net6.0-windows - Copy.zip
- SHA256 f1fe37bd95fb84c63d9b15e2c83d0bc81733ba0538afecc6e448a6cc0e649b6a
Overview
overview
3Static
static
3net6.0-win...re.dll
windows10-2004-x64
1net6.0-win...re.dll
windows11-ltsc_2024-x64
1net6.0-win...ls.dll
windows10-2004-x64
1net6.0-win...ls.dll
windows11-ltsc_2024-x64
1net6.0-win...ns.dll
windows10-2004-x64
1net6.0-win...ns.dll
windows11-ltsc_2024-x64
1net6.0-win...PI.dll
windows10-2004-x64
1net6.0-win...PI.dll
windows11-ltsc_2024-x64
1net6.0-win...pf.dll
windows10-2004-x64
1net6.0-win...pf.dll
windows11-ltsc_2024-x64
1net6.0-win...er.dll
windows10-2004-x64
1net6.0-win...er.dll
windows11-ltsc_2024-x64
1net6.0-win...te.dll
windows10-2004-x64
1net6.0-win...te.dll
windows11-ltsc_2024-x64
1net6.0-win...ns.dll
windows10-2004-x64
1net6.0-win...ns.dll
windows11-ltsc_2024-x64
1net6.0-win...al.dll
windows10-2004-x64
1net6.0-win...al.dll
windows11-ltsc_2024-x64
1net6.0-win...te.dll
windows10-2004-x64
1net6.0-win...te.dll
windows11-ltsc_2024-x64
1net6.0-win...re.dll
windows10-2004-x64
1net6.0-win...re.dll
windows11-ltsc_2024-x64
1net6.0-win...ns.dll
windows10-2004-x64
1net6.0-win...ns.dll
windows11-ltsc_2024-x64
1net6.0-win...ry.dll
windows10-2004-x64
1net6.0-win...ry.dll
windows11-ltsc_2024-x64
1net6.0-win...ns.dll
windows10-2004-x64
1net6.0-win...ns.dll
windows11-ltsc_2024-x64
1net6.0-win...on.dll
windows10-2004-x64
1net6.0-win...on.dll
windows11-ltsc_2024-x64
1net6.0-win...ns.dll
windows10-2004-x64
1net6.0-win...ns.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
net6.0-windows - Copy/net6.0-windows/ComposableAsync.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
net6.0-windows - Copy/net6.0-windows/ComposableAsync.Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Models.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Models.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Service.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Service.Abstractions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
net6.0-windows - Copy/net6.0-windows/Hardcodet.NotifyIcon.Wpf.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
net6.0-windows - Copy/net6.0-windows/Hardcodet.NotifyIcon.Wpf.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
net6.0-windows - Copy/net6.0-windows/MathConverter.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
net6.0-windows - Copy/net6.0-windows/MathConverter.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Data.Sqlite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Data.Sqlite.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Abstractions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Relational.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Relational.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Sqlite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Sqlite.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Abstractions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Memory.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Memory.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target net6.0-windows - Copy.zip
- Size 17.1MB
- Sample260727-df71aagl3x
- SHA256 f1fe37bd95fb84c63d9b15e2c83d0bc81733ba0538afecc6e448a6cc0e649b6a
- MD5 0f8f3677acd54a809843df7d4353f04f
- SHA1 fe71e16aaa36435e829e79aba41ec241c9381878
- SHA512 4093e50bd59e1179fbcb5afaa5f04f71ff0dff24fda13b199d0911378582972670a25f8e32eddd0a445069fb06a2958047cc6b5f505ad89d2707779551a8b0e8
- SSDEEP 393216:Cj4IJZ7AbddbSiIgyd2bWgAsuwngqkyjrHwUDFpt:Cj4EZ7Abddvyd2hEYqyjrQUDt
- TLSH T1B30733B598527D02C8259633A639A7CF84D8D7336C7032C5FD41566830F685FFE78A8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 21 IoCs
Checks for missing Authenticode signature.
resource unpack001/net6.0-windows - Copy/net6.0-windows/ComposableAsync.Core.dll unpack001/net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Models.dll unpack001/net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Service.Abstractions.dll unpack001/net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.dll unpack001/net6.0-windows - Copy/net6.0-windows/Hardcodet.NotifyIcon.Wpf.dll unpack001/net6.0-windows - Copy/net6.0-windows/MathConverter.dll unpack001/net6.0-windows - Copy/net6.0-windows/OxyPlot.Wpf.Shared.dll unpack001/net6.0-windows - Copy/net6.0-windows/OxyPlot.Wpf.dll unpack001/net6.0-windows - Copy/net6.0-windows/OxyPlot.dll unpack001/net6.0-windows - Copy/net6.0-windows/RateLimiter.dll unpack001/net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.batteries_v2.dll unpack001/net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.core.dll unpack001/net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.provider.e_sqlite3.dll unpack001/net6.0-windows - Copy/net6.0-windows/SharpCompress.dll unpack001/net6.0-windows - Copy/net6.0-windows/WindivertDotnet.dll unpack001/net6.0-windows - Copy/net6.0-windows/ZstdSharp.dll unpack001/net6.0-windows - Copy/net6.0-windows/chungus.dll unpack001/net6.0-windows - Copy/net6.0-windows/chungus.exe unpack001/net6.0-windows - Copy/net6.0-windows/runtimes/win-arm/native/e_sqlite3.dll unpack001/net6.0-windows - Copy/net6.0-windows/runtimes/win-x64/native/e_sqlite3.dll unpack001/net6.0-windows - Copy/net6.0-windows/runtimes/win-x86/native/e_sqlite3.dll
File Explorer
-
net6.0-windows - Copy.zip.zip 17.1MB
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts peak v2_71.ahk83KB
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/Default.txt323B
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/Hunter.txt323B
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/LoadoutSettings.ini179B
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/UlDualSettings.ini137B
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/Warlock.txt323B
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/loadout.png.png 1KB
-
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/statistics.dat391B
-
net6.0-windows - Copy/net6.0-windows/ComposableAsync.Core.dll.dll 19KB
-
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Models.dll.dll 1.7MB
-
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Service.Abstractions.dll.dll 31KB
-
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.dll.dll 251KB
-
net6.0-windows - Copy/net6.0-windows/Hardcodet.NotifyIcon.Wpf.dll.dll 101KB
-
net6.0-windows - Copy/net6.0-windows/MathConverter.dll.dll 68KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Data.Sqlite.dll.dll 165KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Abstractions.dll.dll 33KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Relational.dll.dll 1.7MB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Sqlite.dll.dll 199KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.dll.dll 2.0MB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Abstractions.dll.dll 31KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Memory.dll.dll 42KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.Abstractions.dll.dll 28KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.dll.dll 40KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 44KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyInjection.dll.dll 83KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyModel.dll.dll 79KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Logging.Abstractions.dll.dll 62KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Logging.dll.dll 47KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Options.dll.dll 60KB
-
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Primitives.dll.dll 41KB
-
net6.0-windows - Copy/net6.0-windows/OxyPlot.Wpf.Shared.dll.dll 46KB
-
net6.0-windows - Copy/net6.0-windows/OxyPlot.Wpf.dll.dll 41KB
-
net6.0-windows - Copy/net6.0-windows/OxyPlot.dll.dll 663KB
-
net6.0-windows - Copy/net6.0-windows/RateLimiter.dll.dll 15KB
-
net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.batteries_v2.dll.dll 5KB
-
net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.core.dll.dll 49KB
-
net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.provider.e_sqlite3.dll.dll 35KB
-
net6.0-windows - Copy/net6.0-windows/SharpCompress.dll.dll 565KB
-
net6.0-windows - Copy/net6.0-windows/System.CodeDom.dll.dll 183KB
-
net6.0-windows - Copy/net6.0-windows/System.Diagnostics.EventLog.dll.dll 51KB
-
net6.0-windows - Copy/net6.0-windows/System.Management.dll.dll 73KB
-
net6.0-windows - Copy/net6.0-windows/System.ServiceProcess.ServiceController.dll.dll 34KB
-
net6.0-windows - Copy/net6.0-windows/System.Text.Encodings.Web.dll.dll 69KB
-
net6.0-windows - Copy/net6.0-windows/System.Text.Json.dll.dll 530KB
-
net6.0-windows - Copy/net6.0-windows/WindivertDotnet.dll.dll 404KB
-
net6.0-windows - Copy/net6.0-windows/ZstdSharp.dll.dll 413KB
-
net6.0-windows - Copy/net6.0-windows/chungus.cfg2KB
-
net6.0-windows - Copy/net6.0-windows/chungus.deps.json33KB
-
net6.0-windows - Copy/net6.0-windows/chungus.dll.exe 494KB
-
net6.0-windows - Copy/net6.0-windows/chungus.exe.exe 151KB
-
net6.0-windows - Copy/net6.0-windows/chungus.runtimeconfig.json441B
-
net6.0-windows - Copy/net6.0-windows/data.db268KB
-
net6.0-windows - Copy/net6.0-windows/data.db-shm32KB
-
net6.0-windows - Copy/net6.0-windows/data.db-wal370KB
-
