nouveauxconcepts-OnlineBackup_o_backup_v8[.]7[.]0[.]224_oid20bff54a-6808-465b-a3d6-c9f1e6532237_bidnhR8OaZBA0yWdfWi1gv!qg[.]exe

resource
unpack001/SQLite.Interop.dll
unpack001/System.Data.SQLite.dll

resource
unpack001/$PLUGINSDIR/INetC.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UAC.dll
unpack001/$PLUGINSDIR/nsArray.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsJSON.dll
unpack001/$PLUGINSDIR/processwork.dll
unpack001/CBFS6Net.dll
unpack001/Cloud.AzureClient.dll
unpack001/Cloud.Backup.DiskImage.BootImage.dll
unpack001/Cloud.Backup.DiskImage.dll
unpack001/Cloud.Backup.ESXiEngine.dll
unpack001/Cloud.Backup.ESXiEngine55.dll
unpack001/Cloud.Backup.ESXiEngine67.dll
unpack001/Cloud.Backup.ESXiEngine80.dll
unpack001/Cloud.Backup.Engine.Data.SQLite.dll
unpack001/Cloud.Backup.Engine.MBS.XmlSerializers.dll
unpack001/Cloud.Backup.Engine.MBS.dll
unpack001/Cloud.Backup.Engine.XmlSerializers.dll
unpack001/Cloud.Backup.Engine.dll
unpack001/Cloud.Backup.Exchange.dll
unpack001/Cloud.Backup.MSSQL.dll
unpack001/Cloud.Backup.VM.dll
unpack001/Cloud.Backup.dll
unpack001/Cloud.Base.XmlSerializers.dll
unpack001/Cloud.Base.dll
unpack001/Cloud.CbfsInterface.dll
unpack001/Cloud.Client.XmlSerializers.dll
unpack001/Cloud.Client.dll
unpack001/Cloud.GoogleClient.dll
unpack001/Cloud.OpenStackClient.dll
unpack001/Cloud.S3Client.dll
unpack001/Cloud.Wizard.dll
unpack001/Dapper.StrongName.dll
unpack001/DiskAccessLibrary.FileSystems.Abstractions.dll
unpack001/DiskAccessLibrary.dll
unpack001/Esent.Interop.dll
unpack001/Hpack.dll
unpack001/Http2.dll
unpack001/ICSharpCode.SharpZipLib.dll
unpack001/ISCSI.dll
unpack001/LZ4.dll
unpack001/Lucene.Net.dll
unpack001/ManagedNativeWifi.dll
unpack001/MurmurHash.dll
unpack001/SecureBlackbox.FTPS.dll
unpack001/SecureBlackbox.SFTP.dll
unpack001/SecureBlackbox.SFTPCommon.dll
unpack001/SecureBlackbox.SSHClient.dll
unpack001/SecureBlackbox.SSHCommon.dll
unpack001/SecureBlackbox.SSLClient.dll
unpack001/SecureBlackbox.SSLCommon.dll
unpack001/SecureBlackbox.dll
unpack001/System.Data.HashFunction.xxHash.dll
unpack001/ZstdNet.dll
unpack001/libzstd.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

nouveauxconcepts-OnlineBackup_o_backup_v8.7.0.224_oid20bff54a-6808-465b-a3d6-c9f1e6532237_bidnhR8OaZBA0yWdfWi1gv!qg.exe

IMPHASH 12082e77cfc7e34f96f21f95764c8ac3
SHA256 af89bdcd0cfded591f9ac57ce7e6e5641144ad2c2d853f793aa0752e831bf4a7
MD5 85e2c3ad0004658fe445c24efb8683aa
SHA1 18ddb40a4643e18e04a966fe0d2e3b797230b614
SHA512 29ad0075b133781052b33688d44ddcaa6a71b634554e776dc6fdb219957422c180361ce41ba048e0c65a8bbef11b6796e24156663ec7cda723e3a81fd46c3c1f
SSDEEP 786432:irjDdeSUFlmpzKNkbofZP2eq6vVLkGkPYM6znBF0pa:ir/dxUFlmp83QeoZYvznBFt
TLSH
T183472373D85A00FAE47D17F624DC9FB2088C9C1F6CC209C546EC6291C287ABA67D3679
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a9:1a:66:7c:35:cf:ad:8a:e7:c0:3e:07:86:4e:cf:51:fe:c5:95:c8:1f:b6:cf:8b:79:1f:cf:22:1e:45:bf:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13733

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetShortPathNameA GetFullPathNameA MoveFileA GetLastError SetCurrentDirectoryA GetFileAttributesA SearchPathA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime CompareFileTime lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrcatA GetSystemDirectoryA CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetCommandLineA GetTempPathA GetProcAddress DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary MulDiv LoadLibraryExA GetModuleHandleA

user32

GetWindowRect EnableMenuItem GetSystemMenu ScreenToClient SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetAsyncKeyState IsDlgButtonChecked GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SystemParametersInfoA RegisterClassA EndDialog TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA wvsprintfA DispatchMessageA PeekMessageA EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA SetTimer OpenClipboard SetWindowTextA GetDC LoadImageA ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA SetClipboardData EmptyClipboard DestroyWindow ExitWindowsEx SetForegroundWindow PostQuitMessage CreateDialogParamA

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_Destroy ord17 ImageList_AddMasked

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/INetC.dll

IMPHASH 8ef3613e48db9e7b48e33704238cd659
SHA256 5520208a33e6409c129b4ea1270771f741d95afe5b048c2a1e6a2cc2ad829934
MD5 92ec4dd8c0ddd8c4305ae1684ab65fb0
SHA1 d850013d582a62e502942f0dd282cc0c29c4310e
SHA512 581351aef694f2489e1a0977ebca55c4d7268ca167127cefb217ed0d2098136c7eb433058469449f75be82b8e5d484c9e7b6cf0b32535063709272d7810ec651
SSDEEP 384:VpOSdCjDyyvBwRlX+ODbswYM2s74NS0v0Ac9khYLMkIX0+Gzyekx:rdCjW/lX1PfYM2X1
TLSH
T123A23B5253605FFEE3D71938B8B7773745EAE76464178A8F06732E8918B2352B930382
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16209

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA LocalFree lstrcpynA DeleteFileA CreateThread WideCharToMultiByte lstrcpyA TerminateThread LocalAlloc MulDiv WaitForSingleObject GetModuleHandleA ReadFile lstrlenA lstrcatA GetTickCount CreateFileA GetFileSize GetLastError lstrcmpiA CloseHandle GetProcAddress lstrcmpA WriteFile GlobalFree GlobalAlloc SleepEx SetFilePointer

user32

RedrawWindow GetMessageA wsprintfA DestroyWindow EnableWindow GetDlgItem UpdateWindow LoadIconA SetWindowTextA IsWindowVisible SystemParametersInfoA GetWindowLongA GetParent MessageBoxA SetWindowLongA DispatchMessageA KillTimer PostMessageA GetWindowTextA IsWindow SendDlgItemMessageA CreateDialogParamA TranslateMessage ShowWindow IsDialogMessageA GetWindowRect SetTimer SetDlgItemTextA SetWindowPos SendMessageA GetClientRect FindWindowExA

comctl32

ord17

wininet

InternetReadFile InternetErrorDlg HttpQueryInfoA InternetQueryOptionA InternetSetOptionA FtpCreateDirectoryA InternetConnectA InternetWriteFile InternetSetFilePointer FtpOpenFileA HttpEndRequestA HttpAddRequestHeadersA HttpSendRequestA InternetOpenA InternetGetLastResponseInfoA InternetCrackUrlA HttpOpenRequestA HttpSendRequestExA InternetCloseHandle

$PLUGINSDIR/InstallOptions.dll

IMPHASH 738dc9bb91549f627cf1953c2000e1d6
SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
MD5 d753362649aecd60ff434adf171a4e7f
SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
TLSH
T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryA MultiByteToWideChar SetCurrentDirectoryA GetPrivateProfileStringA GetPrivateProfileIntA GetModuleHandleA lstrcmpiA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalAlloc GlobalUnlock GlobalLock

user32

GetDlgCtrlID CloseClipboard GetClipboardData MapWindowPoints LoadCursorA GetClientRect SetWindowRgn LoadIconA GetWindowLongA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow SetCursor PtInRect EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA EnableMenuItem DrawTextA GetSystemMenu OpenClipboard LoadImageA

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectA

shell32

SHGetPathFromIDListA ShellExecuteA SHBrowseForFolderA SHGetDesktopFolder

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
MD5 56a321bd011112ec5d8a32b2f6fd3231
SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
TLSH
T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 2274cc1534607459cdd304a928601ef9
SHA256 e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42
MD5 88ad3fd90fc52ac3ee0441a38400a384
SHA1 08bc9e1f5951b54126b5c3c769e3eaed42f3d10b
SHA512 359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb
SSDEEP 384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk
TLSH
T16F724B25ABA083FFC5500571A6E1672217FA98301979586F8E73EEC62FB59436C3E703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15015

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateProcessA GlobalAlloc lstrlenA lstrcpynA GetVersionExA lstrcmpiA GetCurrentThreadId LoadLibraryA FreeLibrary GetLastError GetExitCodeProcess WaitForSingleObject DuplicateHandle Sleep GetCurrentProcessId CreateThread GetCommandLineA OpenProcess MultiByteToWideChar FormatMessageA LocalFree GlobalFree CloseHandle SetLastError GetModuleFileNameA GetPrivateProfileIntA GetPrivateProfileStringA GetProcAddress GetModuleHandleA

user32

SendMessageW DialogBoxParamA CharNextA UnhookWindowsHookEx CallNextHookEx GetClassNameA SetWindowsHookExA SendMessageTimeoutA WaitForInputIdle DefWindowProcA PostMessageA GetLastActivePopup PostQuitMessage SetForegroundWindow DispatchMessageA GetMessageA CreateWindowExA RegisterClassA UnregisterClassA GetWindowTextA TranslateMessage IsDialogMessageA PeekMessageA MsgWaitForMultipleObjects IsWindow GetWindowThreadProcessId MessageBoxA SetWindowLongA LoadImageA DestroyWindow GetWindowLongA EnableWindow ShowWindow SetWindowTextA wsprintfA GetDlgItem SendMessageA LoadStringA EndDialog

advapi32

RegCloseKey QueryServiceStatus OpenServiceA CloseServiceHandle OpenSCManagerA OpenProcessToken RegQueryValueExA RegOpenKeyExA

shell32

ShellExecuteExA

ole32

CoInitialize CoUninitialize

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 fbec5dfc6532218c49374ee1607058acd72c0c9d4418fe5e60f0b7935d0d6eab
MD5 98aca846c2f9d4569cf3746159cf881e
SHA1 d088cf3e48c53d61aa792e90387c9bc50a85ee11
SHA512 780e277ca2eb71aaf9b9928df7662510f60714291507335664cdfcb642ab096d479f7a5175256d91a3635011bceea11962a6a047aacfebade1281b1e578a9035
SSDEEP 3072:2uwfYJ0ZclxW7Tk6lIwllZsllllLtq95ucp/jkfWfW:2uwQJkccifWfW
TLSH
T122E3E51942511DC4D852A5EBBB2E2E8F3C88BF9C5139F6F98C26B72BD1390FB8579101
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/nsArray.dll

IMPHASH ddfc5272f0f38c6d49db71b2dfaa312e
SHA256 81745087f193b6fa131189f4b3ee9caa93e9692e408d3955fbcb9a4ec8516e2f
MD5 0917ee492308b691326e6581e8c793c9
SHA1 ff689c8051ffca7657461ac828bc46e303ab8e59
SHA512 2a4ae4b93b0eac113a0e65f459798466120f1af4605a82a11f9022d790fe0b4f7d368b312f8a073b1dcfe8760e529ea56a5b5d4289321dc9f2fc8a22691b42b5
SSDEEP 192:L+QMtjhIz23Tv7QpAXXcxwtXexpnGOO81h2xXP:SQ6nDv70AXXcWtXexpnGIhW
TLSH
T1C642090A1F6082F5F8F201BA557A2B355A1D7E19971E1EEB07A314142E209C73F39BE3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

9920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 8abe046ef411de4d3e6e831b6b1ee264
SHA256 3b15c6e4ca42036d7424f93ea0806a2d35220d65faaf2bd2479a54258f631b55
MD5 428c3a07fba184367a5085e46e4a790b
SHA1 f2de6cd4ec99ab784d18914a21de9d919a450089
SHA512 b34e1266e949d7cc5cdb7a809c3ca42652a1bb1ec72d83218604cb01b3118bbb42bfcaebc6134c4e6eb43fb566539414a49c1a0cd23a6c84da7c1c4b56ba2ab6
SSDEEP 96:L7GUeYNrwgcrEzyKwZxW4JxNABWweYkZleOe4I9d0qqyVgNr32E:XGgrwgcrEzylQBHkZwd0qJVgNy
TLSH
T1E1D1E93D76C33DB3C54ACA753C65292F0FB8D8261B540211AB5716C279D5AE3FE29382
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsJSON.dll

IMPHASH 67cfa491a15c2e6ae037612d4a7ef727
SHA256 15b527ac5d224b2b684ef07fecd6d71d61f05955e3a2bd3dd1de6378e927b3f8
MD5 b7878c46c342f851d35fb2dbc898a593
SHA1 dd0ebd231edcfdc0a561cbda733c58e22ce3156f
SHA512 d7f179d33695b62da5fc0643fac461129975e78a8694c02e8c8d74471d0ee4061b92f1010401209605146861b259d34079583b2080c8ba69382c2122d9b969c2
SSDEEP 384:QYUEEoUMA9RoB+cq4OJTv/ldPWUn2kaVC+DEbXG989qX6rMIZy9RrT:PeRoBXHoTXld3n2XubXf9+EMNvrT
TLSH
T152A25B566170A8F1F92618FAB9D26E237F7DF90834745897CB23056D2A91863BF3C312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

