cd5309bf30430f9c34c84f8dcc9f1ea1d6726c6e17ab6837b4508cc8dc9e0f24
- SHA256 cd5309bf30430f9c34c84f8dcc9f1ea1d6726c6e17ab6837b4508cc8dc9e0f24
Overview
overview
3Static
static
3SwiftList/...es.dll
windows10-2004-x64
1SwiftList/...es.dll
windows11-ltsc_2024-x64
1SwiftList/...ip.dll
windows10-2004-x64
1SwiftList/...ip.dll
windows11-ltsc_2024-x64
1SwiftList/...te.dll
windows10-2004-x64
1SwiftList/...te.dll
windows11-ltsc_2024-x64
1SwiftList/...v2.dll
windows10-2004-x64
1SwiftList/...v2.dll
windows11-ltsc_2024-x64
1SwiftList/...re.dll
windows10-2004-x64
1SwiftList/...re.dll
windows11-ltsc_2024-x64
1SwiftList/...e3.dll
windows10-2004-x64
1SwiftList/...e3.dll
windows11-ltsc_2024-x64
1SwiftList/...ta.dll
windows10-2004-x64
1SwiftList/...ta.dll
windows11-ltsc_2024-x64
1SwiftList/...e3.dll
windows10-2004-x64
1SwiftList/...e3.dll
windows11-ltsc_2024-x64
1SwiftList/...ns.dll
windows10-2004-x64
1SwiftList/...ns.dll
windows11-ltsc_2024-x64
1SwiftList/...es.dll
windows10-2004-x64
1SwiftList/...es.dll
windows11-ltsc_2024-x64
1SwiftList/...ns.dll
windows10-2004-x64
1SwiftList/...ns.dll
windows11-ltsc_2024-x64
1SwiftList/...ds.dll
windows10-2004-x64
1SwiftList/...ds.dll
windows11-ltsc_2024-x64
1SwiftList/...us.dll
windows10-2004-x64
1SwiftList/...us.dll
windows11-ltsc_2024-x64
1SwiftList/...rs.dll
windows10-2004-x64
1SwiftList/...rs.dll
windows11-ltsc_2024-x64
1SwiftList/...es.dll
windows10-2004-x64
1SwiftList/...es.dll
windows11-ltsc_2024-x64
1SwiftList/...er.dll
windows10-2004-x64
1SwiftList/...er.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
SwiftList/Plugins/SwiftList.Plugins.Bandizip.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
SwiftList/Plugins/SwiftList.Plugins.Bandizip.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
SwiftList/Plugins/SwiftList.Plugins.CuratedThemes.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
SwiftList/Plugins/SwiftList.Plugins.CuratedThemes.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
SwiftList/Plugins/SwiftList.Plugins.Files.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
SwiftList/Plugins/SwiftList.Plugins.Files.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target cd5309bf30430f9c34c84f8dcc9f1ea1d6726c6e17ab6837b4508cc8dc9e0f24
- Size 3.3MB
- Sample260802-cmcx2sbp2x
- SHA256 cd5309bf30430f9c34c84f8dcc9f1ea1d6726c6e17ab6837b4508cc8dc9e0f24
- MD5 402b34daba938340492fd3cbbf081a29
- SHA1 b75b736c79585a29c6001ffda9fc4bc3b49f7614
- SHA512 7eb87ce86ab6ccd7237452d92d83aeda92f36a2718995bfe714dbf4a74faf654d06190afdf8b9663e42505cc0741d044ccbe88048f6ce99a3ba40a293cab50fb
- SSDEEP 98304:5GdBfu8sl7Dtm/TqObo0C5TveSfgivT3OW3R8jch:5GdBfu8Mm5op5DeML3J3Sjw
- TLSH T1F3F533B08BA049BDE4D200F999286F0E01EC46924B9771658BB6D0D6DB7D5F8F123CED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 35 IoCs
Checks for missing Authenticode signature.
resource unpack001/SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.Bandizip.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CuratedThemes.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.Files.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.ProcessManager.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.QuickLookBridge.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.SystemSettings.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.TotalCommander.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.Translation.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.WPS.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.WebSearch.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.WinRAR.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.WindowSwitcher.dll unpack001/SwiftList/Plugins/SwiftList.Plugins.Xyplorer.dll unpack001/SwiftList/SwiftList.App.dll unpack001/SwiftList/SwiftList.App.exe unpack001/SwiftList/SwiftList.Core.dll unpack001/SwiftList/SwiftList.PluginSdk.dll unpack001/SwiftList/SwiftList.Service.dll unpack001/SwiftList/SwiftList.Service.exe unpack001/SwiftList/slf.dll unpack001/SwiftList/slf.exe
File Explorer
-
cd5309bf30430f9c34c84f8dcc9f1ea1d6726c6e17ab6837b4508cc8dc9e0f24.zip 3.3MB
-
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll.dll 38KB
-
SwiftList/Plugins/SwiftList.Plugins.Bandizip.dll.dll 20KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll.dll 173KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll.dll 5KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll.dll 50KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll.dll 36KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll.dll 39KB
-
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll.dll 1.8MB
-
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll.dll 545KB
-
SwiftList/Plugins/SwiftList.Plugins.CuratedThemes.dll.dll 119KB
-
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll.dll 32KB
-
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll.dll 46KB
-
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll.dll 38KB
-