net6.0-windows - Copy/net6.0-windows/runtimes/alpine-arm/native/libe_sqlite3.so.elf 1.1MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/alpine-arm64/native/libe_sqlite3.so.elf 1.3MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/alpine-x64/native/libe_sqlite3.so.elf 1.2MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/browser-wasm/nativeassets/net6.0/e_sqlite3.a1.1MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/browser/lib/net6.0/System.Text.Encodings.Web.dll.dll 69KB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-arm/native/libe_sqlite3.so.elf 793KB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-arm64/native/libe_sqlite3.so.elf 1.1MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-armel/native/libe_sqlite3.so.elf 1.1MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-mips64/native/libe_sqlite3.so.elf 1.4MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-musl-arm/native/libe_sqlite3.so.elf 1.1MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-musl-arm64/native/libe_sqlite3.so.elf 1.3MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-musl-x64/native/libe_sqlite3.so.elf 1.2MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-s390x/native/libe_sqlite3.so.elf 1.3MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-x64/native/libe_sqlite3.so.elf 1.2MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/linux-x86/native/libe_sqlite3.so.elf 1.2MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/maccatalyst-arm64/native/libe_sqlite3.dylib.dylib 1.0MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/maccatalyst-x64/native/libe_sqlite3.dylib.dylib 1.0MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/osx-arm64/native/libe_sqlite3.dylib.dylib 1.0MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/osx-x64/native/libe_sqlite3.dylib.dylib 1.0MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win-arm/native/e_sqlite3.dll.dll 1.1MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win-arm64/native/e_sqlite3.dll1.4MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win-x64/native/e_sqlite3.dll.dll 1.6MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win-x86/native/e_sqlite3.dll.dll 1.2MB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.Messages.dll.dll 782KB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.dll.dll 156KB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.Management.dll.dll 288KB
-
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.ServiceProcess.ServiceController.dll.dll 84KB
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts peak v2_71.ahk
- SHA256 f09a2a53c9b99c863201e6ebcdc34f636adf6f36f5ba7a635d9090d75b256768
- MD5 81fcacdf89c85b88d886605ad03cab16
- SHA1 ae14a7d52a370360e2fba139dd201da739906b8e
- SHA512 87f75cc7586f133892876c97f87b83c57cae236c659bc29807b1edb3ac6e367c3f49cede325c3054db2d47f9ef393d8ac039ae7bc6ae07bf73c611dc717ae65a
- SSDEEP 1536:Dm8EO4m0+w2EqG/PibXR0Az8EO4m0+w2EqGNuJ8EO4m0+w2EqG8:Dm8EO4m0+w2EqG/PibXR0Az8EO4m0+w5
- TLSH T1A183E6179E05E562C6B2923DEB524619DF7900330227AE213AFF01C4EFB51976398FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/Default.txt
- SHA256 c282a14fe5ce0abb4cf600f1b2808546024496adc201f5c00a5816a5d06c73e6
- MD5 decaa17a1667a92fe571b95965f131e2
- SHA1 b189da9bdb6e49dec99dd223368d189a87b41fb2
- SHA512 6c4e74da9177207a108342f5f7944ba98dda3ded79ff14ea770ead41d4fef72e999a9c43d7c206bfa73da7b45b02c1764fafebf3ae507f79122460ecc8b97f0b
- TLSH T152E09219D6CBC14CC879D33598A932851DD022036EB2F3D5A10B580ACFE11A935197B7
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/Hunter.txt
- SHA256 b18a6b19e430bd315339a6a519a76607139f4580d8b2319772abe8db349a18b6
- MD5 c3d9e2d554814d3869392b66b7f1fffe
- SHA1 379d3c7e607a1098f1e3b00c320713c0278c3822
- SHA512 468ce3d3f59f006767386f3cd5a7cc89f5a8bd728dece96a3bd8032ae0755e9dc7859b4fc1f7fb185c3cb006bdb75094d0f3a39cafc4f7fb5fbd0bad5b1f8c23
- TLSH T1F6E09219D5CBC14CCC79C23198A932865DD023036EB1F394A20B580ACFE11A975197B7
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/LoadoutSettings.ini
- SHA256 2c7896272178a24e132952e43be3d7e53a9eb49e6d17d7129c30e59c0492a21d
- MD5 28bb1bc45be1d2e87b9a3933deadc2fd
- SHA1 f81de998fc076a8e9ec128892a9d10f35c3b72fe
- SHA512 f1a84d60feb8007c19055e5dd6d7c5a94346c9c12a91919dda58023fd9400600eada5bd78e5cb034d5b7955fdd5436451af7dd6389a07aca622787cd99fef2b0
- TLSH T18FC08004455175777CBD362F4F7002D4D3D00454218F468340F1C159BE7F598D784589
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/UlDualSettings.ini
- SHA256 0217270365c14e9b92997dc0cde968a60c2cd4513ee1b8625f2331edd246f346
- MD5 1d41b4834779325e172df2907555110f
- SHA1 311b05c9fc4e8dc0717898fdc3fa7092a1925135
- SHA512 746ee6340ee0f0e3c5a3759dc68a239f8939f9ae3f0e6989005458a46f7117342f6746eed22b3c36e408e426f7af1d31b1a8eb4747a670a684f2d0a396f7e62b
- TLSH T157C09B751AB90A4F603F26FA7F211AC4D0E765709DD3014263EF9550CC01EF3D5C8191
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/Warlock.txt
- SHA256 0cb2de2547e5a95bb29ab711076ec79f4c0c46965c22f529fb50ea48229b1483
- MD5 7c65b6e35a2222fd18441325221cbbcb
- SHA1 98c682399a1af81dd64394d5ef040cf63706a317
- SHA512 bc60c4280867b8e54bad0cebcfc4cb6e85073cb22abbc5c521ccdba5ebaf5b3166cb3f73369000fab0bfbb68b41ac59dbb9a9025753e2f38c55bba1389d04ecd
- TLSH T1ACE09219D6CBC04CC879D23198A932851DD032036A71F385910B590ACFE11A935197B7
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/loadout.png
- SHA256 e06ee2535e6596ebb0f3da0dcf9ad74634f50eb3a6d0d4801d666454e5aaedc5
- MD5 4eabd91ea69bee27a0f2e572cf14f91a
- SHA1 235ce8c3e6d3e522dc6b1705496b953641c3fb0f
- SHA512 26a9bfd37e2fcbea277cd3c28731f5c2346926ac25c9802210bb6bee3363ddc72d3e5fab0b1ea4a33aaae9d90922fea1aae2ca25f0f56323c037a7010460690a
- TLSH T115412C8A7484F84C85BC8EF1273F1790F456D1EE1BF31A78511135084164AD9C7A3FBA
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/Ahk/loadouts_d2/statistics.dat
- SHA256 76b20c05dd6a6d17479127daa9a8d95c0ee0700fc48ebe9319912226168fe956
- MD5 35c2c464a7e3c4fa6e1f098c9ab86fef
- SHA1 7c7f53399281ae20b1aab28de14c04ebae66b97a
- SHA512 7eb75ae5197ab6de483f13b89bf1bffd6bb3e7ad5e04949a9f86b8c17a0805ca2e316a6e0b69f08aee9449443c72f63cb0333d00dfe30251e0e1505239d979bf
- TLSH T1B7E05A45C219C8D7CD72557540A55EA96FB0428318B50D1282DFCC00EBC06EB328FA17
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/ComposableAsync.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d428f7a0729f47c171b5373e8ede4b5646f094b32d4b5bd9e0b9f26a5e3a9d64
- MD5 85aeef93648cc608d72ff8fd6366d201
- SHA1 24c482d27b62b21d741aa7afaeec8c78bdb5f658
- SHA512 dfe32ce450981c65bbccc13592c7d331dbacc131a2547dd7968e59bca4cabe5b4ac8365abbe3b51eeda0dc91eb831083a9f9442f8bc9d71212922052486c44cc
- SSDEEP 384:MX6aeNXZcJs1L9BKQrZxCAGrS64Eu5KHcT:MX6aWXZis15BK2ZxCAGWT
- TLSH T1A4920829939C8633CF6F577E77A606018B36D701A812F31E45DDC2E0265B39D2E2629F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\David.Desmaisons\Documents\side\ComposableAsync\ComposableAsync.Core\obj\Release\netstandard2.1\ComposableAsync.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Models.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fce8cef0e3a44618a6fe82b2330e4d5c695ade8ebef5a1a2f31b205535406c4a
- MD5 2975a10f1c9d1636adac7e006da3d3f7
- SHA1 fbea8e57573f528181bf85cc1f3b9badc8be7be4
- SHA512 c547d835caa56dab7ce9768f068ce10bba452008057eb4f6d9de535884b3d0e4cf9ae4b48ca95c6aef0cba16b3172fdb9b376c9c9950a1aeee94d80a41dbff27
- SSDEEP 12288:RsH6ASIvWI4wCFi+p/7tFjiFDC19k/o0Sl/0VCkGTrqbRYuHc5fXN5fucO4zd3O:Rx/wCvuDC19k/o9wO3tNoO3O
- TLSH T12785D89137690F96D28E063C903B026517B5E08EA352E7EF4F10A8792DD67D4CC6E6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1753702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\ProgrammingStuff\Projects\BungieNetCoreAPIRepository\BungieNetCoreAPI\DotNetBungieAPI.Models\obj\Release\net6.0\DotNetBungieAPI.Models.pdb
mscoree
_CorDllMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.Service.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d35a742575effeb26d6a400bc0bca85cc1f9f1638d6d6c266d7c09b8c55f281
- MD5 23713d949d37eec3b26cde218ee191e0
- SHA1 d66eebb1477a401e6636eb6254e412447700e440
- SHA512 9f1e47b18590c67b0d91d7a29049ebcadb1a1bcdbfa3fcb1406a6e29c9ee7b4c26135b2d2bc5b9860c81b55ce5829331b9924c60d6a19bd5bc43585d9930a674
- SSDEEP 384:NChUko+kxaqvQ9213daFc76FPPOLaexebelXu4S98xoDg3dM1jUGlPkME7:s5NqvkG3d76F3qQepSeoEG1jlW
- TLSH T10AE2D821538EC12AED66433FFEA35E023532C6CA911BBF55464D8C5A3D0BF2B6216772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\ProgrammingStuff\Projects\BungieNetCoreAPIRepository\BungieNetCoreAPI\DotNetBungieAPI.Service.Abstractions\obj\Release\net6.0\DotNetBungieAPI.Service.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/DotNetBungieAPI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb1952f62bf4b166a1e536cf2356080a458518cadb55badaeaf6eaea310ed5b8
- MD5 37587c7882a6d5d12dc46cc3e4e1af3c
- SHA1 ab5e2732c0ea950558609511963eb50fd3156fa6
- SHA512 73ba403e32472914cc8eb0fc5165aaebacd98b4df9a50fef228a6395bde090b344182d39d8e5f07b2b0cfcb8270dd57cb564d75ec638b9d3a17b178f5a263ecd
- SSDEEP 3072:TBtm4Ck52zzKyvpBVps4+U9lhhh192H2Gkyf+YLp6LOJXY5fGCaRIjcF2g:Vz5mBVpselhX19sbPDFue2
- TLSH T121444C41A3AC8B12E29FCBBEE634461987B7E347894AE7CD1C8CD5E4349B370A854717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
263150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\ProgrammingStuff\Projects\BungieNetCoreAPIRepository\BungieNetCoreAPI\DotNetBungieAPI\obj\Release\net6.0\DotNetBungieAPI.pdb