11469

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/processwork.dll

SHA256 27329ea7002d9ce81c8e28e97a5c761922097b33cedeada4db30d2b9d505007c
MD5 0a4fa7a9ba969a805eb0603c7cfe3378
SHA1 0f018a8d5b42c6ce8bf34b4a6422861c327af88c
SHA512 e13e29712457d5e6351bfd69cba6320795d8b2fd1a047923814f8699f7188ec730ec7f0d946fdff66c8b430fef011415ed045b6ea56e4cc0b1d010171ab88178
SSDEEP 3072:n/93Fm9hfGIGjk1qc55CDoGowH6Fb/CcXwuCoty1IKYOlIa+zUk9sfqQAPfujRzS:/94yj9c55CDorNqot43ndqQpzjIKW
TLSH
T1F2343B36E1C0CC76D5672B7CDC49E3D8556EBA302E2898866BE91E8C9B3D391351C287
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

208948

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

147B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

47B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$TEMP/$R0

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b3076560d5321b9d8d99221194376241e5277957c8eb4b0eba689b616e803ac7
MD5 4a545dc7605e6bdf8e107173e5eba69c
SHA1 cf45cf7594e9970b4ffeda48ac728556e3d232cc
SHA512 3be7af94fd0b20ddfeedf3001991280e2da7a4c48763e6dc55ac8f3461ed4a200773cdb6f3b6cee47abd49680acd9377ddb6d539e2fa604da0b9df390de11fa5
SSDEEP 768:/T8ZI9YIHMfndz2dgKCsUoEBLhpX8Mmg2EIEMmk2Es:/TEeYIHMFydgKCsSLhpX8Mmg3Mmk+
TLSH
T1DA238D0277E84546DEEE4FB974F449390A71FB836D61C5CE16ACC0894E62BC16B603BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

e2:3e:8c:ce:4b:67:a2:ea:6e:cd:15:67:bd:8f:fc:bb:f5:7f:fe:76:dd:a7:1f:bb:14:94:57:0a:bf:8c:3a:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

Chains

Oct 22, 2024

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

8f:bd:8b:71:72:a7:b0:72:19:31:ed:a0:9c:b4:7e:54:ce:65:a3:30

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

Chains

Oct 22, 2024

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

Serial Number

50:1a:3d:4c:78:00:f1:71:1b:3f:14:e5:36:ea:ec:ab

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2021 - Dec 2, 2024

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

31030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Project\backup\Tools\CheckPlans\obj\Release\CheckPlans.pdb

$TEMP/$_65_

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b3076560d5321b9d8d99221194376241e5277957c8eb4b0eba689b616e803ac7
MD5 4a545dc7605e6bdf8e107173e5eba69c
SHA1 cf45cf7594e9970b4ffeda48ac728556e3d232cc
SHA512 3be7af94fd0b20ddfeedf3001991280e2da7a4c48763e6dc55ac8f3461ed4a200773cdb6f3b6cee47abd49680acd9377ddb6d539e2fa604da0b9df390de11fa5
SSDEEP 768:/T8ZI9YIHMfndz2dgKCsUoEBLhpX8Mmg2EIEMmk2Es:/TEeYIHMFydgKCsSLhpX8Mmg3Mmk+
TLSH
T1DA238D0277E84546DEEE4FB974F449390A71FB836D61C5CE16ACC0894E62BC16B603BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

e2:3e:8c:ce:4b:67:a2:ea:6e:cd:15:67:bd:8f:fc:bb:f5:7f:fe:76:dd:a7:1f:bb:14:94:57:0a:bf:8c:3a:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

Chains

Oct 22, 2024

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

8f:bd:8b:71:72:a7:b0:72:19:31:ed:a0:9c:b4:7e:54:ce:65:a3:30

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

Chains

Oct 22, 2024

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=MSPBytes\, Corp.,O=MSPBytes\, Corp.,ST=Pennsylvania,C=US

Serial Number

50:1a:3d:4c:78:00:f1:71:1b:3f:14:e5:36:ea:ec:ab

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2021 - Dec 2, 2024

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

31030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Project\backup\Tools\CheckPlans\obj\Release\CheckPlans.pdb

$_34_

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8a59f5b20108c400bc0016b4f06c961d97d5cf84d9a190e0cfdf74fa72ed7a7e
MD5 98545603be42e1e31bef5f85b394cee6
SHA1 aacb2066322581a4efc48db1c3bc8ac1af4fb147
SHA512 2e66c937023bc46898d8db12fddb095a9b70ce96659a25357f985e6852191fd368a95e5b9f85346231f703d106daf3d8cff55ed98b22afa26ea734e3383fd0bc
SSDEEP 49152:byq5jMan3urQLgwxjwwH+wiQYp+hPqlpZwTiqSOM0:WWjMa+2gWKt9CPyZfROM0
TLSH
T18CC5BE973F41D13DF4B7E5712A88619027933C6A9767641826E2FC8E85F1BC20ECF626
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a8:68:7d:f0:f7:21:0a:0b:28:b0:d3:9d:0e:fc:7f:d3:0b:e6:14:b9:90:fa:79:ef:b6:f5:47:4e:4e:8d:57:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

2309758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$_34_.config

SHA256 d8cc46a5d251451dcecf64625f482f317fcc60ffe23a59b699da4addf10ec809
MD5 6b928ff6f6e8bcc5056e56503429e04b
SHA1 3e3bdb700b4e83912b1d3313c0dce6765563e9cc
SHA512 6189db5f04dcfbe3ff4ed5061cf7c947df683ec42ea69c87a811155f07e18f6491710f7299ed09d9f389def5136eb06dbbd08e00375261a0c3fd0604dee23e4c
SSDEEP 48:cU974g38guQ27Rgdn9U3gBSg+QZ+ep+b3glOOeg+Z0SagFzWiRg+9Yz7f4g/duZM:9VGhlNHzlLbycYz3
TLSH
T13E815D11A1C8AFA50BB209A23E6BA418CB7D03B7294C064DB1DE6B87CF3695A1707077
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

CBBackupPlan.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 807bcec21064817a394e129940c2d575c388465aae8fbe305e178b9c65c51625
MD5 a5396dc11cfc972c450f781078611f12
SHA1 f71ffa5970cc6bb03220f8cfdb0301ae370a476f
SHA512 1c47d647adac99b0601ba26fbe83181a965072c15f218a2882c1b2a0c1c570b199eeae2628ad2a803972430de8a0e6ad7786fa027259a8d722ae3438f7649112
SSDEEP 12288:TAwe9g5Oeljrts9c3Fmg1QkPxa5LF9kgHCwfB4MLREdAq3+WQjAcKMU:TAIl3tFkg1QNkg0IqwjAPMU
TLSH
T1A4356B5B7F248929D4BF98706112500017F67C6E42EA725BA6E1FED906F23C21E9F2D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

8e:88:16:8a:90:26:9c:3d:f2:02:5e:38:b7:47:09:6a:5d:94:16:83:7b:5f:6a:a7:e4:f1:b6:f6:f9:d9:fa:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

761054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

CBBackupPlan.exe.config

SHA256 052679bc8b2ad4483525ad03173c232d017780310b64a5238aee4e47ac3906d9
MD5 4bdb656604aaa7e627c74bd57037bc84
SHA1 97750885add7442567cfec568635e7c17e73e713
SHA512 a043b6c77e920e803e89ba0c68378e1b5b6862a37e287209e95c594b40f8fb9a7b51e6e14dce859b0ff4427c4cf3c539791e24bc8173aa119c101e40470743fe
TLSH
T1B6811A11A1C8ABE40B7209A23E6F6468CB7D03B72D4C068EB1DE6B878F3555A0607177
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

CBFS6Net.dll

IMPHASH bfe10e780260a385f9bf45fc42f211aa
SHA256 2ad750b27fdb15dd5ccd5a08d2e13d7ed844089f00482850cc6edfaf4c2726bb
MD5 1fc9aee5d9e43546fb263d0aea020822
SHA1 8cd4383cd578fbeda464166c14e36bc597d58081
SHA512 402953480a999b73c4763f4b9f1ee745ab57c03ad1cf41ccf893da4dc67399f067d51ee6c2088702b59bd8846811bc8a1a3b0868e9b646814e3fd40c2d31f107
SSDEEP 6144:OnO5KGJCY2iOEwuCeHPOLQDACVw7l8dWZNTDBVA0G8kpCe:OOQU2i8uCsWLRewxRZNTTA0GFC
TLSH
T1B4745B59AB200199EAAFC27C9473D603A673B1D9635B53CF4138CAA41F277C9B1793C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

5

Entry point

174294

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Projects\CBFS\dotNet\x64\Release\CBFS6Net.pdb

msvcr100

??3@YAXPEAX@Z ??2@YAPEAX_K@Z __CxxUnregisterExceptionObject __CxxDetectRethrow __CxxRegisterExceptionObject __CxxExceptionFilter __CxxQueryExceptionSize _cexit __FrameUnwindFilter memcpy memset memcmp _onexit _lock __dllonexit _unlock __clean_type_info_names_internal __crt_debugger_hook __CppXcptFilter __C_specific_handler _amsg_exit _encoded_null _initterm_e _initterm _malloc_crt _ultow wcsncmp memchr _wcsdup _ltow _wtol _wcsnicmp memmove _wcsicmp wcschr _itow wcsstr wcsrchr malloc free

advapi32

RegCloseKey SetEntriesInAclW AllocateAndInitializeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor LsaNtStatusToWinError InitiateSystemShutdownW QueryServiceConfigW AdjustTokenPrivileges ControlService FreeSid QueryServiceStatus StartServiceW LookupPrivilegeValueW GetTokenInformation OpenServiceW OpenSCManagerW OpenThreadToken DeleteService OpenProcessToken CloseServiceHandle LookupPrivilegeNameW CreateServiceW RegEnumKeyExW RegEnumValueW RegDeleteValueW RegOpenKeyW GetSecurityDescriptorGroup GetLengthSid RegisterEventSourceW RegCreateKeyExW RegQueryValueExW DeregisterEventSource RegOpenKeyExW ReportEventW RegSetValueExW CopySid GetSecurityDescriptorControl EqualSid GetSecurityDescriptorOwner IsValidSid

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

shell32

SHFileOperationW

setupapi

SetupDiGetDeviceInstallParamsW SetupDiSetClassInstallParamsW SetupDiGetActualSectionToInstallW SetupDiGetClassDevsW SetupIterateCabinetW SetupDiSetDeviceRegistryPropertyW SetupDiGetINFClassW SetupFindNextLine SetupGetSourceFileLocationW SetupGetIntField SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupCloseInfFile SetupGetSourceInfoW SetupGetStringFieldW SetupDiCreateDeviceInfoW SetupDiCreateDeviceInfoList SetupDiCallClassInstaller SetupOpenInfFileW SetupFindFirstLineW SetupDiGetDeviceInstanceIdW

kernel32

FindFirstFileW GetModuleHandleW GetSystemDirectoryW MultiByteToWideChar CreateMailslotW FindClose FindNextFileW GetWindowsDirectoryW GetFileSize MapViewOfFile UnmapViewOfFile MoveFileExW GetCurrentProcess CopyFileW GetVersionExW GetFileAttributesW lstrlenW CreateFileMappingW lstrcatW GetFileInformationByHandle lstrcpyW SetFileAttributesW InitializeCriticalSection TerminateThread LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetComputerNameW GetLastError GetFullPathNameW ReleaseMutex TlsSetValue CreateMutexW ResumeThread DeleteFileW TlsAlloc GetCurrentThreadId OpenEventW GetThreadPriority CreatePipe DeviceIoControl GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess DecodePointer EncodePointer LocalFree WaitForMultipleObjects FreeLibrary LoadLibraryW SetThreadPriorityBoost SetLastError GetProcAddress WaitForSingleObject SetEvent VirtualFree Sleep VirtualUnlock VirtualAlloc CreateEventW GetSystemInfo CloseHandle CreateThread GetTempFileNameW TlsGetValue CreateProcessW CreateDirectoryW SetHandleInformation GetCurrentThread WriteFile GetExitCodeProcess ReadFile CreateFileW GetThreadPriorityBoost SetThreadPriority GetTempPathW GetLogicalDrives

netapi32

NetShareDel NetShareAdd

mscoree

_CorDllMain

Name

.text

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nep

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Cloud.AzureClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 270423bbd4749f70b5dc7cb34d9b0844954b4fa429dada7c20e53741c090364c
MD5 e3b53b7dce433ce512ec6db0ce28a337
SHA1 6a162429db6a101ea6b743e24a31a747ca9090fa
SHA512 75505b10e61c0be5810fc5daa6d8d0f41bf2cf5b10ee32b583872398b579c80ed3b61cd59d21b316263fca961a09c7f4df6efec48bec1f328edbfef03cbf8cba
SSDEEP 6144:/KnRLGA76xxoDJ5zsJr2tOMLSVrv0OKTn/c8FbrEN13Wr2xarFZX:/cQToD/0a+Bv0OMHb6pxM
TLSH
T170745A015F70861ED7AFCAF89122055C62F04D0B676AF79A6AC17CE6DC8B7C6AC051E3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