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll.dll 25KB
-
SwiftList/Plugins/SwiftList.Plugins.Files.dll.dll 17KB
-
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll.dll 49KB
-
SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll.dll 18KB
-
SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll.dll 82KB
-
SwiftList/Plugins/SwiftList.Plugins.ProcessManager.dll.dll 23KB
-
SwiftList/Plugins/SwiftList.Plugins.QuickLookBridge.dll.dll 28KB
-
SwiftList/Plugins/SwiftList.Plugins.SystemSettings.dll.dll 15KB
-
SwiftList/Plugins/SwiftList.Plugins.TotalCommander.dll.dll 36KB
-
SwiftList/Plugins/SwiftList.Plugins.Translation.dll.dll 28KB
-
SwiftList/Plugins/SwiftList.Plugins.WPS.dll.dll 18KB
-
SwiftList/Plugins/SwiftList.Plugins.WebSearch.dll.dll 45KB
-
SwiftList/Plugins/SwiftList.Plugins.WinRAR.dll.dll 16KB
-
SwiftList/Plugins/SwiftList.Plugins.WindowSwitcher.dll.dll 32KB
-
SwiftList/Plugins/SwiftList.Plugins.Xyplorer.dll.dll 20KB
-
SwiftList/SwiftList.App.dll.exe 1.9MB
-
SwiftList/SwiftList.App.exe.exe 264KB
-
SwiftList/SwiftList.App.runtimeconfig.json553B
-
SwiftList/SwiftList.Core.dll.dll 599KB
-
SwiftList/SwiftList.PluginSdk.dll.dll 78KB
-
SwiftList/SwiftList.Service.deps.json2KB
-
SwiftList/SwiftList.Service.dll.exe 19KB
-
SwiftList/SwiftList.Service.exe.exe 158KB
-
SwiftList/SwiftList.Service.runtimeconfig.json553B
-
SwiftList/System.ServiceProcess.ServiceController.dll.dll 33KB
-
SwiftList/install-dotnet-runtime.bat.bat 2KB
-
SwiftList/portable-cleanup-registry.reg915B
-
SwiftList/portable-updater.bat.bat 1KB
-
SwiftList/runtimes/win/lib/net10.0/System.ServiceProcess.ServiceController.dll.dll 89KB
-
SwiftList/slf.dll.exe 26KB
-
SwiftList/slf.exe.exe 158KB
-
SwiftList/slf.runtimeconfig.json519B
SwiftList/Plugins/SwiftList.Plugins.AnimeThemes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fe1cbc07a2d44795e2dffcc0ffe40a5704e527aac94e09e80fb47eb6081b5da6
- MD5 1868c39e0312b7b4475449c859abf1f8
- SHA1 764551555d8bd787607b8a4f12367376e26250f6
- SHA512 945f391d51e206f5271fe4248d6073589214b3771c66bac5b1fbc1d686361a7648016e46a4d1c2730f115de87dca19e50d63f095cc5fc052979b40a5515a9a70
- SSDEEP 768:9vBeTEHjzKhfpjzKhyZ2XpAs5P9ah9NejzKhwqjuEQ:tAEjzKhRjzKhJjzKhw1
- TLSH T1C003B71960EC85B2CE2704F2E5711980313CBE7AAE114D66F9DF371D6CA25310EF6DAA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\AnimeThemes\obj\Release\net10.0-windows\SwiftList.Plugins.AnimeThemes.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.Bandizip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38f5b832f066926a5b5bc58b21375c3405203ae9cfaf21977b704f398788099c
- MD5 c17d8152c493b841ba552c6bb6d61128
- SHA1 f3b07fe047235b1e9cb9f852027aa07af025f539
- SHA512 2f2e81ecee97e85dc4c0472fff95b8c3bec8a70889aca868e70536c4f7e192bf735afbb28d1be1ce197dda07c54ccff8cc021a1ccc6f9604ca536df948aa4a4d
- SSDEEP 384:AWA4FeVkzVN6Xira+EUoaa6hP+MMyPVrjEkDAh0ckixNN2PvL:A74FPVN6yradManKckixz2PvL
- TLSH T1E3922BB86ACA8633CEEE4E7C159E19827331CF718B13AB4759AD20124D632D506737A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25914
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\Bandizip\obj\Release\net10.0-windows\SwiftList.Plugins.Bandizip.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7841927435be066c58a41d498fd067dcf98bf567985526472260ee092a18ab86
- MD5 19441ecf9f5d9471258082d520eac3f9
- SHA1 ac92d93ee120d1ae65f28c449bacb292f8d5f93b
- SHA512 a59552a30e0c494afab6b7f453ffbe6bf13a14b826f38ea6e24c778b0e4d208e0f8580a787564a0b02c06ae62bbb109fb5dca71f31ee0c72828879412b2751a6
- SSDEEP 3072:KPo1U7KHI/FRmHsGP8ErzqWLvVtly6NGBSilr7DSILSAQSIgdGSCrOa9m:+omLmHsGPpGWhrZN43IvSC6H
- TLSH T13F0449B4139C6543C7FFCE3270B96C820734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:b4:10:d3:b7:f2:a7:27:18:ae:1d:8a:41:60:11:a0:f3:bc:50:d6:01:89:9d:8c:9a:f6:a4:0b:2a:bc:b6:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 20, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1c:fa:cd:c5:9b:e8:2f:7e:c4:00:00:00:00:02:1c
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:10:ab:cd:e4:16:18:ef:39:b0:00:01:00:00:02:10
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
172314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/efcore/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net8.0/Microsoft.Data.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e83aed1d42d8ae806abeb02f0233a477275b82b5db92c92aa0c243255ab6a793
- MD5 82242113978f51d8fc2f3c5ea535fb36
- SHA1 0f48690939731cd4d21f52d91ed4315ec1cd2b40
- SHA512 369595a6af9d44617af4d59c0e0b06fd56c29745ee1671d1b6adb45eff8bf9b34ca640a8a42e3a109fc8645c59ee2c9851e11d8889b4929c958fb9144cce731b
- SSDEEP 48:6DxasBaMe4HQj6cIcU1N4zOuSOiWKVebobFZAA+/ynaImsDULsnOVjKU64:2aMe4wecI/Yz1SOx1oXAA+dIfDbA
- TLSH T1F6C19665E3D7522BF57B5FB3BCB206019370BA61EE33AF2F8D41424E5C225588A14772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.batteries.e_sqlite3.dllimport\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1e18b89ea319bffb633ea5698d8958cdaae3de8c5ac855353c7c6ad292795403