mscoree
_CorDllMain
Name
.text
Size
249KB
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
956B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Hardcodet.NotifyIcon.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2059222c4ae5d0291fce13bd296adcc448d79b6fae27746aedf347608ed3090c
- MD5 2cfde828cdbfbb545be5aa61fe1e62a1
- SHA1 d376bde7322118787f6f08131ab34a17eb711789
- SHA512 2a1215dde4bfc4626cc4fe9696b6465a0893a8787ce4ff41ca0c08908bb8aa52a992a156c3320deb0fefb225acb4c3132286d8c04a0caed93282b86adc011cda
- SSDEEP 3072:5oy+75OQW4pg9xXsGQTckaX4kGsdO5UInM34:5+75ON4pg9xX7kzsTInM
- TLSH T1B1A3CF8523FC405AC1FEA73478B532148771FD837A61CF2A498262B849B77D91AD07EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
108310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Hardcodet.NotifyIcon.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/MathConverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0ebb64f0e7258a22b0456d0ce1ab9816d7ed582dc99c3a0af5e4dc8f017dcae5
- MD5 91380061eed023ef733ae34a3a6fa9c0
- SHA1 ab4a8a9a50113a6dc5eddbd5247b1828cf6b9053
- SHA512 fed2881e2e053f45e9b381b1cd43ac11e7c993fd18785f52538db3c0f537909d8cd9b910f360d64d9421ec6bea836acbe3537572d12219fc809188e040cd34e9
- SSDEEP 1536:wh2grVDdTBeXBHYSsK/+Q0N1hilfwJaTZXwW1m:whjDdMB46/901wTZXwwm
- TLSH T18963193467EC6327EAFEAF79F4B412110B75BD97687AD349498811EC0A237900D61BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
75406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Projects/WPF/App/obj/Release/net6.0-windows/MathConverter.pdb
mscoree
_CorDllMain
Name
.text
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Data.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 04d0d2926c6c5d1a7d3a3f368edb2be8d4873c81b06fb1f3f11991664510c694
- MD5 871567c7e224cf72f5e388592e487997
- SHA1 e8e0761d71d2e128d795337405279d6abf7f6094
- SHA512 4dfd4cb188e8f3fbd5d99721abcc9f4c705685c4c8a392123f6b65ef0dce566741b01cde95a001d6ce1ec7320d49d3feba9a93cac53050ee660d5d9210c203c1
- SSDEEP 3072:WngRUDRwceUEEDDGSsK2Dp/CROtt+9IIlFFWbjvIS4dmspbZy7it6ygICa4xyFzn:zU91HGm2BfiIIlFFWbjvIS4dmspbZy7s
- TLSH T16DF3296D0A885023DBEECD3661B99D8507389146D5929B4BAC50ECEC3C637687F843AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0b:4d:72:2e:d2:86:4e:35:fb:aa:a0:89:04:b3:d6:d9:37:cf:e3:9e:e8:9c:bb:f4:98:e2:4f:a5:d9:8e:f3:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 30, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c5:03:cd:cd:21:a1:f4:ef:39:00:01:00:00:01:c5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
164658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net6.0/Microsoft.Data.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
153KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cfe1f58e224428ed72b27603032a0c59c7051ab947c50031bdad6bc816477a7f
- MD5 d81b62f7a79926ac38a7a690ada3b2e7
- SHA1 3456afd784795e62f7c8e6398aa936e829778244
- SHA512 e8868ea89fd340e648d26d61a63350c2e426fb76a0fab49ff3fddc1aa20529eca385daa61d5fccfa624f0a36670f0b650e73a58c7072111b9c47cb36dedc402c
- SSDEEP 768:tbOu2/CELb/ksbp5gtMLu9+9FwW7t5nG7Yl9zO:1OH/C6d5WMQ+gW7tP3zO
- TLSH T163F26C92B3DC4323CEFE1F71E570E4421836EBCA7411CA6E4A55B14E0D63B849A71B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bb:62:47:ee:b4:90:8d:bd:7e:63:a6:cd:e6:d7:0e:87:fd:a6:16:71:c5:d7:c9:a6:c1:5f:fb:83:82:13:47:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 30, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c0:55:a4:8d:c3:64:15:c5:4b:00:01:00:00:01:c0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
30102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/EFCore.Abstractions/Release/net6.0/Microsoft.EntityFrameworkCore.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Relational.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 99f31761f7579be9cdb71dc43fbd6867f69631eb79ce4e7eb3315813e686caa3
- MD5 6f075dea584800f4f241bf30fa879f31
- SHA1 68a559d2ad4d01c804e38461f985761f90d69595
- SHA512 25c99c879762d2978dd32057c4125d391097ba719e2a45a39a32b8fac60e2d977c197e10db786ed60186b2902738f1b1949fcd9f02c03044afda622cc7b9d711
- SSDEEP 24576:Ne9+z555N1ietCoWRT9EXSN0Bf7213pJC:NegliuWQAJC
- TLSH T195856E91B3FC7F23D2AF52756131040C62F6D91A9722E75AAD04EAB91C9F3818F4225F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5f:07:ad:f4:72:7e:ec:b5:03:e5:23:bc:5b:d2:cc:dc:33:eb:88:7d:21:6d:7b:ca:5b:0d:a9:96:04:4a:7f:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 30, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c1:3e:a0:83:9c:e0:09:af:c5:00:01:00:00:01:c1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
1829894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/EFCore.Relational/Release/net6.0/Microsoft.EntityFrameworkCore.Relational.pdb
mscoree
_CorDllMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e5d8943fa9183f905be48dee336ae31228524eb1888eec2d38194566801a7c1
- MD5 c861d15852c1ca73305cecce0337734e
- SHA1 4c984fe8a22a5183b6d6e7ca0b81cfa4438a25bd
- SHA512 832b02d7b1463ef11f4f868c81ff7607bffbfdd433f6ce9542b779d7044de20456be0b90e065ea9e0a9a03d4ae71cb0c68cfac53a66d5955f1b2ea362bb7df37
- SSDEEP 3072:iMxLsQupX72oMwMqzIFujF47RGt+l+axHH5l1:iMx9XgsF2BwT5
- TLSH T1E0147C5D23AC532AC6BF9735F0A854404735FA0BE5D6EB9D4C8C64ED2C62B817A083B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
78:8c:3e:3d:93:bf:9c:a4:98:fe:dc:8c:c0:4f:93:d3:7d:01:cc:4f:99:54:80:35:1d:d3:f5:e5:97:18:34:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 30, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a4:07:cf:e3:8f:a3:ba:6f:d6:00:01:00:00:01:a4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
199790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/EFCore.Sqlite.Core/Release/net6.0/Microsoft.EntityFrameworkCore.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.EntityFrameworkCore.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 923c252f91d6e8e3c01116c39f16e64fb3e85ea70ef7816f6e2c442f71d9e1b0
- MD5 cd1c2d9c5448b281937c91375781cbd2
- SHA1 744d9fc9fc9978569c3d8771da773142c78a876a
- SHA512 5dbf8fad5d989eecf4c579681bbd2cb1e794131b8277c7994f36a16ab754f9a7747912fa5b6c499ca515b6c994ebf285c2f777e23676061ef5721c1d4938d7df
- SSDEEP 24576:+XLddrC5CB2QBdE+WTVlyBcIM/98eF2+nwxJtit7+JMrDTYtSBDsq:+Xv+5hQBpY8vTt+7+JMrPgq
- TLSH T1EEA55CC273BC5AE7D1BF3279A0700414B7F6DA4A6332D79B1514AEB86C9B7805D813B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:e4:4f:ec:36:4b:31:3b:2e:8d:1a:9c:2a:f3:a2:3a:62:5f:45:c3:3c:63:38:e7:c6:3f:3f:9c:75:78:49:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 30, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ca:4f:c2:b3:ed:03:0d:18:6c:00:01:00:00:01:ca
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
2075914
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/EFCore/Release/net6.0/Microsoft.EntityFrameworkCore.pdb
mscoree
_CorDllMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c004f78d9f8378c5f79ac3a88e90625a117b9700a75f5f02266289dd4d28e451
- MD5 89f216cf8eacb39551ac5df4df726d7f
- SHA1 cbb5349b9ef110d51ab28cf6e9ea8acca6c16e2a
- SHA512 2b4517149995a75d188eb195f3c53331ce4119e6d516ed385fcfcc1e62676997c97ba66b13c3484f4bcab8509d566f17d3b58f5b146911644811a81c1ae36d17
- SSDEEP 768:X2z8YAqmMe33Qy6uOje1T45wKIG/N0Syo7ieSuo0lEQP9zMKY:X2z8YAhHNROjeMwK/N5T7iio0jzMn
- TLSH T114E26D514BB8435FCEBF2A75AAA5C1850D7ED3C93403E72B198DE18D1C8B388953273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
02:9a:98:ef:f0:30:37:ca:d6:49:bd:04:e2:99:4e:65:e4:de:c3:e9:7f:32:e8:92:ab:bf:76:47:34:01:25:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C4BD-E37F-5FFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a3:fb:9a:b3:8e:7b:86:43:4f:00:01:00:00:01:a3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
26270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Caching.Abstractions/Release/net6.0/Microsoft.Extensions.Caching.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Caching.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ef11f0b594d5be76341ca65a53bf3930aa807c312a278ae22043dcf4db9ce25
- MD5 f60f3d61ea68254b8a5ee1f50e95f56f
- SHA1 0cfa3f1be8f6b8f9a9439dcba0bbed12db4d58c0
- SHA512 d14792db1abb631c9f1532eb1575ce63786e888bdcc4625f38a4e841a9315e95659d4634dba592a37b4dd5441f1fe58f27df91a45a6fbaf7ee09db69ddad7429
- SSDEEP 768:M/Lun0cK7s4dFnRmoFSTzje6EEYcu2Epuo0NHkOQ69z7:M/L4bKs4dFnRHAjyERu2Do0Dz7
- TLSH T149134B00A77C4327DEFE1A7696D4F4011F7AA34BA511EB284D8DF0DA1D637C08A2663B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
17:62:76:ad:79:9d:23:74:42:8d:16:7a:5c:87:17:cd:50:5d:07:88:bc:c9:0a:dc:07:74:d7:3f:a0:76:b4:bc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
38490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Caching.Memory/Release/net6.0/Microsoft.Extensions.Caching.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 893f042b8bea61e3e56091ee6167af61bc38a39d35cb1d0f9b222aae4493146a
- MD5 5edcf3dccef856711d35e0afdbdf6d0c
- SHA1 fefe0a4870d36814a45f8e9c63530f1963cd6c0c
- SHA512 de9b23363d5fa78b45c96295713e392d24fa8b0d5a78cf6d2a2a8d04a071fed4f52f4b3559e36c829cdbfcb318c2a81b0df3cc3d46eea766c88afe5f16de5718
- SSDEEP 384:R+q+2Vv/+usFlLVyKo/9ETG/DwzzRjz69M1ZVMdWs6NWsY/WyRIHRN7eUBGQtR9h:R+EF/CvyKohrqnYuo0eUwQP9zV
- TLSH T114D24B9653EC4333CDEA0F71E5E5C8416E37D7993816DA1E688EB10919677C08B32B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
