UpdaterSetup[.]exe

resource
unpack001/$PLUGINSDIR/DotNetChecker.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsisdl.dll
unpack001/AdvancedWizard.dll
unpack001/DataGridViewGrouper.dll
unpack001/Epsilon.FileServer.dll
unpack001/Epsilon.Updater.Libs.dll
unpack001/FluentFTP.dll
unpack001/NLog.dll
unpack001/Owin.dll
unpack001/el-GR/Epsilon.Updater.Libs.resources.dll
unpack001/el-GR/Epsilon.Updater.Service.resources.dll
unpack001/el-GR/Epsilon.Updater.UI.resources.dll

UpdaterSetup.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 d2cb2b1b89dfeb565e0ae3ed1cba7d00186eadf3820f330cf03d0bb4231ac61a
MD5 6f095eab04a3f52fd97161ea4b8c4db7
SHA1 de9cbf1006e690b4eb2987d0a45a84b6bf3c700b
SHA512 7fec84c6358492beb809b9e907625157fe33d8758c348baa90f637c0251bd9934973b5a12ddf4cda73757ffeed0d596fc427e6a7571ac7a05712168049b30910
SSDEEP 786432:U0ay2tMT8mWDACjI421oykeL0Z40kB0kPel8Z6yiMtx:U0ctYHXCE4qLuZxkiK
TLSH
T10E673326F318C716C84354328F9BB65947947E3AED5588B5EB443B1EEE7A083823C64F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

7b:72:fb:a6:0d:08:3f:2a:3a:0b:ac:24:fd:fe:2c:76:6f:de:82:92:1b:0c:61:cb:31:5a:f8:64:47:0c:de:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Chains

Dec 23, 2024

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Serial Number

ce:22:55:cf:ac:38:da:06:e1:d9:a1:fd:e5:b7:f6:a1

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2022 - Apr 10, 2025

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/DotNetChecker.dll

IMPHASH 97f7d9845e06a5a728269d7279e09e03
SHA256 39c43d67f546fc898f7406d213b73dcb1bc30fc811ddfa3a02b6b50c29d11f91
MD5 f18364fa5084add86c6e73e457404f18
SHA1 6d87c4b9dbf78af88fddf0d4d5febe845c8e4e6a
SHA512 716892492390fe4314f3289286f733d07b8b84de1f5af0676b26e68c0be01808682d35ad2bb9e9491247b7bb5a0ea297a6850e26de9baf88621c789206107db3
SSDEEP 1536:AZBjgSXlkq8su+OudgGpGlmQSMqJS4HGsorJKQUDs0OsWPIcdGbk2HeJ:AYvo7PMqEuiKQGbk2HeJ
TLSH
T14D835B1076D0C1B5E57F1D3948A6D661076EB810EFE4CDEB279A03690E702C1BE3AE23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

13166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\sean.fleming\source\repos\NsisDotNetChecker\plugin\Release\DotNetChecker.pdb

kernel32

FreeLibrary LoadLibraryExW GetProcAddress CreateFileW DecodePointer LoadLibraryW GetSystemInfo SetErrorMode lstrcpynW GlobalAlloc WideCharToMultiByte MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetModuleFileNameA HeapFree HeapAlloc GetStringTypeW GetACP LCMapStringW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStdHandle GetFileType HeapSize HeapReAlloc SetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx CloseHandle WriteConsoleW RaiseException

user32

GetSystemMetrics wsprintfW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
MD5 ece25721125d55aa26cdfe019c871476
SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
TLSH
T1E1624D1137C558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 8f17c15b667f836320282c2d5697c628e49a7f2f7f0dfee05740199c02705da1
MD5 6c1a9c8e9c1d7b30b863bf39733ffeb8
SHA1 f342810c1fd65dbefe863b4d03eb70b0c09379ad
SHA512 00a6efe79a46b800820c93d40b70071421b88d7f93d0e47739cd91854bb22efa287ab91f22f11d5d5a8cc42d6c848ad976c6622a6abee625343fa93dd483fc62
SSDEEP 1536:f/BDNErakIW44yuCH07v18g+FusAdJgbYLzutlITe0X8G:RdS8gn7
TLSH
T10014047EBD00E86ED00FC839782DE571220A190AB72ADE5D18039B6DD7DB3D21ADCD65
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsisdl.dll

IMPHASH ed06d61f6957c32cd324837726a5a070
SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
MD5 ee68463fed225c5c98d800bdbd205598
SHA1 306364af624de3028e2078c4d8c234fa497bd723
SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
TLSH
T175622D45AA2084F1DBA2167034D73A7A67F18E752A2449C347F35D4EEE16307B33A986
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/vc_redist.x64.exe

IMPHASH 8e2588a9cf43886de3449dfff03137b6
SHA256 5eea714e1f22f1875c1cb7b1738b0c0b1f02aec5ecb95f0fdb1c5171c6cd93a3
MD5 27b141aacc2777a82bb3fa9f6e5e5c1c
SHA1 3155cb0f146b927fcc30647c1a904cd162548c8c
SHA512 7789eabb6dd4a159bb899d2e6d6df70addb3df239bda6f9ead8c1d2a2ac2062fce3a495814b48a3c2bec12f13800ad0703e2c61c35158b0912011b914f098011
SSDEEP 393216:xTPq5dCsKSR65cX7Eyd/qnejOX3L8T8KYfU3j:VP5iw56oyleejcL8T8fc3
TLSH
T131E63332E6644227C6D30973ED65E2246EBCA22D7F108476C784AE1DBDAC4D393B7217
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

6b:c4:15:a1:23:fa:49:fb:dc:05:86:1f:21:48:b0:49:3b:d5:1d:dc:c6:72:35:17:aa:75:ea:bc:63:fa:76:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 26, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

57:19:7f:e6:ec:8b:ea:59:58:33:9f:f6:88:06:04:41:78:e0:04:94

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 26, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:6f:65:2d:58:6d:07:11:46:28:00:00:00:00:00:6f

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 20, 2015 - Jun 20, 2016

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 4, 2015 - Sep 4, 2016

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 1, 2014 - Jan 1, 2016

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:54:4e:86:ab:83:93:72:d6:e9:00:00:00:00:00:54