- MD5 97ce537a5473b3ccc4e873b1a2397147
- SHA1 689be53e8cb4d0e4f7f1a9b2dea05f8716055e45
- SHA512 7746d4095311a844469334078fca80d33ee4e4b717be04ae3af62a39f6e216e477025889a74ad1c4e89074e25fff18cfe224b9e4e18dba53b5861d5ed694523b
- SSDEEP 768:6XptZis0cewNbQoWf8kYYt8mFI37khpDFj4cfT1o2d9P58zGks4JnXT:6F0cew5Qbf8utJI3IzFUYrPiza4VT
- TLSH T15833A53587969A29F8CE0770A83E0185E675C51483F7DB1BAE94E4742E323C746A21FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\net8.0\SQLitePCLRaw.core.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a00aba80bec4fb6d5db8cb938c4e8290df7fe10b84d46bf57c90facfc2dc719a
- MD5 e302818c9fec95db40eee277aa27788d
- SHA1 18ddf5511774646ca1cfe0adf32dde265ea48d66
- SHA512 468c24e81b4184791da8b70aa6b5a148be4f59a134d4a60cf61abbe38a52f4977e5a03d76b752f11f22cfd782893c224243142b01736d48ad4629c865e2d8f40
- SSDEEP 768:YgIQUpZmdWSUpeWRKMFgx5HCJW0fm+aFI4PI/7jaxqJqPqiWvX:VI+UKAfm+aFtPI/7elq7P
- TLSH T191F265D6974F6A38E1AC07327C731E8992B8D391FB731717AA53D339ED626844E403A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net8.0-windows\SQLitePCLRaw.provider.e_sqlite3.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.BrowserData/SwiftList.Plugins.BrowserData.dll
- SHA256 5b81d58d14491f7a3903ff3f0622e63f025263a62fd403d6e51d984e8c9890de
- MD5 44d7d265d25ba664719d6e0d789afe23
- SHA1 fc8653cd7c3f84048bb5a0cb9ac3d8ecce5d77d5
- SHA512 a74593401b659d696394f4e8faf082995de0396d9a2110a5b8c5b834e405401a13ea58a6ec04cbf0d9d7e8c98e059ec8b27bbc5ed8980b73f026eaafc97abc5a
- SSDEEP 768:TZd+D5Qz4kBR4qxJH0EQubvgHrvB8uUNfA9Nt9R0:3+32R4qxt0EQubvgHrvb9Nt9R0
- TLSH T12103E70A27889707D07B7AF1AA7484553936DB4AC9B1CA0E397F300C0A53A5CBF55F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\BrowserData\obj\Release\net10.0-windows\win-x64\SwiftList.Plugins.BrowserData.pdb
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
SwiftList/Plugins/SwiftList.Plugins.BrowserData/e_sqlite3.dll
- IMPHASH 39e31e79b4856f4a13ac5ea2ba6af305
- SHA256 aabf85d7a8b416fb15203cb754fcfc9858c8f1dd3bbc7eab82335f6c362ba0d6
- MD5 c080941acc96d6127a60aea18ecaf2fd
- SHA1 13d200e90df0805ac2dba96af5487012fc9841e7
- SHA512 593ded3aea4204a5b887b5c0615dc3d9fd43eabbd728bd5a81350233d31c31942422b8ed092342edc26852d8f39e5076f80a9eeb033fb8781cbef7c557cfde39
- SSDEEP 49152:YIc/cOKjSrEUOFLlb+VAC013+sEoxKQwmJg:IcHXV+VAC013tkk
- TLSH T152958D47B3B9009CD8A7C2B8C5175B0BD7F174051764ABDB15A08A692F23FE61BBA334
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1455584
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\sqlite-builds\sqlite-builds\cb\bld\bin\e_sqlite3\win\v143\plain\x64\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
GetModuleHandleW
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_preupdate_blobwrite
sqlite3_preupdate_count
sqlite3_preupdate_depth
sqlite3_preupdate_hook
sqlite3_preupdate_new
sqlite3_preupdate_old
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_last_insert_rowid
sqlite3_setlk_timeout
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3changegroup_add
sqlite3changegroup_add_change
sqlite3changegroup_add_strm
sqlite3changegroup_delete
sqlite3changegroup_new
sqlite3changegroup_output
sqlite3changegroup_output_strm
sqlite3changegroup_schema
sqlite3changeset_apply
sqlite3changeset_apply_strm
sqlite3changeset_apply_v2
sqlite3changeset_apply_v2_strm
sqlite3changeset_concat
sqlite3changeset_concat_strm
sqlite3changeset_conflict
sqlite3changeset_finalize
sqlite3changeset_fk_conflicts
sqlite3changeset_invert
sqlite3changeset_invert_strm
sqlite3changeset_new
sqlite3changeset_next
sqlite3changeset_old
sqlite3changeset_op
sqlite3changeset_pk
sqlite3changeset_start
sqlite3changeset_start_strm
sqlite3changeset_start_v2
sqlite3changeset_start_v2_strm
sqlite3rebaser_configure
sqlite3rebaser_create
sqlite3rebaser_delete
sqlite3rebaser_rebase
sqlite3rebaser_rebase_strm
sqlite3session_attach
sqlite3session_changeset
sqlite3session_changeset_size
sqlite3session_changeset_strm
sqlite3session_config
sqlite3session_create
sqlite3session_delete
sqlite3session_diff
sqlite3session_enable
sqlite3session_indirect
sqlite3session_isempty
sqlite3session_memory_used
sqlite3session_object_config
sqlite3session_patchset
sqlite3session_patchset_strm
sqlite3session_table_filter
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
249KB
Virtual Size
249KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=147, id=261, version=33145,
count=46, id=260, version=33145,
count=21, id=259, version=33145,
count=3, id=257, version=33145,
count=140, id=1, productName=Unmarked objects,
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=33, id=261, version=35207,
count=2, id=260, version=35219,
count=1, id=256, version=35219,
count=1, id=255, version=35219,
count=1, id=151,
count=1, id=258, version=35219,
SwiftList/Plugins/SwiftList.Plugins.CoreExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0cd4f6d36892d405649f7ca665e140c0f8198c72fbbed37d462cd42025f896b
- MD5 c037e54e06bc72ae41ad18601f10f5b7
- SHA1 d4f8acd18cd5ac273fa364884f531e0c7c332618
