CreateFileW
GetLocaleInfoEx
LocalFree
InitOnceBeginInitialize
InitOnceComplete
GetFileInformationByHandleEx
WakeAllConditionVariable
InitializeSListHead
advapi32
RegCloseKey
RegQueryValueExW
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
api-ms-win-core-path-l1-1-0
PathCchRemoveFileSpec
PathCchRemoveBackslash
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetClassDevsA
msvcp140
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?good@ios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_wait
_Query_perf_counter
_Xtime_get_ticks
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
_Thrd_hardware_concurrency
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?eof@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?wclog@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
_Cnd_signal
_Cnd_init_in_situ
_Thrd_id
_Cnd_destroy_in_situ
_Strxfrm
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?classic@locale@std@@SAAEBV12@XZ
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?setf@ios_base@std@@QEAAHH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
_Thrd_yield
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
_Mtx_unlock
_Mtx_lock
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Winerror_map@std@@YAHH@Z
msvcp140_1
_Aligned_get_default_resource
dbghelp
SymFromAddr
ImageDirectoryEntryToData
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__current_exception_context
__std_type_info_destroy_list
memset
__C_specific_handler
__std_exception_destroy
memmove
memcpy
memcmp
__std_terminate
_CxxThrowException
__std_exception_copy
_purecall
__std_type_info_compare
__std_type_info_name
__RTtypeid
strchr
memchr
api-ms-win-crt-heap-l1-1-0
malloc
realloc
_callnewh
_aligned_malloc
calloc
_aligned_free
free
api-ms-win-crt-string-l1-1-0
towlower
_stricmp
isdigit
isalnum
isspace
strnlen
isalpha
tolower
strncmp
strcmp
_towlower_l
_towupper_l
strncpy
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
terminate
_errno
abort
_invalid_parameter_noinfo_noreturn
strerror_s
_cexit
strerror
_crt_atexit
_set_errno
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_set_doserrno
_beginthreadex
_configure_narrow_argv
__doserrno
_seh_filter_dll
_initterm_e
_initterm
_exit
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fputc
__stdio_common_vsprintf_s
fflush
fclose
fgetc
fwrite
__stdio_common_vswprintf
fgetpos
__stdio_common_vsprintf
_get_stream_buffer_pointers
_read
_sopen_s
setvbuf
_close
ungetc
_wsopen_s
fsetpos
_fseeki64
fread
_write
api-ms-win-crt-convert-l1-1-0
atoi
strtoul
strtoull
strtof
strtol
strtod
wcstoul
strtoll
api-ms-win-crt-time-l1-1-0
_localtime64_s
_gmtime64_s
_mktime64
wcsftime
_difftime64
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
remove
_lock_file
_wstat64
_unlock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
_free_locale
_create_locale
api-ms-win-crt-math-l1-1-0
cosf
coshf
atanf
cos
asinf
sqrt
remainderf
acosf
_fdsign
exp
expf
nearbyintf
floor
round
log1pf
asinhf
atanhf
acoshf
rint
nearbyint
rintf
fmod
sinhf
ilogbf
scalbn
ilogb
scalbnf
sqrtf
fmax
fmodf
_dsign
tanf
sinf
frexp
tanhf
log
ldexp
log10
log2
logf
pow
tanh
powf
floorf
roundf
ceil
ceilf
llroundl
sin
_ldsign
OrtGetApiBase
OrtSessionOptionsAppendExecutionProviderEx_DML
OrtSessionOptionsAppendExecutionProvider_CPU
OrtSessionOptionsAppendExecutionProvider_DML
Name
.text
Size
12.0MB
Virtual Size
12.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
465KB
Virtual Size
490KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
391KB