96:8a:08:c0:44:77:ff:45:04:3e:df:8c:ff:01:cc:ae:d6:08:fb:7b:89:1a:f4:d5:01:44:25:bc:07:38:6d:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C4BD-E37F-5FFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a3:fb:9a:b3:8e:7b:86:43:4f:00:01:00:00:01:a3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
23758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Configuration.Abstractions/Release/net6.0/Microsoft.Extensions.Configuration.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c301bfcd6a6a2baafd81425be273c7f29afe726ed6b6bed54202aa7376860b2d
- MD5 991ee31ef4e5138a558b096249c65e1c
- SHA1 3d89f910e18773882c34f8e86c4ed0bdfe49c420
- SHA512 b11618ef12f725259173b1e4ad776f44b5d4530209af62289798d4fba9f307976c61bd5a5c2762d262b513690a406e43b1bdf55507d42c2b04a6d41e29c1a9e1
- SSDEEP 768:r054t3ibki5TCk3jqEr0WBum6qofqk+xLVNe9zx:rPtnUj/LkmGfqlnNazx
- TLSH T165035B52976C8327DB7E0A71F5E8AA462F36D70B7652F7194C5EF04A09733804B6223B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ee:95:b1:c1:7c:1d:19:b9:a0:8e:71:3f:a9:76:8f:47:57:b2:0f:28:c3:4b:22:e3:69:2b:4a:5e:d9:6e:ea:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
36022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Configuration/Release/net6.0/Microsoft.Extensions.Configuration.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 087813b2f9350b8c2d31e5bc9a5410fab198fadac87bb1269f41de6e6ad7ee62
- MD5 6c8655836651933ffa4c253b5fa72939
- SHA1 b75730d6c1ef5e0ca6d7f7a1a5ee540aee940836
- SHA512 afb2a83b58eab2eb00116ad790110884d53391e6a88cca3fa7bb8bf8837257db1aebe07af63417a23e4f37aae9dd217a2b4a58a8f25528c7559ef31582babe42
- SSDEEP 768:2q+RszBJV7CkN9YxrIvw2DLBjYAQP0+lyJ9PPguo0eKW9/9zH:2q+SSkNNjdQc+cJNBo0qzH
- TLSH T1C3136B80B7F88322DBBF17B4A4F261015E35B7476902B71A2A45E01E18E77C8ED62F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:8f:95:3e:f1:aa:ed:db:a2:00:27:b5:bd:4a:d3:97:67:fe:6d:83:a0:71:79:41:02:bc:4d:30:50:e9:04:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a4:07:cf:e3:8f:a3:ba:6f:d6:00:01:00:00:01:a4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
39702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/Release/net6.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyInjection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8fe8bedbedefe0fab7e68c48f508d486b42258e16c09572886d7293507bdad6
- MD5 d73fb559b01aca341a7750ddf3f6d6eb
- SHA1 5f62514899132aed440854e599b742683bcea1d5
- SHA512 65ce8faeb54f2f25af62deab7a0c0ccf5efa9cec5cbd7049f34608dcae4b2a6ac04026c6889e619527b8b65cb194fc98e01861fca7e740904ea12ff9932b3209
- SSDEEP 1536:LNNgvCsvGPrpqSMo4Z9M4IIWSYe2Kbj5u6fjQ+7PMMcmnJ2fxkwzOX:LMCsvGPPed5ZfjQ+rBvJNwe
- TLSH T1D6835C2463F84726CAEB2E74A874C1010F7AFB973503E71E2D95A0A81EA7FC50661777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:2d:ff:b3:19:b0:53:72:c8:8d:9f:82:92:28:f5:71:36:6e:30:44:7b:d5:d8:53:c7:1f:78:4f:26:78:08:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b2:6e:40:03:7f:6e:a9:94:92:00:01:00:00:01:b2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
79922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/Release/net6.0/Microsoft.Extensions.DependencyInjection.pdb
mscoree
_CorDllMain
Name
.text
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.DependencyModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8913b56a0f6e209ebaadaba532865b1ea8d10d73fec86a1b8f93fe0ed8e0d2b8
- MD5 846a52de605558912993eda079b6a7d7
- SHA1 f5944f793eef7cda670f572f909b941259a6c56f
- SHA512 3096ed6a09acc77110ae290d9b92365a0b7c561a9c56fb1b3d6c092f3cb615a3efddf16fb6618ca64279631bb3c3347d230df08cd84a53dab1f659cd761ea649
- SSDEEP 1536:lJRwgfJbzkoKyMv95Wm5LMo7lRowMfYM9gcLzQtqfSnXzQD:lJn/BwlLtgwMfV9gOQt1XI
- TLSH T176836C1067EC9705C6FE1ABAB4B4A05907B7FB4AA023EF0DAD8E649D08537D04721B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6f:93:98:f5:df:d4:fc:bc:a7:0e:57:93:dd:73:84:26:fc:78:db:74:c0:dc:1a:25:64:d2:cd:7f:cf:96:06:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
74634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyModel/Release/net6.0/Microsoft.Extensions.DependencyModel.pdb
mscoree
_CorDllMain
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Logging.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b4bf70c7e2aa5ea0090e13817b895339259cc435dd16d8bd32ce4ebd85de4a3c
- MD5 5127ddc4377a4fec97eac8e991477d00
- SHA1 eb1c84da67d382390397e30fe801a38944bcf48c
- SHA512 86904ac640009cd7f11c1694e3ccb96f482cabb7a098498e9a76f84fb87060b01c6e7d1f73cd8451f031dd4a88dd802b715c337d58fb47b1f1cebabe4dc735a9
- SSDEEP 1536:M5PhAi33m3UOZsd4IZnuQDLtfjfCqfZwzl:gPhAi33mhZiHlvtbfCmwJ
- TLSH T190536C4017DD8327CBBE5E7AA1E1E5425B34C7A33406D74B2CCCA06569AB7CC0B612BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:2e:e8:a3:01:46:bf:6e:3c:d5:52:b2:a4:c4:15:66:49:0c:97:dd:78:d7:4c:97:4b:a6:1f:04:41:28:6e:29
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:EACE-E316-C91D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9a:c0:75:a2:c4:21:6d:3e:85:00:01:00:00:01:9a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
58614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/Release/net6.0/Microsoft.Extensions.Logging.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Logging.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6833a9076b9a4bb4195c87cdac7ccf4b99b86d1fc848a08e074d668d1e03530e
- MD5 3f6480b7c509fc21aaf73c32b9ff7aa8
- SHA1 c623ba7aaf28dfe6b54fc0ad43c6eba912c6b336
- SHA512 d8ce36217497231facaa58fd66c560de785521c86b04233de20d7d25446c74d9d75504d24f5f691058773cba62381ffa2eb66f2254caeca3287d883888e80586
- SSDEEP 768:N7d427HfKy1DQ+SKKKKzqPo6Zkn2qZKqLzZdd0UFxgofYyxLVNe9z:N7d42LfKy3SKKKKr8keqBdd0UFHfFnNW
- TLSH T18F234B2217BC8377DFAE1F74B5B498869B39C7463002FA666E8CF05418B37C457602BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
22:8c:11:0f:e8:e1:91:55:4f:95:51:c0:6a:ab:e9:b7:2e:0a:b1:39:01:12:09:5b:a2:0d:5b:8f:3d:09:6c:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
43354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging/Release/net6.0/Microsoft.Extensions.Logging.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Options.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 792765a31e12260bf7aa7630d10e40dd9f2e140ffb5678237a2055266b478112
- MD5 2cde060200f09d54a11200f693d84bc9
- SHA1 f65c6baa8a36cbb5b28249177fd74fa1279cfd1c
- SHA512 7e47b7dee51b0eb7c2693a0465de79dcc9380af377bd6372437f21027dcd00078b9aeac422794ef294b9fddb1148d55e0622e10d076797c43d0e2034834b03fe
- SSDEEP 1536:Rg+uxEzzaW2uughzb1GZ90fD/AuJf4rzu:GFmD7XoZ9zuGra
- TLSH T183534C12D7DC4312CAFF8571B5A491122B39C34A3B5BEB6F4ADCF6881C933658961339
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:93:e1:3a:9f:89:8c:5f:1c:25:f6:6a:5c:85:34:f5:64:b4:a8:eb:c3:6d:77:a5:16:7d:71:29:af:68:9a:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:E5A6-E27C-592E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:95:b7:fc:0d:d6:e3:37:31:25:00:01:00:00:01:95
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
56554
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Options/Release/net6.0/Microsoft.Extensions.Options.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/Microsoft.Extensions.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8578454489a439d5debd8a8ca9844b3b38076563eaf195cc5ed4bd27a8c54ea3
- MD5 3ba07a6760be077504734e9c0be0cce3
- SHA1 a51acea6a9183d6c73dcedb5b0536f2a5efd5f43
- SHA512 1e3ab31b03826f634271246505f72fa4cd16eb0e23ca71bca1eb5a398a3229df6bfe87eb1b6a30ea2e0379e33d1f2af951f178f950c0a520b07740ab11c8b0ba
- SSDEEP 768:kKsIwjxNp8hpwVeEfHuX1QUIh3kOP7oIyWb3jec/uiCR9Crwuuo0NChOQ69zO:0d8hMfHuXbIkOP7ym3jZ/uiCRgrAo0Ji
- TLSH T1AE135C01B79C4327CFFE4E71B4E5E5854A3883A97523EB2E45C8E0941CA33D58A7267B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
be:30:0e:28:2d:54:97:04:25:5f:9b:7a:ad:d0:50:ed:30:f1:c1:b0:ef:17:46:dd:dd:a5:69:f7:75:a3:4a:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
37250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Primitives/Release/net6.0/Microsoft.Extensions.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/OxyPlot.Wpf.Shared.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0347b16de30a56e9bfbca3e2d1ba128f986f2a8fa94b8a40433b0b240b09062
- MD5 1529e14d550d98d970fcf864443334cf
- SHA1 5ef58b5e12008e8229f4fdb4f2269014d73edf60
- SHA512 35ffa267610143c940edba66d5ace5a1dc9097592ead1dea3d5f8c7251ff1b98a059941338c83d131279da1e6061bebb8f31d8a6dfd17f9246d6d4ccf1dfff94
- SSDEEP 768:wrrF9PKEUQ8IVCwBu2Km6Mz1WPXtGv5JFCTwQYRg7LalyJcpJthQuvhNx:wfF9iEUQlCJ2H6Mz1WvwzbgCmcpFhNx
- TLSH T11F238D603379C631EE7F47B9747511208370EA273A32E7562AD825EE899BB041B117F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
OxyPlot.Wpf.Shared.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/OxyPlot.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab162708ab647b661b73b0fe1b9ae9bede1d02f1a047fc180158b10f35b80cc2
- MD5 e960e8b8d15ff8bbe64f7a68a838fba6
- SHA1 0fa33b234e796f1800ddec6dd6d0cb411d99f111
- SHA512 cfaeb62efd92712a44069173e39a7a6cbcb8eae4046bf1b878173fe99a7616709b01185dc94eb6d6bd6781fb144d4ee1f90b36e945df27b16f62d5639b62097c
- SSDEEP 768:HmotLf7LczM5V/ttrhglHO/7sk4mRweqqtqOd0T56itaycpLIGVla4p6ax:5f7LcgDGk7QmR91aAhlpLI0F6ax
- TLSH T191138C6C6240826ADE7F4B75B5F2A2080B70AE1B7703E7165ECCA1FDAD5738516243F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47554