- SHA512 5d031b37f40fa8a35941636431d252022d91ddb594e3e1089cb2ab7eb4a5ee54e5a47b4627ff9cb1c44e99ec7a58dea69ee0073fd8aac17668c408964f920f21
- SSDEEP 12288:wHlaCx9+xHhQtvWrWgqu7tkjjt2Yq3gMO7rMKcAQv:whyxHhQtvWrWgqQtq2l3i7wv
- TLSH T1F6C4392F66C405B3D4BB8771B6441A82B1644F9FD1365E0F78BF80091C93E6E98D2BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
563818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CoreExtensions\obj\Release\net10.0-windows\SwiftList.Plugins.CoreExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
543KB
Virtual Size
542KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.CuratedThemes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5cd0e266ac88946c921b74f623120f775adf470268974d2ccebf57a33a082f7f
- MD5 4870a1d60a82a2f3b1e0f5bfa71245fa
- SHA1 d104b8c0b8be1e5eb37fffc3fca09c5b7cb89cd6
- SHA512 b44cf740eb8e0eb14c327bb9fca38913e4d514bd5933140f088e7b320bf2d0ae4c70463c61e5bc01e11723abc4478ec6aa9d96c4c33caa09a2b586e30f610da6
- SSDEEP 1536:+GvBh0nhmTh0/h8h1Xh1iWQhPchfhpBhZhy+mhshypqhJP4992YhNNhYhXYhXhQr:bfsaAW7ZiupJnkmVJP4992apaqximE
- TLSH T19AC33EDED5E8D2F7DE334833EC61494055366E669D130A07FCEF2628BC9100A4D6AA6F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
127438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CuratedThemes\obj\Release\net10.0-windows\SwiftList.Plugins.CuratedThemes.pdb
mscoree
_CorDllMain
Name
.text
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.CustomActions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ffc3facfbb4219f706ec6c15ceba2d396e1003e134ec80fcff000a24484ee0d3
- MD5 3b063407ec1fc02967f4a04b4b472d6a
- SHA1 d0f27a8d09c9a0935f8c94484b6790b7106374ba
- SHA512 d380fc38cc4a4dea3b7a5eac4a0a4d3295561e2be7a64ab893c504d0e582017d5b786ceb88f5e63c84beaf88f0cb0fa23d12d221e07e0f6f28fb913532714a5a
- SSDEEP 384:Wv10tx9ZcUHIhrQyo0r5/q2m+gP+TfAb/xTg7MWelgvUjYfRYHrxCbMrdOG8cPPZ:W0ydtqifMbhWFYHNCVGZPUyv6z8fvPr
- TLSH T1C9E2C62B21B467B3C4768FF2E59A86AE3175CF9F6812CB0D6979B0084C679044853F7E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CustomActions\obj\Release\net10.0-windows\SwiftList.Plugins.CustomActions.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.CustomCommands.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f659041081d4b1daf77fc1980e7087bf749aa267758ae099e5759376ccddae3a
- MD5 b51582caf2ee6540b6106ee849248e9f
- SHA1 99cdf340f6ff29643a4cf5dd72eeff2c8367ea8c
- SHA512 358940f35b0fa7a83c5d489f299c97df7dc42bf5f0dfc918708fb86fc44b30e79dfd4266882d016b1236cd5e02a79372659a950f31307577811f0b95625482be
- SSDEEP 768:2P/tHBfkGcAKkbpS9sZAwe2GA/TmH5uK5ZCG0fZUpwjC:2HJBZKkbpPle2GA/kuKZnYZUpwjC
- TLSH T1FB23E72E11FC46B3C9B90FB16618C45E31B1CF5A7A20CA0F5DFDBA044886ED4D952BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\CustomCommands\obj\Release\net10.0-windows\SwiftList.Plugins.CustomCommands.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.DirectoryOpus.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aea8e932887118ebc0cbae084549e148e491db8c45a7bfc00ac083559734ff0
- MD5 a12eae8f193d3af57d0a5c9eea5f0437
- SHA1 915079a467334315a4e8327377fe4d21b5d5485f
- SHA512 573e966f93fb1fce21e2e5be959ce565df490a9eead6865a83a00d3f9eab2b6f1984374e00e04e9f335ccc28c266193336ca8dd374a2ce5bb67e4ae98db6cd83
- SSDEEP 384:RQTekUSVHLFRngy26kuaXM4bjf6I8Jxrh35IPK6P31pV9i7MRXEc0BfZUjfp52qK:xRSHL5kg4CJ75IP1v94BiHympPyBrt
- TLSH T10503290932D87332E8FB06785754598023BD8BC79216DF0E1EFE46845C33A68AB7257B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44354
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\DirectoryOpus\obj\Release\net10.0-windows\SwiftList.Plugins.DirectoryOpus.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.FileFilters.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 97d4178f7c8c6769b2f8858c7a2037bc623f8384cd56038c556333c55ddec858
- MD5 fd7b8c98ee5bcef5497da7e6f6fed723
- SHA1 d64e974d02db635574175f57e066106a1f0bc609
- SHA512 d66fcdde31b4dbdc986ccbb1bf64a5ac36e689a9686b34afc401f2429959ab8e2733d1a2a9f87b78934ea1206f3d5358f96a87834fd4e3089a8a7e89719564d1
- SSDEEP 384:wM2skvcjn5Gojm2Gx/C/nZbW8xBjoxylsV5egpYY4mqp9szHsf:nRlJjzG/GtMmo4mCszHa
- TLSH T1F0B2B58A1290954BE0B586B9F93895843831BF8B5831EE0F74B951098F8FD1DC537BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\FileFilters\obj\Release\net10.0-windows\SwiftList.Plugins.FileFilters.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.Files.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab3d7f4ed12d24e837c1c479a61a0bb29fb5aa280b3c3ed2178d731b9aed8222
- MD5 72fb1e966bb9f6d24d8f63e1d9703785
- SHA1 b625585fbbd5f0d1da95b9ab145b79455880479b
- SHA512 277647516216d8361fb6adefa8aa2ca08a3698f56e9269b533cb48f165f46542da93644fac7cd34a6c611f28f0131172d1c0e03220b8df3f33b0f86cf456d927
- SSDEEP 384:AzpzYw9qOl/lHl/dzzKGQ3/2xikdHSHwC4c:wFkOl/NzC+HSHqc