Virtual Size
390KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=30795,
count=7, id=260, version=33731,
count=28, id=259, version=33731,
count=8, id=257, version=33731,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=30795,
count=3, id=260, version=30795,
count=43, id=261, version=33731,
count=536, id=1, productName=Unmarked objects,
count=15, id=260, version=33821,
count=163, id=261, version=33821,
count=37, id=259, version=33821,
count=620, id=265, version=33821,
count=1, id=256, version=33821,
count=1, id=255, version=33821,
count=1, id=151,
count=1, id=258, version=33821,
onnxruntime_providers_shared.dll
- IMPHASH 760d82578721a074ac240db77368fcb0
- SHA256 3b27e1417d12b73a6a34d80414c083e359e092d2f0ce572d7e67be8cdbe9e825
- MD5 89f6a490dacbd3bb5222fabca8cf890a
- SHA1 2a3ebd8758bdab451461a94e4ec4d58e0b79a7a1
- SHA512 28a51a274eb51398fc68f7ec75f87443d6785c4cbeeaa77ffefa36ae67370ff72ae9c827cd9b2bc0777892cb05ae2ea6db3e0abde73cc2edc2460ead6cdbe07a
- SSDEEP 384:1Dbe/6cG6bCp5rWD5WT1+aHRN7Lfo7R9zx:xqyb6G3EI+2L89z
- TLSH T18BA25D99EE684086EC5649708576DE07B83D77831711B39B03A0E5592FA33C2FB35359
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9c:1f:34:d1:a3:d7:10:37:1e:e7:31:d4:3a:88:33:3f:a3:74:e8:a5:e3:82:14:a2:4d:52:53:3c:6e:c5:35:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 26, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:05:3c:75:6c:82:44:87:cd:fe:00:01:00:00:02:05
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
4960
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\_work\1\b\RelWithDebInfo\RelWithDebInfo\onnxruntime_providers_shared.pdb
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
memcpy
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit
Provider_GetHost
Provider_SetHost
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=33731,
count=35, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=33731,
count=8, id=260, version=33731,
count=11, id=261, version=33731,
count=1, id=265, version=33821,
count=1, id=256, version=33821,
count=1, id=255, version=33821,
count=1, id=151,
count=1, id=258, version=33821,
runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 108c563b14faeaf065eed875779ae768ae14a2884b023b700a6ea9d8b8486b49
- MD5 aa59b0aff6a3dc676e8bbade0aadf717
- SHA1 8e306e80eff769ccd267e540e33af20a7ec62900
- SHA512 13ecb52e5ee9c74429e7b52f061fd3cd3e61cd908c942e0b478f0dde644b65789b1029be97346376a70047cc43dc9793c57ad9400819373cdcf4572ae8ac5d2c
- SSDEEP 1536:cjLlmhEsZjUoc7t12PeyH/Mu3mdildkza:+mhEsZj+16/r3mdPO
- TLSH T1D3634A11F7C8E61ADB5D0A311CE080749BB4AFDB5526A6C72C853A4E17B33C87B191EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ef:ee:25:dd:18:50:aa:50:70:51:2c:12:18:b4:9b:5f:1d:c3:96:d3:d7:23:73:2f:db:e5:66:bb:6c:f6:67:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 11, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
65198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Encodings.Web/Release/net8.0-browser/System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
runtimes/win-arm64/native/onnxruntime.dll
- SHA256 eeb871a02641c75f4b491e2b579199b5cf923ac7d811c596e15e1b4358f31fc4
- MD5 4a478df76048e54ebca94f9c7ca87f14
- SHA1 9831ef2973d2f757aa134c7e7514b3124927e26e
- SHA512 4ff3c9183eda31be2e4036209aa7b8027a7c8a5d1f6f4bb63da11dab103c830a7c150c1794c0aa4ef5e14481c3a00a0ceb08133a1aef0d16aaed716526180bc0
- SSDEEP 393216:rd6t3It9B52VPeacVw8o3F6QoTQ0WmsQ6eBc3OO:J52VPeEFQqpX
- TLSH T134078D74AF4CB874E2CBD33C9E9B8765322FB464962086C7785A034DEDE57D085B21B2
- MD5 SHA1 SHA512 SSDEEP TLSH