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 20, 2015 - Jun 20, 2016

Minor OS version

1

Major OS version

5

Entry point

165012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

gdiplus

GdiplusShutdown GdiplusStartup GdipDeleteGraphics GdipFree GdipCloneImage GdipDisposeImage GdipGetImageWidth GdipGetImageHeight GdipCreateBitmapFromResource GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipAlloc

advapi32

QueryServiceConfigW CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteValueW RegQueryValueExW GetUserNameW InitiateSystemShutdownExW CreateWellKnownSid InitializeAcl SetEntriesInAclW DecryptFileW ChangeServiceConfigW ControlService CloseServiceHandle QueryServiceStatus OpenServiceW OpenSCManagerW RegQueryInfoKeyW RegSetValueExW SetEntriesInAclA SetSecurityDescriptorGroup RegOpenKeyExW GetTokenInformation CheckTokenMembership AllocateAndInitializeSid FreeSid LookupAccountNameW SetNamedSecurityInfoW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner

user32

GetMessageW PeekMessageW PostMessageW IsWindow PostQuitMessage GetWindowLongW SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage IsDialogMessageW MsgWaitForMultipleObjects WaitForInputIdle LoadCursorW BeginPaint EndPaint GetCursorPos MonitorFromPoint GetMonitorInfoW ReleaseDC MessageBoxW PostThreadMessageW RegisterClassW CreateWindowExW

oleaut32

VariantClear VariantInit SysAllocString SysFreeString

gdi32

GetDeviceCaps CreateDCW

shell32

ShellExecuteExW SHGetFolderPathW CommandLineToArgvW

ole32

CoTaskMemFree CoCreateInstance CoInitialize CoUninitialize CoInitializeEx StringFromGUID2 CoInitializeSecurity CLSIDFromProgID

kernel32

GetCurrentProcess InitializeCriticalSection TlsFree DeleteCriticalSection CloseHandle TlsGetValue Sleep GetLastError ReleaseMutex TlsSetValue TlsAlloc GetCurrentThreadId GetVersionExW GetModuleHandleW ReadFile SetFilePointerEx CreateFileW GetCurrentProcessId GetProcessId WriteFile ConnectNamedPipe SetNamedPipeHandleState lstrlenW CompareStringW LocalFree CreateNamedPipeW WaitForSingleObject OpenProcess lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW LeaveCriticalSection EnterCriticalSection FreeLibrary GetProcAddress VerifyVersionInfoW VerSetConditionMask GetComputerNameW GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW HeapAlloc GetSystemDefaultLangID GetUserDefaultLangID GetDateFormatW GetSystemTime InterlockedExchange LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId InterlockedIncrement InterlockedDecrement GetStringTypeW SetFileAttributesW FindClose FindNextFileW FindFirstFileW CreateProcessW SetCurrentDirectoryW GetCurrentDirectoryW GetExitCodeProcess SetThreadExecutionState CopyFileExW HeapSetInformation MapViewOfFile CreateFileMappingW CreateMutexW SetEndOfFile ResetEvent SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA GetSystemTimeAsFileTime VirtualFree VirtualAlloc DeleteFileW GetThreadLocale GetTimeZoneInformation TerminateProcess UnhandledExceptionFilter SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GlobalAlloc IsProcessorFeaturePresent GetTickCount QueryPerformanceCounter HeapCreate SetLastError EncodePointer GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW GlobalFree MoveFileExW CopyFileW GetFileSizeEx GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize HeapReAlloc LCMapStringW MultiByteToWideChar SetStdHandle WriteConsoleW FlushFileBuffers GetLocalTime UnmapViewOfFile IsDebuggerPresent DuplicateHandle HeapFree FormatMessageW GetTempFileNameW GetWindowsDirectoryW CompareStringA FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle DecodePointer ExitProcess SetUnhandledExceptionFilter GetStartupInfoW GetCommandLineW GetFullPathNameW CreateDirectoryW GetProcessHeap

cabinet

ord22 ord20 ord23

crypt32

CertGetCertificateContextProperty CryptHashPublicKeyInfo

msi

ord88 ord17 ord125 ord116 ord115 ord118 ord8 ord171 ord205 ord45 ord137 ord141 ord238 ord190 ord169 ord90 ord173 ord111 ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW InternetSetOptionW InternetOpenW HttpQueryInfoW InternetCrackUrlW InternetConnectW

wintrust

WinVerifyTrust WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/vc_redist.x86.exe

IMPHASH 8e2588a9cf43886de3449dfff03137b6
SHA256 fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14
MD5 1a15e6606bac9647e7ad3caa543377cf
SHA1 bfb74e498c44d3a103ca3aa2831763fb417134d1
SHA512 e8cb67fc8e0312da3cc98364b96dfa1a63150ab9de60069c4af60c1cf77d440b7dffe630b4784ba07ea9bf146bdbf6ad5282a900ffd6ab7d86433456a752b2fd
SSDEEP 393216:S1RPq5dCsKSR65cX7Eyd/qnejOFxP7OEnl4L/Vvc:yP5iw56oyleej2OEnlwc
TLSH
T189D63336A3648126C5E30573EE15E1206F687329BB1488FBD3447E1D3E69587A3BB34B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

ab:06:cb:ec:52:d7:a1:69:63:80:49:01:2e:f8:86:a1:5e:87:65:11:a6:e9:90:cd:1f:7b:f7:ad:25:14:e8:b4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 26, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

df:f2:e7:17:7c:35:2e:2a:10:e7:c1:35:9e:a2:41:d0:98:70:74:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 26, 2015

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:71:b3:2e:8a:6b:82:aa:1f:4e:00:00:00:00:00:71

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 20, 2015 - Jun 20, 2016

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 4, 2015 - Sep 4, 2016

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 1, 2014 - Jan 1, 2016

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:55:6e:9d:da:5a:a6:f3:1c:5b:00:00:00:00:00:55

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 20, 2015 - Jun 20, 2016

Minor OS version

1

Major OS version

5

Entry point

165012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

gdiplus

GdiplusShutdown GdiplusStartup GdipDeleteGraphics GdipFree GdipCloneImage GdipDisposeImage GdipGetImageWidth GdipGetImageHeight GdipCreateBitmapFromResource GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipAlloc

advapi32

QueryServiceConfigW CryptAcquireContextW CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegEnumValueW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteValueW RegQueryValueExW GetUserNameW InitiateSystemShutdownExW CreateWellKnownSid InitializeAcl SetEntriesInAclW DecryptFileW ChangeServiceConfigW ControlService CloseServiceHandle QueryServiceStatus OpenServiceW OpenSCManagerW RegQueryInfoKeyW RegSetValueExW SetEntriesInAclA SetSecurityDescriptorGroup RegOpenKeyExW GetTokenInformation CheckTokenMembership AllocateAndInitializeSid FreeSid LookupAccountNameW SetNamedSecurityInfoW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner

user32

GetMessageW PeekMessageW PostMessageW IsWindow PostQuitMessage GetWindowLongW SetWindowLongW DefWindowProcW UnregisterClassW DispatchMessageW TranslateMessage IsDialogMessageW MsgWaitForMultipleObjects WaitForInputIdle LoadCursorW BeginPaint EndPaint GetCursorPos MonitorFromPoint GetMonitorInfoW ReleaseDC MessageBoxW PostThreadMessageW RegisterClassW CreateWindowExW