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
OxyPlot.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/OxyPlot.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3a4fb7670162414d419eda4f241a8f5fa58416059442c97aa5491c8df68f0661
- MD5 35e986907773c52019bc359b7a7145b0
- SHA1 572ba601c8ad4a65b3d8d52566b6bdcebeedbb91
- SHA512 b239e93e00a135595b6c3fa52d73c0dac6c0359e631a1c55621aed4911becbfc799fef2733c0ff936737df3a2d68d4e3430ef94910a421b5c61747ee7627865e
- SSDEEP 12288:bNKm+SzWUk5vUpTHns3xeqUNE6JJb3m6vW:bNqSaLAns3xdUNpJJrv
- TLSH T196E44A056768963FCECF0334E079941B97F1D40E73A4FFEB8A1894B97E527516C02AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
676670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
OxyPlot.pdb
mscoree
_CorDllMain
Name
.text
Size
661KB
Virtual Size
660KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/RateLimiter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb03053fc40890986c472ddf7ee8a4f296eb179e64a182de17c5400d25c71021
- MD5 754b09398c8ce82e090d3c59ad34ef17
- SHA1 205027e341651ca9a170133ff94849bf79e935fe
- SHA512 99534e1fdbd5f3b7a50db77c0b61278bfc7763dcf10eff484927f64ae68690978287c80be091c4486ec6c0f524746643430bea2ea8650390ee59af1895ae443b
- SSDEEP 384:3tjO2+M9FQFcpvDNfi+JRE1dNJEtKtQcgiu+COmGFMjTN:9jO2+MPQeDNfiUEvNRtQcgt+Cq2jTN
- TLSH T17A623B4A83AC9777EDBF473DADA702210B31FB15E823E72E269CD2954C477924820327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\David.Desmaisons\Source\Repos\RateLimiter\RateLimiter\obj\Release\netstandard2.1\RateLimiter.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.batteries_v2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 40a5dd54f477f9d0daa53856db9011ca893d26d2d34d14dd2e81ba2df1104218
- MD5 eac4a06e0b146a5cf25033e2568ea876
- SHA1 74a37a0983be8299d8b58b17a4593feb8fac5f18
- SHA512 698ac7ca037600332e0a5c017184afc357ce709cb449bf30d2c0708f70f83c13a131d94f9dad7efa26ea4bfe624bba000d832d195b06284c21ae66a4c0f4fd71
- SSDEEP 48:69+l6gXzBaMl04HQb2cIcU1N4zOuSOiW3WCpdf5QyDi07gAAwnabKzLsnOVjKAvE:LjaMK4wacI/Yz1SOxndfnUAAXbFU
- TLSH T1B3B1A7A5E7E7933BF97BCFB2BC7316014674B960DA239B3F4D81910E5C125189920772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.bundle_e_sqlite3\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 979edcc9056ac06d5f52b12d9b7733b1217914ab50bf123ab312e027e7ac57a5
- MD5 b2ba7e54a020ab0461cc7e575f6edf66
- SHA1 004884df52183290966e2fb61c3575df11e58148
- SHA512 fcaabe2a1610939034196d3d6275d78f2f17587c8e36bc8528848312c11766eec1f83b7dcfbfcfd8a824eace484a705ad7953cfac718dd67df4f6bd2dfc32d0b
- SSDEEP 768:JmOGveifSTtyXEQ3nPGLb4PFvSMJCD2j+XIfHq1wJd9P581Iym/DskE:3LTtyXEQ3+bO6U+4lrPi1uLsF
- TLSH T1E033D9750BA19E2BF6CE5174A03F0096A674C119B77BD717AA84E0F0AD733C607A11BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\netstandard2.0\SQLitePCLRaw.core.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/SQLitePCLRaw.provider.e_sqlite3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25f9fb72c6ca5157a95d102a0c592b8be7f8c1231e153d8235e7153bbeed4ba5
- MD5 cd235d945305490f860891d45be34d21
- SHA1 3b1ad1025dfe9caaa59e455d4c5bb7de32308e1b
- SHA512 5e4247d4e8c5e26ae8a9195e75dd097773914420915eab873e0b17593831a02b6ac0fa1319652958cb91a8b81c941631d62f0e7718052b2737a08dc0e73a7952
- SSDEEP 768:GU3zhs3FqDaGJreEurYnnjuBPPI/3ja9qJq7u6BigTB:N3zhs3FququrYnjsPI/3e/BJTB
- TLSH T184F264E5934F0668F29D0633BC372E4981B4F395FF7213179A57C338ADA39964A842B4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net6.0-windows\SQLitePCLRaw.provider.e_sqlite3.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/SharpCompress.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5bab172d2119a46b67dfd3dbe760e53da3be1eab13506437b32d9d148a6251ae
- MD5 638328988aa3d4c67ef184535b62dad4
- SHA1 933147ff70a39e2cae1035f0fc96a89582d8429b
- SHA512 73be78c476392c1418975ffd09d95bfc87362dd66f5d540d767fa8b1ad3dd831d988da237afcec7ec361dda1e45dd6da68d2416d36349bdfd2e1836c903a82c1
- SSDEEP 12288:cxUnRunFBvCnGzix2fsBiNA3fhpVijMy74ULnkTs0kjJ0DxUr2B0u:eUnRunqnGzix2fsBiNA35pMjo
- TLSH T1D5C48E1933E8172BE49E8BF5A0371C6983F0E5265756FB8FE844E5BA1C53F168C006A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
566594
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\sharpcompress\sharpcompress\src\SharpCompress\obj\Release\net6.0\SharpCompress.pdb
mscoree
_CorDllMain
Name
.text
Size
563KB
Virtual Size
562KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/System.CodeDom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b2ba5ede11ae8ac2d1d67df100fbd23e45558f8b29cf7ca767bb41d4f88281c
- MD5 34f6f6df02024f033c0d9cecc9e19f5e
- SHA1 0f72071a867d7ca61edac4cc70752ef608fe9926
- SHA512 5a7e9d6c023cbc4de9360686149a001e0b6192580939224af193e952d1e62e3e0ba3577cded85f012d90678bd681245bfd25ff258d596c235a5c3afdb65b21b8
- SSDEEP 3072:MFxaB6x7l+gq0WENWTv23phTvrgnlLXb8EVY3H+1Rzbbh1pTiWk:U33hEoURwE23yRznV2J
- TLSH T108043A713398823BCEDE5235E0A9405042F5E56A7382DB9F5C8965FA5E23F60ED20E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:c5:7c:7b:12:1b:07:73:74:ac:e8:f5:62:3e:39:ff:57:42:0b:55:b3:e4:57:85:7a:80:74:dc:bf:b4:db:56
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
182034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.CodeDom/Release/net6.0/System.CodeDom.pdb
mscoree
_CorDllMain
Name
.text
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/System.Diagnostics.EventLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7848cb8aa4058e7f6acdc1b7aa4cd325d6502ac05c47d2ec0c058834487da0c6
- MD5 cf3b6939f2ffa6ee59049b4b78410a1a
- SHA1 ffb8fa51fdcac2fbb400d66f75b75066ac2933c8
- SHA512 5cbd5427c492a687f1a13d746d27a2ff2e6d7c34a2ab06278cc25611bba309b5d0e6eff77b1c8185d5383cbf8957c0bc33d0a6bada179271a83675d65448ba09
- SSDEEP 768:KtgEqel7clEfRWOuDXaVIWb0TadZjirgFDrGfmAXOaYbMl6/iy3L9zRiZ:KiprEfsOuD0hhji6DrLbAyiehzUZ
- TLSH T12C33E7C15F94B33DDDE23A7BA57282910634A6FE2D12C60E285EF749091AFC443E37A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
95:ea:ab:c4:44:46:9b:9a:88:fc:a6:9a:cc:91:2e:b2:b7:4e:20:bd:26:7f:52:8c:57:ed:30:36:c2:17:7f:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
47962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog/Release/net6.0/System.Diagnostics.EventLog.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/System.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 33e3338e10524a8cebe3b471804a13447daea0d23fbd433e2ea60e9bb95f4121
- MD5 ba2736cc6b998ee77730f03f221dfb4e
- SHA1 cb1d0e526e82b577cf98410255763245272f4406
- SHA512 ce212468f76bf2d933eb681f01b419fcae9ade73a0780ce6efbeaf31a7bb7576187e840e5467277f43e2026818e3326de67c90686dfeb94839aae1deeab0b9f5
- SSDEEP 1536:4Tuvuaty9talVktcT8FT9xS9ycXho0VBR+z:juawbvtcT8zwycXhY
- TLSH T11473C810D798437DCCE70776B5B2A2214F74B5C52F22D66D392A611D08EAFC243A1E7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4a:99:d3:be:ee:76:6e:54:cd:d2:d4:90:56:fa:a9:03:8f:b4:5f:03:79:19:45:0e:3c:68:75:a8:2d:32:9e:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7880-E390-8014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a8:55:f0:61:a9:cc:30:18:5c:00:01:00:00:01:a8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
69718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Management/Release/net6.0/System.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b3fde14d7f61c181654d19ba055d886708652809e7d69695acfc62205cda22b
- MD5 65431a3411b472a9c8bc3553f068a263
- SHA1 82e978749a089f14bcba38512d56b88066c90cdf
- SHA512 8bd77d0bb9a1e441f916a8e7f8a0753625b23cb8f967d664aed6813c0cb74b16e4aa6b5fc57f3e02465e6e6fcb049ac282a8f161edddf4cde7fbd595b59d1712
- SSDEEP 768:K3wGplLcGsTK/lWNVz7MW+N92D1NlteV2/i+9zLH:K3wMZ1lWL7MW+N0peV2i6zL
- TLSH T136F24A51A7F843BADDF30AB0EDB1D3220F3576C21906C62E15AD514D2AD6FC48BB1A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4b:3c:59:e3:e4:95:0c:0a:06:aa:f2:75:e7:c0:77:d8:fd:7e:4b:c3:97:55:3e:bf:f7:11:e7:d0:82:c5:7c:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d3:1d:32:9a:17:3b:40:30:73:00:01:00:00:01:d3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
29238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ServiceProcess.ServiceController/Release/net6.0/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2af18fa9cec4f826b75649b1ad7fc88a07138adfdad986481f11db11817754e
- MD5 7dd9ae427be644501ed8dea4204ce45b
- SHA1 4c0874d5dcec93568957c5693a1afaf320d9cde4
- SHA512 fe6bd1439143190ce0e100fac26588434a14addd882760b148ab4f469db08a75f6e9264d92f63be1c86688a521a2e1c586fa1b0d7e966ff552934aeead263fc6
- SSDEEP 1536:uQuedlunqpC9yYxC9P7tt08eeykGlsESo3ro0Mf9XzFP:93KICHxC9ZJexRsG3rMf9XZ
- TLSH T1F1636C14E7C8C66FCA5E1E7234B1C071A7B0AF9B5166F68748A4384957B33CD260F1A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
51:17:87:12:a3:e3:d9:5b:82:71:b7:e5:02:5b:7e:96:76:d7:11:38:5c:a2:46:4c:30:45:32:85:a2:d1:23:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F87A-E374-D7B9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ae:aa:0b:5c:b3:34:a5:95:1a:00:01:00:00:01:ae
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
65822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net6.0\System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/System.Text.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6cb476d20369516d882fdd0f318a7fe9eb694c166dc9f2089e99b4c27f17ac7
- MD5 b7bcb19ea0110c433799412df9ab7c8a