runtimes/win-arm64/native/onnxruntime.lib
- SHA256 8e6202da8a42651d1ead88dfce0a11a8b5169036ad7e7fccd133cc2818961ca9
- MD5 1d58723f6f8a23bb3d0ec67f82b0b0c5
- SHA1 75484b3587af2dcb055a1b7d0f538fc6e25bc664
- SHA512 16a7882e32c133dc1c4eaf1e7ec76640689193a23e1639e88cc551a20be9a2864441cbc8b4e05c35e43022b3b39cf8ba991bfb0d6b264b0a9cedb2c9e9f4c2ae
- TLSH T16C518D3084DA03B5E1B5ED3679A14CA0EB3CA20812039E327C5D95F5C7DA684DD536DA
- MD5 SHA1 SHA512 TLSH
runtimes/win-arm64/native/onnxruntime_providers_shared.dll
- SHA256 53537db2deb23f44209fcad1d387210fe77c9fe1c2aa8be47d10b0c468abfb96
- MD5 7c634625ca91acc2d68291111260bf94
- SHA1 7b38daef44c68c114b37ff79a7ba3dc24085e0cb
- SHA512 709411fd144c89773e34be27495cea845a52d0b428cb6275174dcce78a16b9f69577840274ee865bde4a50a19dcc19723f605f0c08b44eceb76e0cb5ddbb86c6
- SSDEEP 384:2Zq5r/BlP8i8WD5Wt1+aHRN7Pp9R9z/2:gQZ5G+2R/9zu
- TLSH T1F0925BD157B80483E9DBABB08566DD1A6C3FF7EA0510E11A2341B11E6E277C2FB2426D
- MD5 SHA1 SHA512 SSDEEP TLSH
runtimes/win-x64/native/onnxruntime.dll
- IMPHASH 84c8c136541fae5d8ab677da1563827e
- SHA256 f5131591edac6b0a8090d0e329040a49319d7a689cb5b465235fbf7030fa8027
- MD5 d8ac57622ad4ddcf862cf9c3771b06c4
- SHA1 7dc228ecb5ebc1c75630c3fdaf766635d4660f1e
- SHA512 10083a06dc102e671c3342fbfb076d70f53e885e2ac192a7c2da3863f694a6366156bbedea8aa45a58a2a183381cea6c2358693f72a751dabf4f9fe307155794
- SSDEEP 98304:GbIKR+DnS96WQXVGgp4WKvUs8jRKcuwTqQesMDsmH+RxAOjbFwDcFRRULg8Bn:GbIKsLWQX8g6WQact6dRMwLxxUg8B
- TLSH T189077D26769902ECD1BFD17C8A4B9903FBB1744903756AEB02E141A61F5B7E09E3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f1:36:59:50:92:0c:fb:8b:cc:60:6a:a3:f3:9c:df:3a:d3:d3:47:fb:f4:9e:89:91:95:62:10:d8:15:5a:11:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 26, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f9:1f:67:8d:75:ab:a4:f1:b1:00:01:00:00:01:f9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
12336240
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\_work\1\b\RelWithDebInfo\RelWithDebInfo\onnxruntime.pdb
kernel32
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
WideCharToMultiByte
DebugBreak
IsDebuggerPresent
FreeLibrary
CreateEventW
MultiByteToWideChar
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
ReadFile
FindFirstFileW
GetFileSizeEx
FindNextFileW
GetCurrentProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
GetModuleFileNameW
GetEnvironmentVariableA
FindClose
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
GetModuleHandleA
Sleep
GetFileAttributesA
GetLogicalProcessorInformationEx
GetCurrentThread
DeleteFileW
GetSystemInfo
SetThreadGroupAffinity
SetFilePointerEx
CreateDirectoryA
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetCurrentProcessorNumber
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
SetLastError
GetSystemTimeAsFileTime
LoadLibraryA
IsProcessorFeaturePresent
HeapFree
TerminateProcess
SetUnhandledExceptionFilter
CreateSemaphoreExW
UnhandledExceptionFilter
RtlVirtualUnwind
InitOnceExecuteOnce
QueryPerformanceCounter
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
RtlCaptureStackBackTrace
GetLogicalProcessorInformation
GetModuleFileNameA
CreateFile2
OutputDebugStringA
GetMaximumProcessorGroupCount
GetMaximumProcessorCount
GetStdHandle
WriteFile
RaiseException
VirtualProtect
VirtualQuery
LoadLibraryExA
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
GetFileAttributesExW
CreateFileW
GetLocaleInfoEx
LocalFree
InitOnceBeginInitialize
InitOnceComplete
GetFileInformationByHandleEx
WakeAllConditionVariable
InitializeSListHead
