00574807126def1206594ee8ff052a99020360c24a0ba90c340733d112894c64
- SHA256 00574807126def1206594ee8ff052a99020360c24a0ba90c340733d112894c64
Overview
overview
3Static
static
3SwiftList/...es.dll
windows10-2004-x64
1SwiftList/...es.dll
windows11-ltsc_2024-x64
1SwiftList/...te.dll
windows10-2004-x64
1SwiftList/...te.dll
windows11-ltsc_2024-x64
1SwiftList/...v2.dll
windows10-2004-x64
1SwiftList/...v2.dll
windows11-ltsc_2024-x64
1SwiftList/...re.dll
windows10-2004-x64
1SwiftList/...re.dll
windows11-ltsc_2024-x64
1SwiftList/...e3.dll
windows10-2004-x64
1SwiftList/...e3.dll
windows11-ltsc_2024-x64
1SwiftList/...ta.dll
windows10-2004-x64
1SwiftList/...ta.dll
windows11-ltsc_2024-x64
1SwiftList/...e3.dll
windows10-2004-x64
1SwiftList/...e3.dll
windows11-ltsc_2024-x64
1SwiftList/...ns.dll
windows10-2004-x64
1SwiftList/...ns.dll
windows11-ltsc_2024-x64
1SwiftList/...ns.dll
windows10-2004-x64
1SwiftList/...ns.dll
windows11-ltsc_2024-x64
1SwiftList/...ds.dll
windows10-2004-x64
1SwiftList/...ds.dll
windows11-ltsc_2024-x64
1SwiftList/...us.dll
windows10-2004-x64
1SwiftList/...us.dll
windows11-ltsc_2024-x64
1SwiftList/...rs.dll
windows10-2004-x64
1SwiftList/...rs.dll
windows11-ltsc_2024-x64
1SwiftList/...er.dll
windows10-2004-x64
1SwiftList/...er.dll
windows11-ltsc_2024-x64
1SwiftList/...ch.dll
windows10-2004-x64
1SwiftList/...ch.dll
windows11-ltsc_2024-x64
1SwiftList/...er.dll
windows10-2004-x64
1SwiftList/...er.dll
windows11-ltsc_2024-x64
1SwiftList/...as.dll
windows10-2004-x64
1SwiftList/...as.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
SwiftList/Plugins/SwiftList.Plugins.ListSearch.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
SwiftList/Plugins/SwiftList.Plugins.ListSearch.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 00574807126def1206594ee8ff052a99020360c24a0ba90c340733d112894c64
- Size 2.9MB
- Sample260714-e33jraes8m
- SHA256 00574807126def1206594ee8ff052a99020360c24a0ba90c340733d112894c64
- MD5 5f67c9bf151d8262d01e72b6696d569e
- SHA1 172dfc839dbe7860bb87e2d792f3edbe120fe928
- SHA512 0c696780b5e7589e813ccbf4bb6c1379df12a1020be063b67bd43b373891390ea3cb1ec172981d6f0f30fd0ddf1e0eef28fb01e1f7d1bcb94574375c6c8f9dc9
- SSDEEP 49152:BAWWeig57knr0ju9dmQz4BleCV8riwyzoEVJXvwJfBhr3ORB7SW+jOIgcrv8Ja3h:BBYJr8u7RzUl/vzxVxwJfzeSfgivT3Ow
- TLSH T1FFE533A4EBA0C5B7FCE284F69B775E19D0A470120247B7B7E7CD947B57223B4912088E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 26 IoCs
Checks for missing Authenticode signature.