366398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.DiskImage.BootImage.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f5964d521c6a708380befdee268d4f0c397bea07b45b32ee58496f1c3ffbed29
MD5 356a42ae50e3a0f61cbf2eced9659bf6
SHA1 5b41d68cbb359dd6701e6eb602b35a45ca1a34f8
SHA512 225eb802cd972cb5f3f13faf4691014ca6506faf33c594a64a616ddece92d5bc469a81f41bd416a4ccb6f2695218b93021f642404cca0c9214cacf0f22539da9
SSDEEP 3072:Bmzyy3bnmkeVhaUweWzjxqgIpSF5MKbnw506cxVTGxmB1KddJDAebh1bV3zw11Ih:Bpy3bnr57YyhihLKsu6P7V
TLSH
T15954549E472CCAB6C6B67471EB197CA4E21B878BA0C2EE08F1F86416D1B3DDD4314725
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

294702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.DiskImage.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dd5dbf34a6fd6b19245c23a33e2b352f6cf145dc6f39ac094e10b441c18a5930
MD5 9dd9043b1d4e65c0ee84bf28fc62f152
SHA1 a12ec83caa890f5e3ba42dcf21a5e97eb7a0097f
SHA512 4e664cb8ba27efbde457cca0a2abbffdae723affacccb4f79163f6386baf36ecb495682fbb00b341ef403941f48dce16c9649444a88b76c4ec0b5cc1bd4b2d9e
SSDEEP 24576:IdUGtJxK/NQD8gjW0DeMNcEH55laFiUDS5z+LAhw2qvn081:1F4xWVzprW5CAhu
TLSH
T17F855B0163F4862BD56E5A78A432021623F1F46BAB73FB8BB65E69B91F53301CC11793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1784782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.ESXiEngine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7532a24ff01321d369ab0a6ca18adc2090068d816aa0a6439455140392b6b386
MD5 69c9c267ab5987641eacc1c8f6518e1c
SHA1 797d9ba3c5db4a4a8ce8abb167cefadfde9b71d6
SHA512 a5bce83eb19a56f7ce5b70add4268d482a4bfab8e31d907aca9058f81b0f09aa1d8a10c6059f40ce28cb8f71feac5d1ac4bc31621c75030eee98861b85d8ae1d
SSDEEP 384:+dyAPNc8aRno031DO+jLZiKEhwLYJuhwEJm9mn+1WMK8v28JBx:y2oQDNoK2EOPv9
TLSH
T1BD72D6198BE8871AF2FA4B745EB006D50B35FE045C32D7AE69C4102F5967B048D63B7E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

21886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.ESXiEngine55.dll

IMPHASH 62fab5d8ef3bbc56e4e729355272e71a
SHA256 70f076572ee96e98a0a81574ade4744135e98127a9718ee5bbc3bcfbcaf7bee0
MD5 5c9062aaee54f367c5de2334cce53df4
SHA1 57c6be1f0b680be9152cb9e63bd841d08c7b2d13
SHA512 4b3aeb65f6ebe6a4351ff9948c104d3d3ca0fe28eb54a89f901fac53bda19466857bd52136f8a09afa2c17084ffe3d968132948a6c31f5537b0a144e795a38a6
SSDEEP 3072:qJypfuQSn2Mj/aPzk777NFmeBRF5hCIEeSmNb6:TOj/aPzk777pBH5hCIEeSmNb
TLSH
T139E308141772C967E67F83B42C77EA079133E6813B62934BD261E2640F7638CB513ADA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

25845

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\71b07ec173ec9602\Console\bin\Release\Cloud.Backup.ESXiEngine55.pdb

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW Sleep

vcruntime140

__current_exception __current_exception_context memset _CxxThrowException __std_exception_copy __CxxQueryExceptionSize __CxxExceptionFilter __CxxRegisterExceptionObject __CxxDetectRethrow __C_specific_handler __CxxUnregisterExceptionObject memmove __FrameUnwindFilter __std_exception_destroy __std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_p

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _crt_atexit abort _crt_at_quick_exit _invalid_parameter_noinfo_noreturn _execute_onexit_table _register_onexit_function _initialize_onexit_table _configure_narrow_argv _seh_filter_dll _initterm_e _initterm terminate _cexit

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

vixdisklib

VixDiskLib_GetInfo VixDiskLib_Open VixDiskLib_Connect VixDiskLib_Disconnect VixDiskLib_Close VixDiskLib_FreeInfo VixDiskLib_Read VixDiskLib_InitEx VixDiskLib_Exit VixDiskLib_EndAccess VixDiskLib_GetErrorText VixDiskLib_PrepareForAccess VixDiskLib_FreeErrorText VixDiskLib_Write

msvcp140

?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-string-l1-1-0

_strdup

mscoree

_CorDllMain

Name

.text

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nep

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Cloud.Backup.ESXiEngine67.dll

IMPHASH 9cd981fa32ba858fc21ed25e255dac09
SHA256 e15caf5e6b6ae8e61817e8d1679f056b55af2590684ecbd96be77366232d1bfa
MD5 0fd157d5c5ccf0a04a022e1bfa39008f
SHA1 ee30bf36b6b00f79d29e357040435be707ebb9e9
SHA512 8c3db3ce86f448e92c6d85ba5b62556af0391e79d720dec2ca82225edfd86cae83b56407ba89aacc84548dc0bd0b8e1374619204f173847293d4f7bda5f8e7d6
SSDEEP 3072:C01Ev6GP5UbQ6My74xE2tquR6yh1IHe1mxjmy:SSC6My74mg7syh1IHe1m5m
TLSH
T10BE33B116BA38493E65B13385C73EA038632984237B2575F9257F2B44EDB3CDB812AD7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

26609

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\71b07ec173ec9602\Console\bin\Release\Cloud.Backup.ESXiEngine67.pdb

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW Sleep

vcruntime140

__current_exception __current_exception_context memset __CxxDetectRethrow __std_exception_copy __CxxUnregisterExceptionObject memmove __FrameUnwindFilter __CxxExceptionFilter __CxxQueryExceptionSize _CxxThrowException __C_specific_handler __std_type_info_destroy_list __std_exception_destroy __CxxRegisterExceptionObject

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_p

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit abort terminate _invalid_parameter_noinfo_noreturn _seh_filter_dll _initterm_e _initterm _configure_narrow_argv _cexit

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh

vixdisklib

VixDiskLib_Close VixDiskLib_FreeErrorText VixDiskLib_GetErrorText VixDiskLib_FreeConnectParams VixDiskLib_FreeInfo VixDiskLib_GetInfo VixDiskLib_GetTransportMode VixDiskLib_Open VixDiskLib_Connect VixDiskLib_Disconnect VixDiskLib_AllocateConnectParams VixDiskLib_FreeBlockList VixDiskLib_QueryAllocatedBlocks VixDiskLib_Write VixDiskLib_Read VixDiskLib_InitEx VixDiskLib_Exit VixDiskLib_EndAccess VixDiskLib_PrepareForAccess

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-string-l1-1-0

_strdup

mscoree

_CorDllMain

Name

.text

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nep

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Cloud.Backup.ESXiEngine80.dll

IMPHASH dca595da2a7defae3953557b941b1ef4
SHA256 48bcc371cbba2b39fbe7e32c7c62066c766a9b837d8d9851711c097892d7d6b0
MD5 efb8754133b0fb2d4e9a242c6c8faa6f
SHA1 3689d61490fc91d8a676e223d6f70e99e0f9e1ea
SHA512 e4cc19858f6ba1c09cd8b000278fc77ffc62c69ffa3871c06f3bed9b30bff099030ff1df85d6694c6ce0060255b002f50c590955a46fb521a8fae87b9e543661
SSDEEP 3072:MnmIpqmxdENW8N5b8tCMImRd9hwIWehmwRJ7:M6NWk8CMhz9hwIWehmwR
TLSH
T159E33A4013A255E3F75B53316973D6038133A802A726979F8265FEA58F5A3CDF81BBC2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

26809

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\71b07ec173ec9602\Console\bin\Release\Cloud.Backup.ESXiEngine80.pdb

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW Sleep

vcruntime140

__current_exception __current_exception_context memset __CxxDetectRethrow __std_exception_copy __CxxUnregisterExceptionObject memmove __FrameUnwindFilter __CxxExceptionFilter __CxxQueryExceptionSize _CxxThrowException __C_specific_handler __std_type_info_destroy_list __std_exception_destroy __CxxRegisterExceptionObject

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_p

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit abort terminate _invalid_parameter_noinfo_noreturn _seh_filter_dll _initterm_e _initterm _configure_narrow_argv _cexit

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh

vixdisklib

VixDiskLib_Disconnect VixDiskLib_FreeErrorText VixDiskLib_GetErrorText VixDiskLib_FreeConnectParams VixDiskLib_FreeInfo VixDiskLib_GetInfo VixDiskLib_GetTransportMode VixDiskLib_Open VixDiskLib_ConnectEx VixDiskLib_Connect VixDiskLib_AllocateConnectParams VixDiskLib_Close VixDiskLib_FreeBlockList VixDiskLib_QueryAllocatedBlocks VixDiskLib_Write VixDiskLib_Read VixDiskLib_InitEx VixDiskLib_Exit VixDiskLib_EndAccess VixDiskLib_PrepareForAccess

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-string-l1-1-0

_strdup

mscoree

_CorDllMain

Name

.text

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nep

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

140B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Cloud.Backup.Engine.Data.SQLite.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5cec5f01d4db21151bd670803e8ebc736358282757bf184d89cc6292d23840f9
MD5 897ce37a37233387b9c7939a3071239a
SHA1 63ad21840e695f84040d29c550c666532db8125b
SHA512 9ed7448b33cf939945b342611a2a2cc769ed483ff396049c56c38f7609ceb3d698d858e245e6356a1ef6b769af2c2e6dbd5f0445a61e9942be1ad22dbc8953ec
SSDEEP 384:c5UwjwLpqOHUffkpSOvetJWtYxJ+7RmzSpl1+nQvuJzPWtkLfuY95RKCf:O6UffNYenrWRmzSz134jpl
TLSH
T188B2194A9BA4823BD77E8BB970B2430103B5C7451023EBCA5DD875AACD533877D127AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

29198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.Engine.MBS.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 078e007b2be631188f58ade01efe362b6566ae60172c186a8a0427dda26cc145
MD5 a6180ea6116fdc9d6b98f8b4190fb7a7
SHA1 4cd4cc881ae04a7f115ba744bb48d3035978f9d6
SHA512 cd9a4ee21c7fb274d97c97d2f058b8551ac5b1a340c91ff2ea433178aa3cd7ea51a83aa9b88eb86e5985f3341c856323ddd95dea4eaa00b290f49a5df2cf0083
SSDEEP 6144:+o2rnhwffwNGcXvpBAcWwLyJg03veGFDQjQ:+oqpBAclLAg03veGFDQ
TLSH
T10464FD14F3FD4E06EEFF1ABEEAB510D04E7BB993D801D26D09A4005D16A4B448A63F97
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

341598

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.Engine.MBS.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 42d3332f183ac65f310182992add8ceb1352d8cdaa429e0f053582f0b48a1816
MD5 846246966e95da3d25cff571edc75a92
SHA1 c05e9d4e59a6206cc3ac0fb155d86eeb16338144
SHA512 e11196fb06644b5b828081caa82931a1fb6775f64a087994d76e35e48b90117a85714a3cbbd70ab0519caca4a752a0e8b7a97920e97342d0a583ca3eca0edaeb
SSDEEP 768:EXL4pL8gl8n+SzEBc/HGrktaHC1v+TsUDca68iofQfM9m3plF12zzj1Qzn6ZDoGG:EXMnIO2vJUDd6aNI3plF1edqr
TLSH
T11453C6698384C17EC7C20AFAF6325364137AD24031A1F7DB5FA67988B8C376353671A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

71758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.Engine.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7a5130ffc0727c6eb62e490020c3bd1a07e9e76d7867ebd90e22d6ee324d186d
MD5 b7c9fc943e6db802ce7688e49f9d812e
SHA1 96338ac89bde4a8545e7d5b89ca9222f31902da2
SHA512 776eac42ba393759746a817e279ac519134beab8b40db287ded9214803d798ae02b3d794ae86f4c6b077a53873f6e4823bd28f723bde918ee46aec02158a48e2
SSDEEP 49152:NCJqPcW9ZORJWCAMpt31SIU2VCP6G+yGSrobK+vXqk:MW9ZcJWCAu1SIdVCP6G+y
TLSH
T17C36411673E44F09EAFF6265ADB445F5C736BCA305C8F2AD1498802B25E430CA9786F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5096382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.Engine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2f1fcca6f878f06130c505c18c45eefcbb6846147451c4151d10201e054881ef
MD5 4dba56ec275e32bdc2e078fa3591649c
SHA1 7f39dda0e3003f949d8a8d957d38b3f27dda7da6
SHA512 513704c4e55a4d658ea1d0e9422dd0a92caee41cc3e9d0982bb814f722f6f24d71b51aa754501a870dfdc08105304f91fb936df59125228d5e1692cd09f1ee91
SSDEEP 49152:gUaFa+suCQNH9G94JIHPmJnY/iZLEjWJiG0M3ePIFyMWnFxMuWA2PdQC8AbUpRTv:gUaILzPnMe2bvudd
TLSH
T133464A00D7F4C6AAD2BE49749472051406F1E80A1B73FB1F72EE5C692643B096EE5BB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5744382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.Exchange.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 67187fdfcd90c7e3c1d042c463559a5ff1b2d3e9af644f33e05431af525a626a
MD5 ca1cdfa8ac1dba7f357b0217a435d748
SHA1 70471b714ac0c4dcfdd4a8082cee9b07fdd9e305
SHA512 db73bf7931f171a71a56f9c756195d582b4d6d38037768331a0f7d52602818bd419a302af19c9e463a20e50fcb2e126979fa5a303ff40c5409c36e2ad5df7cf0
SSDEEP 6144:Nc/J1TtE4K9r+VNPVTwGn96tuw60wz0m2IOWZ/00h5jKIA1o3IM1xQPOCTaoShjd:Ncvm45wqAsw60Lm2IOW3ZAiIuxyQ
TLSH
T1DC942A2E26F9D92BD6BD543881B31A15AAF10C4C62A5F3CF3AC29E689C4235DDCC51D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