advapi32
RegCloseKey
RegQueryValueExW
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
api-ms-win-core-path-l1-1-0
PathCchRemoveFileSpec
PathCchRemoveBackslash
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetClassDevsA
msvcp140
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?good@ios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_wait
_Query_perf_counter
_Xtime_get_ticks
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
_Thrd_hardware_concurrency
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?eof@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?wclog@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
_Cnd_signal
_Cnd_init_in_situ
_Thrd_id
_Cnd_destroy_in_situ
_Strxfrm
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?classic@locale@std@@SAAEBV12@XZ
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?setf@ios_base@std@@QEAAHH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
_Thrd_yield
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
_Mtx_unlock
_Mtx_lock
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Winerror_map@std@@YAHH@Z
msvcp140_1
_Aligned_get_default_resource
dbghelp
SymFromAddr
ImageDirectoryEntryToData
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__current_exception_context
__std_type_info_destroy_list
memset
__C_specific_handler
__std_exception_destroy
memmove
memcpy
memcmp
__std_terminate
_CxxThrowException
__std_exception_copy
_purecall
__std_type_info_compare
__std_type_info_name
__RTtypeid
strchr
memchr
api-ms-win-crt-heap-l1-1-0
malloc
realloc
_callnewh
_aligned_malloc
calloc
_aligned_free
free
api-ms-win-crt-string-l1-1-0
towlower
_stricmp
isdigit
isalnum
isspace
strnlen
isalpha
tolower
strncmp
strcmp
_towlower_l
_towupper_l
strncpy
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
terminate
_errno
abort
_invalid_parameter_noinfo_noreturn
strerror_s
_cexit
strerror
_crt_atexit
_set_errno
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_set_doserrno
_beginthreadex
_configure_narrow_argv
__doserrno
_seh_filter_dll
_initterm_e
_initterm
_exit
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fputc
__stdio_common_vsprintf_s
fflush
fclose
fgetc
fwrite
__stdio_common_vswprintf
fgetpos
__stdio_common_vsprintf
_get_stream_buffer_pointers
_read
_sopen_s
setvbuf
_close
ungetc
_wsopen_s
fsetpos
_fseeki64
fread
_write
api-ms-win-crt-convert-l1-1-0
atoi
strtoul
strtoull
strtof
strtol
strtod
wcstoul
strtoll
api-ms-win-crt-time-l1-1-0
_localtime64_s
_gmtime64_s
_mktime64
wcsftime
_difftime64
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
remove
_lock_file
_wstat64
_unlock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
_free_locale
_create_locale
api-ms-win-crt-math-l1-1-0
cosf
coshf
atanf
cos
asinf
sqrt
remainderf
acosf
_fdsign
exp
expf
nearbyintf
floor
round
log1pf
asinhf
atanhf
acoshf
rint
nearbyint
rintf
fmod
sinhf
ilogbf
scalbn
ilogb
scalbnf
sqrtf
fmax
fmodf
_dsign
tanf
sinf
frexp
tanhf
log
ldexp
log10
log2
logf
pow
tanh
powf
floorf
roundf
ceil
ceilf
llroundl
sin
_ldsign
OrtGetApiBase
OrtSessionOptionsAppendExecutionProviderEx_DML
OrtSessionOptionsAppendExecutionProvider_CPU
OrtSessionOptionsAppendExecutionProvider_DML
Name
.text
Size
12.0MB
Virtual Size
12.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
465KB
Virtual Size
490KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
391KB
Virtual Size
390KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=30795,
count=7, id=260, version=33731,
count=28, id=259, version=33731,