resource unpack001/SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.ListSearch.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.ProcessManager.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.SystemSettings.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.TotalCommander.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.Translation.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.WebSearch.dll unpack001/SwiftList/SwiftList.App.dll unpack001/SwiftList/SwiftList.App.exe unpack001/SwiftList/SwiftList.Core.dll unpack001/SwiftList/SwiftList.PluginSdk.dll unpack001/SwiftList/SwiftList.Service.dll unpack001/SwiftList/SwiftList.Service.exe
File Explorer
-
00574807126def1206594ee8ff052a99020360c24a0ba90c340733d112894c64.zip 2.9MB
-
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll.dll 34KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll.dll 173KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll.dll 5KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll.dll 50KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll.dll 36KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll.dll 26KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll.dll 1.8MB
-
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll.dll 211KB
-
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll.dll 21KB
-
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll.dll 20KB
-
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll.dll 17KB
-
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll.dll 15KB
-
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll.dll 33KB
-
SwiftList/Plugins/SwiftList.Plugins.ListSearch.dll.dll 15KB
-
SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll.dll 12KB
-
SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll.dll 77KB
-
SwiftList/Plugins/SwiftList.Plugins.ProcessManager.dll.dll 14KB
-
SwiftList/Plugins/SwiftList.Plugins.SystemSettings.dll.dll 11KB
-
SwiftList/Plugins/SwiftList.Plugins.TotalCommander.dll.dll 25KB
-
SwiftList/Plugins/SwiftList.Plugins.Translation.dll.dll 22KB
-
SwiftList/Plugins/SwiftList.Plugins.WebSearch.dll.dll 24KB
-
SwiftList/SwiftList.App.dll.exe 1.6MB
-
SwiftList/SwiftList.App.exe.exe 264KB
-
SwiftList/SwiftList.App.runtimeconfig.json553B
-
SwiftList/SwiftList.Core.dll.dll 465KB
-
SwiftList/SwiftList.PluginSdk.dll.dll 54KB
-
SwiftList/SwiftList.Service.deps.json2KB
-
SwiftList/SwiftList.Service.dll.exe 19KB
-
SwiftList/SwiftList.Service.exe.exe 158KB
-
SwiftList/SwiftList.Service.runtimeconfig.json553B
-
SwiftList/System.ServiceProcess.ServiceController.dll.dll 33KB
-
SwiftList/portable-updater.bat.bat 1KB
-
SwiftList/runtimes/win/lib/net10.0/System.ServiceProcess.ServiceController.dll.dll 89KB
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f361854c8cd648adc4022aaa34cfb7d52a83898c94a550f31c2281ce9c3c9ea7
- MD5 aa0e9e9584b8fc2d6abd0a5a695b8089
- SHA1 5a5ef71d379288fabf996226ff3d309a1b11a8fb
- SHA512 d8ef61eac8cd3c09a1c3e4d1f02605457b59cd4f43407de9ca615d4b81cc0e27278de4e780913247e8c3c92ed03136c25735753d4748f4b3174ac96cad42d1a9
- SSDEEP 768:C4iMZYf31NG+w2o+wmZ2Fpis599ah5UJ+wFdJe:C4+f6fxfhfFm
- TLSH T109F2721965ED85F2CE6304F2E5B21980223CBD7AAD114D66F9DE331C6CA25310DF6CAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\AnimeThemes\obj\Release\net10.0-windows\SwiftList.Plugins.AnimeThemes.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7841927435be066c58a41d498fd067dcf98bf567985526472260ee092a18ab86
- MD5 19441ecf9f5d9471258082d520eac3f9
- SHA1 ac92d93ee120d1ae65f28c449bacb292f8d5f93b
- SHA512 a59552a30e0c494afab6b7f453ffbe6bf13a14b826f38ea6e24c778b0e4d208e0f8580a787564a0b02c06ae62bbb109fb5dca71f31ee0c72828879412b2751a6
- SSDEEP 3072:KPo1U7KHI/FRmHsGP8ErzqWLvVtly6NGBSilr7DSILSAQSIgdGSCrOa9m:+omLmHsGPpGWhrZN43IvSC6H