oleaut32

VariantClear VariantInit SysAllocString SysFreeString

gdi32

GetDeviceCaps CreateDCW

shell32

ShellExecuteExW SHGetFolderPathW CommandLineToArgvW

ole32

CoTaskMemFree CoCreateInstance CoInitialize CoUninitialize CoInitializeEx StringFromGUID2 CoInitializeSecurity CLSIDFromProgID

kernel32

GetCurrentProcess InitializeCriticalSection TlsFree DeleteCriticalSection CloseHandle TlsGetValue Sleep GetLastError ReleaseMutex TlsSetValue TlsAlloc GetCurrentThreadId GetVersionExW GetModuleHandleW ReadFile SetFilePointerEx CreateFileW GetCurrentProcessId GetProcessId WriteFile ConnectNamedPipe SetNamedPipeHandleState lstrlenW CompareStringW LocalFree CreateNamedPipeW WaitForSingleObject OpenProcess lstrlenA RemoveDirectoryW GetFileAttributesW ExpandEnvironmentStringsW LeaveCriticalSection EnterCriticalSection FreeLibrary GetProcAddress VerifyVersionInfoW VerSetConditionMask GetComputerNameW GetTempPathW GetSystemDirectoryW GetSystemWow64DirectoryW GetVolumePathNameW HeapAlloc GetSystemDefaultLangID GetUserDefaultLangID GetDateFormatW GetSystemTime InterlockedExchange LoadLibraryW InterlockedCompareExchange GetExitCodeThread CreateThread SetEvent WaitForMultipleObjects CreateEventW ProcessIdToSessionId InterlockedIncrement InterlockedDecrement GetStringTypeW SetFileAttributesW FindClose FindNextFileW FindFirstFileW CreateProcessW SetCurrentDirectoryW GetCurrentDirectoryW GetExitCodeProcess SetThreadExecutionState CopyFileExW HeapSetInformation MapViewOfFile CreateFileMappingW CreateMutexW SetEndOfFile ResetEvent SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CreateFileA GetSystemTimeAsFileTime VirtualFree VirtualAlloc DeleteFileW GetThreadLocale GetTimeZoneInformation TerminateProcess UnhandledExceptionFilter SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GlobalAlloc IsProcessorFeaturePresent GetTickCount QueryPerformanceCounter HeapCreate SetLastError EncodePointer GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW GlobalFree MoveFileExW CopyFileW GetFileSizeEx GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode HeapSize HeapReAlloc LCMapStringW MultiByteToWideChar SetStdHandle WriteConsoleW FlushFileBuffers GetLocalTime UnmapViewOfFile IsDebuggerPresent DuplicateHandle HeapFree FormatMessageW GetTempFileNameW GetWindowsDirectoryW CompareStringA FreeEnvironmentStringsW GetModuleFileNameW GetStdHandle DecodePointer ExitProcess SetUnhandledExceptionFilter GetStartupInfoW GetCommandLineW GetFullPathNameW CreateDirectoryW GetProcessHeap

cabinet

ord22 ord20 ord23

crypt32

CertGetCertificateContextProperty CryptHashPublicKeyInfo

msi

ord88 ord17 ord125 ord116 ord115 ord118 ord8 ord171 ord205 ord45 ord137 ord141 ord238 ord190 ord169 ord90 ord173 ord111 ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle HttpAddRequestHeadersW HttpOpenRequestW InternetErrorDlg InternetReadFile HttpSendRequestW InternetSetOptionW InternetOpenW HttpQueryInfoW InternetCrackUrlW InternetConnectW

wintrust

WinVerifyTrust WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

229KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

AdvancedWizard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 28210f870f3ebdb877b1e58441c04bb48c8a1899da76931502c6e7d6f20b7197
MD5 2e75047db0e3bab50fd6c89bac700a8d
SHA1 fcf0d87631abe89b52e934cf3c02cff06ca152c4
SHA512 33c255c197d96d972b0a4febd4ba19f5532593a5e0754913403756fedbcf8cb95bd8fd8a8e0af846ccda8110f32f6f11016feff23c6f253708c5f010c686ea65
SSDEEP 384:jgWd2pLZsCTnFUYoP2iYgk7c+UMvoV6jqsC/2cXmA9C2T1izlzlzlzlzlA9qbOEs:vc9oIqsOm2TtMrMi6er18DPcnMBC7k
TLSH
T18B430911B778AB37CBAA1AF47C59525003B5D252BA51EBDD0C44A0DFE8C37138B636A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

50126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DataGridViewGrouper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5253dc41c0f58ba00294a2fe9a2501a5e6b104423da2d6f0e465f5f26e9aa775
MD5 2038a9f0643103a006c7aadc64c3d6cb
SHA1 68929981c62ee0c217afa7135ba7f4a3a7b6aa4b
SHA512 fe2e241247cab801a1b415c78ad1d8745ef3d53815527e46c9936d0aa3a8d19f983871abde63fc21baba0dcc937b199b7fdbebd71173d26eec0aa1bede312065
SSDEEP 3072:Ibs+hUu5sphOrvYxBIZmG0ngRK4I9vYF9hCjmcosGwOEw1dWrXsFqeL3HAVO7:GUYspvmcosGuw1ArXsFqeL3HAVO
TLSH
T173C31A2816E84B27C5AF0BBDF06145148371A262E683F77D5A88F1F81C77750DA923AF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

134366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Users\EpsilonNet\Downloads\DataGridViewGrouper\DataGridViewGrouper\obj\Debug\DataGridViewGrouper.pdb

Epsilon.FileServer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d788437fe76b716f5485aacfba82f18e99d5e56681270d90a9e4c1e0198e8cf4
MD5 9758732f072c838b885f593d70a2569c
SHA1 39773d8d7fb8264525a9469c92e208af89481aba
SHA512 192b6d1b3576e580848e36a6178b6587a5182ea2a57bfbc69be81457f94d3d633fac2a416a708714f0bfadebaef909a5819c52bda147a478d3f71d69f2ee45c2
SSDEEP 768:gdmvoTaQopC5B5f2hyayJGdetXLBoZ88hgeEVG/ncs5AgR:cmvomNC5BWyAOXqZ88hgYPNrR
TLSH
T18A13FA4977ECA211E1AE5BB944F22114437BB9075633E30E1ECE60AA1E337D58A10FE7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

47906

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

F:\drap\Poseidon\Dev\3rdParty\Epsilon.FileServer\Epsilon.FileServer\obj\Debug\Epsilon.FileServer.pdb