count=8, id=257, version=33731,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=30795,
count=3, id=260, version=30795,
count=43, id=261, version=33731,
count=536, id=1, productName=Unmarked objects,
count=15, id=260, version=33821,
count=163, id=261, version=33821,
count=37, id=259, version=33821,
count=620, id=265, version=33821,
count=1, id=256, version=33821,
count=1, id=255, version=33821,
count=1, id=151,
count=1, id=258, version=33821,
runtimes/win-x64/native/onnxruntime.lib
- SHA256 6ece2bfc300bbdea7dd0b8939f4ef86bded7d689acd4fb63c2d1e76dcd4b7450
- MD5 9aa3fcf9c8f9253c186445ac12961932
- SHA1 f9039c02db85a3c0637346794c0b507e10034cb3
- SHA512 c0a1732d9b9fce262453cdb47aa13b4817cb0130f2ebaf89f75bedefbf28f75c0ab0618a94b405efe570b614c63aad7838f232d54644f4b7cd8a221ed3f91bef
- TLSH T1C4518D3088DA07B5E1BAED3679A04CB0EB3C920412039E337C5E55F587DA684DD536DA
- MD5 SHA1 SHA512 TLSH
runtimes/win-x64/native/onnxruntime_providers_shared.dll
- IMPHASH 760d82578721a074ac240db77368fcb0
- SHA256 3b27e1417d12b73a6a34d80414c083e359e092d2f0ce572d7e67be8cdbe9e825
- MD5 89f6a490dacbd3bb5222fabca8cf890a
- SHA1 2a3ebd8758bdab451461a94e4ec4d58e0b79a7a1
- SHA512 28a51a274eb51398fc68f7ec75f87443d6785c4cbeeaa77ffefa36ae67370ff72ae9c827cd9b2bc0777892cb05ae2ea6db3e0abde73cc2edc2460ead6cdbe07a
- SSDEEP 384:1Dbe/6cG6bCp5rWD5WT1+aHRN7Lfo7R9zx:xqyb6G3EI+2L89z
- TLSH T18BA25D99EE684086EC5649708576DE07B83D77831711B39B03A0E5592FA33C2FB35359
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9c:1f:34:d1:a3:d7:10:37:1e:e7:31:d4:3a:88:33:3f:a3:74:e8:a5:e3:82:14:a2:4d:52:53:3c:6e:c5:35:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 26, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:05:3c:75:6c:82:44:87:cd:fe:00:01:00:00:02:05
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
4960
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\_work\1\b\RelWithDebInfo\RelWithDebInfo\onnxruntime_providers_shared.pdb
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
memcpy
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit
Provider_GetHost
Provider_SetHost
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=33731,
count=35, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=33731,
count=8, id=260, version=33731,
count=11, id=261, version=33731,
count=1, id=265, version=33821,
count=1, id=256, version=33821,
count=1, id=255, version=33821,
count=1, id=151,
count=1, id=258, version=33821,
runtimes/win/lib/net8.0/System.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5159d5639053c4f1fdb75195bb5af3351a69a6fe086bacb2837fcfe626312162
- MD5 f710fabb9dc5b819bd060a4aa8f2cfee
- SHA1 5cf2df77c999f8daae47e12faada6f9d63d4ee34
- SHA512 b5b8d50bacc22b0a201a4d795c9c88b842d4d89026ce13150b779319060eb4105656747bf30f633a23f8cd8952f5aa37c5f947465cbb452a2a02ae325b74a4b2
- SSDEEP 6144:6Kk+PHI08vB/RqQblb0BSTxCwv5ih79wZ22kxpxr+:6f+PHI08v9RqQblb0BK15iZcKxpE
- TLSH T1D264061033FC5654E5BF4FBAA1742064CFB9BB932E5EDB4D1C01A8CE18A1B909623767
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ef:fd:ea:ec:4a:4a:49:3d:40:5e:d6:44:bc:5a:d5:27:90:10:43:01:41:6c:fd:13:d8:ec:86:61:f8:a6:a3:12
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 12, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:02:79:50:74:21:14:7d:b8:a1:00:01:00:00:02:02
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
308098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.Management/Release/net8.0-windows/System.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
293KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