- TLSH T13F0449B4139C6543C7FFCE3270B96C820734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:b4:10:d3:b7:f2:a7:27:18:ae:1d:8a:41:60:11:a0:f3:bc:50:d6:01:89:9d:8c:9a:f6:a4:0b:2a:bc:b6:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1c:fa:cd:c5:9b:e8:2f:7e:c4:00:00:00:00:02:1c
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:10:ab:cd:e4:16:18:ef:39:b0:00:01:00:00:02:10
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
172314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/efcore/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net8.0/Microsoft.Data.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e83aed1d42d8ae806abeb02f0233a477275b82b5db92c92aa0c243255ab6a793
- MD5 82242113978f51d8fc2f3c5ea535fb36
- SHA1 0f48690939731cd4d21f52d91ed4315ec1cd2b40
- SHA512 369595a6af9d44617af4d59c0e0b06fd56c29745ee1671d1b6adb45eff8bf9b34ca640a8a42e3a109fc8645c59ee2c9851e11d8889b4929c958fb9144cce731b
- SSDEEP 48:6DxasBaMe4HQj6cIcU1N4zOuSOiWKVebobFZAA+/ynaImsDULsnOVjKU64:2aMe4wecI/Yz1SOx1oXAA+dIfDbA
- TLSH T1F6C19665E3D7522BF57B5FB3BCB206019370BA61EE33AF2F8D41424E5C225588A14772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.batteries.e_sqlite3.dllimport\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1e18b89ea319bffb633ea5698d8958cdaae3de8c5ac855353c7c6ad292795403
- MD5 97ce537a5473b3ccc4e873b1a2397147
- SHA1 689be53e8cb4d0e4f7f1a9b2dea05f8716055e45
- SHA512 7746d4095311a844469334078fca80d33ee4e4b717be04ae3af62a39f6e216e477025889a74ad1c4e89074e25fff18cfe224b9e4e18dba53b5861d5ed694523b
- SSDEEP 768:6XptZis0cewNbQoWf8kYYt8mFI37khpDFj4cfT1o2d9P58zGks4JnXT:6F0cew5Qbf8utJI3IzFUYrPiza4VT
- TLSH T15833A53587969A29F8CE0770A83E0185E675C51483F7DB1BAE94E4742E323C746A21FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\net8.0\SQLitePCLRaw.core.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a00aba80bec4fb6d5db8cb938c4e8290df7fe10b84d46bf57c90facfc2dc719a
- MD5 e302818c9fec95db40eee277aa27788d
- SHA1 18ddf5511774646ca1cfe0adf32dde265ea48d66
- SHA512 468c24e81b4184791da8b70aa6b5a148be4f59a134d4a60cf61abbe38a52f4977e5a03d76b752f11f22cfd782893c224243142b01736d48ad4629c865e2d8f40
- SSDEEP 768:YgIQUpZmdWSUpeWRKMFgx5HCJW0fm+aFI4PI/7jaxqJqPqiWvX:VI+UKAfm+aFtPI/7elq7P
- TLSH T191F265D6974F6A38E1AC07327C731E8992B8D391FB731717AA53D339ED626844E403A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net8.0-windows\SQLitePCLRaw.provider.e_sqlite3.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll
- SHA256 fa4983aef7ee888bb32a867a4693332ba2569016b5b2837330b6220452e8b1d9
- MD5 1aaf8ef2d8986aecebbcd9bcdbbe57bc
- SHA1 e5ceee6e403ffc49d34277df76fb960c575a46d3
- SHA512 a8b663b319fa72f846a35d08918ff100ef852af72ccbdfe44f4cd6e37dce4411a88037a47a82cb8bf999cc1392d10c9597fd19471da3687bf75baeac5d03b487
- SSDEEP 768:BRg0cpllHllzlll0JKXqx9TfubWJYziIj:40FKXqxNfubWJYme
- TLSH T15EC2080532EC6355E1BF4AF1FE7558602677E74A8832DF0D1A5E205D0B23B14AE11FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\BrowserData\obj\Release\net10.0-windows\win-x64\SwiftList.Plugins.BrowserData.pdb
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll
- IMPHASH 39e31e79b4856f4a13ac5ea2ba6af305
- SHA256 aabf85d7a8b416fb15203cb754fcfc9858c8f1dd3bbc7eab82335f6c362ba0d6
- MD5 c080941acc96d6127a60aea18ecaf2fd
- SHA1 13d200e90df0805ac2dba96af5487012fc9841e7
- SHA512 593ded3aea4204a5b887b5c0615dc3d9fd43eabbd728bd5a81350233d31c31942422b8ed092342edc26852d8f39e5076f80a9eeb033fb8781cbef7c557cfde39
- SSDEEP 49152:YIc/cOKjSrEUOFLlb+VAC013+sEoxKQwmJg:IcHXV+VAC013tkk
- TLSH T152958D47B3B9009CD8A7C2B8C5175B0BD7F174051764ABDB15A08A692F23FE61BBA334
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1455584
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\sqlite-builds\sqlite-builds\cb\bld\bin\e_sqlite3\win\v143\plain\x64\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
GetModuleHandleW
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_preupdate_blobwrite