Epsilon.Updater.Install.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 976ab0de3eb1754230e6cb1fe49bddc55cdd48da0553745a1bc9ca2e959e32af
MD5 185924800e6d6c7e804562f19a4cea83
SHA1 efb53cb8366c2068d844c477433478584e823da2
SHA512 a60121ef1dfb4e480909ee4387d2b87daa367ed738bc3c2123e42aaff8949eb5f4ccacbf1f55cfd99cc0ed6399b95860126546df1ce684836a6c9c7e3071d2a4
SSDEEP 768:oeil5hX9Eh3SEBtYcFSVc6Kaw/Hz3iPmbL0o:oeilDahCExSVclaw/Hb7so
TLSH
T186D27C423AD01271D9EE4A747CA74722CE31B7A37925864B34EC454A5FB27C493236AF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b1:c6:37:e4:86:c8:f8:b8:33:84:a7:61:1b:82:74:b4:68:a6:c1:4d:72:26:a5:e2:c7:01:aa:c9:fb:5a:ff:de

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Chains

Dec 22, 2024

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Serial Number

ce:22:55:cf:ac:38:da:06:e1:d9:a1:fd:e5:b7:f6:a1

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2022 - Apr 10, 2025

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

18790

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Projects\Poseidon\pdev48\Apps\Epsilon.Updater\Epsilon.Updater.Install\Epsilon.Updater.Install\obj\Release\Epsilon.Updater.Install.pdb

Epsilon.Updater.Libs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fd0198644db645a44f4118d63edbdc4c2b60b2d2d9ad38c2a0a1bb2bc697e5a6
MD5 6945f66f7dc9ba8c2c7a12482e2af386
SHA1 f15d0fd0b517daf1d466794c2a29dfd433ed3f29
SHA512 f9497c8e9233dbad12b32513e331ff290d2424b1e0dfb3cfb9d5e2225c90feb8ec1e260e65aac28a532edef45ca6b4e5b332cf0d1a5115b4faf06c453efb81fc
SSDEEP 3072:mIYauGGiNiSPnMYEGV3Hz+rcOKnkHecsbMDfgtpKNK3zxr+K8rHh+Hqel9/2Rodg:mPBiNiRYvHSn47J6KjxrO4Ke4CLk/mK
TLSH
T19A548F3C63FC8B71C6AF1FB8D111901443F4D25BB152E35D8E8475DC19637A2EA22AAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

285730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Projects\Poseidon\pdev48\Apps\Epsilon.Updater\Epsilon.Updater.Libs\Epsilon.Updater.Libs\obj\Release\Epsilon.Updater.Libs.pdb

Epsilon.Updater.Service.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1692fbf9e26db5449ed4245e3d082c3a5511f5640b66335001eb350823b3743c
MD5 5f9795a3fbda5fff4eaa32df1c7c12b2
SHA1 bddd592199da83a488942de9e228ce03d6cec3c5
SHA512 75a2f77209f12be02c6a4fed07c481cef13a14dc2ba2107c82f8267ef4961fa5cea524eeb9b40c9a9042a2ff78da0b864e78419fb0248d6c79b701e471f1f335
SSDEEP 768:0R33oOuSgj6EtYcFSVc6KRw/H3G3iPmbL3M:0R3Jz+64SVclRw/H347vM
TLSH
T1CFD28D4337E052B1DEAA0AB8B4B507124B31F7A33C268A5A75DC015D1FDB789931366F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f0:77:5a:99:b9:35:97:dd:77:3b:27:e2:9b:47:1f:b4:c5:42:c4:ec:f0:24:ca:e5:65:16:39:17:03:8f:b2:ee

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Chains

Dec 22, 2024

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Serial Number

ce:22:55:cf:ac:38:da:06:e1:d9:a1:fd:e5:b7:f6:a1

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2022 - Apr 10, 2025

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

21490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Projects\Poseidon\pdev48\Apps\Epsilon.Updater\Epsilon.Updater.Service\Epsilon.Updater.Service\obj\Release\Epsilon.Updater.Service.pdb

Epsilon.Updater.Service.exe.config

SHA256 70d09b63a1585387a68b93d8bd378d6fd7dea2028c3de1b36a3b1464c8375433
MD5 194a34e80de061af435e2d4fe6101101
SHA1 63217384c7e5eac1f2da803f9b643c34db3d2e86
SHA512 f3260443777c3955f07bb067c659d5fdac2d4ca9103fbd6df37cd391dc97ea7541b1103a8849dfd6a241dcec80d314069cba20d4451a2ef1d73a915ade5ca1d6
TLSH
T1E5112B11B19C7FF58F424DE33A7B9078837F47722A5C064ED0B6A97B930635A2200276
MD5 SHA1 SHA512 TLSH

Epsilon.Updater.UI.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 12614e10ce4f2e366d78e84792132aa42aae3e820985ef8bc5128d0f409d3839
MD5 e869c77cb71f72fdd6273860f0112cc3
SHA1 15471fbb2595e0e0512d1ce868e93006b557bf47
SHA512 2f776f451c53b099f3a33bd834b236ef70a8abb3583997eb4947e4f1b5a60a85ca347fb6bb94b62dbc106b6e729f059dbd81fb03841f97e1450c5f0745712a67
SSDEEP 6144:BqaoojQqcC/hY/HFQ1FxwFvhXxukt+Mq9F0I6FQHq9F0I6FQoq9F0IkHXtqqKi7P:wiQV9QhwFaf30IU30Il30IvDi7P
TLSH
T1FB35A7213AAB414FD86A0770A835C1F443763E697A48DE4E94D43D4EFD722638B31AB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c0:b1:10:b9:71:b7:88:d8:6d:a1:89:a1:13:2c:bb:0b:e8:93:74:2d:9a:18:b6:31:bd:df:1e:cd:fd:d6:b0:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Chains

Dec 22, 2024

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Serial Number

ce:22:55:cf:ac:38:da:06:e1:d9:a1:fd:e5:b7:f6:a1

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2022 - Apr 10, 2025

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

888522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Projects\Poseidon\pdev48\Apps\Epsilon.Updater\Epsilon.Updater.UI\Epsilon.Updater.UI\obj\Release\Epsilon.Updater.UI.pdb

Epsilon.Updater.Uninstall.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c1f4e12e42db7234447c48c3d835959cc7ab0f71d10c35560b3eac611e9177fb
MD5 90c77e5aba09ce2ae4ff94ea629b0ed5
SHA1 1f6f02a233060d9ded5d787ca70acddbc40655d3
SHA512 714a13e346716cd75e3bfaeb2adf79c4513c70dd6452967ee3b9fa448f3f6bc79c4a756d7b11a3eda02c0a2d47137eabc7bff5b2169d322c904c8086edd43e2b
SSDEEP 768:t5l2tHhUGtYcFsBE6Kfw/HHA3iPmbLLxE:3sUasBElfw/HHu7TxE
TLSH
T13AB27D433B902321CADE4EB9B8D982635A71F3732D25469D38DC819FAF12381572227F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