427486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.MSSQL.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 db98014fecf3f3f716e74c4ad352b812545a990320c77dae368f7b264ea95a58
MD5 4f662590067cbecc8929565dac90b2b1
SHA1 e5de7dd0b6b17939e78fc952f0ba6195aa5aa818
SHA512 28716c6df5fe2a2e0bc6614c944bc9b52e2099b9614cb02fab1c3b3d4b949125ab17f1a05c7c2f8f046bec14659a05b13cf57fb72c5355791668a901b8a7b0de
SSDEEP 768:oeCMfLs9IuGH5hAvJydOvBmI8V74h87in33N0zNJ1OpSPdRFoI54JdfOoc:3C6+GSvJydN3s8723SpJkpSFRFoW4JN
TLSH
T1FE335C3DA72D8D37C79F9C7CB127929202F8891E34B1F72B6EA2255A16233C91D481F5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

60206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.RM.Service.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 860752b7dfae905065b986daf00ae716ad7e001f781f46db4a2786e45eb63456
MD5 f3e40faebf8cc5628156ba28a0dcfa4a
SHA1 bc4db83b6e6ca67b5651580d71ad046d3cdac10d
SHA512 d1800d1e8562dbd3131b3fa54a774fe530689858916ec97b374a634ea31697f0a5943522bf25d15ad0038d7a56f04177c65a6f0976f29fb61516496d40ee5387
SSDEEP 1536:9csrQNNJ0kcLfQPzcWpV1N9pr0k3JgZICMuKC5Al+z8sju70B:9JQ/U4QWr1N9nZMRMRC6udjuYB
TLSH
T115B3DB3A6326F450CF2DCD388513928AA5F20D6B6931E2B77A560FC40B217CE79ED1C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

22:c9:54:bc:07:07:42:60:35:1e:23:71:9a:13:42:a9:32:fc:b4:e2:5b:2c:de:7a:a1:3c:8b:88:c1:46:f1:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

106814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Cloud.Backup.RM.Service.exe.config

SHA256 73cd5c6e4a5d7659a9b7565b10455c3a7e2582d8d8c7b2397f727d120609c60e
MD5 6a4bc739158900f2755131047cbbce57
SHA1 7ce21a32934190b2733aa48da4705e52ff8b0708
SHA512 e6040c6e0eafd25b5e48a845b032d3909dec6102335449dadd6eb29831bf25f39b6c7dd54a8ff58316cf6e9c82c5804c545302ab75dd31f8269b20b2d2ad6e1f
TLSH
T10F71912191C8AFE10BB209A23EBF6418CB7903B7294D058EB1DE6F478F7595A1707177
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Cloud.Backup.Scheduler.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1e08d6cb508f634e61f2318b145959c7b06fa4aa24876fce28b416791de45050
MD5 45dc8717f4223b7f4a6487b67f7d5ee9
SHA1 71051e029a069baba3fabd95a39bcedebc629f4d
SHA512 ece8630ded8ed9b44bf593395441c34c053da97d2855f25db32874ae7add0cba2567f696beaeff4224af6bbf287f17e10e57980fb2f85483934755768abad520
SSDEEP 3072:qbyXv0TUKjxFMiuKB4Tf66U/l7OJSk/cs80KfFJOGJ9pOJK:5XvKJaiU66U9qJSk/U0K
TLSH
T1E4E34B5113E5C53DE7AF48B8EA7200016BB16D07D570F75A3AE964F91803386BB2A3F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ee:05:fb:a6:fb:32:80:06:90:57:e6:84:21:05:85:fb:15:50:a8:7e:bf:ef:68:d9:98:d7:20:ea:34:ac:3d:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

146974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Cloud.Backup.Scheduler.exe.config

SHA256 e5f016e12857eb8b77e7ca764308e582c0814a5be8b034ebfe627beb8a85f87f
MD5 1007a7d2c6c5fd604b36d28c3cd83df8
SHA1 bfcca6435afceb9aeb929d74e04a4afde5e0188a
SHA512 44ee0eb42b75a227779a2c5e28afcd2ce39f5a9b651678a1e726154f154a17c3d0b6fd154547d32d36fede0048d16f9451ec17a1ccdc640ae63738d7f37bc546
TLSH
T16E511A1165C8BBE50B7209A23E6F6818CB7D03B72D4C064EB1DE6B878F3A95A4707177
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Cloud.Backup.UI.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7dd3185de62c18c2b44c5c9b662a9600c84b025a1ca381f2d3e65c86008483f4
MD5 7f00deb8653c82a4d4705a945db0e639
SHA1 fad09b109880d554bbb4b5e978ea8ebc0685d68f
SHA512 598165b8c3a42bfbb686aa9486dabbcb3f5322708cbd7a2cd4c2e494b8c9994c516289b8c4ad4296eb2e65173064d1aece9faf6e9b907bd897ae7951e71b9b6d
SSDEEP 98304:nkRJbeUb7ocO+3FJd1WzPOgl5WjMS2GfOsBhcGv3hTqlJ50x:6beUb8UWzPJlGfO4hc2Rej5i
TLSH
T1CCF66B2037A9921CD47B0B715C3551C117BABE2B7B54CA2E2895761CACB37238F227B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

db:10:16:27:cd:89:69:1f:57:9d:d9:51:5a:af:52:bd:cf:4a:f9:ef:63:43:3c:b7:70:e8:98:69:54:12:37:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

15611710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Cloud.Backup.VM.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b90ffc88054fd8fd0e72c4b85c826d5958b64df82018d6b8f8f6514cb52711ba
MD5 2124ac82366ad57eea2ecb3d8b33e4e2
SHA1 79f09de9c669b7fc82a86122d0b1a9a36049f72c
SHA512 0e7ff2c8fc7f43a7608b9296b1871035f61141a5d3f083499ec04bfac2df0cf6ccaade9516f5fc2a03a7d96bf9164f261eba11b12c508c84d31c6ec7dd6600dc
SSDEEP 6144:zF5AKZUA1gQjekjRN/tqeiWaU5AHr/S3kfXS+Tno31orPXveIe:zF9ZEqekRN1qLG5AHV/S+031f
TLSH
T13B945D6267B88621CBAD87B850130C1493F51C6B836EF7CB99875DEC6F4634E66870E3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

443886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Backup.Wpf.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8a59f5b20108c400bc0016b4f06c961d97d5cf84d9a190e0cfdf74fa72ed7a7e
MD5 98545603be42e1e31bef5f85b394cee6
SHA1 aacb2066322581a4efc48db1c3bc8ac1af4fb147
SHA512 2e66c937023bc46898d8db12fddb095a9b70ce96659a25357f985e6852191fd368a95e5b9f85346231f703d106daf3d8cff55ed98b22afa26ea734e3383fd0bc
SSDEEP 49152:byq5jMan3urQLgwxjwwH+wiQYp+hPqlpZwTiqSOM0:WWjMa+2gWKt9CPyZfROM0
TLSH
T18CC5BE973F41D13DF4B7E5712A88619027933C6A9767641826E2FC8E85F1BC20ECF626
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a8:68:7d:f0:f7:21:0a:0b:28:b0:d3:9d:0e:fc:7f:d3:0b:e6:14:b9:90:fa:79:ef:b6:f5:47:4e:4e:8d:57:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

2309758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Cloud.Backup.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 923169932e79848bac79be60e8a1866d95441904991d9b5b68328663f430644a
MD5 da61147e0146a6c18a6377ab8190a243
SHA1 fc3c3b48960cdcd23d333fcc86f96f5606280467
SHA512 baaa33daa5470889263908f06b9483a3f5901c6703e62f64082b2cc4a55dba16f9937cbe13d87e8b5fca70a9955c5d0ca79b7dc138b5b952752031f66a81ccca
SSDEEP 6144:b+dNx5wFIEVSSd/+nOkm9HcVizW5t+XUe7h1pB+KPxjAKEjt:b+fxiFjbJ+nRszW5wUe7h1pB+X
TLSH
T1E0640241B7E0911CF52F0FB66D3215B08B3B7B525B21EAAF31C5328D29B6295CB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

324494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Git\cbgit\Backup\Brands\Resources\SimpleRebranding\obj\Release\Cloud.Backup.pdb

Cloud.Base.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b46c4918d12cd6de7748b1dd20f4e3d747a5aab43cb0ea691f91f8556c53e9f2
MD5 06e76d50b954d6d4797c04b9b7976fe2
SHA1 acf150ccde729fc0e87e5bf29d866f5db103560e
SHA512 4f0b920d5a7b58688ca20e7e8147e87f73cdb7ec3eecb084686b50429577362bca5a199e55d982e28fbe059564de17f470bd7cdd4bb3cb9f38bf662436e98b7c
SSDEEP 24576:T+jyhIiEu/wSEYabCJbMAU86Loed0b+TS8AWps4i+rEQjNU/jNycDPAjxczkRzjI:rMAU86Loed0b+TS8AWps4i+rEQjNU/jx
TLSH
T162356F5137E9CB4AF5BF2BB96AB51092C236BA63D831CFED4D40011C19B5720F967B82
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1140270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Base.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 24884998757bcffb10e54e5d65877c7c53ad9ba935fb670fdacdc60b4ba8afd8
MD5 0cdecba224a54ef5a9c8c8200505a24d
SHA1 ef6b41e28511111cf7a1921b719ff10c4155d78d
SHA512 14c667322c077421b5dc460392945a1a6d682cf7eefa6927d6dd54ddf213f3326a8dccea72caf53865cca0066ec710061867857084ff7db84bd71a75bee33802
SSDEEP 24576:AGZmJ7+/GrkjZAWRm96sXIuxWiwPPlRVACDhkSfXNCi/:2+V05ERatSfX
TLSH
T1A2654915B7E2D716C26DD5B8B632412403F8E9095376F35F6B69A038388273A7C896F3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1441438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.CbfsInterface.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2dfc0f6b8cd2f9c7d2b985e9bf67655aa8943433c1c91e857946cdbb8908b09a
MD5 52715081aa71b1ca7d21a3dc3e2fb748
SHA1 47d9f5abdb79b36f9fa947487a1e472def0552a8
SHA512 c146aec51c5fbf2f8f41688260e812e8c2cf43c1c5386a67768ee94db835a6c291c60d8d9f8df44af9c381fb252046af475845afda9d499d1be93a7fc586c89f
SSDEEP 768:kh7b6ToCTZAqXQBg9/flIgiP4uhC/uHSICvdGN6nWByyyohxQpbzDEpYcsRreRVg:s+TNlAqmg9/9jiP4cCT7WByac+BRV07
TLSH
T1AB534B7817EC8A92C2FE2775B977071243B1F29D1613E72E6C95A65FAE027004A137F2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

70522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent_1\work\a8597ef7bb7c4374\Explorer\source\CbfsInterface\obj\ForBackupRelease\Cloud.CbfsInterface.pdb

Cloud.Client.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d008ec5ed4afe33c8265ef09a6397bb31431a5fec3aff08d1c15cf8169156042
MD5 553633c5f4a880f3438ae7c74095111e
SHA1 2c13799920ca83c390abc7bcdd43965e0a518251
SHA512 9d422e38f3fea8d0c23fc5d43475750e3da3dbb0e9d1361b5075df25cd718b3cf5045c45cdc04fd102972f7df65ebc84d766792e593569e8db4b71548ce77529
SSDEEP 384:svhfTfpvktDQ56WZszppiV55s38XTM5VSDnaeQrKasnIrTkWOUB9i6hbMhbGhe03:IJpFZszppf38XD75zs
TLSH
T102B23F207BF85E17FA7E0FF92BB110914A727952FD12D3BE5ED4048905A4B44E630F6A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

29710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Client.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 db268d019e1a2e5e06ecd8a7187037cd509683ef9c67a6abd98d3069264b6487
MD5 105fd4bc38d5748ee03bcf83e772da5e
SHA1 f76d17221d8581f458ab4951658ecff711dfbb42
SHA512 7967487e74b2a0740fe5bbb00dc4b87dd14d54343f38066344167221e3214158603f2bafb4db06cf25ae742488c195dbcdb44c4849f333e0e06aa22ea82bdd66
SSDEEP 24576:Cm4hRbUKb/JVMqAI5OD5QZjFOnqOgqYYoW:CVhvJVDkN
TLSH
T1B3353946A7E4D72BC95E8478B131062803F5C45973E7F3AB6B506560BC8730EBCDA2A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1163902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.DiskImage.Flash.Launcher.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7266ada9899afa9ff37cc5a420b788b2dadfd35d450e1ba7b3dd82f3818a4fab
MD5 01a23ea564d64b23ba34e01028000845
SHA1 0877ef3e8e2c16b184acfa1bac952fa4b89e6dd6
SHA512 9c5691f93ba15eee25de16cd8f53e43752e3f1be7f9e698a550c99c049d14857bd39daaf42bdb2c557d32a47b0d894cbbb1e716d6ebd6954ec6c001eed6ce355
SSDEEP 6144:PHrF1++DINKEVSp+BdZFQo5QvQvzbz0NCz/t:PHrF1++DINVPKoyWsCz/t
TLSH
T1E774083133AAA209CD7A0B70183592C527B67E667F14CB9D2859334D9D72B138B227F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6c:54:bf:11:eb:44:00:ac:47:8e:e7:0f:74:5c:6e:e2:4c:ea:9e:72:52:c3:10:b8:19:ff:0d:ae:2e:0f:a8:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

331678

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Cloud.DiskImage.RestoreVerificationService.exe