sqlite3_preupdate_count
sqlite3_preupdate_depth
sqlite3_preupdate_hook
sqlite3_preupdate_new
sqlite3_preupdate_old
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_last_insert_rowid
sqlite3_setlk_timeout
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3changegroup_add
sqlite3changegroup_add_change
sqlite3changegroup_add_strm
sqlite3changegroup_delete
sqlite3changegroup_new
sqlite3changegroup_output
sqlite3changegroup_output_strm
sqlite3changegroup_schema
sqlite3changeset_apply
sqlite3changeset_apply_strm
sqlite3changeset_apply_v2
sqlite3changeset_apply_v2_strm
sqlite3changeset_concat
sqlite3changeset_concat_strm
sqlite3changeset_conflict
sqlite3changeset_finalize
sqlite3changeset_fk_conflicts
sqlite3changeset_invert
sqlite3changeset_invert_strm
sqlite3changeset_new
sqlite3changeset_next
sqlite3changeset_old
sqlite3changeset_op
sqlite3changeset_pk
sqlite3changeset_start
sqlite3changeset_start_strm
sqlite3changeset_start_v2
sqlite3changeset_start_v2_strm
sqlite3rebaser_configure
sqlite3rebaser_create
sqlite3rebaser_delete
sqlite3rebaser_rebase
sqlite3rebaser_rebase_strm
sqlite3session_attach
sqlite3session_changeset
sqlite3session_changeset_size
sqlite3session_changeset_strm
sqlite3session_config
sqlite3session_create
sqlite3session_delete
sqlite3session_diff
sqlite3session_enable
sqlite3session_indirect
sqlite3session_isempty
sqlite3session_memory_used
sqlite3session_object_config
sqlite3session_patchset
sqlite3session_patchset_strm
sqlite3session_table_filter
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
249KB
Virtual Size
249KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=147, id=261, version=33145,
count=46, id=260, version=33145,
count=21, id=259, version=33145,
count=3, id=257, version=33145,
count=140, id=1, productName=Unmarked objects,
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=33, id=261, version=35207,
count=2, id=260, version=35219,
count=1, id=256, version=35219,
count=1, id=255, version=35219,
count=1, id=151,
count=1, id=258, version=35219,
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e564059736468b1b1131237b2e4c73ba948705d8c2720bb6c072526b2cfc6dec
- MD5 edfa74bfc15ab4e3e221d6fd609ccc91
- SHA1 e9ec5df38189183004f1df93ae559ea376457c1b
- SHA512 fa85e4258823b18891543769361719db6a36cfbfef37159640e5e676377bca8c3fb8d0dbf694bc55393cd98471560c99fff4418564051c1dda7abeaa574aed91
- SSDEEP 6144:/x2y2gBmCKQMZJOYCwxW8fPhpvi31L5NRpb2gfM5gjWj:oO2Zy1L5l2Whw
- TLSH T10F245B1AA6D846B3D97F8672A86019017630AF8F95329F0F7DFF10881C62A065D61F9F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
222058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CoreExtensions\obj\Release\net10.0-windows\SwiftList.Plugins.CoreExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
209KB
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 805bd90a5a0fcd2253ff5034f52715c2b4979e5da2f4a0efee69f4bb6f2bbf5a
- MD5 7222ad887f890dab23dec1f678d5d8da
- SHA1 c38d9b1da7f90442be8d4971b1a6306a5d5c2906
- SHA512 285dfc09ad50305c404615f468a6e19d139bdb2fa3d9f53311262e9ad72263c6309391c7bc159fdd2be881af37e19aeec766920d55192969dd60b9135af5f042
- SSDEEP 384:AqVhhVe0xC65Np3Xm8PAb8zTg7MWeltvUjYfjYHjioB4Qj/S4z3:vZE6Np32/bqWaYHjioB4QG4j
- TLSH T16AA20A0921BC97B2C9674F71F56987BA1531DB9E2913CB0D5A78704C5C63A009A33FAE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CustomActions\obj\Release\net10.0-windows\SwiftList.Plugins.CustomActions.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2d49e2017d212808ea87c987fe06c3d6379527b5ddcdd6b310d63ce014416f4e
- MD5 b114eebe24d873b95580f0f0dfb2be98
- SHA1 a53af1361070adbb913c89225386739b3383e081
- SHA512 9dd1b78432b1bda87d129f01fc55cbe249b9ba9071ac7960e7b35dddcf97edd56598148c4f1e3010fa09a2095579953f361e2c2614e8ca284ca9856085d51997
- SSDEEP 384:thwHtSUU9STHhw7jEtU1622u9imsJEijVd6Alep3Cfq+:OtrfTHOXgU1GLd6Alepqf