09:13:5d:61:49:1f:41:73:62:ce:16:a4:36:31:53:27:e7:40:57:ee:ac:80:f4:2a:d9:16:86:c9:50:70:ca:b5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Chains

Dec 22, 2024

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=EPSILON NET S.A.,OU=IT,O=EPSILON NET S.A.,ST=Kentrikí Makedonía,C=GR

Serial Number

ce:22:55:cf:ac:38:da:06:e1:d9:a1:fd:e5:b7:f6:a1

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2022 - Apr 10, 2025

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

15594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Projects\Poseidon\pdev48\Apps\Epsilon.Updater\Epsilon.Updater.Uninstall\Epsilon.Updater.Uninstall\obj\Release\Epsilon.Updater.Uninstall.pdb

FluentFTP.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2671359f143600512d90a1540915ea3b5e85f5ec474927a2e18afab452f26838
MD5 29c96e7e7d4234e346d0560f7220c1b0
SHA1 5af43920ed0f828c647e03d2e6ad1fc17a8aba63
SHA512 b94ff41b16bd892c73c4e3a2534defa55f3831cbbf7d06bcb9431f1ace0013007efae2fa42db174b1d7cd36339cdd7ba9d39369fc788769c62d6c582a7a7a469
SSDEEP 12288:IRXRGR4RZRuRORxRORCRSRwRLRERLH9XiOxeLsXY1Em+pd2Rb1g4IWF8m74suMGj:5Sx
TLSH
T139843A5813ECAB06F2AF27F998749896D775B127D566F38E0E8CD8D92C13791C800B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

398422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

F:\drap\Poseidon\Dev\3rdParty\FluentFTP\FluentFTP\obj\Debug\net48\FluentFTP.pdb

FluentFTP.xml

SHA256 86581b48138ee46eaf8d0e1aeb17e4a31422b7b223a8e6be821dc057587cfe18
MD5 9d9c1001c867c0949417039ddf0543f1
SHA1 dad7bf43dffa01480b762a371dffd7441d381445
SHA512 ab4c71f3cbf39901b5f8d48957b0e885987930e1adff537d791ed67204a9951bf33d1023349613e55926891cfc34b9c3c10f8279c0c05dfcbac80e056d4d35d5
SSDEEP 6144:piTsHRzuzSzOzyzvseaxz2z8I6lfJkqkkbwAG9HCyCIj9Pc2QELDS7SZn5+dNbtm:buyOS0W89iDS7Bm
TLSH
T1258431257BC45E224C720312AE28F4C9FFA5483B1119181778CCEE536F7A9E6A3FB591
MD5 SHA1 SHA512 SSDEEP TLSH

Microsoft.AspNet.SignalR.Client.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ea9313389f7ef1b4b09ebc2bf5e450fbe1553c10bc995d0ff2e6b27ea8379c60
MD5 88624e1dc4868922a2491758e2fdc9ee
SHA1 fb9e90a93caf167b93218dceaf14341c6d67c9e2
SHA512 1315e9b8c023e66275b41ec9b95a9b80c41c11ac2a551beaf00d74e7b191209d91847b5f47d9686ab43571083c8a52e10242d418e4712a563e50c12eaeec89e8
SSDEEP 3072:v6oQorRh9BjkknkVzWcoDI3T9pBCAsI9zZ3:ioQsBjkkkRbo2CqX
TLSH
T1F9E37C1093BC46ABD7BF26B9E0787101A7B0E647B643F75A4944B8EC1C63B81CE117A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b3:ac:23:2e:b1:31:db:f9:e7:a1:22:a1:b4:cb:cf:63:63:da:50:aa:75:50:3b:17:d9:eb:dc:28:65:f9:cb:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 3, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

d1:1b:7b:06:bf:b1:2d:e5:71:aa:d8:db:49:b7:5e:d2:fd:19:44:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 3, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 12, 2018 - Jul 26, 2019

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:f6:38:0d:9a:86:d0:5c:a4:3b:00:00:00:00:00:f6

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2018 - Nov 23, 2019

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 12, 2018 - Jul 26, 2019

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ef:4c:f2:6a:da:cb:04:9d:2c:00:00:00:00:00:ef

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 24, 2018 - Jan 10, 2020

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

144458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.AspNet.SignalR.Client/Release/net45/Microsoft.AspNet.SignalR.Client.pdb

Microsoft.AspNet.SignalR.Client.xml

SHA256 c095d0f2de8c226606e9230cefc9e70a2d84ef1e10fa5160d1d51bd8a31a87c7
MD5 8ac977f71cfcbae46eafd5dcb363072d
SHA1 19f1cb044c665067a39203ba4b2a9388211bd473
SHA512 c35cb50f0f6ff9581c51bbc8bca536547c156dc10544e9360b065d43b9d182b1f13989e5cc4c3fb6451f7841ef1e933bdf9ac48b18701460a65e64e69c26afd5
SSDEEP 384:H+Mu+E9g/beKvqa9eKqlsnkj8pa64bsJuLi+vhrKtt9DS60o8M:+64F7+t/DS60op
TLSH
T1B8439A05B3C0B922583252238E90F5C8FF345E733257A915B98D6D670F3A9CB93AF991
MD5 SHA1 SHA512 SSDEEP TLSH

Microsoft.AspNet.SignalR.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d962706c2101ee8fdbabad5f61edf351cca7a12c3768f29a0649fc0866f44ee4
MD5 da6ce845c69d12251fd1db35abda99b1
SHA1 dfbd66668481bd544292ab59cab4b717c3cc34db
SHA512 4f8e6377e9b81ce964d58564eb483356aa4554057136a836c70d7856beae1d99f936eda13b07ecb35505ebae5f32ac3b2c71b3cf914c8e0f324e2720c144aa30
SSDEEP 6144:0h0+XlaIRa+nxYVJWAD2ai3am2WJ6hn72Qj+J9v73:0u+XlTRHgQAbi4iQIp3
TLSH
T14B747C22A3BC4B16E7EF0B75B820241946B6E987745EE74D699CB8FE1D53391CB00363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

0b:3f:c6:83:cc:1a:20:76:6a:47:d0:d9:d0:c4:80:dc:8f:8b:82:c0:7e:6b:e7:b2:e8:76:93:b0:65:64:ea:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 3, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

af:04:8e:a0:80:46:24:32:f8:90:24:9a:f1:00:eb:f1:34:ee:1a:59

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 3, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 12, 2018 - Jul 26, 2019