- SHA1 0c39979d5a017e7c46169cc9fbfdda4448c33fb5
- SHA512 234522a56fc47894a8f63a467f7fb7c44285ea490296bfef893d1ae1533571f312a8bc5e9d586f19e5126c87f23e7bbc993dc04347f996f3a7fd0f19cdd874b3
- SSDEEP 6144:x6+HbUMHVgQO61+5ZpvsQ60OghEusa4UQgce0x7KjF76pkLzLFEnJEIfibgPKiUT:x6aRgsgfEU4UDcxkLzJEBsgPKiUYFHu
- TLSH T126C45BA273EC4A2BD9EF0775E03848199BBAE4677BA6D35F140474FA04837C08F456A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:b5:76:14:66:11:d5:c9:2a:1f:90:f4:26:46:35:ce:63:ea:29:58:2f:66:e8:2e:86:81:d9:e4:97:49:55:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b4:fb:80:08:44:05:d2:2d:fa:00:01:00:00:01:b4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
537534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Json\Release\net6.0\System.Text.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
517KB
Virtual Size
516KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/WindivertDotnet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bdff7756b3ed42c878cef2160c1c6e64a2835df2205193d1677dd28e69349d84
- MD5 3e8c97589db707bbc0c7186551707a32
- SHA1 b36b3576eec9c4d8cb0b169fa73c65c4ec4c8dcd
- SHA512 2af36ec7c76a05a0512a39ad1b3493a886e2a3bd9448aab2fc7df1972e25aeea706da0e9719fdd61f0b632f05683b3d92c993fdf3efd8cf5070a08eb22f1ea16
- SSDEEP 6144:gBsX0aNzCucWHrP65imxkSiltMojGmu9zR0yAu0Gu8f+GXiltMojGmu9zR0:gsX3NzfLP65im9itMzf8YitMz
- TLSH T1BD948D02F3D141CAF9E6C6B855B9D352AE31FA916721DBCF41D0A85D4E22BD2AD34323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
420118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\github\WindivertDotnet\WindivertDotnet\obj\Release\net6.0\WindivertDotnet.pdb
mscoree
_CorDllMain
Name
.text
Size
402KB
Virtual Size
402KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/ZstdSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 94875dbca8f8109be9df3c12fd254bdb181dc434293cd3c4278fd6165d67d83d
- MD5 221630676cf996193fe36059a8e06c59
- SHA1 57f346275694adc68f5921dc9032f46ec49b8ef3
- SHA512 c0c49cf76853949462bd0974ebf7a9093f4afa6f07ec549def916f21e14903cb91a19043a2a299be4a76c19f350537281d331f1fa2be6044d3fc87d7b6f69591
- SSDEEP 6144:Uuhj3x9C5LzOYBO/KCYVgDbEcjEx+QQ2oEQ3eVHHzyWltdH5lAV:Uul3MLzOKCYmX3EehexyWlz
- TLSH T17A945B6373C91BB6D29EA3B1C0A4641F81A26127F6A36B137AB44750FC473D4BC5DA83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
428750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Work\c#\ZstdSharp.v2\src\ZstdSharp\obj\Release\net6.0\ZstdSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
411KB
Virtual Size
410KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/chungus.cfg
- SHA256 d9366c9b2ce5e6383eee726d5c7d6b3e4dde0ecdb6f2a524e01e0682f6db45bf
- MD5 86fd10e7933bed7aa3afaba06f75a79a
- SHA1 dcfb8ca90b83346a0c143d4628f6d54f60f7a047
- SHA512 fe04948cc7858232a148abe0097f0cedac26f1a9208bb7e681a7330830f3b98ed4cf2aa6c103248ffef29ded22b018b765d74d678ebe0dfc76fc043c32e646e2
- TLSH T14E517F20CE582DFE10BAA338887EA367FB65876710424D2B75BC540C6F7FB623581D95
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/chungus.deps.json
- SHA256 e3e1c7ff043703ec49530c92ff251928696f40050d91d3635d8702acfae2f420
- MD5 9fd0cb5fceb616a6eed362f446345295
- SHA1 51afac460a9ef5f7d40b51ccd1e4e3f71f0d62c7
- SHA512 c8ab5a7e3026213dd558cf22658abaef65e4c0877462113b33e1bb2b6c872345ecb95c5ea0f994b0269766d9293d4df69eb3c12154392e1f3087b1b7e62914ef
- SSDEEP 384:Yx00UVcqBqnYQY9qC7L5OcikkkF7Ux19CxOfRqP4JOtBxrH8UZGz:Yx00UVoYQYP5Ocnky7UP9CxOfAP44Gz
- TLSH T1E2F2CE25E9945F7701B5ABE6A8790182F226433FA004294FBCFC205C8F77E9B6196F35
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/chungus.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ca33eb1ff181b60fa8d4f31ac89a1aac7b0c4da605b5d2996e7931e75d133713
- MD5 93ccf515d70b3e5cdaea7c8835141b13
- SHA1 ebe3ef708833bc67480d352031a0891932a12b75
- SHA512 b154b989bf9775d4401aaf6dad2cbe743a5466ec807fd80d94b400cf887f506f60af626ed7a8163c280771c74c348f32e2f6056f40043b88a7a54086e49f5567
- SSDEEP 6144:mnV1PIaElHBUKqNEhM1NOhDymt2BlrNZLHfmA8QjZ7AwvIP:mElHBUDNCM1XmcrNZjf/7hk
- TLSH T199B4AFA1A3F88254E46F2B7CD432496093B6B4377BD9C74D159CA8D8E8877C2CF11A93
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
507734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
488KB
Virtual Size
487KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/chungus.exe
- IMPHASH a8308de57fce070f4cb88c7f43bf4b27
- SHA256 d672ecb3f6b8e7689c54ea81a45cc80a0cc90468b946769ed307d05a58bf8b49
- MD5 4ca4c5f695da81c6302ab74991e1e032
- SHA1 30f35e9028ebce2a129205a0c778d5f8b86e0aa9
- SHA512 b40089f08cc212787dfe8f5c5fd7343ac1c22e874ab11e783e8083bca19d9eb1f92328054b22edfa16165b445d8f616b862c344ac2827ba2e5f9f6d42f85c9f6
- SSDEEP 3072:d5vnr5Tbx829UOeKnn2LFzZBp13u36wKp4zULCeoHJJQ/:dBKjK2LFzZNfIULbz
- TLSH T1A7E3390772AD01E8D1BBE23D89A24902F7B6382A473597DF1350427A1F777E0AE79721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
82000
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___wargv
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_errno
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_c_exit
exit
_cexit
_register_thread_local_exe_atexit_callback
_crt_atexit
_exit
_initterm_e
abort
_register_onexit_function
_initialize_onexit_table
terminate
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf_s
setvbuf
_wfopen
_set_fmode
__stdio_common_vswprintf
__acrt_iob_func
fputwc
fputws
__stdio_common_vfwprintf
fflush
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
__pctype_func
_unlock_locales
localeconv
_lock_locales
___lc_codepage_func
___mb_cur_max_func
_configthreadlocale
setlocale
___lc_locale_name_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
frexp
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
Name
.text
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=83, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=205, id=1, productName=Unmarked objects,
count=10, id=265, version=30154,
count=1, id=258, version=30154,
net6.0-windows - Copy/net6.0-windows/chungus.runtimeconfig.json
- SHA256 ae076cc42958355d8e061a4d3d020bed0ef3cd0c37c1851bdf84844503f9880c
- MD5 edaf04afda9b2c6d778d7042e7824a2f
- SHA1 fc274b8d68c9eebdf0a8867a7cc1b3fe614c5506
- SHA512 3188760cdd8e97a482f839f94f178ea3f630ec89cea100cfcb5c6c3993dc253fed9e5a9835ecf14ce9b43379cec2c67c0bf0a18c8cc34da706ab5a8e8de2212b
- TLSH T129F0227AD910ACB316F527B69066C582FE30232700008D2635FD090C1F7AAB61022F49
- MD5 SHA1 SHA512 TLSH
net6.0-windows - Copy/net6.0-windows/data.db
- SHA256 ee0e1d4ff73a2aed70838fff69c0d999f5a0e383815db36a640d5b387f12839b
- MD5 9f89d5dd47f4d257c7279ceb5c89bb1e
- SHA1 579c397e0313ca64c8b8c9055c60875c3b5685ac
- SHA512 d5416f59ab95476a078c65bbc459069773ffd6efd2bf482556fcd26465c4c33a2efbf474bdd46b18aa7d10da9a59b81b6f3c795e83cea618867f926b973dcfac
- SSDEEP 3072:nm1r1K10UL1G1he1PT11141N1eJ1c1kVfZ+1X1ZQ111lPu1J1QaD1x71xx1u1W1P:2tQRIBQW
- TLSH T16344607687F35494D0DE203A02E6654AE4E3721D93F678E8344AA091E553433AFFEB1E
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/data.db-shm
- SHA256 ce6f549b1b185c9c03b8758bba235e0d14be77e046a604ea638c086c37afe40b
- MD5 1830a78ff53b727f5ab88cf653ce9cd2
- SHA1 cf32b9a0b8c0db4328ab65554791812cb229770b
- SHA512 6d63214aaa742f1e6c0eccd61656f2b2b7a75442f44ccca769e911c00a449af9227c7055aa0e4c1ae4b4dc3486b794c6f379e98d557e58f5ff0e0e38ddd1bce1
- SSDEEP 6:GNSxvSpL9XmFFFFFFFFFFFFFFFFFHPbbbbbbbbbbbolCSjLz5TsQrTrzrCl:8SJSfmFFFFFFFFFFFFFFFFFtSjLz7r
- TLSH T117E2FB1566FC5CD3C00281F99BD2B0346E22DBB15B06EB33C1612E4DB729CC64A9AD38
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/data.db-wal
- SHA256 dc62883ac026c1d6e4f12e68400740fa8ea5685de81042838d93d4f11b443fa5
- MD5 c5a17622132460d5e24e5b9b3e68c3c9
- SHA1 6d8eafbe6ece7bfb6f4782958f9f77c2d40ad969
- SHA512 a6382b9283e75ad765df7ede0004d6c20b39ae6d9bcef8be68919f7bf93fe1ab9e8d41a5ad4575e17cb3c9bbfb905e7567b9ee4548c29891984167750dc12e9f
- SSDEEP 3072:E1y1Ky2j1y1KycJ1y1KyHZ1y1KyMx1y1KyO81y1KyM91y1KyiX1y1Ky971y1KyPQ:3
- TLSH T1F9843BBA83F26062D19DA5B501E6060EE1E3111EA2FA7DDC718EA055D9A34331DFE30F
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/alpine-arm/native/libe_sqlite3.so
- SHA256 35442e2a241a7fff8c7108f7a03f649ba9b609e2d7c53b12e51999a26b0af385
- MD5 87af85204a246154501382901f3f6812
- SHA1 54453e800e6aa9e7ad71f5efb43c1333f8d736f3
- SHA512 f7c049cd31a15927886a859f1b360a54fbe7c7023f1152a5ad35c93e1da62ec503d18f1346e1031e5eb712f98bd71ed225c21a49b6b0f5112d472cd0058bba27
- SSDEEP 12288:9BZRRPg1nbAEFjSCByozMRJAkce4XxzzrDgtgKhVKt4xY9cxhnmDlq7Hm8hN59CG:9B6bJ+Y9mW5ba9xFexwFtfO2WyZLs2
- TLSH T1F0352995F8508F22DAD06B7BFB5E469933230774C3EE7509D81856342FEB54B1A3A382
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/alpine-arm64/native/libe_sqlite3.so
- SHA256 64fa07b024c900e2ea427f840bb4f440c87dd8d5254ab8c16d23582f273ee6cb
- MD5 cd4b9aab53400efe96abc32b339a866a
- SHA1 052c530f7bffa5907ede4ee8dcc28cdb44a668c5
- SHA512 61f646480c0a279c0c07128968f2ef54bf32a5f26c7f3bfdb664e936e6818341d7aa6e1f7ce49a23c4a6851e69772e628842bce71f51c9baeb892c172cd4773e
- SSDEEP 24576:5RLgOTVYfkCND/xEryJCunxnBp/vyyyLGLn:5RLgOTViXEwv/vyyyLm
- TLSH T1F2557D4CFA0FBC02F345E2BDCF5FCBA272373594C2A7806179544218E9976E4CAB2665
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/alpine-x64/native/libe_sqlite3.so
- SHA256 81b128c7fbc38159a14e8fd54b60e052df4ed74933674215884b931853a61ba9