- TLSH T13192E71921FC4BB7D5BA4F71BA68C45D2275EBA63D21CA0E0DFD35054C62E40D832FAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26450
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CustomCommands\obj\Release\net10.0-windows\SwiftList.Plugins.CustomCommands.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdff9ef815df8db99ef3e9e9e60b0874dec48d6b4bbb736ea30990309d7b88a4
- MD5 40f8a38df56dde93f66384bcd507c0a7
- SHA1 627002d910bdb1cefa64d0248dc2d944fdfda184
- SHA512 4ceca3dcab2148deee9260c4958574bf39f40d94f3cae7d54321c164350c837438a053f178f9175c3fc3f151af5fd2412a8e926b165aa1b11fb0bba272446aef
- SSDEEP 192:f2dl3n99zeYhs1U9NEqAwnBFlPTmwTlRqjNwXuEfqSTx0f4E8rGUOb4O8GSO:fc59sYmgrPBFlHzqmXC4EFUn
- TLSH T1FC724B01B6C45369EDFF0B3CE5B909806B75E7538913DF4D2A6E611A7C337908A30A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\DirectoryOpus\obj\Release\net10.0-windows\SwiftList.Plugins.DirectoryOpus.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fce0263218ce35dbd2bce0f4dda904c1313d1f3dd533407a2c9fde821bc74c2d
- MD5 3dbcb7281c9eb78f11075d17bd1808bd
- SHA1 5a5ff7983ca1186a7309da356aa8ec18a115ee6d
- SHA512 0204894c6f9744e4b6154f3f45d31390bb32514b4e18bf863e4f2fefc665f5a8811105064d66f43305994ce01d65689dcf3b8ac405348dedf9d92e62f8e4e38d
- SSDEEP 192:xzQ2+yU0I8T9Ch/ZcjcIb2Znw7KWqPNWaqUaM+z2irGHem88jo2FQIGss8DksG0d:xzQ2+yU/kIZQLaInWGsho2lvN
- TLSH T14862C60212E08627E4FACA75FD7D45803430BBC95D21FE4E59F9228A4D5BA1CC573AF6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\FileFilters\obj\Release\net10.0-windows\SwiftList.Plugins.FileFilters.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e269e57ab41af558dac6854885754e0e3c44ab2d2019c2daa3399cd0a2769b1
- MD5 f35ed1d83110973e4f714958cf3d3944
- SHA1 0215a5d644b22b8f9d86002eeffe8930b79b1959
- SHA512 f64f4950326df794bef0227f11edf67d104c8c469f243b54da1498cef95088931093a63270ffa3ebec6079800481469b890999ea72bc642e7a1d727995736a86
- SSDEEP 384:y+OzLD5Rgu8/u8u/olf/wSPuFSk+GhtDqkIEIUAlOSMhqMBgAg4GG3fquMa0J:y++LDID/uTorknt3RxLfglG3Gr
- TLSH T1A7F228096AFB832ED0FECB766DB269461934F6466231DA4C1CDD52C94E37E00D251B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\FolderCascader\obj\Release\net10.0-windows\SwiftList.Plugins.FolderCascader.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.ListSearch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee54b3ce60d77e9a3eb92a303f7ed94c9402e27c4ca8697266e7a12c6dd01ee2
- MD5 744f77a6492067b77297be871309fbe8
- SHA1 02fd31bad421021f4de855e4ab096ab3b36a2945
- SHA512 3eea56cabb84ef87da8b97e7808a48f81f4001ab6d95937e1a15c730ab99c59455e51a5b18773277a18db5c7828b96702e0511e84293d8a3f165424b18dfd371
- SSDEEP 384:5HeE4ez6fuVtHcAkxMrMjCjj9kjvpjcBQ:5+EN6fjX7Im
- TLSH T11C624A100798D32BC5FB0B7E64E61A801BB5D744DD13EB5D286D315ACC13AD477322EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\ListSearch\obj\Release\net10.0-windows\SwiftList.Plugins.ListSearch.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b48db0e2bbbacccbbe868fea4dc2fd78061eb6f3b229d9b091f48ec18b225d7e
- MD5 04298721a83f5292a8bdfda4f91a87b3
- SHA1 adc4dd9d2a3b1cd6f7ca9ea281dd1df1a29359a0
- SHA512 23507166cd3a9c42a7fdde4bd322d96ecb3da7e9a6ad6b96637cc52e93c98a5a0ad1117b552a2b3fce249ef6b6cd02a922e8e8f9765eaec14daebcf25a62031c
- SSDEEP 192:9zWMH2vbmRt53YbSsvkN5zdBP9iYlzrGxOdKo6X9cC:FWMH2K/IbSAEL7lukdJ
- TLSH T15B42E85076E4472AD8BF0F7AADB6AB502B70FF82DD13EF5E287C08559C23A445A35630
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\OneCommander\obj\Release\net10.0-windows\SwiftList.Plugins.OneCommander.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4995d9a98731907985bb684927ea09d2cd40a5832904cc91fc114dc14790d0be
- MD5 477000854704879d9f2ce2c6add0c23a
- SHA1 a7806cafa45b2fcb04cf8fda5a020c39580f3e86
- SHA512 f898616f4269d4598905164621c42a7716d28b0e0a90edc83c7706b52af24be6374f90720ead7d7e807bf6bf3b081001692621ed88ff03f16e10187ec30ca3f1