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:f7:dd:bf:34:e0:e4:d5:82:60:00:00:00:00:00:f7

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2018 - Nov 23, 2019

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 12, 2018 - Jul 26, 2019

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:f8:c2:5f:33:d0:b5:8f:15:04:00:00:00:00:00:f8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 24, 2018 - Jan 10, 2020

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

343174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.AspNet.SignalR.Core/Release/net45/Microsoft.AspNet.SignalR.Core.pdb

Microsoft.AspNet.SignalR.Core.xml

SHA256 3d222f61743ead41946f3489437244d19464d57e9ce6b076ab145b3b2dff966a
MD5 3802d473ece961902c32159c96b6842e
SHA1 0382b3c0a7998a6ec554168a1bdbb47d338e1029
SHA512 318ef6254325205695b55628b63555b135061ebc6c12a763f4e46aeee3137b6a40c5ada5aa201e64d35c8382449acbecbd595efb5671dba85f2201716eaf50a6
SSDEEP 768:aJAJY44qyWIqLfC2Wxcl05pmKYbHT1quXTEseRk5153w9qp384HC/EDU9h1Qeos9:aNhq/ccl/Ng9vEj3+yq
TLSH
T18A142341FBC4A911493351239E84B489FF244AB33646EA15BC8C5C670F77EDA93BFA81
MD5 SHA1 SHA512 SSDEEP TLSH

Microsoft.Owin.Cors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 82648f569e8f02d63c6d1cdef6635631b488d74a96bb5a0f837fb1714d335dc4
MD5 912766639e321588705a084c10c15c86
SHA1 0c88faa05de9b230e843dab09238d56dede65dc3
SHA512 5ace9e099d13f7fd6c9a1518473e653ef28b5df20d779bad5c0d1a00235a06ad1e16f77d15000644683d996fd08d37ff35ebdff62e2b7c3e35db022d2d3a5a11
SSDEEP 384:i76EAW1lF/9LpIm9EzFC5WNo/7VWwQHRN7beCTlrGl:aV/v/F8beC4l
TLSH
T12B926C5ACB689753DDA63C709161C6873E38E3D36811EB261CCDF2C92C93B85A61036E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

37:e3:97:3d:75:45:1c:91:6b:35:92:71:3a:12:ab:86:63:b7:c0:d7:31:72:26:d5:c8:f1:04:7c:a0:d2:81:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

16946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\688bd4410ef012d5\RuntimeRelease\src\Microsoft.Owin.Cors\obj\Release\Microsoft.Owin.Cors.pdb

Microsoft.Owin.Diagnostics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7b186973c21c4de73353f0b0cb1e960e8df3cf36b2d93683bb47d3bfd8b221e
MD5 2d931ac3c6baf048167091fe54cd4537
SHA1 39612a5bb4d56bca3a402a65c46dd3ab1485fe6c
SHA512 2fd34b470ce502627ac8f38809e1231c8d8b5e13be68fa18d4f26e20bcd886bd946b93c7706296e70764ba01f5c0cba855e03a2a456fb6dba5d88341b3e24062
SSDEEP 3072:LItpI+Qa92Pqn6/rKvXkZ5QwuKm1aXxxE98ho:LITI9q6DKvUZZXw
TLSH
T13EF3822126EB001DF3B36F745FF5B4AE4A3BB6632639D41D109D024A4BA3A81CD51B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

22:74:3e:d2:af:e8:20:8b:ff:49:b2:91:3d:31:37:08:44:6c:cc:41:4d:ff:ef:ae:0b:cb:3b:53:8e:35:b1:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

155666

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\688bd4410ef012d5\RuntimeRelease\src\Microsoft.Owin.Diagnostics\obj\Release\Microsoft.Owin.Diagnostics.pdb

Microsoft.Owin.Host.HttpListener.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4428746e9f0b1f93b6f0712448f0438429bec63a4a9ad7b5ebb3a551c7488579
MD5 d98b2fe3295f0f9b3f22cb3553e96858
SHA1 0838d45f584b1d65967437a553c05097a3fc53ea
SHA512 0be7b6593d5f0f899c64e127898352e689c3df487854df8ff2f23d54343e453574a887216f566d6f27d3624dd70d4a93765e98d05f72352ed129770c42c0b6d4
SSDEEP 1536:swASVZ7Aiop7/cjWQN5gjPDY0MPFSYnDYZwpPk8MVAQh77YG45mQhGo+cXE:c5iC/cgjPDY0MP4Y1Pk8Mqk7YGY1hF7E
TLSH
T18C832B12AFEC8617D7EF1B7DA070B19A6B31B2A27982E75F1948B1DC48437C0961137B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c2:a3:fa:72:38:20:75:ae:19:9c:49:29:18:bb:3e:3f:f1:94:d7:1d:8d:ca:71:db:50:28:2c:88:c6:56:e6:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

82302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\688bd4410ef012d5\RuntimeRelease\src\Microsoft.Owin.Host.HttpListener\obj\Release\Microsoft.Owin.Host.HttpListener.pdb

Microsoft.Owin.Host.HttpListener.xml

SHA256 b4b340b510d769a3e337f708c60e3ae2e38b77ed764d13d412a5ef10c1a0a78b
MD5 24c87931a9491a9c70d290e6264cfdb6
SHA1 bb3a955848614e2a0b397fd11b44159402e90a1b
SHA512 f3148497959d29c86761fa02262cc0e59a0bc0a0b3ec7003eda8b75e21ba26a4d9b8bd1cf576a4922d3582806ed8928c4256b2f625802eaa2dd35241e2d7a512
SSDEEP 192:GJ7TShm5pktDwsRjaZsmMB4wPlU6sPWrLJM64wP57v:87Ohm5pktksRjaZwPS6pJMNwP5j
TLSH
T124F19B1EE3C4AB31CAA38203BE14E798FE690B1B6022CD29749DD9D70F37AC553A7514
MD5 SHA1 SHA512 SSDEEP TLSH

Microsoft.Owin.Hosting.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d94203cd7afd9d6eeaea90d763c3967fcd92948e687fa890470aa46c17d6665a
MD5 ab252f9a3d6e30d1908e731f55322f70
SHA1 42801aab0cefbbc448bd858c3e8d52bae12d17de
SHA512 84b86934b1e4be23c6aa625b5a7459d29a4f0b144b961163f6cacf97f70045285a42fddaf100cf18206264ae0273c206a09df347a58de41207dfddab16613ef2
SSDEEP 768:gZPiGfTjK1n8aN9+xeu5HiKrDF5VaiIR5nQtO2a+fp3O2WY3qMkF1stzNp392KMA:gZPiGaJ849+JwQtO2VU2ZaRkB921IpRX
TLSH
T196536B5673EC8327DBEF5974A475A6410A3AEBA73001DB0D0EC8B0DE18637D84F6126B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c0:bc:65:40:50:06:1b:c6:db:33:0e:74:80:fc:0c:6c:55:a9:ef:99:db:62:4f:ac:80:05:d6:ef:6c:28:76:71