- TLSH T18182FB192380513AF47A67756AA9A6C13374DFCAD723DF1AA93EC0085C42C6C2973EF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\Files\obj\Release\net10.0-windows\SwiftList.Plugins.Files.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.FolderCascader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d335f37b32b911f8f2af03e95d773d90811e86f9d9ca775041095949a0f6fdbf
- MD5 eed9cc7978e9b438c009634128569313
- SHA1 41da67cf2514275f6a9ad11ec30a844d3d355545
- SHA512 ba2e3185646f3b044999f680fa8bb3b1707f13ecc4c5df48e51d46c321af2287bf13dcd7fb75685e8714b471e87828c64f941ed222197bbe951d3b4d23f16b61
- SSDEEP 768:x0d67Ppn9+hERr6MOsrVIGIEor4MvgEbSIo9tGj0SsIy:hPpn7rKGHXMvg9Iovu5sIy
- TLSH T19B33090B92F2012BD4F8C77B6B31BD063D38AF064631DE992DB9528C4DDA9D4C781B66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\FolderCascader\obj\Release\net10.0-windows\SwiftList.Plugins.FolderCascader.pdb
mscoree
_CorDllMain
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.OneCommander.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 174dc26094920abd337aa7dbefecbe5818eb852f6b9a34f8fbb604fbbf0dfbbf
- MD5 52cef6380ec6cc511b5170da5a32ad0d
- SHA1 850789b67ac53fe491145160c8dd87a65ce76d43
- SHA512 03e5634367d2cb589dc1b0882b8a98324bd00968472ef1213a48367edaa02c686f165bd55baf8d6f6b5e900618320840ebc2d1a01e92cee2150a3b161313d910
- SSDEEP 384:lcV56Yl/NVK/LDzluQk/lyDdgk2khbed1a9HhHcCl20/LQ0:WVzl/NV8zUsdgktbS1a9HhHcs2gLQ0
- TLSH T13C82D90526E80227C43A0BBF5A697FA133E4EFC6D6239E2B3A7D18245C07C582D2D771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\OneCommander\obj\Release\net10.0-windows\SwiftList.Plugins.OneCommander.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.PinyinAlias.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3bcb11fb121ef7ae6f2f5e0dd7072f297e414487143c4cb63a40cea3d92ab7c
- MD5 1c6f3f7e582100ad9b07487b3916f615
- SHA1 4330fb7b80185301c136385ff65ce8fa57f1bee5
- SHA512 6973a2b709d6973160459352bbba875c794a470f4bb6a402fb9946f6a63d374a76cb4c28cd7c11a575b6e9383132e4210d961eb54127cc262b0c7119198b8d68
- SSDEEP 1536:TCyLHlJH+N96yEq0cjueCAFBhsuotECp5/qiYOq0qa/w1V9/jRhzr:uyJJeNoyEq0cj+A3botECDqipq7b7fn
- TLSH T14A835B6531C0D173EEB827F229325DE41236FD989F8BA75B444272DC19F27969F321A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
89818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\PinyinAlias\obj\Release\net10.0-windows\SwiftList.Plugins.PinyinAlias.pdb
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.ProcessManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49442d007ede19502676b34ba0818ff0327a0474bb027f9d71f2b5da7c0d1b59
- MD5 8b969b0862a93444f7a2efedc4fb4499
- SHA1 f4ec052174867615e9afe11db028ec01fdfee447
- SHA512 1f62327f7a485e3777cc6a09d6d38c931a936ff0d3a29c0b0e147e837c48d07af414f87fa12bd1efff742e544928228a3187747c4518c0647334a0675490982d
- SSDEEP 384:HWF+Lh42iDRrQqVmL6R9MCZSijVubzgDvF9MFAEXyAAUS3wL7Yg8Bpui5cYc:W+Lh47DRrvV0z+y
- TLSH T139B2C80F2AEC0712C5FD8F7BB56614437AA48F07D9339F6515BE842B0E47B251A20EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\ProcessManager\obj\Release\net10.0-windows\SwiftList.Plugins.ProcessManager.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.QuickLookBridge.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0d63d3ec43ef9d85d3e7880d556eb2b526b7cc75aef7968c40a1d56e7530bbb1
- MD5 035c796539c34373964a586c16596f6b
- SHA1 13a78c9916a2243da57bb6463ca3d0010ec82fbb
- SHA512 494425694021b684f6b86753c606833a9b09947c1cc5d2e574a85574fd30ddf927498762d1fcbc2f39cf2adccdf9bb8032f0b8dcad825d185c9800fa26f81a79
- SSDEEP 384:bMt88DkyJpUnb+ICH5+CWlse3ASFhVCOrk1eexNy5EtkBq1uHKaM:5tyunb+Z+fNaW5EmKZ
- TLSH T170D2E96C37D8432DEAFF46F55ED44F412274AB4EF432AF29A47A001928639850AE1F79
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\QuickLookBridge\obj\Release\net10.0-windows\SwiftList.Plugins.QuickLookBridge.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.SystemSettings.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 baeafd87751edeb0067195b84a2301a802b6632f78ca82eba2139176568139c1
- MD5 a497475d2002ee209ac096353312baed
- SHA1 a3b0d14597c5f70dc2747f3bf987399c6e58cad9
- SHA512 5539862212121f6a2ff90dc6dcede80dbcf9babea82945ee047c6723c68da30188f61eb919e986685e1603b8edcdc8ba9e44cf2319591c2041197a366ab211b2
- SSDEEP 192:oeyDlGzNO37sSfjL9YmXjt/+hG7aFierz4f+s7BYgDscPe5ksR/D7tszj2Zgcsnb:olDcNO3PjLqwI+OnZO
- TLSH T1C262F8202795C12EC4BD0BF26655CFC178789F47AD32DE2A16ED5012DCA1CD467B3762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\SystemSettings\obj\Release\net10.0-windows\SwiftList.Plugins.SystemSettings.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.TotalCommander.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 53331f5d682af8d05c80c0437290915adb5a9e01d1e009276dbf7f2643f76da9
- MD5 fea173fbc047db8c397ba40b7000ff90
- SHA1 87fff9b77fa282a3e244655db0ecf593bc44698c
- SHA512 afc3d95485de03a4105609d6b925ac783518b0f0fada1e5d0d4e255302987a25742726ff6c497c9ca4a63977bbd29d1342d37831d35fa29e62940a9ef9d89218
- SSDEEP 384:9qTCMjNWEO0LLVFGHm2R3F9F6fS/e0M1S8lbSdi7MnSEcZ0Ujf1E6K2d+9sR7e6C:UzTOkzGxR3F9FLM49iE/m7e75Pj9
- TLSH T105F2291AA2EC5223C0B64BFD63D86D9633F1EB86D522DE571AFEA4000C53D646C2533B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\TotalCommander\obj\Release\net10.0-windows\SwiftList.Plugins.TotalCommander.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.Translation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff1b5cca095c702c21a61085da6894237db06ad4963f89e08f41101f7aa1561d
- MD5 e9939ba86bbcdeb5fe15da74b63abf1f
- SHA1 1a9a4489abd344715fb8cbf530abfd4418881ce7
- SHA512 2d801d563a928af96642a527b1cfc1d39189174685ad119597ce0ccefd56ca3e89e598e549663fdc6199b46cb5c50902a8799d34ff57a7071258c4db9e5a014f
- SSDEEP 384:N5lqltH1Hbix18p5WCi3mkWt5DVT9f97tEF/HijVIk1ryyg7c1epq3x6glN32XHe:5mlbiwp5VkW3jlP1myLFC7S
- TLSH T152D2E74A65A8CB12E8BE1773BBD458C17534EF5A8933DF0D78AD50068CD1E08076BBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\Translation\obj\Release\net10.0-windows\SwiftList.Plugins.Translation.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.WPS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 65c205e0b05a9baf58df52f67b89fb721e3210b4525ea3703749ed865e05c58b
- MD5 132d917246d8d0034e02ec3e77b80fc7
- SHA1 08f09dae55c0cf4bdd01d9fa9aa5064f3bdcfa56
- SHA512 8f8cd90adafff22a3ef7833853e0bc452fd2cff867923c85d2cc28478a902ccd9e5138345f674462b998da69873d4bc67939a060f905b6027e9a2be185701c18
- SSDEEP 384:xJncHBtvXXtIcsefnMjbXuwj70VAz+hpKMn/:3cHBtClMHrn/
- TLSH T115822A99A7881725CCFF433E55BA12C17630E711EE23EB4B51692105DD936C00A63BBD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\WPS\obj\Release\net10.0-windows\SwiftList.Plugins.WPS.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.WebSearch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6e6c520426f5bef50e59996b6044956ce9c731455e6566a1f462534bddc3ec58
- MD5 b2714f8c77d4b84c1d885d13e9f296d7
- SHA1 b1048c9f5ea1da33080633b4c9e6eb9e89603d2b
- SHA512 32052839d7ab57e24762708e43762e62fdf17a01c93a670201e0e7588f5a12677b73d32450b41a90037f394f7fc3f4de5508a3a2872010f2de564b61e1da3b71
- SSDEEP 768:H73UoPL2XPd0wxzewnRF2bQY69iKiS0tL2l:JcawxzeksMV9u2l
- TLSH T17923A12D15548B2BD07BCA709ADD84E3F6725A0BE5319F8E24EF16550C02E136D82FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\WebSearch\obj\Release\net10.0-windows\SwiftList.Plugins.WebSearch.pdb
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.WinRAR.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 293ac99a138f7595355038efc64132aa6b053b2ccc008d856a3c370020862c21
- MD5 ab293d282b00796e2dd145d84f6f2150
- SHA1 f1ce36650d59dc1846e670689fecb8266443d67b
- SHA512 0fdb6e7f4b9581d54eec31063b5dc7d3fe343c3383fa32a8dda983e2f56c806751c1f69e6740b63b65f4374bb15a68712404761464c89baa73deee970d37676f
- SSDEEP 384:U2Z1n6yWqNZ9LYD1MMrZPrjEeAPSHVW9Ia:U2PnlWqNTsrOS1KIa
- TLSH T14C7229406EE84333C8EA0B3819EF1AC2B2B2FF609B13DB975B7D51168C136D81572B65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21794
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\WinRAR\obj\Release\net10.0-windows\SwiftList.Plugins.WinRAR.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.WindowSwitcher.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8177b2a2fccd204afa3b9f127f486cae8a03d4d40eb9180a77bb26f5d9fca6b5
- MD5 f603ec04899fe32604018263ed55df84
- SHA1 bb6d3f752eafa1388ab18f72f3d302368405dc7c
- SHA512 5f65045df564151f182c22129cd716cd6cb9c2799afa88748c02f92989e969edf6738ddf70dab2a2edb151adf225c7ada81c95586300eab9c8720f6eb96e2d67
- SSDEEP 384:wsAqjoyFC4X3sl/I6j0l89KfhLRS+8LW+qAWtkFIX29ahOSQEijVTSHyvwsbzOHj:9AqoMMl/JjUzZmwL1OOGkwa
- TLSH T147E25C3352A84B32C0FC0F76785E7351B270DF39942AEB965ABF2015EC56B034A216F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\WindowSwitcher\obj\Release\net10.0-windows\SwiftList.Plugins.WindowSwitcher.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/Plugins/SwiftList.Plugins.Xyplorer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e903e6928fc3b2eb7450e917709db5390ecda70194b1e60c3725c08000c2ad94
- MD5 a5dfcbd423eca4a282a71c748965ac4c
- SHA1 8990bd53641e40dc83239c5b0cfae2771c95f8f5
- SHA512 249e8a3545131fa28f21933c1a44075a80cee989e5bccfdccc322ef59f4a274d032959063a527b002dc3c59c9a82ec1c5b03e83fa92f336ff01637521955234d
- SSDEEP 384:1mhqQuILzP7FFHzb7H7qaOZqZ+LRClAz8YxCQWVvpXgdeIq3N0UjnERTJwvMEZMc:KqQuIvTF5X7HNO18uznGVvpXgdeIq90K
- TLSH T16D92191826C4162DE87B07B9DEA92AC07674EF86CD32DFFBB63D03250C63D985521A71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26594
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Plugins\Xyplorer\obj\Release\net10.0-windows\SwiftList.Plugins.Xyplorer.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.App.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ad233c944e55e1bea5142b1d569b1f22c99b264ed40bd4b6dd8851090c02d91b
- MD5 23db45c1f74922ec6875d9579b1ee300
- SHA1 a5c62908f0408ba08579aa2284fd2d73cc72d386
- SHA512 1fa10d5f237aac6e3dd0d7e2074a904b0d979033e3f994ce88c3b5920c2226d7ea62f658a19731736d62244a35b04bcad297e2380d1696bfd03127f31726225c
- SSDEEP 49152:ZKBLImIOWX17XlFuiR0aXD5iGZr7zBO/RhHx6+TUPn8/:gBLIxBO5hHxPCn
- TLSH T15D95D01033B88229C47F4B30E0B5051DD6B4EA0617D6E78D579EA8EC6C917878E297FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1849202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\SwiftList\SwiftList\App\obj\Release\net10.0-windows\SwiftList.App.pdb
mscoree
_CorExeMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.App.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 127d20ef2b5293ce7d3fb49cbc8bc82d40a5cf2ae1e0abef84909482efd1eb77
- MD5 5c16df5c26e79a1d9a176115614bbb7f
- SHA1 b0ad76c8ff2a4d6466bac80c05e5d4f377049f19
- SHA512 b5056c403b25eea1fd2112efcbcea4cc8247275d353303b4666203a51941e7cd40535052a84d4c0c35de1a4c0bfdd5242f0b178285368498790984126456d889
- SSDEEP 6144:KRax7F1nQnhcUJG9ACSr7zzASMxKl1uE:KgRF15UGO7zz
- TLSH T1FA449E03A7A851FEE1B3D679C9A24940FB72785A8B71A7CF07504D7A0F667D09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
SwiftList/SwiftList.App.runtimeconfig.json
- SHA256 63c471eca563169c6278c43cacf9f48a1c52845dff9d6ebd8c83872fd91ce8fc
- MD5 8332bcef6fca48cedb40e113fb53c239
- SHA1 5eef3cbab81983c1ff5501f04e3f883202db6284
- SHA512 004892cf7fa81f8b4a033105433d44c42285a0722151f22f10c9dc74daa8c6e0c18cddd412db46a0fe9578ab75387bede67d53c2212ff4f21f37c9ed3e1d0685
- TLSH T1A1F0E26ACA106DBB08F933BAD52AC182EB30532B20041D52B5FC081C7F776B22211F95
- MD5 SHA1 SHA512 TLSH
SwiftList/SwiftList.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1b8436569307e3c7840ef7db7aad6002de1e19c471bbf2f18da78e6a0c99045
- MD5 bfe9bb893ebc665d2e158eb6448312c1
- SHA1 ea07516bd1b7d41c713500d592d75f8b41f13cec
- SHA512 db736c1c7b2bd6c4a87e55aa7ca20ed02025d41d699f8a2adafc16a271cc33ed30d4e487998786ce4e8452643c66948e0c8c31a146fd587e321a3a0316046178
- SSDEEP 6144:2ozg/QFHBJweJgg/qOYBtihw+56LlJvQ0uT9Cxt5jssOyCpiONT6AXNXC8bwnX8:2oE/m/zoTUCJwqZ5qDNuAXNbhM
- TLSH T1A9D4494373E48E3AD2AE8774E031051C87B2F646A55AF78F1D58E4B52C9F79A8D102E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
619578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\Core\obj\Release\net10.0-windows\SwiftList.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
597KB
Virtual Size
597KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
940B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.PluginSdk.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4fb40a0404986a3388bb9ba9052ea67addc88c58c1eedaea7c14c1e894855e25
- MD5 c95afa871512c3cbb9799dd74ed8d021
- SHA1 42a55a6535a85623a514fa0bcff3d23297ee478d
- SHA512 e7467f807e2b21091ac50cc30d2edfc40b57e7cd98791c2b42360a9577a98cb9dc9049765fe58973485489673f2df5f198daf3f1b574d6b207c4fc258e2852d3
- SSDEEP 1536:GoUAzsGUsxOmDwCipvlO9oNSfq0Gvy43bOOP7yJeXogQ6:PLpiCCT3bOOmeXoh6
- TLSH T11C735D1577EC8A2AC6EE473DF8758C194372E2493017EB5B9E4CB89D2C2335D86106F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
86166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SwiftList\SwiftList\PluginSdk\obj\Release\net10.0-windows\SwiftList.PluginSdk.pdb
mscoree
_CorDllMain
Name
.text
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.Service.deps.json
- SHA256 034db274edb3a914dcee08bd7e242f8d015247fc360067c54afe635214e49815
- MD5 7fda095227e6dcd265a4a0cbe10e953a
- SHA1 174953af5483eb23f06c94cdadb835346cbe730a
- SHA512 c04ddf3df4ab9f714129a2b4858f38c1a3b9eb45b038e794f24c04b67e46ac53f4dc2a346b54e75537832aaf63ebc7b4c92bccb3fd84b4b2c1ea0e7ffaa8ef9e
- TLSH T1B051A219C9944AB601F513F666674B82F632532B11082C4ABAFC945CEFB2DE92062F79
- MD5 SHA1 SHA512 TLSH
SwiftList/SwiftList.Service.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8df033dbc263b88884968b286dcb295a0222ee5a5a04d5226fd853b3eedf2e45
- MD5 82a3658fcf3a11cdf68494043cec6143
- SHA1 9788ddae9f30f4eae0ed523f8182b8df6e7e6075
- SHA512 a898246992d7d0c981f69c4de43902fa27f3bd5b649890b83596e75ec279e6334181f3e9a1c963c5d518af81717d9e72cac1d8e8fa8bd18e6765a6ef4ca74d9a
- SSDEEP 384:sn26SeFqqTSaiHOUAv6ZMmgI/vT07mla0Ab:szFXTStXvI7m80K
- TLSH T1E792B6056BEC4B35F1FE5FB4E8B202004E71B9079C31E79D1A88118E4D76F88ACB2766
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\SwiftList\SwiftList\Service\obj\Release\net10.0-windows\SwiftList.Service.pdb
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/SwiftList.Service.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 fb133da8765b95f910611f11aa552e5d59b588f4a5505fea202e2496a053ce37
- MD5 7804a591d51c56d020c33978b644d4bc
- SHA1 40b9939dbb0908d403d20a39ed14dda80ea8ba17
- SHA512 b8af1c09b268a9a41dbd5f701bd22a33f1a8e702f5c182d5702e350311a8a0a6156516c51c9b601eb3a77ecc1d832a5ecd75dd9cc244c25ed24c21de7728bfd1
- SSDEEP 3072:FVDxk88wN1xL+x7dL1Z9QnlP97E3swm9uzaAT5tX:TRax7F1nQnhcUJe
- TLSH T19DF33C13A6A811BEE1B3D678C9924941FB7278594B71A7CF07504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
SwiftList/SwiftList.Service.runtimeconfig.json
- SHA256 63c471eca563169c6278c43cacf9f48a1c52845dff9d6ebd8c83872fd91ce8fc
- MD5 8332bcef6fca48cedb40e113fb53c239
- SHA1 5eef3cbab81983c1ff5501f04e3f883202db6284
- SHA512 004892cf7fa81f8b4a033105433d44c42285a0722151f22f10c9dc74daa8c6e0c18cddd412db46a0fe9578ab75387bede67d53c2212ff4f21f37c9ed3e1d0685