- MD5 6c9d6e34f1e932668237404d6eb6fc66
- SHA1 fb3a5da767db323a2fe1456285a5dc87ecf2e4f8
- SHA512 6b7e0621d87fbeb28b9976b66f2cc44688df1acc8dedf10679939ca2d84dec36a739c416f8ef0122d44f6205f6adedac3a9513408df3a463d1b5763a64787678
- SSDEEP 12288:RfxinemKFj3zyC8fU3Qxahkm7vlqJoMXHgBgy4YQtTWESWrLOi2:Rk4EfUgwG6UJoMXHg6yZc9LOt
- TLSH T128454B43FAE288ADC4E4C87057DED5737B30F8998222A76BB89417103E97E605F2E751
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/browser-wasm/nativeassets/net6.0/e_sqlite3.a
- SHA256 2f393de2faea07cedef20398d8c99c484cc089d3883dc03ba7db9a07cba2e83d
- MD5 fceb5950aa3225436e1ebba9cafb010c
- SHA1 6d51576345f05bd6b5fb2023a61e0c3f04285f78
- SHA512 322cfcee3b11872591420b83abb4e387cb02309113a0d59c28815c6ecb360173156028a9c178383fb7f9119857dbac98a9a224a96ef1c8248e5f58cd6770b045
- SSDEEP 12288:yTsyMBOtIUvnyiMBjKn8uprSkytkWxjiF8i/yjeXOHGax232x445MqUJVNBH++7M:F3OXdpoJi/ZFq2x9f2YmnIxf9uP
- TLSH T1D335084BF12A5569F440547E054C403AAFE7ACC3BDA110B1E78C2C973EAB94BB8E6735
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/browser/lib/net6.0/System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 aad8b9a018fc4c4601edc7c9169370eee26628c4d90f967c947ba9a81ec4b224
- MD5 0631d48880e7dddde2733c133ba486bb
- SHA1 08bdc5c585123fa5f3b4d670dc92cbaa7620725a
- SHA512 3ad9c20ef888dbd78ad99673e2242ed45006f204fe704076c7791a681849e4a5ddfa9e38862f26db8203262536e92f1757fdb6982a9fde1625c3825d89f08a41
- SSDEEP 1536:mxuAEP6SHdOP71+KXUk/lsQDzZfOmLeSo0df9Xzlu:eEP6SHdOItSlXfNeSdf9Xxu
- TLSH T1CD635C10F7C8CA6FCA5E1EB228B18070A7B4AF9B4166F6839894745617733CD660F1E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3c:71:e2:c8:2e:3d:f0:82:a6:c5:54:f6:94:9a:6c:f1:88:41:ee:47:ae:59:7f:5e:d9:be:3b:44:d1:3a:b1:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F87A-E374-D7B9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ae:aa:0b:5c:b3:34:a5:95:1a:00:01:00:00:01:ae
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
65998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net6.0-browser\System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/runtimes/linux-arm/native/libe_sqlite3.so
- SHA256 021184ff776bd09743ce93f5dc7d3e7c6adceef8dca523276bf104e6d8db8c14
- MD5 b8da0db6a447b5cce98207f6a250fb84
- SHA1 a77a1645022c8cf3511f344b73bf5fb6baeb123b
- SHA512 c873d28a2f88969c54bf91605a74938d8638bdfd01544518ac87482b068e226b80460fbb51eafa5e754a36aa181d359adb1c3f66eb26da71a36804c764f24cba
- SSDEEP 12288:DCTmEk26HuudR+GwrIXkM35yR2V0WLifRUwt3VXOLf:DzvdEUXNpXV0W+YLf
- TLSH T12C05BE85B8DEBF03E8CEA33D792201A241319C5DE7F3CB57E87895B62D53B910A646C1
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-arm64/native/libe_sqlite3.so
- SHA256 f1188e1afb7de7f4eeae90b9ab69e7938b3a1088ad2b7e5404dcf7db637c5fc6
- MD5 a888898b38395a15f2de200baa8b486f
- SHA1 b21b803b30e52527719cf08bc4487b546a7c328f
- SHA512 3cbfda5918c5279a24cf0044f8f73b13cc6b5fdad981bd6f18093f82f5af23b52cda6ea6142f7592cadcfb628c9bd08643e82dad3942fdab2863579aecfc3576
- SSDEEP 12288:SF+QcLJN994jXIqmfvesZgIXWL4Y0/w66NnR84IeiVWgKp0NQJd6L7bkgRjLJ:SgX940TZgiWL4YzA4IZrRjLJ
- TLSH T1B1357D5AFA0F7D43E389E27CDF898BB2313765A8C3A2C1A17520425CF9C36E9CA71551
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-armel/native/libe_sqlite3.so
- SHA256 5e83e93772badd5746764bbddd54b73bd479868c0e4283d51c334653d84a3ecd
- MD5 54f3f4183b81387f7928ed0bb9b67b32
- SHA1 6d187ae43d77793d37a54fb2d7741b2146386f0e
- SHA512 046057d5c1a36921f783a5438f37088fbb2094667d1f2b708f204bf57140281e0071e5ae679303f8cc0e0cf7677630ad98233e4764eeafe7fde93afa35846fee
- SSDEEP 24576:irlMF8VOBzxkDKdRWfcfiJ4FALgHnIW/vFLM:irlSBFkqixO/a
- TLSH T1F2351A95F8445F63DAC86B7AFB5D538C33630B78C2EA7105C83496343BEB95B0A3A641
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-mips64/native/libe_sqlite3.so
- SHA256 13c5cd3b52c1c2ab08238f538493b3cb048664d6d31aab254a77010efd3fe7b4
- MD5 d56886a2e2f081cdea1621bb18132764
- SHA1 ea5be9662753747692f14e4f4352c4094f30f429
- SHA512 b142991d6479e76003cdacdb32fa6ce993e6f44fb38baca82efecc242f8ce48d684737496ac6cb07515b29add3c5bd4a06cd53f36de0f90ba4e6ae3d32cd9c6e
- SSDEEP 24576:uZyT21Rr9F4KyS/y1GSCrNS02UXa/eLdp:uZrnFU1VT/mp
- TLSH T1AE654C929F0D5F56E4DECF388C3A807B457C2CD3A6918636B69C2C5D3E253A90F92D48
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-musl-arm/native/libe_sqlite3.so
- SHA256 35442e2a241a7fff8c7108f7a03f649ba9b609e2d7c53b12e51999a26b0af385
- MD5 87af85204a246154501382901f3f6812
- SHA1 54453e800e6aa9e7ad71f5efb43c1333f8d736f3
- SHA512 f7c049cd31a15927886a859f1b360a54fbe7c7023f1152a5ad35c93e1da62ec503d18f1346e1031e5eb712f98bd71ed225c21a49b6b0f5112d472cd0058bba27
- SSDEEP 12288:9BZRRPg1nbAEFjSCByozMRJAkce4XxzzrDgtgKhVKt4xY9cxhnmDlq7Hm8hN59CG:9B6bJ+Y9mW5ba9xFexwFtfO2WyZLs2
- TLSH T1F0352995F8508F22DAD06B7BFB5E469933230774C3EE7509D81856342FEB54B1A3A382
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-musl-arm64/native/libe_sqlite3.so
- SHA256 64fa07b024c900e2ea427f840bb4f440c87dd8d5254ab8c16d23582f273ee6cb
- MD5 cd4b9aab53400efe96abc32b339a866a
- SHA1 052c530f7bffa5907ede4ee8dcc28cdb44a668c5
- SHA512 61f646480c0a279c0c07128968f2ef54bf32a5f26c7f3bfdb664e936e6818341d7aa6e1f7ce49a23c4a6851e69772e628842bce71f51c9baeb892c172cd4773e
- SSDEEP 24576:5RLgOTVYfkCND/xEryJCunxnBp/vyyyLGLn:5RLgOTViXEwv/vyyyLm
- TLSH T1F2557D4CFA0FBC02F345E2BDCF5FCBA272373594C2A7806179544218E9976E4CAB2665
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-musl-x64/native/libe_sqlite3.so
- SHA256 81b128c7fbc38159a14e8fd54b60e052df4ed74933674215884b931853a61ba9
- MD5 6c9d6e34f1e932668237404d6eb6fc66
- SHA1 fb3a5da767db323a2fe1456285a5dc87ecf2e4f8
- SHA512 6b7e0621d87fbeb28b9976b66f2cc44688df1acc8dedf10679939ca2d84dec36a739c416f8ef0122d44f6205f6adedac3a9513408df3a463d1b5763a64787678
- SSDEEP 12288:RfxinemKFj3zyC8fU3Qxahkm7vlqJoMXHgBgy4YQtTWESWrLOi2:Rk4EfUgwG6UJoMXHg6yZc9LOt
- TLSH T128454B43FAE288ADC4E4C87057DED5737B30F8998222A76BB89417103E97E605F2E751
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-s390x/native/libe_sqlite3.so
- SHA256 7229c64291fe830bafa6809ecaaba8b10dfd1dcc2e695d430ce422a0d5b1251b
- MD5 cb751cc76f280849c0e2f718d6784e69
- SHA1 1879c9dc950a3a61963981600698a7545975fe9b
- SHA512 73d0ca546cbf0536a408e3e92bbe769f39ff671e5e18f93852999070f1b4af6596ef4b0d815c8f72087263ae10a2814ef01851b3143914d3ae80ada40b16cbe6
- SSDEEP 24576:Dmr6aMSxdOcPJTlKokrkdkBc3xVdx4MFwuCitietxv6LBF:DmjPEBc3HdGMFAitdtxv4F
- TLSH T124552A8FF595DBDAD8B06935E2B6EEF1825B38761CC47B0C895CEB3258B33044A19871
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-x64/native/libe_sqlite3.so
- SHA256 5e08018357f83571b9b3e65fc81ab72a48028db07acdf6c19a26575ef89b72c9
- MD5 30098e7faeb947bf5a5ae2fdb34e4461
- SHA1 01d92239b1c94c7b9b1c0ce7d87b569ea021737d
- SHA512 daabb8383004264aed1ecf1b600fefb096f83cbfab26cdb0d2db4c9757480fdfbeab28f1a58bd3364ae777fb08b900727394c4412fb2ad2d33559662def110c0
- SSDEEP 12288:dLgwcfgY+EuiBIj8KykQvSLiNTOjvdAyV+Qr1Y981vB+SLa7STWvuzLpL9iV:dY2cm8KCvSLiZE1b5e81vB+Ho1LpL9E
- TLSH T1CB455B43F7E348ADC8E4C870879ED5637A34F49A8232A66FB85817203E57E605F2E751
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/linux-x86/native/libe_sqlite3.so
- SHA256 3cee613754ddd5c1bd9734de3a665a7a7782b51375ea45ab4b5cfdfe183eede1
- MD5 68872bd5071077981504636c2353eaa8
- SHA1 34a64e393d392217ed0666d868aa85a834ff2abc
- SHA512 66a9494ec0b63814ed63634871be2438f825e9792f8088effa9ce22c46c9ec0aef9398e4ceea1515c187ac74c3c93f2e0bc0235fc1470abc4763853c05549bb0
- SSDEEP 24576:yyKYwnC//U8Kr5AOX4kEtRPmO9k3W9dAvfXBf5fAv8Oo6Oe4FA6ernS40xftq30o:yi//fwWOXxnakKefW8Oo6Oe46rnV0dta
- TLSH T18A556B85E7C395F1F6B217B60217A22B16319906C123F5E1FB4E3EA5BC733126C1B2A5
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/maccatalyst-arm64/native/libe_sqlite3.dylib
- SHA256 6d18fe8e484974ad9e675d888c3ba7f7d43dce590b9f86a5cf52f5d082b864ba
- MD5 b2597c8799a6d21e5b98db28c9c725fd
- SHA1 c9ad4fc5978a45e7cdc65fc359f42415a0ec7344
- SHA512 5ebfc6688cfb2582848ba08bf324acb7d99bc0518d860d61c3170bf2d23b11a061d507138ad49589c17fa39637687b1754782c2ba81c0f72cf1aa4a0073457b2
- SSDEEP 12288:ncycvI1LRqE8SAR4Rhs/iIfjNgpCHQ6xxsA1o857p9Wi/xfxV/iWIzzQ6JAL5jOf:cykAGKhP5gHxsx85hprBINK9jqZv1
- TLSH T1BE354A82AA1C6911F6C6F2BEED550FA4701BF5B48670CBE57826C16DECC0BD1A439372
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/maccatalyst-x64/native/libe_sqlite3.dylib
- SHA256 04aa2db68bd2295bddca02bf789340c53b14a83e932f1ee982a63be02a6784ab
- MD5 19dcf2a64a7b5d1b8c7705ac809653a5
- SHA1 e10c378f2a225870bbca405ceb1d3162712954ec
- SHA512 9a7dd704d9153f32de18d05330c969d551480a87e992922fb3a4c7fcd94e782be6e3612cce1f6ea0d34b85838dc7c1616900c585c3e84ae118b90cadd040dae9
- SSDEEP 24576:VznGqjY3uP3MWieLfSx9C6Ylz/kq0BJoNY8IsBvt:hGqc4xfSfDQzR0BuNYID
- TLSH T1F2357C3B9663A43CE587C070472F46626631F8636A256F7613C4F6313FA9C916B0E71E
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/osx-arm64/native/libe_sqlite3.dylib
- SHA256 53b2b628d8973677b3b1d416565555ddb659b1dc65da5268096970ae99d61f8b
- MD5 fb6d0058e0e849fa8715911b49790350
- SHA1 37f2fe055b65098094eccd2d3ae64dd78b96b50d
- SHA512 08b792d165f837bc98e4f001437e12484a9d959173ff36fa00b22986ef05c84575e6b95c555247be1bfd8b6c5d7a0eee101303bb3b87fbda3546041993d76191
- SSDEEP 12288:Q2/jGK64Hd5CJmFcUtrbwnftC5wPHxuBhBULe5cThvMEP7dEzzQ6J2Lm+md0ZvpH:l/yKVMPQEG6xuFULewJHxENA6+BZv5
- TLSH T161354A82AA1C6911F6C6F2BEED550FA4701BF5B48670CBE57826C16DECC0BD1A439372
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/osx-x64/native/libe_sqlite3.dylib
- SHA256 82a7b58ca087e22285ea251e45e30e52cb9f2abc379675101b36664ca18f7410
- MD5 de5735102e730c1518c029db3a0040a9
- SHA1 e52f17f08335955dfc0e3e9f2455373f3b43af80
- SHA512 47cfec9c7d03b858f5f3c86410d90f14c702350c6e236de340e864e626cb79cbdbc65cea7526a2f48d1a4df45a0db56b49eb89546074c6ec21ede9113f6d4414
- SSDEEP 24576:nUwtlKS2/eYoOLNatdoIQ+ZUunTLjt6Nh+FtBvv:J2uiNaj7/ZZTL4Nh+h
- TLSH T193357C3B9662A43CE587C070472F46626631F8636A256F7623C4F6313FA9C916B0E71F
- MD5 SHA1 SHA512 SSDEEP TLSH
net6.0-windows - Copy/net6.0-windows/runtimes/win-arm/native/e_sqlite3.dll
- IMPHASH dab35201755e491cbcf8aa679afb8970
- SHA256 00a460a259b67760d01f8ea0693953f8c97cd415aba3e9d824249b84a79a2339
- MD5 ec4064ce89a085d9df1fbfc80b3e9468
- SHA1 bea3ceacd786fca3d44a32197bc6c4c920da8627
- SHA512 df62bd8f272fa3acccba7b01f3a98ea179c63f3f073931506224c45c3720b65194f08ddaf58d28336bccc8d8ddbb2fdde030ccc951f4d22e5a7924460758d215
- SSDEEP 24576:KcRAMMEABDAqcRHYKrWsDzf3kKgQAS+qsnFUx:ozBQHJC0DUWynFO
- TLSH T10835BF81EFDDB760C48E22FDB517E5994FD9FD2A70B5E40D0E3198F93A1B8608A72604
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
6
Entry point
919249
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\arm\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
RaiseException
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
RtlUnwindEx
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
RtlLookupFunctionEntry
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleFileNameW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
938KB
Virtual Size
938KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=146, id=261, version=30795,
count=19, id=260, version=30795,
count=3, id=257, version=30795,
count=130, id=1, productName=Unmarked objects,
count=31, id=261, version=30034,
count=13, id=260, version=30034,
count=14, id=259, version=30034,
count=2, id=260, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=258, version=30146,
net6.0-windows - Copy/net6.0-windows/runtimes/win-arm64/native/e_sqlite3.dll
- SHA256 be83adc5e11a118f864283e3e1338946ff010346ff6b3b6e988398da532d6e5a
- MD5 3ed4928c9b5301069b5729bfe1c9c8f1
- SHA1 cc88541c6dd3e69091b409b3a2d09c2400a37ca3
- SHA512 f20954b47e8e1e1f42cde45e49624d04fa5f05e2bbddd52f6aadb5d1ecd39ba3823385700a8a9abcec82949f1f44959ad223642b3f99d94ec96959eda2a7c365
- SSDEEP 12288:6Lx74kb3hMAgysKF1MfRDEiJqnSMknjLhb6UUZGNakUiOfLOY3VxsJSwChlceMHR:ALF2ExSSxZGNakUiOqGVxnfKL+jMIC
- TLSH T158658D51FA0E6C52E7C7F3BCDF968F60701BB670802588A5A263414CF895FD4D6F62A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
net6.0-windows - Copy/net6.0-windows/runtimes/win-x64/native/e_sqlite3.dll
- IMPHASH 0fb20445d5d7bb0c6cc4c3e775f04999
- SHA256 957066af365f43e7b35b04dc9bcfcf4984c2dd7ed0640e7425f9c0ca014d836a
- MD5 6a67f4751ef45ae84549a109c0128efe
- SHA1 e5a264bb80be05c60095a74b3f9eea89cd2ca41d
- SHA512 219983369ea2023db4ba6530adfbf54f901d119191da31c25ff5f89ce76ecff21296921618cce171d7a3a4625a2bcf56788dc8bbd7b1c8a803977175057cb4d3
- SSDEEP 24576:H8vNkN4aHKDqpny6GU+NTpmn2icMI/R5gl9iYfZnt1Ko9ppdyi4+Nf:HyiqD6TcTpm2ijk+ZdKEJ
- TLSH T1A8757D47B3B9009CD46783788913971BD7F274052B64ABDB55A08A992F23FF61E7A330
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1286048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\x64\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
195KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=30795,
count=144, id=261, version=30795,
count=11, id=260, version=30795,
count=3, id=257, version=30795,
count=137, id=1, productName=Unmarked objects,
count=32, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=2, id=260, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=258, version=30146,
net6.0-windows - Copy/net6.0-windows/runtimes/win-x86/native/e_sqlite3.dll
- IMPHASH 158cc953fedf08e39792879c4273221a
- SHA256 a4d1e2c1d09e30484fe3597e650c66b594e0149f306d318dda012e01731dfda0
- MD5 14374f376c0818acfd0948b5313503d3
- SHA1 3ca4e36767c26d521661f303b492a32e7d9b6cc9
- SHA512 a03b227b100899166a9fbc72e133b442a9be2f05e163982deb5137fa3fa8ae5fa357f2ae0de123f74847edb417c41252204c6fac53ee0da73aa2975df0ec5583
- SSDEEP 24576:uPAyAHfLuE8eERL6fMhZpn3i+pjhe2+ymJpSjwgIB8XnEwg/hiNetmxhvj:uPAHf+1LP33pjh4CjwdB80RhFmxhr
- TLSH T1D3456B93F980C035F6D601B2C2FA5FF56E2D2259273904D781952CE499209E3B7BEB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1025104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\x86\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
CompareStringW
LCMapStringW
DecodePointer
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=259, version=30795,
count=147, id=261, version=30795,
count=21, id=260, version=30795,
count=3, id=257, version=30795,
count=129, id=1, productName=Unmarked objects,
count=31, id=261, version=30034,
count=15, id=260, version=30034,
count=23, id=259, version=30034,
count=2, id=260, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=258, version=30146,
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.Messages.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 68f73ab17fb7f4aff3d35ef6db0e9d5b0fa0151111cb3d03992e23bc29d6c40a
- MD5 7a44c33341844dbe9c6fa526af88e80a
- SHA1 0acabd100f61a2f8b3c5e68a270599ad54eb8a39
- SHA512 b81d63b345c193c6def17372311447d305ae167b2c4d1c2fdb0344d1e1ef5ff4f9d52599ffd862b2480825b308178737df7e5e48c31e712339f009e92b6eaf57
- SSDEEP 192:8qirVlWQX3WT56Os1HnhWgN7acWf53p13s5yX01k9z3Agrf8mNVf0nj:8BriQ+5kHRN76HcYR9zPrf8mrf0nj
- TLSH T18E05E5A58E388342CB4A1870BEA5FBF23F3943872541542606D9E9453C533B9AE255FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4a:1d:03:b2:ff:3e:20:38:df:93:54:25:9a:fb:cc:d8:b8:af:08:27:ac:12:d4:1a:15:54:8f:ca:d9:b6:11:d4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d2:21:24:31:4a:58:bf:2d:11:00:01:00:00:01:d2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog.Messages/Release/netstandard2.0/System.Diagnostics.EventLog.Messages.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
768KB
Virtual Size
768KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2af781190ab7c97d6b846d5027745d609ad227665695e8ecb3afd4cc9fce6537
- MD5 950cd24ea3a9efe5cce594a8b228afda
- SHA1 4609ac99ebd157e4c9bf7e276eea961c4bb3aa4f
- SHA512 2e8d0de29e62732458472b8fa5ac35c48416e6aa5034be309f688a095e6222a215ea3318fa02358707fbb98918983f2ab8996ac6703585485533ed4975ab7e3f
- SSDEEP 3072:eXCCOOz54xuTlmyRmIazZ11Ip5ZUWISFogVJoQyaH5MbDiz:Wz5dQ/cpJISF5c8abC
- TLSH T12EF36C2473EC0B0EE7FF2B34F5B060158776B5527A3AE72D498469ED09637C09A207A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1b:e5:4d:c3:29:f6:24:19:a8:33:2c:91:63:32:cc:da:ee:4a:93:6e:aa:24:6f:5d:d3:c0:62:da:c0:b7:9f:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b5:ad:1a:df:d7:85:70:6d:13:00:01:00:00:01:b5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
155102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog/Release/net6.0-windows/System.Diagnostics.EventLog.pdb
mscoree
_CorDllMain
Name
.text
Size
143KB
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 00b3599f4bb48e2599f953191d526da432c280d5ae5bc43392eb37352fde5cb2
- MD5 cd4bc0795ce5d04efc0a7644d8ff6159
- SHA1 182f5cde31b3e0944e6706213b67ecfa05a096ef
- SHA512 26f8caa5c4fb8ae15e090d7763e5bbff5e43d5547d1d3e4fc18e458a87efdb83b592ece117d4d206be2d937f015173b0b0614f6590943199709ea111896f84e5
- SSDEEP 6144:sd4VRwl1AdE1ms5vdpk4o4NlPHhbR/RYJ6lA6SEE6RyHaV8wsJwyaKwwwwjyakw9:sqVRwzAdE1p5vdpk4o4NlPHhbR/RYYl4
- TLSH T1E6543A213BFC85D5C5BE8EBA903010908FB1B3EF294EDB8D1591ACED25A1BC1941757B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:76:49:85:d8:b7:98:c4:bc:28:01:06:e6:05:45:89:3b:c8:62:aa:9b:9b:96:b1:d2:28:60:b2:5f:f7:d2:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F77F-E356-5BAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:aa:a5:31:9b:0b:cb:b2:08:0e:00:01:00:00:01:aa
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
290006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Management/Release/net6.0-windows/System.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
275KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net6.0-windows - Copy/net6.0-windows/runtimes/win/lib/net6.0/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7dfaced56145f3c6b80de25a09e0df6729149ef3c6a8f8f1b559e93b914fd2de
- MD5 aab8f9887fa45f30fe04472352e5afea
- SHA1 8244d05575d13e605b22538d7ae66d4805bc45c0
- SHA512 97ba85978b48324908427833374cb3c19de01f136d29a3adcac350a0555b30087513cd33bb7b18f0cb52cb3e8884e0acd1bd256704a8b96ea0c4ca8a0f8135ce
- SSDEEP 1536:rqz3g47M9YIB/nRPP6eyO0MIq6y7suFvTbqtN0p7pqHUzH:rq3M5ftPzTLIq6y7sgytNK7p0Uz
- TLSH T11D83180163F8076EEAFB1F747CB29521093ABE52AA35F72D418850AD19E3F848970777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a9:06:b5:da:4c:3a:b1:9f:34:a8:82:41:1c:c3:cb:b0:f7:8c:77:64:2a:59:01:cc:56:c7:b1:c5:3f:39:e8:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:E002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d9:9c:5c:05:92:b0:83:6b:3e:00:01:00:00:01:d9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 1, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
81026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ServiceProcess.ServiceController/Release/net6.0-windows/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