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:01:0a:52:c8:39:01:52:d1:70:4b:00:00:00:00:01:0a

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2019 - Jan 21, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

61998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\688bd4410ef012d5\RuntimeRelease\src\Microsoft.Owin.Hosting\obj\Release\Microsoft.Owin.Hosting.pdb

Microsoft.Owin.Hosting.xml

SHA256 42dc2fd7fddd45d677dd741b8a0704dc1e1d48e65a530e0c326033af32d04338
MD5 a6b6ad3aa53664febea63a2d5b2c3abe
SHA1 5835e9643974a4b6fa3acc1d0ddc5067ac00eec6
SHA512 00c9063715cc135d817945afde1a507c992cd6da51dcc2daf75582af12d1661c7621baff4fe10db9119c1893ec711c39e1c1592fb3f9c1c280ecf30507c29946
SSDEEP 1536:sg0Nr4i0F/TbkNABoDHSNFR/d4WHFyQ3dkq4bX9Znxp0cFquRgOtKZfR:00FbbwACHSNFR/d4WHFyQ3dkq4b1p0cc
TLSH
T16523BE1CF6C59E158E3201121E65F98CFF094E23501AA91A34DD3EA71FB79CB93BB864
MD5 SHA1 SHA512 SSDEEP TLSH

Microsoft.Owin.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 55ec8e9bc6df60d49cec68ea125bf5fb57d22d442edadc4aaabd81027b53a772
MD5 ef03f66b28e07981f9da2f6973891467
SHA1 d0fe4f3ab715ceedf66c0f5ae4f5a8c4dd78f7a2
SHA512 e5631fa6778b540ee029c102355575110fbfec66963eb173d236e173ec893325814abe6234b14487b7384192cde15112bc6730b9358142629de83c87f6b24813
SSDEEP 1536:3hQuODC2z7Afm/qMkGFb5NMBKoygK7KpW:3hQuwC2zEfm/yGFbwB03+k
TLSH
T15F336C02F39C9717DBDF26B4A770D1962676C6862811EF191E8AE49A1893FC0CB503F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c4:cd:d3:d5:1d:10:72:6f:99:ca:2b:5a:93:5b:c8:0f:fc:d8:de:92:74:f2:9c:b4:f4:0e:6a:31:20:ff:68:8d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

50250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\688bd4410ef012d5\RuntimeRelease\src\Microsoft.Owin.Security\obj\net45\Release\Microsoft.Owin.Security.pdb

Microsoft.Owin.Security.xml

SHA256 124e5f3ef30f3500c72d5eacec4ab5b31c40fdc26d3fa4fac952041cc1c16d89
MD5 f567525cc6d0a040c93a4ffe77d8b1d2
SHA1 e24829763719362fac0982dc7867b92e42960066
SHA512 9720ed6a9783ca5601140f71df1905d2157d677597ecbfda87671d38fb5646ee4d4b4f01e6968499219771205cd2e7b96ea482aac1120b612a0be3934cbef9ea
SSDEEP 384:9760ufiA6GyR0QQ3+RPfbLi31j6v2K6BQygwzJk5bEj3+/k4JMbCMy313y:EfA+FKKp4PgD
TLSH
T1E0D21F05F6C46E22CEB202224B55F4C8FF1A48275157581631CE6EA32F77EEAD3AF491
MD5 SHA1 SHA512 SSDEEP TLSH

Microsoft.Owin.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e9bd6e698ef9c3b901c1392713c9a70c079778132c6a9836f096f098faf9c418
MD5 de38880e8bc86bae2850bbca28f8e8a8
SHA1 55b0bc6a7fd84b42503bb7ffc20cbc4f22dd6b18
SHA512 6555ed917331956cb9597c2c19c074cb186c694640541381d600e32824c19ac3c01d55b4a98d6282b852173255b7ea9cd086752d80b8f0ee9af3388a7660ccdb
SSDEEP 1536:GGCB4vaUihp+JCnFed7ZjvD50mNcu8YmEsZqtSZsrth2aYwnOhIsLT7hOsJdhZab:Y4M+omNQYZhtSerth2COhIsH7hOsnhQb
TLSH
T13EA33955A3EC8626D7BF2B78F1B04422A775F6D77802EB0E4D89B4ED04137859A20377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f9:a0:21:6a:30:28:d3:0e:e8:08:25:68:96:84:4c:c4:66:e4:42:be:cb:f4:e3:63:e4:e2:6d:70:fd:ea:f5:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 12, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

97354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\688bd4410ef012d5\RuntimeRelease\src\Microsoft.Owin\obj\Release\Microsoft.Owin.pdb

Microsoft.Owin.xml

SHA256 fd22ef53a28ed57f46381b40edd515a3eaf7581ef3e4e609d6aaea548c2f978b
MD5 53b1a8c2ad4cc4fb860c8d1068edfb62
SHA1 03b97f3f8687e9351e49de643b793ecc966377d9
SHA512 d673ecea69e214c2e72c483cdec41e6b98ed2aac6bf6a98b58232503c569ca66827c4824c7fced2f71c0f0ecc2a2126859da109dcc3d7569f9e88603bc22d457
SSDEEP 3072:rD8i22DfecwOa3TRHID5Pq/5yiigP2VgAVWHiXQpiyRuMeMWaiYMAwIH/svoDX8:rD8i22DfecwOa3TRoD5Pq/5L2VgAVWH6
TLSH
T1BEF30E18FAC5AE128A3212128E59F9C8FF194D33601ADD2570CC6E932F76ED6C3BB455
MD5 SHA1 SHA512 SSDEEP TLSH

NLog.config

SHA256 168bac05fc94f3c4ce3f2998b1013a7b1719679325e4c668d4024c9f549fdb38
MD5 51bdf20a85c7c3c21cac42d9e9f26333
SHA1 8a1c8c8058072bde490c8f5ae360d447369a2ba3
SHA512 8984de37a0429b8cf63bb126787a6261c767a8f83e1bb7dc8369070a3a132b17a7a41674be0b418b469de13a2867e23be937fa7fadf0a6ad5381e41b56d917f9
TLSH
T11701D3C5B30E5E7189116163D97595F3520FE3B399FC18C3F1F4E277665241229D0305
MD5 SHA1 SHA512 TLSH