- TLSH T1A1F0E26ACA106DBB08F933BAD52AC182EB30532B20041D52B5FC081C7F776B22211F95
- MD5 SHA1 SHA512 TLSH
SwiftList/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5e8279944f0ac14fe4feb4059d9972c20c29b0acda5839685aba2882c40f9188
- MD5 c1a6c843be46244492e8e25f706ffe17
- SHA1 9310470332602700173ede92201c548013b199d3
- SHA512 c49b71b13e0343c760e74e7aa4c32faac8df4d2e485d9d34f14465994dacadd36f2c67ec38ce12475953ddbc8beb5d10c18fc8ecc0b7255f57b3298e2d549165
- SSDEEP 768:9/0xiH87vHPEuwriB7/ANIp7MJ7N92D1NlmGbYO/9zk:98x3bHPEuw+Aap7MJ7N0aGb5zk
- TLSH T148F23A218BF847F9DDE70AB06DB2C3658E3276C22E05F60E25AD90095AE3FD493B1615
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:10:fe:f6:13:55:2d:28:b8:29:a3:29:85:99:b7:bc:bc:24:03:da:eb:25:7a:a1:e6:4d:1f:86:fd:46:e9:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:26:35:b4:3e:67:43:93:f6:1f:00:01:00:00:02:26
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
29458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.ServiceProcess.ServiceController/Release/net10.0/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/install-dotnet-runtime.bat
- SHA256 746d92039c0015ea979ed7acc3401d59e187d67cb69848b5d1298507ee927358
- MD5 fe6c25ac6eaa3e753d9a30b695a4e0bc
- SHA1 d93be279c9e8f640ae7c648249d14532f529bdd2
- SHA512 6f686832b2f4ad3eacc7fe9f48a7e51b81615a98be47e3427c7cd85334dbd55b10c8d0c0701330455687483eead8b77d689f24cf366c9092910f9dd2cec5e957
- TLSH T15851A41BA3C002B15D61633B626F62D7D30DC472179323F57CB191AA32290AB117B6D6
- MD5 SHA1 SHA512 TLSH
SwiftList/portable-cleanup-registry.reg
- SHA256 7d80909c7faf7a6bd92c442baa418b5c6f8f7c7e5317822ed9c8d066678c188e
- MD5 1aa68476be1a5c5fbd61cf67b38e9066
- SHA1 cea2779e4fe8ef8959ad7492a17dcece3f1d242e
- SHA512 8dcb90f856c2831506e73fcf8d9c0b5367ff308e85e3066cdaaea08182031da7e25a1b8d9511e77a2d9a8c77e2a90fe961aa45398a675e9e6fe9bb3a79d1b26b
- TLSH T1A6110053D741133767F04307018896E2CB995362E306129897AC5554F54E5E9077B8F9
- MD5 SHA1 SHA512 TLSH
SwiftList/portable-updater.bat
- SHA256 ec9eafb7cb4ecf1551c449782685f3c6b43da29a4b98605321a420a14b39c0fb
- MD5 c84cc89d80e260cd7ee46b57ab1ec859
- SHA1 bd2057b68e79066f578e9a2c266542002a22dfde
- SHA512 bffe531a7b0525b4d8b6b55c70124c14bd3d83b1603800a1578f7094fdf3c1311ffa93993e69e052453ccc2ad20d0e9da75c03600282ca9252515408066d4aa1
- TLSH T17131444B240E2B60066157E38FE23683E366D2175A1833C832D4D142379A9EF2BF21DF
- MD5 SHA1 SHA512 TLSH
SwiftList/runtimes/win/lib/net10.0/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 76d769f5a3c91c077ece4669c1f3db8ad5dad1bb87154f85e3e5533b8dc02595
- MD5 01051fdc1d9ca602725120e717506d72
- SHA1 f719f1759815135455535a0083b11cea29fa6ce2
- SHA512 184b88c348938a2c0b04e65dcc323988b748a956655e899613214dea2e78889a58054c2662e45b38753d4f73f324e6070bcacd9f83c91fd2c0b43dcd7092ab99
- SSDEEP 1536:LFHy6KWI+phJwYuk0wN7MvxG1TbUcWxiN08+871zpT:LwII+pPVf0wN7Mvx+uxiNm8715
- TLSH T1A993F70163FC076AEAFB1B787CB161520A367D46A935EB3D15C841AE0AF2B848934777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c3:2a:37:b7:79:82:1f:48:f4:04:25:0c:e4:cc:bd:66:39:83:f0:4f:10:53:b9:93:17:98:13:91:2d:ef:e2:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
86862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.ServiceProcess.ServiceController/Release/net10.0-windows/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/slf.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f344085482e3438015b9bd819a2d47f394a95a39c372103288b0bd4f537bc9f6
- MD5 323d6c74c8978146b075266d5dac3a9b
- SHA1 3499672efb2fe400763b30c7c31ed7aaabfee558
- SHA512 27013003fe502bbdb855c5dafa6045d93acea8cecfb0a4bfd44e6160dde35c34fcf0d0716cd61b7be097d5090dbdd3ef6482f19fc614184d03a0581e1490ff82
- SSDEEP 768:WigrkKhftt6XhmU+llDD6OxLLqHCj/eXd:WrP6XhF+lFpVw3
- TLSH T1E9C23A5177AC827BEA6F1BBDACA3074017B1E317A512F38D4C8E60EA1D57B5108513EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\SwiftList\SwiftList\Cli\obj\Release\net10.0-windows\slf.pdb
mscoree
_CorExeMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SwiftList/slf.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 f65f30291813c6d525d1c8a5361b9d1235bf7bdc1491dabf954d34951a2441a0
- MD5 5493cbcab87fe45a7f79363b3dcef55f
- SHA1 a383b87e83f3fd849be7afc34abd17ef12ac00bc
- SHA512 133fbbacb0b18dc4a70a6cb1ca6ff7894626cf00c4d52c27107c9daeb17ab6ab131c0d9b804eade955e97c46f428843c483360cb513d12b21545e2175cbc8814
- SSDEEP 3072:9VDxk88wN1xL+x7dL1Z9QnlP97E3swm9uzaAT5wk:bRax7F1nQnhcUJn
- TLSH T1DEF33C13A6A811BEE1B3D678C9924941FB7278594B71A7CF07504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35223,
count=1, id=258, version=35223,
SwiftList/slf.runtimeconfig.json
- SHA256 96bc2946dff8790400d652ec7f8de7bb043e954980d59470c112788b68a1fbd3
- MD5 7e4444b5a3e3cea574693f055f944011
- SHA1 04dfc98aa994475e2803241a1d55bb4277dbb8da
- SHA512 2fd5e7ffd3b12c6962d3ed7d7b99fa09b870173623701690cc0237529c32b008e219e48818a0bc4b6962fba2e3d161b8fa8ce38c03467329b0ddc9e58ef0ae8b
- TLSH T1BFF0276ACA106DB708B933BAD52AC182EB30532B10041D52B5FC081C6F776B21111F95
- MD5 SHA1 SHA512 TLSH