IMPHASH 0923102362e3d6b015ad139d6aca98c1
SHA256 6b870848fa7facb000ba2bea6bd7084e728bd83b31b3eba776f6cef5a77539e0
MD5 105e5ffde2cd2a403d964df891211102
SHA1 61f8f2d812053417d40deed0c32fa0dc1c8c4014
SHA512 ed92e79270355e45008d6e4b83c3d365397dde00dbaa28781d47244752fe25c77bbf3afcc036ef266f200e8598e6c7d7b2838adec97fbbc78896d452cc91f68f
SSDEEP 6144:ushOscBFo67QXGQxZzrVBgYLBHGe9r70LIo9AO0Ed4OZTs:u267xQxR8Ypnr7c9y9OZT
TLSH
T18D348E1175D28472D9B3153509FDEBB64A3DB8600F2199EF63E40BBE8E343C19A31B66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

b5:c5:61:fc:33:02:9a:13:d5:29:52:d7:19:02:0a:af:29:c9:c6:af:1a:02:46:97:71:2e:a1:da:62:14:08:df

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

27210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\BuildAgent_1\work\a8597ef7bb7c4374\Source\Console\bin\Release\Cloud.DiskImage.RestoreVerificationService.pdb

user32

CharLowerBuffW

advapi32

DeregisterEventSource DeleteService RegCreateKeyExW RegSetValueExW RegCloseKey StartServiceCtrlDispatcherW RegisterServiceCtrlHandlerW SetServiceStatus RegisterEventSourceW ReportEventW ControlService OpenSCManagerW CreateServiceW StartServiceW CloseServiceHandle OpenServiceW QueryServiceStatus

kernel32

QueryPerformanceCounter WriteConsoleW CreateEventW GetLastError CloseHandle Sleep SetEvent WaitForSingleObject OpenProcess K32GetProcessImageFileNameW K32EnumProcesses QueueUserWorkItem GetModuleFileNameW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetEndOfFile GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW HeapSize RtlUnwind RaiseException FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapAlloc ReadFile ReadConsoleW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW

Name

.text

Size

152KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Cloud.GoogleClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6ac7e848941f2b9add381a8285724eb271b080952e5447e4d8437ec0af696c67
MD5 0ab7ff6197ba0248148a14b2ed22e2a9
SHA1 1f4ca8124c02c6e5f8778c75574f5788e34eab86
SHA512 2f8777a67d2fa02159a9ae238a3d7fbc3af800c97122314eeacc8d7626cf9d991e8970e0d7782d0db15ab5a7565225fe52d85d07af54e6ef4e5a95528a16ed13
SSDEEP 6144:lrif/khdOHf0clk7mzATyUtCm/OhMfhx1z:l2f/kDO/Ga+htCmQMfj1
TLSH
T1D6645D2623E4870AE6EE06F8D021851517F05C0F9776EBDB6AC1E8BD5C067C9ADC53A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

314078

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.OpenStackClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e7124ae334f838d8615f159b0acbd59367a02647da2a0feeee69881c35bcf7bb
MD5 7d3f0d0dc803d0145156f33f9099263c
SHA1 89ba37f006e4818a0c308d5da17b2de8cd58a604
SHA512 31dcfc87dd4996ddb6642cd3d5a173ed91c92b29fee763e4457bfcfda3ae258ebeede5ded675a6d5f46c1dd5e56ad2f4fd07fb0f595915436ef7bd31454c9c89
SSDEEP 3072:uQHYO9jpSnXT9sESvqfbC3DSeTRsiCay4mYoi+0:uhO9jpqTiEpC3xs0nZoi
TLSH
T186C34B42236D4A26DBEE48BDE112C101D7F08A5A9632F797BDD3B9F11443389ED8A1D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

132334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.S3Client.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a436bee912ddec33da776a1fb959e27548d07bd555947e3fea38ba705212f6fd
MD5 f643f207017111ba5a7904373bff8426
SHA1 6731b1ba9abb992e0cdbb709ecac951f7db227b3
SHA512 6b9b8aef13c931cbdee2e21d9095d963c632acb8b8d3c77bbb1da632f95f6f5d3d99bcb0ee03000e9a09ff7e47082f49c402af8085c67e5db1408dec5a9d60d4
SSDEEP 12288:exwG2mF0Rk4981hs/EklRxjn11fku/sk6zsZzWuY4J08Dcvzyn/MwzV:RG2o0nrpRVn1muEk6z1uYOPYynEwzV
TLSH
T1A3353A2367A4D337D2FE557CA032512C43F19C08A2EDF3566B61AB785C8B7064E9B1E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1149390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cloud.Wizard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7df53dfa1b879807e012dc9076ce8c3b1d5a15890c565c570440bb7dd671c6f0
MD5 372a6b98d714e2b8d33b1689e334c6e8
SHA1 db53313d74a8d52aaf11babdb1c3fb76ae9dc869
SHA512 ee958ea1438fc7d19e03e742bb8b658312777c95d053aac5c0c653f3c3bfa5caedfdeb3a7124dc05e828b90ee08e6a7c8fa08778c28771164551a2abdea076ba
SSDEEP 768:DsUK/kA+hNZ4z1bQmr+6ubADUBKGDECKo99F1uNvc5jRMK2TkD3bKp:mUn4z1bQmrKAwwQuyjyK2TkLbKp
TLSH
T1A753083033B9821AC9694B783C7191C517BAAB257B00EBAD6C89115CED633174B23BF7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

68846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Dapper.StrongName.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8d72a8d7c13d5cd37fc4daf52c78f09d8199d72e3f3b4298c72c121b65ee6583
MD5 e1a11d2eb998eeef9d91055ffbea0132
SHA1 a8fa26d510b75436079e7ffbdfe705367c01c1c0
SHA512 a8bc95228c51f5835185ece4037b4807595641caa84bfb70d26007c2993f2c59f3d811f0c71b490309550e2a4e735cb12b6e1a2c2bdb3c7d58faf2a3952e364d
SSDEEP 3072:v6ZWd9g9mMzpGapZeEvizRYe2vDzZMCsdvqL+YS0YmIyb+g:yZWdHap1izRYe4sL4Pb+
TLSH
T1F9046C15639D8BA2CBEF0BBA7475800043B2A6A7F5D7F78E69DC91E568537801B003E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

180266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Dapper.StrongName.pdb

DiskAccessLibrary.FileSystems.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9b85093a7c8050a33f7382a85481e84a99cc6ca940ea8b640e1359a4530b09ba
MD5 45da5dfb10320aed21a9a9eb78043d12
SHA1 dd7d3ffbc207ab97ba34fde0c7663b3948b6921e
SHA512 8b832acb034f40ed3a68d6fb657d49da2894bc3bf17dbdb62e5b094a7ad92ac3fc10fdbe1978e3c992d1206b20c1e0a4ff354e1d3e7d2fe10c388301e8ccf8d3
SSDEEP 96:WchCFOTU/kz/xhV1ruVUytkt5/pPTKpOPR+Nwesmm:z8KU/O7uGytkt5/pTnn
TLSH
T131F1B411A7D8D323DDB70B3CBDAA97421235EB998D17CB4F1C49160EAC366582BB2760
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DiskAccessLibrary.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 13a3ba8d52fb800f1a0f4f371ad994b9070966596355272fe1f5164cc55a0063
MD5 6636dbc983bd69d7ad1c23f4a6fdd6f5
SHA1 23551ced0c07e4d75c770719c3c31969d029df4c
SHA512 647e1bf899f67ffbf78ed78352d7b6b199cd5f22e36c9002a37d24887815806d768ba04707e8f6d5cac5bb8a330c593d69b61d51b586ab3df56f8f9bf891f747
SSDEEP 6144:NWicmkog6d8D+odR6HcFxMVaFTXB8IiH7LE85MmnF:NxFkoOfB8h
TLSH
T19E543A2857E98921F8EF57BEE4B6044587B4F016DA2BE75E1BD424FB2D63364C8007A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

285902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Esent.Interop.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a69c7365fb55db9740e886d6d8137c4a64f90e983e2a730037b5afba4c9f195
MD5 23cd57e1099c8356572c2b149661bcb7
SHA1 a43f26f9c54c5b040e3e368152118c47aec21bf5
SHA512 bda8abc988390731ca3bbdb4ee9d87396b4d139031391568d57dfa1d5f50e791e84b0dedacf64584ba0088fcfafcd23436b942b78d92a13f5e171c916a459279
SSDEEP 6144:qw9nwscyJjd1V04WCwtnRwtv1r3BFc9FSWGCX:xrhJjdnJ9tvZ3Pcn
TLSH
T1A4740A2063E44619F1FE7F74A6B4AD5D44B2FC4B6A3AD38D92009ADE5C62F50CD22393
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

373518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Hpack.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6d30ded0b0be4418574768de0f050b42de58d2bceeb2db78f641af9e62e91533
MD5 ad34aeee4ab0a615770f5531254d4915
SHA1 459d3290200ec57c71919a8ef0855a8e0e38f339
SHA512 9f6ed2a8f830e539b18717bce3e7088ac6ae681b88d10075a0fb2f2b1a009bc2ac7ef2591d5ccca4fa64c4ab491c1706981b01bacac5ba70b4d1eec1a124d4d5
SSDEEP 768:dvAeZFRVEc40L0Ls5xFtwlCVDWU60Ir0TYC:x9EcJoq/tRVmr0TYC
TLSH
T1AEF201715BAC805AE5ED663DF1EB274507EC25B62172C1D1338CE86F9C837462D02BA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

40702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Http2.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dfe9219f448ff6d527b805fc968806740e7844760db17e4a1c03239ceb93e115
MD5 605f1d8c512a3d4419a309e4187b2010
SHA1 a7bbb624ca9ef79eb55273ab77b1040a85f1e215
SHA512 0fcdbc3b426e51010e9d63d10940424f91b2d8ebf69c982fd01bad8b7a4565f01710d4cafb48870cc6a67c565da2ad2b8dcc0932d3b4f3a19fd731eb00faec6a
SSDEEP 1536:UvSd6ZJ+DJZWeIppfigCOatcnI/dSLrzumhWtTfsKmy6iZTpb:UvSd6atZpQpagmPSqhBsny64d
TLSH
T1E293185417EC4623F6EF2BBE543246634675BA11B97AF38E098C94EE18D3B40DC113AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

103406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ICSharpCode.SharpZipLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c287e9b07a8251828f35914364c89a37db606b0c1d64457f9eb8fa2258f0dee3
MD5 d59ef46a5f01ddfe7eb691e6c725a247
SHA1 edf2ab9ee284fa21dbb55e93d082848e800f068b
SHA512 8b5b622618ddc32695cef8f0744c548e5068a908794caeef3286f5a2f521ee2bdc91fb63e37ce211147dc1feb8777da1e029f0ae8c6dd04b061753832fea55db
SSDEEP 6144:E1uYsjrFIzmuxpOI/1MvCdRbpSISC8j7s:LIzm6pOIgvr7
TLSH
T1E0142924B7FC4A67F6BE97B8E475908087F5B9A6313EE75E5C0094EE1C56B6089003B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

206806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/ICSharpCode.SharpZipLib/obj/Release/net45/ICSharpCode.SharpZipLib.pdb

ISCSI.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d10e28fa20ca82a19d0aca2c6c2af8e49f972650ff0c615fc1c3689361b2fb9d
MD5 43c677e816a52dd021b5bab12fae0fd5
SHA1 8b165e2773371137b8f155369dd03bc65cbeb22f
SHA512 4c02d4c808f0033d7cf49d16a955dc5dfedeab9332fb926aae699ec768e0269a102a14ad78f669cfde40243ac160ba45224eebe0ef6fd53e7edbf87dfd241d01
SSDEEP 3072:Ae5XHlADsxM3Mf0cQcBp7+1RQN+K+pU7vwxn7b:AbDsxM3zcQcBpqU2+7v
TLSH
T1A9B3299C5BEC0B65F86FA7FE90B48501C7B8B95A611FE30E1E8490FA2873391C5117A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

121646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

LZ4.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 de81e4ccb659ba85a4a6d1bad8742ba0af75aa6ff50a2f6330e78721681d3b14
MD5 031d50f8089f30c265a281b7f8d90e73
SHA1 6548799d247855279dd45bab863c08da4ba5018c
SHA512 3e1b8f9f854e4d4e805c495425a0ce6278bd2bc4a8db6da8b7cb2e797fbc78187727cabf185c44d5fbf144543e27814347f565337d4992868479bc16d366c833
SSDEEP 3072:zqndOlIdZmqtVioTf5vjJRzGc28SGHWEhpU/urue6mnFDy/:zBSdRioBjGc23GHWYhue/x
TLSH
T13DE3D02577D95597FBB69A38ADF551014338BEB2B9BAE38F710008393D26BC88D20753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

151822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Lucene.Net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3e374e75c33391e7d5a127e21a603f29241f6c3ac35b4f5766ea14ab49a8bda
MD5 38a3875f7a2169645fee066fd4e25572
SHA1 5e72581c0c0ece95bda361cc08d50c6a7a18602e
SHA512 4a54064bf78e8a506b5f8ae80f93be584420d82515044c0d5de8c294bc89653bdab54142e3c1e53ec934cbf6a016a9daeda2008dd9dd90e306d31e8285d85b0d
SSDEEP 12288:WZuUoUqrbs7TpCjxH4pxxo5CS06Nf637tBnN8JwqxhCbKjDp:WAUk0pCBgxxo8rWtjDp
TLSH
T152F43A4527F81A17F4AE5BB5E471092A83F5E416E7A7F74F6A50B8B42C67B90CC003A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

748542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Lucene.Net\FullRepo\trunk\src\core\obj\Release\Lucene.Net.pdb

ManagedNativeWifi.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 37d2facc99be6cb1694b98a0208704f25f376efb8f25906151bed0e85e44dd12
MD5 9585cc9cc83f5cf7217b7ecc77c461ab
SHA1 38eb935e5eabd47bf123f5e3f397239911a9e70b
SHA512 8d5a84c39bf7cb1df4693b3eeb897bf9bba1858af40e7c2874e17e62fa139529141c7019e75476ec14ed16d324cdfce496f980f87f8ffaaeb14843e98f79071b
SSDEEP 1536:0fiDWOrOUkcNSHhJbTl7K4tIYLKKjYBEC8mj+T2EvMLr:BWOrOpJH/bT7IgjYr8myT2EvOr
TLSH
T154A34C5953E81367CBEF6B3CE0B101518375A00B2047FB8B89DC15E65197F817AA2AEB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

106830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Microsoft.Exchange.WebServices.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e6dc1e364a5b9507d806e12b0d1c390ff8fd779749a57b51c8d37126889ee79b
MD5 b0ef1cca695fb3fd38b219f3b67974f5
SHA1 7b5bf10c7fd710a1cd5c3f43af352f31c9880cb1
SHA512 92c5a2c910bde00d379f0b33380c7328c672cf58bf90bae382afc2a6af429491dfb353b9dbe8388e47d0eae43386faa442d43192dd215f10e276571893907755
SSDEEP 12288:c8pomlMhnk/IfGUcbtYiwVz9Ou+O9GPxuZa/7lhyylVybnFBRRGQmEQF:Voma6I+UcKP2xuZafyyrszRRGQdQF
TLSH
T18C35271937E8131EE1FF1F39A5750424A6F5F92A3B16E32E0A15E69E1C62B40DC22377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

33:9b:35:d7:b7:ca:c0:19:e9:96:ce:c7:22:8f:b7:cc:52:e3:b7:d4:df:23:56:ee:98:7a:bd:22:e6:d9:6d:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 15, 2014

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

4e:33:ea:07:01:04:42:1f:10:d4:2f:cc:8b:c8:34:f3:c7:f1:bc:6f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 15, 2014

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:4c:a1:e8:4d:cc:b4:74:7b:3b:00:00:00:00:00:4c

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 11, 2013 - Feb 11, 2015

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2013 - Apr 24, 2014

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 24, 2013 - Dec 24, 2014

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:29:97:4e:7c:82:cb:20:16:41:00:00:00:00:00:29

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 27, 2013 - Jun 27, 2014

Minor OS version

0

Major OS version

4

Entry point

1106206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

f:\15.00.0847\target\dev\ewsmanagedapi\ewsmanagedapi\retail\i386\Microsoft.Exchange.WebServices.pdb

Microsoft.Extensions.Logging.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 050405babe5276f1b2e405809c46847da2b4a7cb005a976c58949ed68d9ff37a
MD5 9db8219ccd84e539574aed9cd1b52d0e
SHA1 8edb6463d09b74145ba775f10133398ba024d3d1
SHA512 beb9dad5a6253519d165cddd9920c360af3e4c090ff8919cf19442ad93c9015d542d803fb24870f507387ebab1ec19526333a73dbfea947e1ae957475882eade
SSDEEP 1536:knvIi/g58AJ5LAOgeo5QFPZUsPuqMMrZg:WvIi/g5LviqMSW
TLSH
T175534A0957D88333CB6F49B9ADA0E2119B79C2A37407E7572CCCA178285BFDC8B11676
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

32:42:0e:22:9a:b5:a4:33:a6:ca:b6:c6:fd:6a:a9:86:59:e1:e3:af:b5:bd:59:86:ea:b0:a2:2c:cf:71:f5:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2021 - Feb 10, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7880-E390-8014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:5c:86:d2:e3:ec:39:f6:8b:38:00:00:00:00:01:5c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 14, 2021 - Apr 11, 2022

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

59390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/net461-Release/Microsoft.Extensions.Logging.Abstractions.pdb

MurmurHash.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e0a8687021f8ffbc5a09fa875deda2419b5246d15f4b1e6856b8d6a24a6f86c1
MD5 884ab9c5107e6e40cf6178c9d6877d0c
SHA1 8c7dcaa850cb4bf27de9c7725dad8be8495761cb
SHA512 66270e0bbef588ebedac7387e79aca178a3f69bd4cdfa45c58a2de39a6a9c1f55111eb8f5dc7b3f0307aa5735735f5f2337d0b3bb376bcc473b07604660f0785
SSDEEP 384:P9RkLcnj9h6C9ctoGwnkrJup//hWkk33j7me1rN9ptjv8XE:2cnph6C9ctNu233ueXY
TLSH
T16062B515D76881A7CBAE873A49E1321A4D39D247BFD69B3FD124B02E7E83BD102407A5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

21602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\git\murmurhash-net\MurmurHash-net4\obj\Release\MurmurHash.pdb

SQLite.Interop.dll

IMPHASH 56568d263b8f0fbaf90fda41effb57f1
SHA256 10c9ccec863ed80850c7b7080e4f2e34b133ce259d1ae3ea7a305cebf6e2940d
MD5 a73fdfb6815b151848257eca042a42ef
SHA1 73f18e6b4d1f638e7ce2a7ad36635018482f2c55
SHA512 111f5a7bd916ab317fc127cbf49a2a81c2a614ce3a655a0446f2ebf3c2e61509db5633a391bef06c4ba0b58a71c752262ec2467a09abc56827263c647b08a09d
SSDEEP 24576:EpmVXSlb6q7SKjK2RMP1lfuqluu3cAG8WqMkXbbz38MJBbMNCoUpgLPNwEcIMK:6mVXy7SKjyfTFMwEkr3VJBbKCoUYt
TLSH
T17D858D4BB3B8009DD5A7C17CC627670BE7B174451710A7EB17A086AA2F23FE516BE324
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
NSIS installer

installer

Digest

56:eb:de:df:9c:b8:0f:03:aa:7a:8e:2b:be:fb:9e:b5:82:f1:3b:e3:a8:2b:0d:7d:d8:d8:13:76:1d:fe:30:a2:29:e3:9b:e3:af:f0:d6:9e:98:d6:3a:da:ba:08:60:b9:bb:03:3a:3a:2c:dd:1d:96:30:f7:2e:d7:58:07:6f:fc

Digest Algorithm

sha512

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Nov 26, 2022

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

1f:32:3a:b8:eb:0f:7f:5b:71:c0:1c:37:0e:42:8f:20:8e:b1:e9:de

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Nov 26, 2022

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Serial Number

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2021 - Dec 12, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

6140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet-private\bin\2015\x64\ReleaseNativeOnlyStatic\SQLite.Interop.pdb

mscoree

CorBindToRuntimeEx

wintrust

WinVerifyTrust

kernel32

GetFullPathNameW lstrlenW WriteFile GetDiskFreeSpaceW OutputDebugStringA GetModuleFileNameW SetEnvironmentVariableW LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA GetEnvironmentVariableW SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA DisableThreadLibraryCalls EnterCriticalSection lstrcatW WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc CloseHandle GetSystemInfo LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress CreateFileMappingA LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime GetModuleHandleW FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile lstrcmpiW WriteConsoleW GetTickCount FlushFileBuffers SetStdHandle RaiseException HeapFree HeapCreate TryEnterCriticalSection ReadFile AreFileApisANSI GetConsoleCP GetConsoleMode SetFilePointerEx LoadLibraryA QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA CompareStringW LCMapStringW GetACP GetTimeZoneInformation GetStringTypeW GetStdHandle GetFileType FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA

user32

wsprintfW

advapi32

CryptAcquireContextW CryptEncrypt CryptDecrypt CryptCreateHash CryptDeriveKey CryptHashData CryptDestroyHash CryptReleaseContext CryptDestroyKey

SI01290ccda2c08117 SI013a90511e949b99 SI019bb1b0f8b88a4b SI01f2e1e38fd8dfcd SI0205288c09c4da1c SI05acf7f13d83ef68 SI05e4faf8d2d5065f SI06ad3f4f233fab5b SI074a26a6bce53634 SI08295ce2aca70863 SI0942bf2cdfbcbce1 SI0eec257817cfc527 SI0f45dfa7051356c4 SI1066e7ad782ea882 SI10e4ec2593e4bdd4 SI124a949911a522a1 SI12f9286f5bd6f098 SI12fe1f150b42ac38 SI14849b3d0e89b1e0 SI15e46d353ddec488 SI1647e559283d26e2 SI1686085452cb6c90 SI16e108f53793a43a SI16e172772b0b1706 SI1709fb0c78fe6bc7 SI17c3a78ecf9eff4c SI1818f2c8eadbcd54 SI18b9c7fd6d90deff SI1ad41a0e33dff249 SI1b8a3298ea828a3b SI1bf8975e567ea97a SI1bfa1d92146eadb1 SI1bfe410acac3c9be SI1e7babb0bb0adcc2 SI209d1bfbbab7da73 SI209eb0dd58fa77ae SI2102da665922f66a SI216a233b40cb7147 SI25ca8d2baaee0750 SI25d73a5ab4d6cacb SI28687b581b626bbf SI28a6405343e7bbd9 SI2a71c3377e6c357f SI2cc330551d123067 SI30455e90830ca460 SI33209d52126464ab SI34e0a4f84fed7ec1 SI353770fd94e573c1 SI3542aeff9c3855db SI367e45cee72bfd47 SI37012ee3c6dde764 SI38de1207a575b65a SI3bb401944414ce69 SI3e5389eb172bc856 SI3f65beeaaa0d85de SI4251c713c05a3b5e SI42669818b7978ed1 SI4490ba755e98e797 SI4507744386fcba0a SI457a7dc78746ca90 SI47cc739b3bdc3dc6 SI493bdcf3d13ad302 SI4b170c874686e4d8 SI525814a3c7849b6c SI527544a37185bd6a SI527c455c79b66da5 SI53af60c92476ad6f SI53d16af9fd9dc018 SI5492f6d28289950b SI558bdfe0e27562ea SI56ddcf38809cce55 SI58b3396e563758e2 SI58d9c9e758678014 SI596241adb70ce0e2 SI5b4aedd0c04bd151 SI5b914c29cf5a7984 SI6039a77d8b3fe4a1 SI63770fcd460a846c SI6423b87d77537d0e SI6448e5eb2ca66d9e SI644ad6803933fc53 SI64d795d8d6a5652c SI670a722dbc4b11ed SI681faac9c0128a40 SI68689a9b2961f1c3 SI688b887ce4a2e5bc SI6afceccab898a321 SI6c799e24bc9109fd SI6cff36399d6b8510 SI6da43f525fcc10f2 SI708dc027c2a0b01f SI71d54e41ee149c1b SI71da61fbbaaa7074 SI7501ae36b96de01e SI7559ce66b2a83683 SI7607824c610843ac SI769271af19a2299d SI77dfbddb9b6d65d2 SI783c2997f4bbe903 SI7b811ab87b7b7a6c SI7d8b2b5b65802a7c SI7e899b5a8ad87eab SI81c3656e0c2c152b SI821a25758b212c1b SI8259474343588db4 SI841b860ec95cb540 SI842d9c1989f08a60 SI8476de5ad2e1f63e SI86be81683e8ee826 SI87f584c5f9c8cd81 SI88473e35770c74fa SI8955d5517e10b3b8 SI8b0d9e6837e61abc SI8bd1a2ecd61e628f SI8bdbd256a7a800ee SI8c5d6a3d79dd16ae SI8cb1ce55b92259b1 SI8d503b48c50b0f0b SI8d98262fc9dcd199 SI8db78c75599d54bb SI8ea977f217df4eb6 SI905dcc543d48caab SI911c8a4b74b6de07 SI91da00d7298230f3 SI9383891d346ef4b7 SI93dfc8fa53d5b31f SI94ecb64e9dbb8338 SI952d22c6db518ea2 SI9555aa94e5464fb7 SI95d251bc4895e058 SI96516336c99ce75a SI96d7cc1e6c528820 SI9728956559a83c71 SI98fcda7827970a5d SI99449f6fa6d0dabc SI9a326fe0ddbebf12 SI9dbf9d88aa001ea6 SI9e5caf3f82afbec6 SIa07e0e87d9c86d40 SIa0b89be8ea9562cc SIa364946505687432 SIa7c1cd9b020850a4 SIa8a7ecc7b42638c6 SIa9bcec858971f4c7 SIaa0f8e0c251cfd1d SIab9b1bd6a4822cb2 SIabb2be07ffdb1945 SIae265b9a3e7ff7d8 SIaf003abaa59f4e17 SIb03c6e79afae3a3e SIb12933c5b4a9b1f8 SIb20222b622b9f6ae SIb378d0a537411fb9 SIb50fc3839c421869 SIb58d68e34259bb85 SIb61de3ea47c362fc SIb64c92262f98df4c SIb75bb703537e34a8 SIb80a1b71f58ea310 SIbdf2cc3159ddf9a9 SIbf02a0e02928adea SIbf5934dfe2a8d472 SIc14fb8a21feb2e94 SIc60c813695b0a929 SIc6ecc041c46c67c2 SIc73e44ad36c6c308 SIc9b8df374df75071 SIcaac088b33f92dac SIcaedf2c29ebe4e44 SIccd01f4d70f48acf SIcd51961be732e0d3 SIcfe1e5cf0035a8c9 SId17980a984b0df0a SId2ea6a764978b870 SId3575b24dfdbea5d SId61cfc777bf4f00a SId68f4562cd5aecf9 SId6f924c8ba3d05b2 SId95bb14c42234d8e SIda0491b2623dcc8d SIdac3904ec873f97d SIdace78b5300c999f SIdb45e174afb28e2c SIdbdaa654d0b26d40 SIdcfb39991ebbc7da SIdd048b2fedb74020 SIdd8123a9d5986c26 SIdd99c1c074d20b83 SIe1639e708407f10b SIe2f92b70742a9bc1 SIe609bd7d2871cbd6 SIe969e8d8137a8a33 SIeaf6f475f4e274e5 SIec8bf9affd85b987 SIee4a1cd279a7db69 SIeef348ae766c388c SIf0a08171cb5be57f SIf6e594a0ca15fef7 SIf7b501d343c24f69 SIfabc748b81ce8fcf SIfbde1ee423d263fe SIfc4b758a3d39aef3 SIfce41a414fc927fb SIffb8076c269e2a85 SIffcf65ff995c2367 sqlite3_cryptoapi_init sqlite3_fts5_init sqlite3_fts_init sqlite3_percentile_init sqlite3_regexp_init sqlite3_sha_init sqlite3_shathree_init sqlite3_totype_init sqlite3_vtshim_init

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

265KB

Virtual Size

264KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SecureBlackbox.FTPS.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a4caae91bd5eb3c83cb8c20eeaa15971deb1a787aaea5f663f07c910497942e8
MD5 5ff81eb85c2f2351c8299cde2801f1ca
SHA1 ba0ea62509c625a204ef3e40a7f70305f4250e9c
SHA512 844ecb3f1b57c0da7804f9c3fde258687492bf3477afbaefd5088b4111435ed7d2c07de2f7da2bbc58906b6cc97a362a6c5bab63cd670e6614e6ba3b5df866b5
SSDEEP 1536:fYhRTUCY2mMWUsXHWlaVX7QpG8k2GltAorMAuqQsDjEDZs1ozboHQE+:f0TxmU4Wwmg2GpQsDQDZs1
TLSH
T149B35B482BF82627D6FE17B8F6B551A247F5EE284297F3AD1C5424F9086A711CB013B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

114818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.FTPS.pdb

SecureBlackbox.SFTP.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 068169d96fc7d9ea30f624dafc75d3eb89039a5e7a3c7df43ffea549c82c0a47
MD5 c51faed9946e3f39714371124de62452
SHA1 ed4667f714efaab38100a17184013713c5d14c86
SHA512 2a2399600ce1e0f44a40805ce9d14358bd8c100c5982c026671d564dc33d62108ca033b3125a8fe8ac35b6a08811796fd85e6dcd4c7ae07880d93a9216be6625
SSDEEP 1536:xmrEkuHs7YLK2nZ+hHXmdFUSRVA2xNrtSfLVTUGftQkm7FFFnF7BkBcbIacM3P2W:x0QHs7YLRy9wVAkNYTUGy3PpOCXD/RF
TLSH
T1D6D33B946FDC4507D9ED67FCE82C02508BF1E866E297F76A1DA0B1BD1C5732287422A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

146978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.SFTP.pdb

SecureBlackbox.SFTPCommon.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 150e513b0f5d54c9e68fdff92f6be632bee89837f58a7e8f4ddff446ac2aec62
MD5 54af6a13f63377e82c7f5cc597bd469c
SHA1 5b7a112411e6a62cfe89b95cf1911e04448db857
SHA512 e739b6385d155b0e8041a19ca222ca3c5804d63f41be93716679d7834b037d8f7e8f8f7ff9a8d4f090b77401f8cf99d4f670d912b2a1dcd8bdfb7f0a0b0cdb65
SSDEEP 1536:5Q8K0jT57h1obWnKnlroI05/acUVykgcdDOa8pAMB4A8crSAZqJ5:S8K6T5734WnKnZs5/HUwJpAM6A8crSA
TLSH
T1D69318258F46075BEBAD13BCF8490A9047B48247E24FF78E5529A8FD2D1E3508572AB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

99778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.SFTPCommon.pdb

SecureBlackbox.SSHClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 958b90b9f8b2c3341fe936adfeca09bbf08601222a126f900786dd61723c723c
MD5 ea588d397c357548e93c0013bc260446
SHA1 864982ee6011319c09fbe65a30bc4a6f3b9669db
SHA512 5db19bffcf03e63ee3758eb63c8c08e81a870fe9b5a971332a821c3b0484104ec79d7ce6557198670696c71cafff43ebf250f3c807c5e037142ebf790cab593d
SSDEEP 6144:5zCyS5PE3fGxFfuHdW3rj32wNYWId3Qsfb:XYPQMWAr9NXIK
TLSH
T16E545BE02B679A07E2AE27FE9C3C615153F4E425D15FF7980EA464FA0C9633087291B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

295910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.SSHClient.pdb

SecureBlackbox.SSHCommon.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b3db7148f6b531b3a7d11b66eccb4c4cbee37a185b2645861cb6394d1e467de2
MD5 1c55d29bf17d04e6b25cc9d62089690b
SHA1 8a135e4c4b0d9f78ca4da0cd050a4f72c9a6e684
SHA512 14f70868a6a96ee14712f7e0a75a39383d0793f6883a93756b206ca46efa38f020ef807243af3c218fc7b9df12d5cfa69cdcd475b3d985f241aebcd2c89b545c
SSDEEP 6144:oX3EYv5ZUw4ar1Q3uK+Q6cZpcAvNQVMOPSUoN5DL5NTpQB8+zS04pFHB2STgyy45:oX6Xf
TLSH
T14494083D1DBD123BE1A8D6F5CFC28823F454E0BB3112AA3958D693698747E4269C317E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

437126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.SSHCommon.pdb

SecureBlackbox.SSLClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 589ef3558a2d436fb003e87df1c7462c60963a4c32e9082dd3531c3778d1687e
MD5 b446e9cb9175e5244b1ef0385301455b
SHA1 52c36c5fcbc183b15159193cd6259ec8cd174aab
SHA512 20b8ed5070f4a7e720041c40850ff848ec8ac4f27839c819e44f145f1f874d483456d49bf7b84b8c38b4a3f24a5daf7819c5b9c87223a0f4b77d89bf7f345d40
SSDEEP 3072:KuWHJnDhH8QUdTDdXskGNiUhV6ie7PgOqFaoRSTZTpGA:PWHJn9H2XskehV+S0v9NGA
TLSH
T12A04188D73197B63D49D87FEE4BA608253F99536D347F3951EEAA4FE8C8231042502A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

195634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.SSLClient.pdb

SecureBlackbox.SSLCommon.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d4c5cf996d9ea5547b56fba51c5505a137d60951273795b6a2148d5c3140aaa4
MD5 ba66f1c412a2dda2006e0e73239fcd51
SHA1 ed9359aa407f24bbdd3aaf8342d5e1f0bb571f34
SHA512 1bebf2f1e9118731d8a9a4e8caaf1fa7a6e2d73d47d0a95394e59b4bc48c2ebdd962134d19feec33701e7d89d0b1b95f16fd7a303ca42ac23bca4dc146e3cfa7
SSDEEP 1536:H28zVF+nGaCNCAlVXfKYckST6uEN+E6oBoQD/6tjYOYNIggoa7IAoTHfuJ1xXjaQ:/5wGaCNBrygua+E68z6d
TLSH
T115B3171A2AD85017F6FB63FEBE91208093F562E4F3A3D34909D605F91803F695D932A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

114710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.SSLCommon.pdb

SecureBlackbox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4b90580f4974f9048a5ae2ccb0449e5048b74dfed795c0712b59273ed53e8619
MD5 f56bd4bca5849a15ccad45fb405c6dbd
SHA1 1e8ecc1a267e61b145e044ac8823a1c7e18236dd
SHA512 2fae8a29bf0064302a9776a7434ffbc15214ba1cf4b555b7bc7d577f497ca81673ae0205f485e63c56ece62e66d0abb4dd08762c6d88d4e85b714dfbc061eaab
SSDEEP 98304:8wudnMQPFE5MLqJ+EIbkRxUtOzui0Ap5OdVwAmYKae1YUpvVS20jfPTGi:VjQPFE5MLqJ+EIbkRxUtOzui0Ap5OdV7
TLSH
T19BF54B1A9ED06D13E07DB63094F3401293F1DD7E734BAB6B1598B2B88D2A70B5DC126B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

3614946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Projects\SecureBlackbox\Redist\NET\Packages\SecureBlackbox.pdb

System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
MD5 902760412abffbd10be14842e83f0c09
SHA1 d87680e1a96549cf45506d17566ec08c27a770d8
SHA512 016a283723e32eedaa3b3c6d92bbd0d4c4d2663ab0f0b74bda56d6d2d742632ea0005b3c0c982ca77dd152b839deed0af07228172f059c9e0840e31b530bd0f2
SSDEEP 384:7RJyzxhqFAB5n55560IZplFuA6ccxReXWd2WkRnfLXmztvGHRN7LgFA9bFs0R9zJ:FJyYkx60InTuP0njQtaUFQZs49zUS
TLSH
T187B27C11D79C422ADE7F1A716AF9DA862E3983C16102E66F144CF5040EE37C9DB31BB8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

be:68:48:ae:8e:63:d0:cc:97:89:10:b1:45:84:7f:68:66:d0:47:4a:08:eb:2a:b6:89:66:c1:09:09:16:a3:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Mar 19, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

18706

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Buffers/Release/net462/System.Buffers.pdb

System.ComponentModel.Annotations.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 04113c8549185519f3202790ceb23df609644872b9c249a56d2bcf59566102c4
MD5 7d3d14b0417a68ccdd9c51972ff74863
SHA1 ceacbd53b6a02e1f7337a6b0058924e1e11949bb
SHA512 b2d133214f21d700e1af0c248dcc11ef66ea6da62043ff6d5e900fe2a1665d75583e4cd218526a146f2c62e22adf4ca2fa3b8879ae0f5a2e515e2c3a5184ce9c
SSDEEP 384:GnXppnvYs47bNql0kevR9SDQxSWIfYYL8oRT3KI3lUlBmeEZeTfyDxdQocwc1fVZ:gXDQsPurQcR3y6JOnSHDYFD9VioLQJ
TLSH
T10313D842A7F81139FDF34BB06B38ED96597BBED66D22C12D149890CD08B17D08B6173A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

5f:90:d3:b6:dd:87:df:4e:84:6f:b5:22:f4:f6:9c:c6:e6:fd:34:f3:6b:0a:66:83:1d:4b:6c:06:60:25:a2:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

c3:31:16:77:dd:f7:23:e7:e9:f0:6b:b3:3c:f4:65:e7:13:97:71:ed

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ac:8a:21:bc:7a:d2:9b:72:f4:00:00:00:00:00:ac

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

30786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ComponentModel.Annotations/netfx\System.ComponentModel.Annotations.pdb

System.Data.HashFunction.xxHash.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ebd5b9585529102ea1843ac2ec52b9072567ad9234b71180a2b3b3e0fcba982e
MD5 21d59b5aaf6b72d807079ee5e649a5e0
SHA1 a5a7ad860796330b94012a52f7257dbcac1f9bca
SHA512 bb61c7fc0f5b369c04ee664c6614211c283bf33aab209a5ef3f24b6d595ad8c552a306889afdab905454499b8061d5d3cb08922b89761379bc951e6e5656d034
SSDEEP 384:yemqD6czm+3F9DMfhN6vHz+STCpjYyvBo4SQlJ/ZPF3x1TS:56ci+3FlS6vT+STCpj9HPPFq
TLSH
T150A21B086B8DC637C7FE767458B25651E3B0FE16A437D71B2CDC9078290B7A83980B69
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

27270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

H:\git\xxhash\obj\Release\System.Data.HashFunction.xxHash.pdb

System.Data.SQLite.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 24043ef4472d9d035cd1a8294f68d2bbfdf76f5455af80c09c89e64f6ed15917
MD5 b0911d27918a1e20088b4e6b6ec29ad3
SHA1 93a285c96a4d391ea4fe6655caaa0bbf2ee52683
SHA512 518da2e73b849be38570d7db218adeb47f85fde89c15dac577eb1446a9a55bb4cfaf31d371428b9c4f0c69c0be3e2cb10fafcadbec24e8ab793b639392e3f029
SSDEEP 12288:ZGGoS+lVQ7ECFNFfcaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cH:ZGGmlq7E
TLSH
T1C7945B9427EC250EE2FF5B74E4B0A841CB70F452AA66D34E38C4A0B96D21B44BE53777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
NSIS installer

installer

Digest

b8:e7:ef:64:1c:45:71:42:6a:b2:4f:b5:41:86:aa:d9:37:da:77:74:01:a3:88:02:03:43:7b:b8:74:cb:6b:5e:02:f6:2d:d6:a9:f5:ab:56:15:4c:ce:9c:22:a1:a8:c2:27:be:3b:d5:14:8d:88:01:fc:cc:3a:9a:7b:5c:6f:a0

Digest Algorithm

sha512

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Nov 26, 2022

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

29:1c:69:e2:88:90:cb:d8:49:3c:e0:a1:e7:d9:8a:eb:e5:8d:9d:16

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Nov 26, 2022

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Serial Number

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 1, 2021 - Dec 12, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

395186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\dev\sqlite\dotnet-private\obj\2015\System.Data.SQLite.2015\Release\System.Data.SQLite.pdb

System.Memory.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b8fe216aff0f6d162f8eefe7be1712162b7d8199e20ce2e70ffac36c7ce20a4c
MD5 35e6237ff5533342516bf01a46e4b7cd
SHA1 f8a118f07eea37ce732b487ab730646dedc46235
SHA512 dce731c61aea73d16813b0932d47ac94926d84d9077115ef147971b1e1c76a88e333ccd0f88b34fca9e2533f54c140947316fd63415199fe5f20a45cd0aef033
SSDEEP 3072:wPgSRYPuMbrhcabqwwwUtiPmu3XxNtvckP:2uPaaWwww7OuR4k
TLSH
T1F3E35CBC67C6DD12CB5F4C70A028621A5A31C63FAE42F7E215C9F4F436A27A935193D2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a4:39:e2:43:4e:c5:d8:14:7e:fb:ba:42:fc:56:b9:dd:2a:b9:0e:a1:5a:1a:ee:d1:46:3c:33:a1:91:9a:d7:a6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

138594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Memory/Release/net462/System.Memory.pdb

System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 22c84be385fe8ba6d0e0138952748f28d781fce36078b5a7aed91a6104bcd99b
MD5 7ab5dbdd2ace2a313392cff4f372e4b9
SHA1 8890ad1911448490526d2a45ac8cc518b6e886a2
SHA512 5bce867274f23694402e9f9f73f8c3ebf5d77114836f56d3cbf5cbdeef164a299091e1cd69fd7635e6b7bbacc7376193eb8daff32d5aeed0df72835a00baa4e2
SSDEEP 1536:cuIaashZlF/cLecJE3+DWG/E2NstmOz+aAKWGd7isnzP:czaashZzWeca3+DWG/E2it5GK7dnL
TLSH
T119B3EFE22F6C655AC7CF9F7B20E64E120B331963C403D2E160DC67A227A776729421E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

9c:c9:af:38:85:33:7c:90:83:bf:34:2b:db:74:94:cd:b2:a9:55:e3:39:54:ef:b3:12:50:db:ca:eb:18:45:4d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

105250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Numerics.Vectors/Release/net462/System.Numerics.Vectors.pdb

System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d6f419d641682d8efc4a40e850d2e85de519d6823b93daf2aeee63206d4e32d
MD5 aa7a54f5a3ba48e60d51e6eeb378404d
SHA1 e5d644311a6087c6a500f0e79bae4af305430b3d
SHA512 b033330695b4edc1bef5d36d98e1a68f5862469598cd6a71cafb8f72732d29403d4e8b9e4df3809c2f49dcd59d5ca751ada97ea9b7e268298effd6e19eb52399
SSDEEP 384:hkGbUzdrbbxHKWgr2WXTX6HRN7K3/7R9zXL/Lq:WGAdlQTWoF9z7zq
TLSH
T1B7826D20C7D44543FE673B3055ACE583BE38E7D51806A3763585E97A2C963C8AF3562C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

84:fd:35:d4:54:3b:33:7a:ff:21:82:ef:df:40:6b:06:5c:9b:b3:15:61:2f:37:5c:a4:57:2f:31:81:4a:8f:b5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

14046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\Release\net462\System.Runtime.CompilerServices.Unsafe.pdb

System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
TLSH
T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

22234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb

ZstdNet.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a7a062c0c02179cf942ecfc3533bb6604a946dd3597abe80869549048e1307b6
MD5 db96103c6375a4a49fdee609f7ca7584
SHA1 e3f0005bef532690163f455d002a43cc3cb280b7
SHA512 8e726b29ec0b5b1495525c232e2189334a096f6b2ba0c2645ff4c005b632b5bb7498c5ab68de5e4f85ef6476b680f5aab44200fa78e63acc376de560932970e3
SSDEEP 768:ALAtyHfVGVGBgHeWnwwEgc8+9PRVYxpgP4VF:oAtYgV8da+NRuxpgPIF
TLSH
T107C20A55B3D8C137E4AF5AB8A472052543B5F5833933E78F65EC84A81D27B908E223D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

34238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cbb.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7dd046890d9b95648f3028138b3c424cf2510e8c9dae14ebb41d440dc234acb0
MD5 4ad487a9ea018b6537e41ecc8e68f6ef
SHA1 bb5d4c88b25102d91148521ee39934d1982dc388
SHA512 af24c108461ec5646c120d9ad1bea6478ffc910d7901d9efa3dcc1611f6bb4a7acaac620a6f38b11f85e88c06b4ffab54babcd55e2ed2bd134fdf70d2f6a19c2
SSDEEP 12288:0jSREO3EwrVulUfpH1W/N8hfwvfjcJUBDHa:aQfV1Sfjha
TLSH
T1DCE4F9633BF5E999D66F4A3810364E3456F85C1F13B4E24EEF8229E6C441B4EA9492C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6f:44:41:5c:2c:4f:09:5b:bb:50:5c:6a:80:a0:54:f3:b8:37:42:f3:6d:3c:f5:1b:5d:48:21:a4:c4:9a:6b:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Chains

Jul 17, 2026

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Trichilia Consultants Limited,O=Trichilia Consultants Limited,L=Nicosia,C=CY

Serial Number

03:d5:02:23:b5:94:62:c0:41:ff:1f:51:57:58:43:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 16, 2026 - Jul 15, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

667598

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

cbb.exe.config

SHA256 da61d5cbb0f0e79551aedb65b340966e6ccd23e5b6aca25dbf9b14cbe91e70f1
MD5 cdfb959fbeb757092c0900ca60720367
SHA1 6f7afebe4e00dca5d6d267aa20f75e66ef310f58
SHA512 9d215f1cbee635dda3ac44d882cfb5887201ef059d0bb51008cf2a19b0222826bcde9851d3292417bc69d352d852adb840cfa33db274bf2d1b6cf67cbbebbbec
TLSH
T1A051091165C8AFA40B7209A23E6F6818CB6D03B72D4C064EB1DEAB878F35A5A4607077
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

libzstd.dll

IMPHASH c47ad36ac72daf87a4f693877d7e903c
SHA256 0c245a3c93ad074469f675fb6f1401461f8d46d0ead253e459757d102b8ae562
MD5 b96a7091ed2b45c38ec8a97795152011
SHA1 178bf487e248e7bb3712ec4cd79b5f349111f7cb
SHA512 1b8fb4aa93b62ef068dbbd2e39ba3c2b87ef9a35aa9bf5ee7f12e795e48c4c6a29f5f4016606bb909e0ba3710428dba4476d0dad6fbc5b6b2ac3d6d6dcc2c866
SSDEEP 12288:2PHZyTfnngrA0n5bfAvLpLY2byCfwkp0wDvj+Xx4K:GigU05bfAvL5Y2bdfwkprDvyXx4K
TLSH
T1C5055C47E1E350DCC16BD9B4836BA273F9327C199124AA6B8BD0DB353D52F20E518F68
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

ZBUFF_compressContinue ZBUFF_compressEnd ZBUFF_compressFlush ZBUFF_compressInit ZBUFF_compressInitDictionary ZBUFF_compressInit_advanced ZBUFF_createCCtx ZBUFF_createCCtx_advanced ZBUFF_createDCtx ZBUFF_createDCtx_advanced ZBUFF_decompressContinue ZBUFF_decompressInit ZBUFF_decompressInitDictionary ZBUFF_freeCCtx ZBUFF_freeDCtx ZBUFF_getErrorName ZBUFF_isError ZBUFF_recommendedCInSize ZBUFF_recommendedCOutSize ZBUFF_recommendedDInSize ZBUFF_recommendedDOutSize ZDICT_addEntropyTablesFromBuffer ZDICT_finalizeDictionary ZDICT_getDictHeaderSize ZDICT_getDictID ZDICT_getErrorName ZDICT_isError ZDICT_optimizeTrainFromBuffer_cover ZDICT_optimizeTrainFromBuffer_fastCover ZDICT_trainFromBuffer ZDICT_trainFromBuffer_cover ZDICT_trainFromBuffer_fastCover ZDICT_trainFromBuffer_legacy ZSTD_CCtxParams_getParameter ZSTD_CCtxParams_init ZSTD_CCtxParams_init_advanced ZSTD_CCtxParams_reset ZSTD_CCtxParams_setParameter ZSTD_CCtx_getParameter ZSTD_CCtx_loadDictionary ZSTD_CCtx_loadDictionary_advanced ZSTD_CCtx_loadDictionary_byReference ZSTD_CCtx_refCDict ZSTD_CCtx_refPrefix ZSTD_CCtx_refPrefix_advanced ZSTD_CCtx_reset ZSTD_CCtx_setParameter ZSTD_CCtx_setParametersUsingCCtxParams ZSTD_CCtx_setPledgedSrcSize ZSTD_CStreamInSize ZSTD_CStreamOutSize ZSTD_DCtx_loadDictionary ZSTD_DCtx_loadDictionary_advanced ZSTD_DCtx_loadDictionary_byReference ZSTD_DCtx_refDDict ZSTD_DCtx_refPrefix ZSTD_DCtx_refPrefix_advanced ZSTD_DCtx_reset ZSTD_DCtx_setFormat ZSTD_DCtx_setMaxWindowSize ZSTD_DCtx_setParameter ZSTD_DStreamInSize ZSTD_DStreamOutSize ZSTD_adjustCParams ZSTD_cParam_getBounds ZSTD_checkCParams ZSTD_compress ZSTD_compress2 ZSTD_compressBegin ZSTD_compressBegin_advanced ZSTD_compressBegin_usingCDict ZSTD_compressBegin_usingCDict_advanced ZSTD_compressBegin_usingDict ZSTD_compressBlock ZSTD_compressBound ZSTD_compressCCtx ZSTD_compressContinue ZSTD_compressEnd ZSTD_compressStream ZSTD_compressStream2 ZSTD_compressStream2_simpleArgs ZSTD_compress_advanced ZSTD_compress_usingCDict ZSTD_compress_usingCDict_advanced ZSTD_compress_usingDict ZSTD_copyCCtx ZSTD_copyDCtx ZSTD_createCCtx ZSTD_createCCtxParams ZSTD_createCCtx_advanced ZSTD_createCDict ZSTD_createCDict_advanced ZSTD_createCDict_byReference ZSTD_createCStream ZSTD_createCStream_advanced ZSTD_createDCtx ZSTD_createDCtx_advanced ZSTD_createDDict ZSTD_createDDict_advanced ZSTD_createDDict_byReference ZSTD_createDStream ZSTD_createDStream_advanced ZSTD_dParam_getBounds ZSTD_decodingBufferSize_min ZSTD_decompress ZSTD_decompressBegin ZSTD_decompressBegin_usingDDict ZSTD_decompressBegin_usingDict ZSTD_decompressBlock ZSTD_decompressBound ZSTD_decompressContinue ZSTD_decompressDCtx ZSTD_decompressStream ZSTD_decompressStream_simpleArgs ZSTD_decompress_usingDDict ZSTD_decompress_usingDict ZSTD_endStream ZSTD_estimateCCtxSize ZSTD_estimateCCtxSize_usingCCtxParams ZSTD_estimateCCtxSize_usingCParams ZSTD_estimateCDictSize ZSTD_estimateCDictSize_advanced ZSTD_estimateCStreamSize ZSTD_estimateCStreamSize_usingCCtxParams ZSTD_estimateCStreamSize_usingCParams ZSTD_estimateDCtxSize ZSTD_estimateDDictSize ZSTD_estimateDStreamSize ZSTD_estimateDStreamSize_fromFrame ZSTD_findDecompressedSize ZSTD_findFrameCompressedSize ZSTD_flushStream ZSTD_frameHeaderSize ZSTD_freeCCtx ZSTD_freeCCtxParams ZSTD_freeCDict ZSTD_freeCStream ZSTD_freeDCtx ZSTD_freeDDict ZSTD_freeDStream ZSTD_getBlockSize ZSTD_getCParams ZSTD_getDecompressedSize ZSTD_getDictID_fromDDict ZSTD_getDictID_fromDict ZSTD_getDictID_fromFrame ZSTD_getErrorCode ZSTD_getErrorName ZSTD_getErrorString ZSTD_getFrameContentSize ZSTD_getFrameHeader ZSTD_getFrameHeader_advanced ZSTD_getFrameProgression ZSTD_getParams ZSTD_getSequences ZSTD_initCStream ZSTD_initCStream_advanced ZSTD_initCStream_srcSize ZSTD_initCStream_usingCDict ZSTD_initCStream_usingCDict_advanced ZSTD_initCStream_usingDict ZSTD_initDStream ZSTD_initDStream_usingDDict ZSTD_initDStream_usingDict ZSTD_initStaticCCtx ZSTD_initStaticCDict ZSTD_initStaticCStream ZSTD_initStaticDCtx ZSTD_initStaticDDict ZSTD_initStaticDStream ZSTD_insertBlock ZSTD_isError ZSTD_isFrame ZSTD_maxCLevel ZSTD_minCLevel ZSTD_nextInputType ZSTD_nextSrcSizeToDecompress ZSTD_resetCStream ZSTD_resetDStream ZSTD_sizeof_CCtx ZSTD_sizeof_CDict ZSTD_sizeof_CStream ZSTD_sizeof_DCtx ZSTD_sizeof_DDict ZSTD_sizeof_DStream ZSTD_toFlushNow ZSTD_versionNumber ZSTD_versionString

Name

.text

Size

725KB

Virtual Size

725KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

956B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

nouveauxconcepts-OnlineBackup_o_backup_v8.7.0.224_oid20bff54a-6808-465b-a3d6-c9f1e6532237_bidnhR8OaZBA0yWdfWi1gv!qg.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UAC.dll

kernel32

user32

advapi32

shell32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsArray.dll

kernel32

user32

generic

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

$PLUGINSDIR/nsJSON.dll

wininet

kernel32

user32

generic

$PLUGINSDIR/processwork.dll

generic

$TEMP/$R0

mscoree

dotnet

$TEMP/$_65_

mscoree

dotnet

$_34_

mscoree

dotnet

$_34_.config

CBBackupPlan.exe

mscoree

dotnet

CBBackupPlan.exe.config

CBFS6Net.dll

msvcr100

advapi32

version

shell32

setupapi

kernel32