- SSDEEP 1536:Z0IjFrg5hhJMJglSLG4RiUH6JnpOf9BhKJMI9heRpvHbNE7:ZVE/JMJ0SLDQUqg9jkgv+7
- TLSH T102738E1128A1C303E5BA57B188722DE45B3ABF11DB836617C581B2BCAC73FD5EB131A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\PinyinAlias\obj\Release\net10.0-windows\SwiftList.Plugins.PinyinAlias.pdb
mscoree
_CorDllMain
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.ProcessManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f96fb043dc06e2ecd8000163bf74082b1c60d99d41609e4f0f0efcf99d97444d
- MD5 db2a4116460718483c38e819273557ee
- SHA1 73f3a918e77d032e4d1b9c6acdb2cd007a05ced6
- SHA512 22d0e7fc3467e3b409a0f0c263124c26cc9f491f4a2f22febfcfc4c4225bcc2bab23c1c12d70e64415bfa10c673da35043c3cdb8c56d91a477f4580ddcc15973
- SSDEEP 384:cipcX16i+ph3i19MXLqijVINzgDP9MFAEXyAAUS3wdci9cYc:7GXrc/
- TLSH T1A662D60A2BEC4326D4FDCF7BA96604927A709B07DC33CF5D15DE101A4D239216A71EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\ProcessManager\obj\Release\net10.0-windows\SwiftList.Plugins.ProcessManager.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.SystemSettings.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df980d5e22402507d1b00d784d3bf945c65e8d633ed5e1b4c02b8716fb35921f
- MD5 26ca2c79e71d24c3c8ee1ea016bc3142
- SHA1 1ea7b41f838d6a0719901c9e3859daeedbaf71c8
- SHA512 a98b6c2f4eec69b5a06b82d7fd4886e6f9f4e58b8c4fa5c352a925edfe159a9e17975f45fb4ba0029b62df1106f3142c3894779d5e8abbfcf465668baa3bd7fe
- SSDEEP 192:8VuDb2JQjaL9Yxj87aFierzxoi3G1sFssx:8sHOQjaLqkI12o
- TLSH T14132B71473AE8335D8FE0BB259A6DA412474F916AE13DF1E06CC504A9D62DC06733AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16530
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\SystemSettings\obj\Release\net10.0-windows\SwiftList.Plugins.SystemSettings.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.TotalCommander.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 edafc087526fa2438ce0d70e48f62a67e90b1b07c0b6c4097c413f1a10b39d84
- MD5 8a0a3e2f41c89ac6843d1ba3f6bfabca
- SHA1 ec590b00123bd4e23583f79f2c43b36b45e47541
- SHA512 b849aa5b392e08fd15b271b54fbd82fefb6cadafbd5b77115c9f9dfb9a6f8c1eabbb99d9895696661a1d6bc9ad6bb6ed01c025260505eeba4ddf1f1c0add663b
- SSDEEP 384:6oeH12EUELOJOb3BpidTyK/R6G5/nKv91SVlbPn7MCSEdVRUjffZ6K2c1A7e6vaK:6v+uOJcYOkRkvEyXZZA7eY
- TLSH T161C25CA96BC86371C4FB0FBD67E0489517B4DB475822EF4A1AAD34564C23D802E7077E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\TotalCommander\obj\Release\net10.0-windows\SwiftList.Plugins.TotalCommander.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.Translation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 517531797820dc7f5549440b84bc07a054da072682ce579da839247d3ca72351
- MD5 237ac1bffd51126e59519d55d8d82ef0
- SHA1 f4fa914cfb456d9eabb9e151600412ca7c8c8078
- SHA512 d44ae1685b48dd8c493a872bd24a79ea2eafa99a544c48a0a535fc43ff8f0c8726a69b8d7c693d3561b37ef1ed58c26b309414835082460853205d48c38a12bf
- SSDEEP 384:N/oqeU5ASKCNgch4J3xVDGvIL5W97cEF4mijVY4w4FYa7c1v62Zl:NAu5ASK4gch4JPziYFYn
- TLSH T178A2095876A88711E8FF5B39FDA519906630BF468832DF4D29CC10898CB6B014776FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\Translation\obj\Release\net10.0-windows\SwiftList.Plugins.Translation.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.WebSearch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a77a03b07203c89fd465accf1c626c816ef7ee0491df72aad3e290ae663f94c
- MD5 3cdebda3108744186dbf2597e317a119
- SHA1 8ca3203f364916d1481a53041823a57aa2a08028
- SHA512 af3b449e683816ad2165e738715092fd13039ce4e3c056498665611bf9e2ade89911d6afa6936a5a1452629d2c2b694ed16a3687075870822e1925e1f6e0707b
- SSDEEP 384:o7TRmB+n8P0pXxSV0E99M+s3jijVgaDE5IaYzU63w4/HQcjoFET:o7lXnzpXx1Yw4zPjoFET
- TLSH T1FAB21B3D68158B63D0BAC630C4E94097F572624BFA328F8E24DF16859D13A037992FED
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\WebSearch\obj\Release\net10.0-windows\SwiftList.Plugins.WebSearch.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.App.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 10e13dd66bee2d2a84d587a5f10310f7f7c585abd59ba602b051cc6e42b63a53
- MD5 3008e71fee37d37fad1c55d2fe8b75c5
- SHA1 39f8ff484ab488fb9a809d465595f1db353ebb7f
- SHA512 4c3333440fae5ac50f74b77b1b6d403acae1ae9d3ce65ffea57f4757328eb64f84e4ea66b3c938d63f32b3e76d0cb1ab78f9746259979750701486899bbb27d6
- SSDEEP 49152:HVRZIOWXqaRlFuiR0aXDE0U7zBO/RhHx6+TU1nhD:1HBO5hHxPon
- TLSH T1A375C00133B84329C5BF4BB5A032494D9BB4AE4693C5E74F6599B8DD2CE37428E052FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1545190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\SwiftList\SwiftList\App\obj\Release\net10.0-windows\SwiftList.App.pdb
mscoree
_CorExeMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.App.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 e4eca38a26022fc0b24a07cd0aef66d4be487a0e700eaca1fd1ee919f161fd4e
- MD5 145dee04d6674dcf4f8ee39538717e4e
- SHA1 0d6eb1b770b126cfb45d940c9a63e76532b2e664
- SHA512 a95860627148c7d6e23ca96ed53923ee31e58b1a0b42aafd79e98276e71710dfc87017e03603d04f8a3c8ec9f7c77c3b01a49cef7a5b8c837cfe9dc839c6692e
- SSDEEP 6144:nAIwxrI14Q3kYBTMG9ACSr7zzASMxKl1uE:nABhI14AThO7zz
- TLSH T1FD449E03A7A851FEE1B3D679C9A24940FB72785A8B71A7CF07504D7A0F667D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
SwiftList/SwiftList.App.runtimeconfig.json
- SHA256 63c471eca563169c6278c43cacf9f48a1c52845dff9d6ebd8c83872fd91ce8fc
- MD5 8332bcef6fca48cedb40e113fb53c239
- SHA1 5eef3cbab81983c1ff5501f04e3f883202db6284
- SHA512 004892cf7fa81f8b4a033105433d44c42285a0722151f22f10c9dc74daa8c6e0c18cddd412db46a0fe9578ab75387bede67d53c2212ff4f21f37c9ed3e1d0685
- TLSH T1A1F0E26ACA106DBB08F933BAD52AC182EB30532B20041D52B5FC081C7F776B22211F95
- MD5 SHA1 SHA512 TLSH
SwiftList/SwiftList.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e74a770d97344e67c1532525eb6d841640f53ae6cac353bc449ee635271bf41e
- MD5 0ef14ff6fdf533027dd920c0f054ccab
- SHA1 31e1db99c5f256d8bfd94a2898988db5f90d1599
- SHA512 834efa483ca99f85978ec1289e6d66034e05f1899c6eb3e380c855feaecd7690c0e0b8d93e5f253752732ba60a2f3d688eaba3579c03e25996792afd89f6d7fc
- SSDEEP 6144:hoiTqLPDvMIRN/6hddv4zvKHSsGNqhE7rddddddoy8axAbJiQeGIpYIvv:hoHx7ifdiQ8IaIsbn
- TLSH T146A44B1063E84E09E6AF4774E0700B58D777E51AA06BF78D1DE9A0F42DEA7D19B007A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
482522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Core\obj\Release\net10.0-windows\SwiftList.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
463KB
Virtual Size
463KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.PluginSdk.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 610f9081b341c144a152248bfba3e8f569452884025204f1e041e1c0c0869812
- MD5 9ea39e04d95aaff917909d315c877698
- SHA1 f32522e630c7885e829a17f98e1b5002773c205c
- SHA512 5fd1e6584c4c3adfbe29b95baae51f8b4fd89faa4e221256ff0d2aaa5cecde31fd1d79dd7f3deea972c10e5ce272618f0c746735ba4fcf2076e8725f6a177c77
- SSDEEP 768:LSgeazEYkl7eOrZIHD5Sd2T4bQIbvD0oujx6kCUV1wNgfV2:xdonofHs7T4jAkaNEV2
- TLSH T1EB435D2167ACC339CBDE4B797A6159650332D64E7112EFAA5E8CF98E1C23B4D02146F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\PluginSdk\obj\Release\net10.0-windows\SwiftList.PluginSdk.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.Service.deps.json
- SHA256 9a657439b65e3fa790534b157a6490527f6792d4d3dec08ef4b4ccef19fff35f
- MD5 f1213b5344a7200c7f830dcf0c62575b
- SHA1 7183b3f3619df8463efe2e37381742fc9fe8237a
- SHA512 2930432a05e0d8f32e36ae387657d5b0ee4046feeddbdf25b70d37be5b9fe3acc5bdf45d7ca93c978f69d6d4abe7c4c64dc4abfca33dd589f1cc6421e701efdf
- TLSH T1C551B219C9940FB701F513F665674B82F632532B11082C5ABBFC944CEFB2DA92062F79
- MD5 SHA1 SHA512 TLSH
SwiftList/SwiftList.Service.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1a98ef8ab4120d0e65db8a4fd26faad8deb5f5912fa9488a2e2eb7f5d5cb89b8
- MD5 59c5f014f8375e79616867abbca82e47
- SHA1 5cd22dc0b53f03048b52a4fe55ead295ede6d9d8
- SHA512 bd548eae65b4a7ebc01185b6dafc484eab9bbe98973e77fd0dd839515748758cace1bafcff1d245f7cd2910b65c66d0175729f974885ec0519f2129cf5e2b9bd
- SSDEEP 384:SZDM/yv7XTv/86GvU9nmgI57m+/ce3lI:8IyLTfo57mSlI
- TLSH T1409293442BEC4B39F6FE0FB4E9B205414E72B9469D21EB4D0A8811CF4D71B84EDB2766
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\SwiftList\SwiftList\Service\obj\Release\net10.0-windows\SwiftList.Service.pdb
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.Service.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 179a398e15ecd7bcabca782c7f9c7846db8ed0347855d85890b781b5fc7e50b1
- MD5 421fd9eb5529fa780ffd08e918ce7789
- SHA1 2b9c20eb41042a78d39ee3c0a2e5d08c7dc354bc
- SHA512 762587762180cce40243b5ba0576a0d4b21d2c41ae03bef5412025017c1eedd356e0b32d521eb03d1760f002ca9fa2d718fee83477be3349978a9dc341b5d5b1
- SSDEEP 3072:ClDJk88wN1QI7sxrYL1peQ3lOY9SkHNwG7NzaAT5tt:WAIwxrI14Q3kYBTMe
- TLSH T139F33C13A6A811BEE1B3D678C9924941FB7278594B71A7CF07504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
SwiftList/SwiftList.Service.runtimeconfig.json
- SHA256 63c471eca563169c6278c43cacf9f48a1c52845dff9d6ebd8c83872fd91ce8fc
- MD5 8332bcef6fca48cedb40e113fb53c239
- SHA1 5eef3cbab81983c1ff5501f04e3f883202db6284
- SHA512 004892cf7fa81f8b4a033105433d44c42285a0722151f22f10c9dc74daa8c6e0c18cddd412db46a0fe9578ab75387bede67d53c2212ff4f21f37c9ed3e1d0685
- TLSH T1A1F0E26ACA106DBB08F933BAD52AC182EB30532B20041D52B5FC081C7F776B22211F95
- MD5 SHA1 SHA512 TLSH
SwiftList/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5e8279944f0ac14fe4feb4059d9972c20c29b0acda5839685aba2882c40f9188
- MD5 c1a6c843be46244492e8e25f706ffe17
- SHA1 9310470332602700173ede92201c548013b199d3
- SHA512 c49b71b13e0343c760e74e7aa4c32faac8df4d2e485d9d34f14465994dacadd36f2c67ec38ce12475953ddbc8beb5d10c18fc8ecc0b7255f57b3298e2d549165
- SSDEEP 768:9/0xiH87vHPEuwriB7/ANIp7MJ7N92D1NlmGbYO/9zk:98x3bHPEuw+Aap7MJ7N0aGb5zk
- TLSH T148F23A218BF847F9DDE70AB06DB2C3658E3276C22E05F60E25AD90095AE3FD493B1615
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:10:fe:f6:13:55:2d:28:b8:29:a3:29:85:99:b7:bc:bc:24:03:da:eb:25:7a:a1:e6:4d:1f:86:fd:46:e9:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:26:35:b4:3e:67:43:93:f6:1f:00:01:00:00:02:26
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
29458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.ServiceProcess.ServiceController/Release/net10.0/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/portable-updater.bat
- SHA256 b439f4ce50593b1625b0cb97fd423e186e268857196a2faa2eedec748b5045e8
- MD5 67da92ee04edf88a7cf40727be0c21e5
- SHA1 6396a4dcd8c317f704d8b5238e65b803115c86ed
- SHA512 01a2765b97130a94e1ae0b7d1f14a275f4a98e9416e855df08384b80593e5c2bd65be5ba23a9246446e0a1f45de5327cacd81abf358a56e25c579a5be6f9e36b
- TLSH T18131124B244E2B60069197D74BE33683D2A5C2171E1833D873D4D142679A9EB1FF61DE
- MD5 SHA1 SHA512 TLSH
SwiftList/runtimes/win/lib/net10.0/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 76d769f5a3c91c077ece4669c1f3db8ad5dad1bb87154f85e3e5533b8dc02595
- MD5 01051fdc1d9ca602725120e717506d72
- SHA1 f719f1759815135455535a0083b11cea29fa6ce2
- SHA512 184b88c348938a2c0b04e65dcc323988b748a956655e899613214dea2e78889a58054c2662e45b38753d4f73f324e6070bcacd9f83c91fd2c0b43dcd7092ab99
- SSDEEP 1536:LFHy6KWI+phJwYuk0wN7MvxG1TbUcWxiN08+871zpT:LwII+pPVf0wN7Mvx+uxiNm8715
- TLSH T1A993F70163FC076AEAFB1B787CB161520A367D46A935EB3D15C841AE0AF2B848934777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c3:2a:37:b7:79:82:1f:48:f4:04:25:0c:e4:cc:bd:66:39:83:f0:4f:10:53:b9:93:17:98:13:91:2d:ef:e2:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
86862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.ServiceProcess.ServiceController/Release/net10.0-windows/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