NLog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 151de9860bfc5c0f6ff3263a308abf44200ca9d5d5876ec08e9f4c6a8afa8e83
MD5 5ab6a621a1b53f0e607979f36dcdaf10
SHA1 6372da96386bddfa9d6a6d28c00c07975dba0f42
SHA512 8970e19c78cf1fd637271236bd155aee4e683462505753460d620845c6d1ff86ef26d4bbec76bb7f16ff1499a9608b72821c28885d080b9bead553ee30c20516
SSDEEP 24576:b1m1A9mdkN+9aQbCG99/J/gnjQ1boUo/yOvz6loEbcXEdJErKUTqnBrAscCwDvUR:b1m1A9mdkN+9aQ3dyWLnbc
TLSH
T185054A5233E8C62AD19F67B1E470152553F4FC1A3A62D78F5A01F59E3CB2B265C00BAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

877590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\nlog\src\NLog\obj\Release\net45\NLog.pdb

NLog.xml

SHA256 ddd2193d73732ed819adfd0409d7be97878fb8bd12d3e8fd44a8c36ca950ea0b
MD5 8da331f52934df19766b39278038bea1
SHA1 2ae29f10c6cb823c9f42fcda676798a001579b39
SHA512 a21aa8383a591f27b8b294f1c9921acb9aecd7b82297e66b9c92b012884af85c2e87425cf2af306d9dad4c015df31b7cbfb657f00680029743812eae0e54f35f
SSDEEP 6144:3bDXjIEDsv6ZrgFgzbWe13QixCx8Z1RIH/8TEKcQonqHhIrMBc+6z+beoX:ZHTGeZEKL
TLSH
T1EB751F25BBC05F5108361227AC54F4C4FE648977305EA86770CE3E972F7BC9292BBA91
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
MD5 6815034209687816d8cf401877ec8133
SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
TLSH
T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Chains

Nov 9, 2019

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Serial Number

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 25, 2018 - Oct 29, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

696798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Newtonsoft.Json.xml

SHA256 e3c9cb0cbf4b3be20b6030f3a4872edd81e042048d2d19732eac3eeb9779dc0b
MD5 ad1a946cdbe4fc83907cf558fb80a37f
SHA1 9b6ab559cccce89e989259e356c55be6e370f1db
SHA512 3bbbd262f3fc669bb0709963788ccca67e17fe28828ff72ca32f1d6d410a3cf76950d126feb39f204163eb5b43b07f54bc1dd4df7f4132933dbb61c054e9c1e0
SSDEEP 6144:XqqUmk/RikFaG0rH3jGHdl0/IBHNpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DUn
TLSH
T13EE4E02577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
MD5 SHA1 SHA512 SSDEEP TLSH

Owin.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7fedc19bf6c18a0f9629e90040d38dafd69b62ef46baadb3a079071a53ef5619
MD5 2f784aab0af82c96e1e978b46094932d
SHA1 a064258c415e3451e39725d4d970ec903b8dbc8a
SHA512 81a76ad96ac5c8ddce6b3671368de7c55d00b5c3960bafe8e8369fb9685f2b021a3a5db4da5c70c6bba4dbf424de32d4a5cfcd7a78d5f06f822a7edc9cf3d609
SSDEEP 48:69UJEqk2UFxI4b+EflUuJCoNKithQ40pNfaMUNZ43GAOF:880IfEf4aKUQ7aMU6GA
TLSH
T113919521B7D48337ECB78B76EDB3575227F4FE5099634BAE1950011A5C136388A72B31
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Users\lodejard\Projects\owin-hosting\src\main\Owin.Startup\obj\Release\Owin.pdb

el-GR/Epsilon.Updater.Libs.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 700606b421c9c2c356febb984b41491cd5821d1beff8322edf7d86ea11c62dac
MD5 f6aaf88875196fb572fd94a0ec259cd6
SHA1 b9d04f234591f737f49570ef195e80940b61894f
SHA512 d5378af1ef82f1c1aa15094a336fd3b0167b09f06b4bfde020da2f1d73eeac3e06d72f0f03ad0c91e30128ddc4adcf552cb9b772f515fef81a212cb43293c19c
SSDEEP 96:vV90Bn0LiSx1nKi5oiCGhibVWXyvFHU1SHltFe5wn6D+:vv0n01oiqiJQJQOLde5f
TLSH
T137E1248F73E42E6DF0A34B7248796224276ABD74EE15C7DC903986693CBC1609931F1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

el-GR/Epsilon.Updater.Service.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3c82192d73c7cd2be9bd2895923a42bb533c70e5b2cb2e47263dac13447b2b1
MD5 36df560d8fee363b909fe93481d7f83e
SHA1 cf98103f95360238ebcfa1be2f446b3504c55161
SHA512 95eba276358cdf2c1d301230a6d0348016a6b00960abe6d380e59143f4de9ce21a17ce520379624aba590acbf5e5f197ab6a80718498c51cf517084d237699d5
TLSH
T15081000763F407B6F9B30BB6AC7757411126BE24EE32C76D899522293CB23504971F32
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

el-GR/Epsilon.Updater.UI.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 67ec5ddb2b367233fa8c44cc7c5980fd2a6e724e29efc1482fb68b8022a32d93
MD5 f00c4671d0bec231a95a6ae9d7bc779a
SHA1 fcfd1defa6d233a7a7c52ca51c1c13e165d8a67c
SHA512 475f3d6f4ea291a96a2d78fee5832a1525d6e6daad9a9fa117323e29cc0e99c192788450251b7154ff8a43571ca0cbfac5e88de0f917ebf5222485d7c4589b94
SSDEEP 3072:kMj7JY+dkC1jfCa0UH16MecLDj2ZsLoFY+dkC1jfCa0UH16MecLDiQWTfp6Tfp68:D6q9F0I6FQ9q9F0I6FQeQyCGL
TLSH
T163A44E92395B848FE8580735E430C1F853352DA87A4CEE1EE1E43E5FF5711B25A32A6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

493182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

uninst.exe.nsis

SHA256 e5c9a3315d07ee51f6eb2791f0a4cb9ad2e7c24b92042862ef731f5338153ea1
MD5 a56cb1cea337dd08aa15a0fe052d0db1
SHA1 9d0919e886d6bcf98d9159b86e2846f433613bb5
SHA512 a3fb6e32c5a5d7eb02b037f8dd8972d8afc6d0dc6d39962e305c3ce0cf44f419d259aceaf3753365a2fb2e2c263c8b521bde06f1449fbfa3b7ec9c43ca7e5786
TLSH
T1493105A718FDE145F8C0380240409B9AB01B0C09565286F14B0A79DA7E65616F32A8E0
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer