LightBulb.win-x64.zip
- SHA256 adb9af1cc598c2855a00bc76f1c6dc18193d39039400e4762d93a2958764f48d
Static task
static1
1 signatures
General
- Target LightBulb.win-x64.zip
- Size 47.4MB
- Sample260809-mlp64awdlb
- SHA256 adb9af1cc598c2855a00bc76f1c6dc18193d39039400e4762d93a2958764f48d
- MD5 8562d3d57e99ab46bc230ad71ba14ca3
- SHA1 8398d39d79c63c807f88441d752ae28b45066cea
- SHA512 d310d4dcca3f24655cae7de4e6351ef011103ee14c2394b34a0295611cd135b9f14ceeecb6600741f4209b3aec507c627c5fcd09eca39bcad6c6cfc05206cdc3
- SSDEEP 786432:i44d+KFRire3H2cYON3Kw//Q0Pv6drXlZ1Y9MVNeCoblZsGG3EvzYw+VZZMfDEmT:gwre3WcYO9De12MWCof7G3c0fTmcpV5K
- TLSH T1EDB733E4D8FD2F32F24C12622B86B4797BAECA994154382F5C5BC1F863B4A64F5039C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 79 IoCs
Checks for missing Authenticode signature.
resource unpack001/Avalonia.Base.dll unpack001/Avalonia.Controls.dll unpack001/Avalonia.Desktop.dll unpack001/Avalonia.Dialogs.dll unpack001/Avalonia.HarfBuzz.dll unpack001/Avalonia.Markup.Xaml.dll unpack001/Avalonia.Markup.dll unpack001/Avalonia.Metal.dll unpack001/Avalonia.MicroCom.dll unpack001/Avalonia.OpenGL.dll unpack001/Avalonia.Skia.dll unpack001/Avalonia.Vulkan.dll unpack001/Avalonia.Win32.Automation.dll unpack001/Avalonia.Win32.dll unpack001/Cogwheel.dll unpack001/CommunityToolkit.Mvvm.dll unpack001/DialogHost.Avalonia.dll unpack001/HarfBuzzSharp.dll unpack001/JsonExtensions.dll unpack001/LightBulb.Core.dll unpack001/LightBulb.PlatformInterop.dll unpack001/LightBulb.dll unpack001/LightBulb.exe unpack001/Markdig.dll unpack001/Material.Colors.dll unpack001/Material.Icons.Avalonia.dll unpack001/Material.Icons.dll unpack001/Material.Ripple.dll unpack001/Material.Styles.dll unpack001/MicroCom.Runtime.dll unpack001/Microsoft.Extensions.DependencyInjection.Abstractions.dll unpack001/Microsoft.Extensions.DependencyInjection.dll unpack001/Microsoft.Win32.Registry.dll unpack001/Onova.dll unpack001/SkiaSharp.dll unpack001/System.Collections.Concurrent.dll unpack001/System.Collections.Immutable.dll unpack001/System.Collections.NonGeneric.dll unpack001/System.Collections.Specialized.dll unpack001/System.Collections.dll unpack001/System.ComponentModel.Primitives.dll unpack001/System.ComponentModel.TypeConverter.dll unpack001/System.ComponentModel.dll unpack001/System.Console.dll unpack001/System.Diagnostics.DiagnosticSource.dll unpack001/System.Diagnostics.Process.dll unpack001/System.Diagnostics.StackTrace.dll unpack001/System.Diagnostics.TraceSource.dll unpack001/System.Formats.Asn1.dll unpack001/System.IO.Compression.Brotli.dll unpack001/System.IO.Compression.ZipFile.dll unpack001/System.IO.Compression.dll unpack001/System.IO.MemoryMappedFiles.dll unpack001/System.IO.Pipelines.dll unpack001/System.Linq.Expressions.dll unpack001/System.Linq.dll unpack001/System.Memory.dll unpack001/System.Net.Http.dll unpack001/System.Net.NameResolution.dll unpack001/System.Net.NetworkInformation.dll unpack001/System.Net.Primitives.dll unpack001/System.Net.Security.dll unpack001/System.Net.Sockets.dll unpack001/System.ObjectModel.dll unpack001/System.Private.CoreLib.dll unpack001/System.Private.Uri.dll unpack001/System.Reflection.Metadata.dll unpack001/System.Runtime.InteropServices.dll unpack001/System.Runtime.Numerics.dll unpack001/System.Security.AccessControl.dll unpack001/System.Security.Claims.dll unpack001/System.Security.Cryptography.dll unpack001/System.Security.Principal.Windows.dll unpack001/System.Text.Encodings.Web.dll unpack001/System.Text.Json.dll unpack001/System.Text.RegularExpressions.dll unpack001/System.Threading.Channels.dll unpack001/System.dll unpack001/av_libglesv2.dll
File Explorer
-
LightBulb.win-x64.zip.zip 47.4MB
-
Avalonia.Base.dll.dll 1.6MB
-
Avalonia.Controls.dll.dll 797KB
-
Avalonia.Desktop.dll.dll 14KB
-
Avalonia.Dialogs.dll.dll 185KB
-
Avalonia.HarfBuzz.dll.dll 21KB
-
Avalonia.Markup.Xaml.dll.dll 40KB
-
Avalonia.Markup.dll.dll 18KB
-
Avalonia.Metal.dll.dll 13KB
-
Avalonia.MicroCom.dll.dll 14KB
-
Avalonia.OpenGL.dll.dll 56KB
-
Avalonia.Skia.dll.dll 97KB
-
Avalonia.Vulkan.dll.dll 165KB
-
Avalonia.Win32.Automation.dll.dll 91KB
-
Avalonia.Win32.dll.dll 692KB
-
Cogwheel.dll.dll 23KB
-
CommunityToolkit.Mvvm.dll.dll 30KB
-
DialogHost.Avalonia.dll.dll 51KB
-
HarfBuzzSharp.dll.dll 31KB
-
JsonExtensions.dll.dll 16KB
-
LightBulb.Core.dll.dll 16KB
-
LightBulb.Core.pdb65KB
-
LightBulb.PlatformInterop.dll.dll 35KB
-
LightBulb.PlatformInterop.pdb71KB
-
LightBulb.deps.json24KB
-
LightBulb.dll.exe 989KB
-
LightBulb.exe.exe 357KB
-
LightBulb.runtimeconfig.json1KB
-
Markdig.dll.dll 208KB
-
Material.Colors.dll.dll 53KB
-
Material.Icons.Avalonia.dll.dll 27KB
-
Material.Icons.dll.dll 5.4MB
-
Material.Ripple.dll.dll 20KB
-
Material.Styles.dll.dll 2.6MB
-
MicroCom.Runtime.dll.dll 14KB
-
Microsoft.DiaSymReader.Native.amd64.dll.dll 2.1MB
-
Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 18KB
-
Microsoft.Extensions.DependencyInjection.dll.dll 71KB
-
Microsoft.Win32.Registry.dll.dll 29KB
-
Onova.dll.dll 175KB
-
SkiaSharp.dll.dll 129KB
-
System.Collections.Concurrent.dll.dll 42KB
-
System.Collections.Immutable.dll.dll 57KB
-
System.Collections.NonGeneric.dll.dll 20KB
-
System.Collections.Specialized.dll.dll 13KB
-
System.Collections.dll.dll 34KB
-
System.ComponentModel.Primitives.dll.dll 14KB
-
System.ComponentModel.TypeConverter.dll.dll 95KB
-
System.ComponentModel.dll.dll 5KB
-
System.Console.dll.dll 35KB
-
System.Diagnostics.DiagnosticSource.dll.dll 166KB
-
System.Diagnostics.Process.dll.dll 83KB
-
System.Diagnostics.StackTrace.dll.dll 9KB
-
System.Diagnostics.TraceSource.dll.dll 13KB
-
System.Formats.Asn1.dll.dll 37KB
-
System.IO.Compression.Brotli.dll.dll 26KB
-
System.IO.Compression.Native.dll.dll 915KB
-
System.IO.Compression.ZipFile.dll.dll 8KB
-
System.IO.Compression.dll.dll 124KB
-
System.IO.MemoryMappedFiles.dll.dll 25KB
-
System.IO.Pipelines.dll.dll 9KB
-
System.Linq.Expressions.dll.dll 430KB
-
System.Linq.dll.dll 88KB
-
System.Memory.dll.dll 23KB
-
System.Net.Http.dll.dll 505KB
-
System.Net.NameResolution.dll.dll 40KB
-
System.Net.NetworkInformation.dll.dll 31KB
-
System.Net.Primitives.dll.dll 68KB
-
System.Net.Security.dll.dll 207KB
-
System.Net.Sockets.dll.dll 102KB
-
System.ObjectModel.dll.dll 19KB
-
System.Private.CoreLib.dll.dll 3.0MB
-
System.Private.Uri.dll.dll 81KB
-
System.Reflection.Metadata.dll.dll 108KB
-
System.Runtime.InteropServices.dll.dll 19KB
-
System.Runtime.Numerics.dll.dll 83KB
-
System.Security.AccessControl.dll.dll 12KB
-
System.Security.Claims.dll.dll 13KB
-
System.Security.Cryptography.dll.dll 205KB
-
System.Security.Principal.Windows.dll.dll 49KB
-
System.Text.Encodings.Web.dll.dll 32KB
-
System.Text.Json.dll.dll 296KB
-
System.Text.RegularExpressions.dll.dll 334KB
-
System.Threading.Channels.dll.dll 28KB
-
System.dll.dll 5KB
-
av_libglesv2.dll.dll 5.2MB
-
clretwrc.dll.dll 310KB
-
clrgc.dll.dll 656KB
-
clrgcexp.dll.dll 691KB
-
clrjit.dll.dll 2.0MB
-
coreclr.dll.dll 4.4MB
-
createdump.exe.exe 69KB
-
hostfxr.dll.dll 370KB
-
hostpolicy.dll.dll 369KB
-
libHarfBuzzSharp.dll.dll 1.7MB
-
libHarfBuzzSharp.pdb19.9MB
-
libSkiaSharp.dll.dll 11.1MB
-
libSkiaSharp.pdb80.1MB
-
mscordaccore.dll.dll 1.3MB
-
mscordaccore_amd64_amd64_10.0.826.23019.dll.dll 1.3MB
-
mscordbi.dll.dll 1.2MB
-
mscorrc.dll.dll 130KB
-
msquic.dll.dll 512KB
Avalonia.Base.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 48f3d3b1eb1e563d2f440a3182ad144af713ca82e2857dd50c202777b752a0a7
- MD5 46610b8c38a384a71551b502158c3dc7
- SHA1 8fc0e1d1d52b8091636fa86c01c01dc04f651462
- SHA512 322c59a09a5cbc356ed014b64293d823d5f3dd8ad9909afa8ffc3b252c6db9c3ae8c52c60ff7424f2d7bf108ffa189785924b22fab045d051e05bf7ab4d236d5
- SSDEEP 24576:bmjtDpnpLZKkqISCkGOJVWoTBelgbvulSSe:qjtDpn9ZKkTJ80uy
- TLSH T1BA75261A73EA4F33C56F0B7AA0720C1113BED9516362D78F5A656AB82D437B10F807E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1646014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d117ce203215eb64cea5696cfd33320b2229ce4cc6721b19b8610107839b75a9
- MD5 29ec9c763d70ed87cc98e1d87ffe9e8c
- SHA1 50cdde330234107818d46746fbc7057f007361e7
- SHA512 6e5cb0b285b9aa65afee0626004a1c2d807896f5f333e74282ae37f3046fa7b277de4bde6e5e483c840267516212af0d1353aa054460a1d39b8b9e2cd4c26a61
- SSDEEP 12288:a+IKq+D1SRmhYAnc0TUuJl5C+JoD/Z3+5LuUduJNkhz:uYhFOaoDB3mldQNkhz
- TLSH T11A057C5A73E98F37DE9F8377E0310A188BB0E99252E2E75F664876F81D933504C442A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
821294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
794KB
Virtual Size
794KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Desktop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 815a3b2bf884e8a926222c4667f644e4060f6a80aad506253a60b71deed0e850
- MD5 0cd7d7692e9c4167b62384b0f8e7ce48
- SHA1 bb38278d0631283cc4a4a30b2fe1eb5ce969f8a9
- SHA512 93b10bcfcf36e74629ad19b39a03cf5c752e2d4268bcee27a093262bfd4d51977cc68fcff32589115666bb6090bfdd3d203ba304ea0e43572a8c25f22f6be17a
- SSDEEP 96:ctAO9B8ZpQzcM2zqUWIz/PJ/yJ/UnyHeqnyHeczqnyHeDnyHednyHe8nyHe2Bnyx:uAqM3hzbWILAgY6DMZPGlGarTPgxK
- TLSH T1E25297D493041263ECD28B33B5FFF996617BB692ADE287556230734AC826B300F62F15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Dialogs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95cef9a56c242e35a188c0cb22c160b052790c7425b2865bc12d1b4b03b21012
- MD5 85e76ca76609665837bd14e397f9bbb6
- SHA1 d0cfc1dbe8e2f4bbe616a0ed13e1bf8aec4beaeb
- SHA512 b3ef5976033573fb7f66ddfcdfe78f5c2b4e653dceb36218a37a1ab030f44b2462e89aeb269429af0d2b7008c3357a907e0808e6da4eb4d03ad0ea3518c4cad3
- SSDEEP 3072:cXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPt3/yzBuNOIOU7og2FniYP:+qXpSIE6Ey/SmWUMxFn
- TLSH T10E04F601D241AA3DCAD2E2747C7DB3BE0975F429FD9A652330D5AB3259C4910ED28BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
195294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
183KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.HarfBuzz.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7bfa0ff0f9788f5960de819225c39bee030a62be7284ef7b6a461a9d77b24306
- MD5 7c83d7f033b339a7ef6133d91d0d877f
- SHA1 c7589ce4787c5129c5f0baad7959b529187361f5
- SHA512 0c6b676bf1465dac116e5bf1553317ef1263ae7ee9bb2dd75dba75beabf7385020f2f122cc95b001a3a9e6453c66bdb9282188dd25c9135fa2fe8195b74153a1
- SSDEEP 384:rYgGTMIbnDzTQLevUjnSxxKrbkPGYZ827t:szMIbPTaesjSx+bkPGYZ827t
- TLSH T123A2F7D483185262E9DA8A32B5FEB4961576B6C37DE2DB815A30738DC827B300F52F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Markup.Xaml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0aa368a58709191852919f578afdf91faede22266ad138ae4dfec3e6cbb799c7
- MD5 bf92728c291952534e3273d73d213d09
- SHA1 979ec78655d62e67c9613f9861f76d0f60a9f97d
- SHA512 a70f9320f9d555febb8b9d91d33c0b4f675a2adb6764f379bfa1f536d016b3787605fb17f25b429e91b6f54f8dcaa9ae42a266723f978fb860db1e30b4f09786
- SSDEEP 768:D7HXR7JY9VKg96Bx2uEpNAtD7UBXYZ8M8KPJ76:Z7Je4c6Bx2uoXYA
- TLSH T1AA0328A593154332DAEE8772F4FEB8450336B69369E1DB0A5B6032D98093F304F91B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Markup.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ffec2f607c2d61a6963cb9140bc18178e38a002265227d4a4d1d30ba440d3325
- MD5 1737f7edd2018fc57475e3cb9bf49620
- SHA1 7ba73a158e7e244711052d58bf6d1a35a405036d
- SHA512 aa5f20fadffbe3eaac7fee84f77f8cac9044dc52e29df8958229b53ff9025e7519ec748b1f735ef4b76bc2c2561b40ea4dfb0eea6327ceff90da98be8d149213
- SSDEEP 192:FWEDemSRgDaRBNWvgtqNI3AgY6DMZPGlGTGCgGoGpGDG+GCGCGagMpErxs:FWXXwY0gtxYZ8K2ZMgPvJ7e
- TLSH T1198294E493051223EDD28B33B5EEF8922277B6D25DF59B92663073858827B344F92F05
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Metal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d1ecbdacb4f39d4fda2587b6f84fdccf84029e38a966b63dfa342bec9eb58f09
- MD5 1f98c67445f2b6ba29428d63a7bc30c7
- SHA1 dbfca4c791f36603ef8fe118d935d9bca8025161
- SHA512 79383df965b25af2337d4b84e846edf0c4c20328e0b5a7b078c881b705bacb60f557584af633a99d9641fb5f09ed16aef030bb89e4e7bca5410633dfc17415c9
- SSDEEP 192:m7kosu65Nl9Ny2gWAgY6DMZPGlGa0Ja9zxP:i21YZ871
- TLSH T16852A7D493102263ECD28A3379EEF9956177B6C2EEE28B556230334AC817B300F55F25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.MicroCom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 746111b2ba3fa4955c4a861017ec762b0a40e242e9d4b0bcaca0fbb820012788
- MD5 8faf286c49a118bf9630e745d1ae12a2
- SHA1 8f6c34cee17e913f99f67df44afb1657fd83f34d
- SHA512 f78daa07fbc9f9bf69e332b48788f1d9ddcc83cd4e32c3e7c46c85a2911c1f4a01d264ae3b4da30742c4018dec1031765a6d0b4b3142f2bf117e3f48255e8f5c
- SSDEEP 192:+E137dZNG/rkaqChwAAgY6DMZPGlGaSMbUxF:+E13RGj/qCLYZ87O
- TLSH T1A362A5D493041163EDD28A3375EEF9D6117BB682EDE28B55A230734AD827B300F66F19
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.OpenGL.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad73d5dd3fad0f307fec64c6ff599b1d6ec75ed4b71e0fe534e691c52318fa99
- MD5 b878b121501d75dd209ee2a19708988d
- SHA1 eb664b3ed8d39e96240c6233af686333a88cf031
- SHA512 cf2f805d141b9c3dde7bac56f80f79558ac7d92cfae9c69d590a94c4a7620030dbb277655ceb3d1799620573d427fcaebda1b78e662e891aa5e62202956c8fa3
- SSDEEP 1536:BGTpTpT+0Y1HXLhHry1QXfHGXWve9zigcjo1yRPls6xhGYm:QTpTpTCVXpNHGXWveBc+y4Ym
- TLSH T1A643E801B3EF4222FE628BBEE4B876895376B5D171D7FA5D464061694CB3B10CB12B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Skia.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a0828e385d68fd9f53804a1d9511c4e13c3a83a68597ff1b1c2f0fea682f51a2
- MD5 da3e8a9c7fddecbc01972ace9d9e1121
- SHA1 cef427b0bf060b657ca1d3732e60813a2936c8e9
- SHA512 605024b9eb4fb1bba027651ef0d562a702ca838b869d4b1ceeb90528ee5b94488329a74e421110e1a8357b1bf51c8234b9c8fa9399d9c201ca3af2129a7ec12d
- SSDEEP 1536:GBuXIwl0rA1rCPvZQvcBtPESQ4cf8F32kCc1oYs20V6y5vrf73lZYh:GBuXr81C0dVCc1oK0VXvrDzYh
- TLSH T169A36C541A5C9E6FE65F467FA0F938400B70B653A5E3EF464D8478BE08A37A00E453E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
105550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Vulkan.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0fb12e4982d0336126f0d01b94f4f6ab7d1d51e75505ec17d282066c86b082d5
- MD5 fed9f16fd8844bb22b84f46063c4c670
- SHA1 90f07b482775eaadf0e0618500b5d1eb0539a726
- SHA512 bc23210cf66f2adb51cb4391f1a84b399b01fb5a4bf10dd9bc3e050aeb327baffb2bc88ebfcc1ba00a34f24c918416f3354fae78f7da605d4b9fd721f37ed244
- SSDEEP 1536:yTkSxIGJyd5VtJ+Fg3bFo0qBffbZoC63BktAS1H1JASFQY7oPJwpAZi+++ws0Xj3:ygtGIvrJ+e3b+6CwCQY7oPMswXjl1YO
- TLSH T1DBF3F651757DB663D93A0BB934B720154250B887B3B6BAE6C8C7C2CE8CE12641B3D673
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
174926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
163KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Win32.Automation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 366be1d7bed186dd2f16a3903d56632c2d505153b68c85b0e2c349016d63947a
- MD5 ed4154890e7b2995d9621f1e9fc37b47
- SHA1 68db4fe3bce8063e21720d9889264ceeca7fbf8d
- SHA512 c75e2f18b44e5628aec128034eae1003459054103c3f08d2bf1918454acefe0d54649821ca515d4dd8862e9a18643fcf91d2e47ae742900187ca958e3750bddc
- SSDEEP 1536:xWCGfXN7V0tZoh/99zfFvEjjvY4QhWPziXTjg1UYY:xWCI+g/jFvEjtQhWPziXTjg1UYY
- TLSH T1B6934CA1F3100A19CDDF8F3B68E2A8548971B59664F3FA174DA4E9B58C57B100F423EE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
98958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Win32.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0807bf1c8b062436e0dcee465edd5a618093f82835eae2e0f6489761dfb31057
- MD5 04bfa51f85a5af60b34c33b09cf1edf7
- SHA1 b095fc65e24484ebcf6447e33a895c88664d7fd2
- SHA512 82bd9cf8a256d767a4a116657ef8e91a6160e2e1caf7771c4299d23869782c0a194b2bc585642846e2ac0295a40de37061d2570f8fa7f8c6fb10754a1e494e4e
- SSDEEP 6144:G6Du/OcMSbe74k38X37OjJD+g5raI/tS12UdpXZT7DL4voZ9B+2o8che+RE05DMu:uHMSi2ijdN5aIq2033io48chm0bES
- TLSH T1E0E4391107A6073BC03F123575711202F6F4A44AD39E7A3E4D8D8DAF9DEAF166C4A6E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
714638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
690KB
Virtual Size
689KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cogwheel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff05e2f35a83ca29be1a209ab68ff15a3cfe1c03d339ddb6f834a8303fb17128
- MD5 12eff5c35e53c4c122a5ee384425634f
- SHA1 3e99175b4da078b1b9dd60276c2917640d156eb7
- SHA512 920e9bde5e6140a33757bb84a129320e6a18007344357967f12c25e2bf1df744ad3fc3c1de9fe9d5341ef21645441bb9df1d95b0d5ce46819a7a158a89657b92
- SSDEEP 384:bWF4jwX8tCE5Vso4iAuW4GdTuGyacJOz2b91HcOaCiEv2Ps39:jjwXDUKhxyYactCDDN
- TLSH T196B2CF16FBD5AB70EDFF56F840BA1294A2B5FB189D32EE6E0ECA11C2EC111441B64731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Cogwheel.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CommunityToolkit.Mvvm.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9b4b17f0372e642428ae343cb8ce32cac6fd62ca019312698f6bc06a202120aa
- MD5 72dc06dc4c9e23c674e893e4e1f6b73e
- SHA1 08f8325d86dd58f65e2b4f6b6abdc4ffbb187862
- SHA512 6953eda29c46a3d6f3db2621a17c70727c3ffe226f81611b468e934dd3c962b8bdd5f57d83f35632d6b5961ca79ffe0194ecd472d485a3e614458a0a45e020a6
- SSDEEP 768:y2dJSzbRJfxXle7fzOJPo6l+TT2owNxu:HJS7xXlqgo9ANo
- TLSH T15ED27C20A3E8862BD9BF2F7494B153004F76FA47AC36EE1E715850061A97F805DB1B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
CommunityToolkit.Mvvm.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DialogHost.Avalonia.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eb1d8244db0566b0fa508a32b45f874a62e856417fa399b591e8b093cb180143
- MD5 8476c4927fbcadf08023f842e031eeea
- SHA1 d8a920983b14f3a581cd76bd9f59553ac82844cf
- SHA512 acbcbc82771a3073c1cf357a49fc2b7f9d1083c665dfd9b9c5b895233edeed1b1721fba90eefd057aaf0ee1b27b47e5b2fc609e5f920fab2f9ef5f1b035c22a9
- SSDEEP 1536:f1a4o8Yv8jt2utUf5Kc3w2s7tRQZGu/W:s4oP6t2utUf5k2s7TZQW
- TLSH T1EB332950A39C8F36DEFF6F3964B1111017B0D5A26B37DB492ED476E80563B810BA07AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57790
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HarfBuzzSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 94fcd946a5c40f9fa56ec4c12a8e0097b6e51d7dcc23b97f1ae6bee25c7569b8
- MD5 98b194b8bfd711a4814a8cc9f7f49926
- SHA1 1e956aa7593875f441f8977ee54078bca7b90720
- SHA512 73c4f7130eb89ab5165412999f0024aedb35695495562054cad7b74e9468c2fc53ba7c6689b7ff9ec27bb651fa9db63eb23db6f70b0cd6432d7371b8de93fafc
- SSDEEP 768:ZEY8d+XExblHmgfbf37cuRYe3Gs+ysMRqD8e:Zn8d2ExJpfbf3gu2gGs+ysMU8e
- TLSH T12FE23C05A3E4A321FAFF2D3AB877094703B4D4858613E7D355849077A7937D29B3236A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\LightBulb\LightBulb\LightBulb\obj\Release\net10.0-windows\win-x64\linked\HarfBuzzSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
JsonExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0730dc78997f7d46de0be5732516eacb672d52efad70b4906da676d5287d358
- MD5 284753273ac584e8f862d9db4c037beb
- SHA1 f2d791c7426cf4a333308cc7de20b4dca8c73283
- SHA512 124a5c3d9a1f13f3cd4ede2e3571b35f0ccd4295bfdb926ed5d8bf548fade799f5c6e023bd8136640b449bde50d8258adfb30493a114ddf17adaaa7c1619c9e3
- SSDEEP 384:aj6RmKTHB3LZI7KojTAI6sH4jSki3uoyV/:k6R/Z67KwsJoPkVV
- TLSH T105728E145BEE4123EDBECB7EEDD382128578B6046A53EF1F844F5249D8923140FAA736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
JsonExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LightBulb.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d826ee0b690986265fe35542ceb830161b983281e5d40e71c65a0bd75655059f
- MD5 27c11a3a9c1de39bb96c422059b38f3c
- SHA1 ebe8830deac3bc9cebb1eaeb2ad5fe64edda46ab
- SHA512 4e5105ae1b63c15fe8aa351aaff423cd7a29353e855bc18fac74f7d8665b23bb778dcae859316223a831bb0c62516b002f8fdd9387a4faf8129dc0b4c022405f
- SSDEEP 384:F9WD/GiwZ0OZcUTeJBzNRPgVZSu2AGsX0gHOHf:Fg3I0Une7B+vxlZX0gu
- TLSH T154721B1D639C8637DF7F8E79ECB141100731A709A553EB2B1B8CA0DBAB4339A0D16A95
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\LightBulb\LightBulb\LightBulb\obj\Release\net10.0-windows\win-x64\linked\LightBulb.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LightBulb.Core.pdb
- SHA256 ac5a85a26035a5e6c24a8744cbd9d48f1ce2f91bee227498ee11241a5bd9a8f5
- MD5 143fc999d4944feb90fa6da7916f4525
- SHA1 44dce2d89152144f5e84b51b3a1de962ca47a16c
- SHA512 8390bed71eefe68005ba6aa5f5b2f9b66863c42d54a9b3a2f161a0b4247d1dc923bef165dcd0e77e5eebe0302607999f46b9dca18b7e89e09d90fe39b6897228
- SSDEEP 1536:2pVcjBco7WtyZYYv14hU00o6fxbXTcdtT/h8XhPPys:2jc1clty/N4jHUxbXCR5wr
- TLSH T1FC53BFB28F88C351E4589D3685B5E5A8F274AE3913C3EC31F2D4B541CCEE2971BBA254
- MD5 SHA1 SHA512 SSDEEP TLSH
LightBulb.PlatformInterop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 92cfa488ffe2d926a592e4a6aacbc12d94a302caecef96cfe0546798a8cd2bff
- MD5 7fa957189e0d8e20b5a7338c41c147ff
- SHA1 15ef79377535567948864f5cd674b7b3f1f99191
- SHA512 40415358dbfac01f14a2743304eee567fff2d40c2ecbc9793eaeeae2fd06f638c697d0024a3afdf88a4837a99f4f7df07803fa13d8012195b51ae318482e42a3
- SSDEEP 768:fG/XE8cLPTj0408147UGClc5Hs4A7fLTlPHD:fQEHLPb1aZs37PNHD
- TLSH T166F25C04B7EC8737DAFF0736B4E245618335D2A97923E78B0D65A2B29A5334006637A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\LightBulb\LightBulb\LightBulb\obj\Release\net10.0-windows\win-x64\linked\LightBulb.PlatformInterop.pdb
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LightBulb.PlatformInterop.pdb
- SHA256 efc16a24eef79c57612690f2e41a41b1be495a1e672cb092001794dcd160c34b
- MD5 dde21d5e5825d0460584a25a3d7ca0e8
- SHA1 8ebbe8449388f505a293698d12d2f4a172187ed4
- SHA512 35ebfda289c3603bfe8c1b2244586004e2758f376fb1bd0b96d0a884ed0bbfe0c35c37673ed3850f8fd14f11b7f8a1173296e05b2eeb2b504534f2367953c5de
- SSDEEP 1536:7VcjBchG+tvZAQO4V4RMs0w6eZbvrcl9bQhMnpnDy+VYM:xc1cHtvzOk4zPdZbvKhEQRd
- TLSH T12273AE374F599212C418CD7DCA56875CE3B04A2C6AC0ED71B3D9B452FCEE25816BA3E8
- MD5 SHA1 SHA512 SSDEEP TLSH
LightBulb.deps.json
- SHA256 14a4e4f59949361d4a31c9697b70d7d54fb5ee3db63caf0760ded5f2a9433c33
- MD5 0ab04863415334d8cf770f249c5da086
- SHA1 fd60213e51334a05d42c6ed5cf485af164380428
- SHA512 f2aaa30dc26b3b7c1ac360d417262b3a7afab595a9bdcdd8230f35e4c40fd3c62b253de2f384d8ae98992768da2583cb674d08a928416ca65cd066b010f9463f
- SSDEEP 384:XdXaUa+sndD0FdC4WB4z/+nftPJxBlH6jxx:XUgduB4SnVP36jv
- TLSH T120B27526D9A04E670975ABF638794691F3A5036F7140488EB8BC389CDF33E7A1185F39
- MD5 SHA1 SHA512 SSDEEP TLSH
LightBulb.dll
- SHA256 5f8c256e3b266bed33ee67b45cc389d3b80c0ba6ee76751ab8c44b31817851be
- MD5 58fb39c3af4cd2f1bf5123da54cb4ad3
- SHA1 40fb30bd13f463049032d23cf3e3c4e707354e01
- SHA512 2c4639a3077021513d16b7af7f0fe56fd2fc0f2d3280a2d37fe1fcc9851c9f4deeb7417e70dcf0d941ffc413691caa60dd183fdde3cad28796cebed6707775ca
- SSDEEP 24576:xnYpbbvrtmPOgYpbbvrtmPOMcnptbprbmPO:xnYpbbvrttgYpbbvrttMcnptbprbt
- TLSH T1A3258C6172ED8196F6BA6F3A98F0AE111877FE434420C95E28F837CE6E763415DC1B06
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\LightBulb\LightBulb\LightBulb\obj\Release\net10.0-windows\win-x64\linked\LightBulb.pdb
Name
.text
Size
789KB
Virtual Size
788KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
200KB
Virtual Size
199KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
LightBulb.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 b544ac633b2d9e3c93b7baaa1f51723971ffe0764fc0377473ce34e9ac304aea
- MD5 f40c1c2f32bfa3b946303e5b417be1cc
- SHA1 95ab07defa8599e998a79850cfba1eae218f7e32
- SHA512 50ec585088cc0ca6064293a6a98169c4800cd9ca705bca725350c4bb9cfd1f583ec27631c63506c6bdb9efdb99d60a59c7fac00ac13c04c7d7d0422d3b75e236
- SSDEEP 6144:LAAwxrI14Q38gB/orzcS8pbbq2rO5hpz0bm15Vaes0y:LAphI1Q4/yYpbbq2rWh90bm15kesT
- TLSH T1B2745C66B29C60AAE1A2D13CC9D18C41F773BC564B705ACF27B07BBE1E366815DB5302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
200KB
Virtual Size
199KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35225,
count=1, id=258, version=35225,
LightBulb.runtimeconfig.json
- SHA256 86625cf301cdc783d87e459cc837621bc0781e5cca744ef7fc6b3b077e40e450
- MD5 159113cdc2da3742374a19bbf56cd04b
- SHA1 39fa9d52b6b9b526e28636e4f82d2a98e850c82d
- SHA512 d775ed7da6d0159b9536de7631223815dd201ef43ec45dde06798dc76ff02b0835b71e33791f0e20bb8a1a5e47bceb46312a03942dfd73a52afed2302192e387
- TLSH T18F414524DE5AACFE007951ABD920D492CA7053271044BD56F1FD080CAFBBAB42276FA6
- MD5 SHA1 SHA512 TLSH
Markdig.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22b3e810865975bf4d6e4fa9a542b44145da3fae9bfe1e79964fa4dbe392276d
- MD5 4c733a48b9cf73ae3f291acb753402db
- SHA1 da7f6f2d31000fb5a36420ddb6f9fe773e4f2ba0
- SHA512 2051d53003c46660a40bf5765f57f77c53910ed99c5e3bb354a2393dbcef1c17bf848f86c2a68e33afb23c72f74fe69bea9bd97ec5db5ed4b70e192321952f04
- SSDEEP 3072:GexzgZQNASZ5yHxvAlVLUNGQ/YuSzFzOZPIvyg0qvcAHP5H:GOzgOaS/yLNtMFzYPIvyg0qvh
- TLSH T1DC24173453E48BE9F27BFE37F8705525DAB7B9162A16CE4C8807408D18F2785DA23663
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
218270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
205KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Material.Colors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 48105d870b4666004b55ee82147125f31bc44fa483d965aa855d2bd5a49ad2e8
- MD5 a5b94ddd9ec8b57a71fb0787b0e40bdd
- SHA1 3acb57c913cf0e5471bfbfcb92ce5f91ef4d92f0
- SHA512 4833fd4ab2dd6aa774c036a90dd38db7e8ce815dd93666b98f5b566ae073f6ea768861fd282527fa4b1b48f4302b4ae52928e0da4bfe398f3bc1ab7937952aa7
- SSDEEP 1536:TVxevN2ECS1AivxxLKn52QwK3MtTklH5Wn:TVxevNFCS1AiJ5GkU3MtaWn
- TLSH T1BE3360659B3893BFCC8C477E45F2685BA276538F41828D43DE5229C723C3249794EE8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Material.Icons.Avalonia.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 34f670dfc6b71d42db8e35e0a379c319bcaa6892018ddeb63ab672b1a8051a13
- MD5 82579e2dfd058709ff1616784f95ea32
- SHA1 55e5fd1200eb6d90ea8f4ff261fd3f73e88dbc04
- SHA512 d497855046aba26272689c7a8abe4a4d196764c63ae21a25935fe0caf5d448e2485990b0f4d3e0b33180101ccfa13656595ddbf069269c55794daefe0f3d1ead
- SSDEEP 384:B88fkXGi4CBHVJBdDhAZOrxZmbFclG7spCoVEx8dpwKr+GEQLVysAPeyaRy1ZNW:etN4CBHVJBYcxZqWlGIC40spbE3
- TLSH T1F0C23C85A7A28F27DF7E1B7560F4210083F084776731D7C49FC015F995CBEA06B916AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Material.Icons.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f169b56f6994e58b84bb27a3cc64e3682641b24429b6777a210f136bf4718e3
- MD5 bfdec5ce86ef79fee632e43f6f722d08
- SHA1 66fcc05c091b5a464bdc38c6d3c4d9aff31c802c
- SHA512 e1344aab5c02eea9db13d7f722f2cd4cf1c916902b59f512b3da196522c2b53647dd8d07cf26e8c8bd78daa03ce476ef81daf20f112e6da954f553da82ab6446
- SSDEEP 6144:jT9WJcyTBR6tgVckea61DM/pKMksH79mF32XmhoW62yp2lPLw+Lwz9qQ4KeWKiJO:YJc7gykeN1gRKMcF326R3k4Kr0Z1
- TLSH T123468B3CDD05A767A2B7C15581CA0A07F6A2856BF1394F0E61CB1B9932076833E85FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5718414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5.4MB
Virtual Size
5.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Material.Ripple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15882d0bd4d494464e88f805daa1a9abc60ee6755776e5ace23905f7572f05c7
- MD5 8f96dd4449ffa2da1907aaa0d1c02d3e
- SHA1 9e068fda5963a90236a4fc737291792fb1de5a78
- SHA512 7214aef547af30ba795e6a5189a38cc688183c819cf4fc927388eef5533a8604039742e88753d8e70543472c204abda36f5c2f639515a99295e4466c1b06c29c
- SSDEEP 384:Jh22TlnrhFmMUhvwfuA9QxEMzX6/PJAMKh2vhysQd5qNVo/t1nR4:RJUou8QGMzG3HNVan
- TLSH T10A920C5E72A68337DEEB4BF5B5B4050043B582A31933EF890EC471F692877601D513EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Material.Styles.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1e3840f3f5615f0a9366e17ded274e01b78bd23c87389b347e7fd2b73a4a095e
- MD5 b7b33d3c1ca00684561c3b979788e8e4
- SHA1 9771819493acd855f5e13280d288e16af99d12b0
- SHA512 d5e42b410012264be3dcc108e6a5b5be5558de1fd8a266b8eacb79bb05755429ffe4d25eef8773e15f051fc2e5d1b92bd8860c83a3ad79cb74092859a6d4b26a
- SSDEEP 49152:kBzjYz067yqu/mnFQOi33nFbO4KSgPTPgS8NAvKBUuYvcvwu3707iQMMvozFVrw/:kBzjYz067yqu/mnFQOi33nFbO4KSgPTw
- TLSH T135C52800D341A625D9E7F57838BC93BD0D70E02BFDA6A51B34D4AB71068A980FD59BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2719902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MicroCom.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 336d31c26eb4ee353bfd621dd686092a61477289d150cf893d26086d1be0b322
- MD5 8c2a16f58dcdce66c1619a97399b4772
- SHA1 a0c2b651ed0e6b4ccfcdf6ca5123038dd7249c73
- SHA512 3283023e84cbcdd54aea0dad6413846ac74d304a163b5a0d4080afa0b70fbae5184e203a2fc412aaf0d1f87d8fa8e87c69028820a7b2ca40b78b130204a0d290
- SSDEEP 384:WhFUddoddqPliWK2UMFU6pfPEF7H+/7Rf/j1W8SsW:WIddoddqNGSute/dbK
- TLSH T12D524A0167C8C323EEAE1778A8F30B868774AF12A517EB0E38C862679C57B900D51777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.DiaSymReader.Native.amd64.dll
- IMPHASH 6a827b726a1cd6617ca52b2f9f7d9fe4
- SHA256 315a61c47c41b8d4c815f4274bb6584c1d24b4640c7eedc354ed5b03a9a1361e
- MD5 e4dc9335fb0065d4b3066fcb8a878a9a
- SHA1 0d66f04b77a0726f1bc2077675d485700848d9af
- SHA512 929eb77e8b843e484ee74b408edfefffa15d0ee75d70d3b47a808fe380eeaaa9dc40bb29ef549e47e89dbeab159f806b4f823e8d3dc85e657f7bb32485a1c947
- SSDEEP 49152:8oJlAZFbi/H3LzED3pattTg4nm1OPriyQ:gZFbiPcEHg4mUPQ
- TLSH T1BBA58D97A3AC41E4C47AD178D66B460BE7F238050321A7DF02A0863E7F67BE15A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a1:b4:5e:a3:6f:6b:de:38:ca:fd:cb:b7:86:fd:f0:63:de:1c:0e:85:e4:82:f6:e9:e5:97:27:78:46:08:0d:36
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ec:e0:2b:a4:82:d0:91:52:80:00:01:00:00:01:ec
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
143152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\Microsoft.DiaSymReader.Native.amd64.pdb
kernel32
GetLastError
FreeLibrary
DisableThreadLibraryCalls
LocalAlloc
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LoadLibraryExW
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
CreateFileW
CloseHandle
WriteConsoleW
LocalFree
FormatMessageW
GetEnvironmentVariableW
GetTickCount64
GetSystemInfo
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
SetFileAttributesW
VirtualAlloc
VirtualFree
DeleteFileW
SetEndOfFile
OutputDebugStringA
DeviceIoControl
MapViewOfFileEx
CreateFileMappingA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
ExpandEnvironmentStringsW
GetFullPathNameW
GetFileAttributesExW
FormatMessageA
VirtualProtect
VirtualQuery
LoadLibraryExA
GetDriveTypeW
GetCurrentDirectoryW
TryAcquireSRWLockExclusive
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
GetNativeSystemInfo
ole32
CoTaskMemAlloc
CoTaskMemFree
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateNGenPdbWriter
CreateSymReader
CreateSymWriter
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectInternal
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
372KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=177, id=261, version=30795,
count=16, id=260, version=30795,
count=10, id=259, version=34321,
count=37, id=260, version=34321,
count=7, id=257, version=30795,
count=194, id=1, productName=Unmarked objects,
count=135, id=261, version=34321,
count=31, id=265, version=34321,
count=1, id=256, version=34321,
count=1, id=255, version=34321,
count=1, id=151,
count=1, id=258, version=34321,
Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5ac81389cf154655c045ff8c6dc91f00314dcd90dcfc329056ced440a25cffde
- MD5 67948385ef6ca1e851c05154a1cb40de
- SHA1 6d50f030857881d9dcb8c29114e4bd9ed82f2daf
- SHA512 54bf4b83838bb2ffc7cc94e28037e2404edc0fb9092eb7cc8789a28e26bcce469eb3b8cd457b3a527c041753573fcdbdc7d4df2ec2896c7ae0690aff73d900c0
- SSDEEP 384:wCp/mZ/483j7V5o8QzhqMKnW3xli7okWGL51WK:DU7AFCn00v
- TLSH T1AD820905B7F88336E9FF0B79ACB750505B34BE0A7411E61D53A1508D19A3F889972BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Extensions.DependencyInjection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f056a4c3ebf984e9dacf231de5293acf74566ba7052bbefc83f23042d510d55
- MD5 1f0f20395b67865a10d7aaad6908232a
- SHA1 e1871967f416e6fc9be0b0866a529d59e9932e12
- SHA512 cc48aec91acc55ce5d8f324834e669171ee20569b3a77c89c42d82869f271e684b0142f248c83b6cc5b370a03287ce47e2355fd7fe6d42a84d548605abb5f090
- SSDEEP 1536:Uk8/RYNI32gRR7nPwn6w+lGcbbRFW2lQdZCjrd:YJcI3l7P2LtdZCN
- TLSH T1B5635B3527FCCB2AD6EF0B7AA53605004BB5A6C93502E74C0EE5906E19A7FC51B32376
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
78526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Win32.Registry.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bcb0a469b4eeca6757618eeec448018de8e8c90112627c9b29348523f9fb4aec
- MD5 9fc0147d4881f38ea65df6023e86178f
- SHA1 a972911cb7f6c21a3298da0d8f4c60e7622b28e1
- SHA512 a6fa5f17ad764a7e3fc4b31dbb3bd53b003c885d57455d7edda2e7a16491fa9c35e10e18b76786a4f0bec4b4d436b75550ea5904adce72d27613bd1db82e7487
- SSDEEP 768:CalJSFDwrQt+/DxdniS2Zrcd1OO/vVidI2BafVM:XkDwrQ01iS2ZrcO2vVidI2BOVM
- TLSH T121D24C06B7D8C02FFBEE0B3E5CB161598276FD8D5D02EF8E15D5025A5A367C0923271A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Onova.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e9eea50e9a1bef69b6cf5431a99a671e6c9b442841d16863a20e84fd280062a2
- MD5 5bc702536a6eb1c2f32cc8bade23624b
- SHA1 64143b8a0ae86cefa45e829a49089293df565a58
- SHA512 23e196940a38047a6344cac4ce4bddb68e0c9645672b4f491ef1488c24a11e80d2b8980a681c8ab779820eca18611c600e318552518af09ded949517b617020b
- SSDEEP 3072:KS+uaFKMojjXuWmdVQ4W89XqUQKnsPJCABUfxCwDWEQIHYsOQRhE+O8sJWAgJ:4FKjjXuWYuS9Xq0nSCAGxQI5Yayh
- TLSH T1D204A00037EC4737CA7E96BE6D7516550BB2E606B423E79F9EC851ED68C330A49213B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
185214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Onova.pdb
mscoree
_CorDllMain
Name
.text
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SkiaSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9610f20024f716e3c46073349a592519835c6d0debc0eb30941d205563b6ae9e
- MD5 6a9db1e59ed952fb008bc5559931bd6d
- SHA1 7fbd0abcc26b6e7622b929faf5bd45ac772906e3
- SHA512 ef7fdbce1ce7a0c1f8be3182e2e7e1adc7afe2328e3d5cb56533054f34fd45107825ebb7dedf92a476642f35872073fc88ba7f648f0378c18360d97571b477ca
- SSDEEP 3072:7gLV0eVbCFHExIrmMh+UUHajTLs+G82Ek+kDCrxy:7yCVEVygavU/x8
- TLSH T1F5D35B1673BC862BDBFF5F3DF0231EA493B0D58A5103E7791694A0B82663780D5923A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
137998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\LightBulb\LightBulb\LightBulb\obj\Release\net10.0-windows\win-x64\linked\SkiaSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Concurrent.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 479ac1293992f6f1be37a0240cd68f7f8675505a2ca7208fe47e32ab9f5b8147
- MD5 3f7d2bb93d1beb351db960ed3753c158
- SHA1 62f33d42cdcbdf981f3f92d335a0af404be50939
- SHA512 d3e011da9d60ad105dff477511facdc2feb99c3f20ec0a747aa54e16b95109640fc248354ecdc9e80f5a835ee0b01b4207ea52b313aa3178f3e67788251d1762
- SSDEEP 768:o9WoCP0C/57Igh43i+mLYOJftMUMK1k2B:o9Wt/Zh43i+m8Ofl2M
- TLSH T1FC13F80137ED1325EAAF0F77B9B648980273EF666A13D61D20D462994C33B404FA67A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7c596c4d9b3f05c733147498ff3f36258f666965cf5e3973a038e9d45bc43439
- MD5 22a4b56b4fd4b94588941b46e5168924
- SHA1 6e3472bac05109e71c14f86d1aee7d2631b2145d
- SHA512 98bab596f345d865fcd6f67745c58ef511c49a9adf4543a73e8fb35206abbc132c996fef85bd1557636623bb78b0cc1cdb24be4d6868cfd9e91e2fbfb3ed95f1
- SSDEEP 768:KD9EP2J4F3PKCuMNJIMufmrApzr7ciBElxFLnYlHJyY5rrj0x0qtg7f0+R9:yJNCuTMuvFBErFLYlp3x0aqW
- TLSH T193431A8073CC9731FAEF0E36B4E191990771D662241BE75A11E8A2E88C723915A763DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.NonGeneric.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 866202545b7cf2847143854374ebc1adb38e5563d8bd9008eff45dd838b53240
- MD5 c52be5e2e3a62d7bbccc13f0b33cb709
- SHA1 55a6606ce08b81d424631f45cc3b24e208536dbc
- SHA512 e803757ab3863dcced1b7e08a0a14990a3ed9b6cc5c4a5f3647ea79e58da3968066523a37729d102db79c206d9a9e45ff901d9a96bb1034caeb528733d8893cb
- SSDEEP 384:sTiAH2cTOHB75MYE6IqBtGhn9MEW5j0qFWez7W0y/yy35K+6tJBSqx3mzWPRoW:sTitx5MFc7TjlX
- TLSH T1F592E70477DC5B3BE6BF077B94F6515203F4BDA9A903EF6E1909100A8CA7B904A72727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Specialized.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf43205ae4ee8d6b4fd8215ac243e754d8831f8e3f54ac72833a5171c1b4982e
- MD5 a4b5cf9297cde7d0bd41f249b7052f8d
- SHA1 d208a6f8bb82a133fbb21caddf663208ef9ccfa6
- SHA512 b163fa68fe5a21a42d42dc0983f367d4a76f6f0a3d417e77b91a2d7ca60cfbf2dbe267e05d9d20883d0be6b76cf871b004ff9622b915474bc94b03ce9b768b4e
- SSDEEP 384:y7ehghrLQhlodsZj44xjp2avwj89s+a97W6gkbKEa95Zb/As6CWazJt8hpasW5KU:Se8dO4aLpYCPQS1G
- TLSH T1F652C815B3E95332EDFF0B7A68B751404731FA646922DB9D2599D24A8C733480F3272B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0771fe5ce46e6a7c4cd449838394242a1f993ea05cd36598b2971de8873e8b77
- MD5 e213512ca4e3558137cf137bd9e49492
- SHA1 db6df646b2312ce60a95b808000f25e7acf2e5d4
- SHA512 6c6c9f9741728def75f161b149ebfa7101eff5d955eb7874b38052675dae39585803467ab6129ba3c067a523b892e187fe687fb6fc2ea1905599aca8c47136ab
- SSDEEP 768:epxIUgpVVHiSBbmp/0Iu5fCVQkGibKsXiybW:4IfbmVwfp8KQi
- TLSH T18CF2D701B3DC5736EBFF07F7A0B181544779FAE66403EB0E25D522899CA3B500A72667
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee38a7e860a5dc10e3130875a1b33b496c96d4211299e696b756717743621c4e
- MD5 3dda64812e26e4da4d9e3dff0ad5d98d
- SHA1 5b904612f5c4fc9934b1488d236d3232ead2c5b9
- SHA512 cad8d4055a1eaf0287ea716cf790b2e3917b9f4fcc903e3b883d918876ef87dbfeab57cf5b623672f0eb0a5bcc6a4b435c51e5f80976c916d6e9b4657dd1af2c
- SSDEEP 384:zWzhIToIlY3uEE9aRETN+IwyxS+aMkP6oNICWnmZW:CF0zlY3uEE++i
- TLSH T1F452E72473F48337FBB60B356932891113FAFA18AE42CE5F05A0994E5A73B441671777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.TypeConverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3dd6ba253a4984a208db354dd14a2edec36d750284b4a7242015a67aa38ec35
- MD5 8602f6607e1c3a9d282f89024314cce3
- SHA1 b9de4e779520ee61cab16a2e6d2d816d36c4b3f4
- SHA512 0ef23c72b843306ff9a3f3f167d94bb941f2e8d205a615d54fc90a292a9a93e533bf79c35800a84ea38c9a474028e94ddcdf1aebf5e67e7947be445ddd0576c2
- SSDEEP 1536:8a8PpHg7HPCgKLKW25sPA3t/eB4CJ4OA5TUsJfwFsi3:8NPpHKqgz9GBmt5p6
- TLSH T10B93091967EC9B85FAFF9B31B97444108B75BE422822EFDC5984145908B3BC058F37AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d351ea92e0247eefbe265716b37d0be2c70721c3d3ac7d13a1e3f9ee413b0f88
- MD5 2521dcd07650ad9e1cfd79c28b1b6997
- SHA1 d2f19f0ae2e2ba5baf8713aeed57bdd18765ae95
- SHA512 8dacab1300624bd5f7ecb872fd8ccd0e1fd7bc3e7017e82a2eec70b08764592c851413a840cd755cade094ab1faad14b4725e0ef33d8d69f48fe0ab2bb3e4aea
- SSDEEP 48:6ENbjOsKpl3lv86VvWDfIf+O8gx+IvOTi1BRzDmD8bbZLjxyWFZWOTW0KkW3aWxc:N0jJ86V/+AxxvB7DmDkL7W4a1Wf9
- TLSH T158C1A421A3F84333EEA74B72ED73A7052379FB14DD13CB2E4195520AAC5A6085A30B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7d8a0c8355a59bd9c8581585f6a11044c37d9f4422faeb56627d90d986a14ff4
- MD5 3e31b15f00c2c6059c3f67f5cf8a68b8
- SHA1 e7f2526f595b809c436290d68e81e76b2c391469
- SHA512 8b34027926434d2bf053e65b37ffeac547574302683b81e26ff2592923350a20d2ddff210e8005c1625205b99230283fc3b07983eb6f9032fa4945b7262b5469
- SSDEEP 768:i17FkO1WAfmR+BYGSoaZBUT2mAdaFyWxNbY:IFLWV4SSUWvU
- TLSH T1A2F21906BBF4422FF7AF0F34297656055636FDAB6E13EB0E1590502E2643790C6A1BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.DiagnosticSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 775cae943f23c2dc082a69c4c75b4631cb1832f8930e8ccb10666976b7d34cfe
- MD5 63a095abdb6ef9761d7a2a983eaffee2
- SHA1 ee624429ade96df60e85cc5b5b360e66bb335444
- SHA512 c9978094fac7c8ddba5fb72e5ec80c4139ff666d4e708ba7012229a5fe20a868891856c5a26561fb0a4059e2f39bad63c5ae351755b83159199f777c561a015c
- SSDEEP 3072:o1t7VozKlBaP26fy8GhTtdFsU9qlBTkk5pcIqewoumH/5:Mt7Voz+aPNGhTtdFskgoyGjo
- TLSH T1C7F34B5573FC4626EBFF1B35E87050060BB6F95BB826EB4C6E8854DD0913B80AB113A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
175166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
163KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.Process.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d7e0d9b8fbecdea15a38ef8493eb5977f41129ce895feb732be9a6cf5e81c5b
- MD5 24f7833ff5fd4bb153f91b8a03e1263b
- SHA1 cffbb4fff0be8590ed44522cfc8a481d34a7238b
- SHA512 6e01391eef00127d31b45843cc5a3ac1183054328ff1e4ffff528c75c727faeaa080cf4dfc72aa15c4e949daff089b361343643429ee9d97e80064d021e151ad
- SSDEEP 1536:i/MF3vbh2OoKn26C2kEbopwE4BZR010wftjb3Rldlot4lgUgIrUV:13vs6C2kWM4BZK1tjb3vdlotEgUgI4V
- TLSH T15D834A1073EC421FF7EE0B39747125120BB6A95B1A12DF9E8994819E1F97BC18A317B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.StackTrace.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 da196c17cfc9c5dc2298941b128e105cc5f366c4c149098943d81a9b85081c91
- MD5 9f58b7de502a5ec0556429b5ca8a9de6
- SHA1 fb5626c8bfb40003560a8531b0ebadf57bdaa0ae
- SHA512 14525ca2e694b2ec5c160713dc2ccab695a1c812b684e9f2e04f4f767d6352fa8538aa4d20663ca821a56baa7ce03e4ba3dfdcb7c35bd4d4898a7c11b757f1df
- SSDEEP 96:JwXPDprW/t7jYlOL8JCLI61fGyggWD66Sy8BVhito/jIR6IH+E4dlxvl6fVa5Dmk:JwtMslk39I6Ny8BfC6IeEQxd6RWnJgW
- TLSH T136121A1677DCC32AFCEF0FB9ECE2820117B0AE109892DB590AC4520FDC67A80677175A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.TraceSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14351ea417f502ec80b4c7aa65061abfa3dd271d11e9809aa5b61a87218e1724
- MD5 37e591a8959ba23988e87dda7353c2a2
- SHA1 1f8733536f1c42a627a7a653018a9edd88677f62
- SHA512 796b0f2e17cdf7d58b5655dd40753eaca7901bb47a2d58094a2ab169a0c0101f88b4615a081d28de140c82d855ae659dcd155e061aad7bdc47e4909c16f16833
- SSDEEP 384:BnrvBayko7wMgB2dopwjcqF9W7Wtu185Vm68ABWPITW:BjgoQB2R9QHS
- TLSH T1F952F900A3D88B3EEDFB0F37287296901BB1EA946C12CB6E069891459D73BD05B72757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Formats.Asn1.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df53ec9681fe4c63be5f30c20897ed5dc552380da0284366a7e414855db3d443
- MD5 e62e8a9ebfe3897b77aaedcc17b73adc
- SHA1 d28126179513efc50ec258c1d3a279b2c25f3b14
- SHA512 6f6481b20c21ebd55f34e3247f56a4bc7d4a3709dcd63afd5c4621a8767ae907c88a6faf5309767275359b0e17fc93d373eecc429494252a00f32e828896c4a4
- SSDEEP 768:rHlqE6d7NqfL6S5vrX3sGlM4eU34ROcw4FuStSzNtRr:RudpqGS5vrXvP4ROcw4Fu0SzNtRr
- TLSH T1C203E60CB7E48326F5AE877291F84A464579B862C2C2C73E04D6510CA617B838DD5F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Compression.Brotli.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cfcb653b2bd9d73982907f2866d42812a53f9f36934ce86a8ec42003cda3d00e
- MD5 e0b83d08c1151294b5d81cf76c11dcef
- SHA1 49c7d1a7d0fd8ba4ef8fca60662930b27f468ffc
- SHA512 7210558676695ff7a2bf78a41187d1c336456c9d65d6744212eaddbfee47045922ad73b41903f694e5869b02253df6491bfc0b541fabc7a0d8637d059ef8a1f4
- SSDEEP 384:jCXUepyEbYC1PHEsnm9HaaSP8ui7oYKl05HYyw0whfIeY6MiCEofOhobwLlEWJoi:+9HbtPHEsnmdAi0YK69jb+Dc
- TLSH T18DC24C156BFC5117FDFF0B7A6EB58A590A77A4523C06EA0D788C00DD26A7BC089E0763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Compression.Native.dll
- IMPHASH e5b5b215ac0ec6a15c010ab37d7a8d0b
- SHA256 e0d807c595347e27d70dc05108d3501333de539df098ddb484ec4b8fa2e05956
- MD5 b232c75ecfd0960b893e73eddbaaf34b
- SHA1 78d3e43b85b7e5a5da48b74ed2f2270a12bffe15
- SHA512 c22ff5761183b57ca58bc53cc3623fd307f51ace6460d4bc7f2663a039990de4fbff818e02b8fe3320e15a1c91b8cc378c29404dae788ae60abbb092e55b4ead
- SSDEEP 12288:hg2g6Lt7+ka1wFG+m9jT5u8PXTw05nmZfRhAHhlyuB:F0kWFxxh0AmZfRhAf
- TLSH T16B15AE4BD9B35339CC27C039C9B71236E73671A853108997A25CE9353B43A541BBB3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8c:d6:f8:3b:3d:93:72:da:8f:07:5b:d5:29:23:27:f4:0e:fa:5d:6d:66:c7:65:bf:fa:8e:12:f1:85:e8:47:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:14:8d:cd:23:44:ee:06:df:72:00:01:00:00:02:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
412656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\native\net10.0-windows-Release-x64\System.IO.Compression.Native\System.IO.Compression.Native.pdb
kernel32
HeapCreate
HeapFree
HeapAlloc
HeapDestroy
GetProcessHeap
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
api-ms-win-crt-heap-l1-1-0
malloc
_aligned_malloc
_aligned_free
free
calloc
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
terminate
_initterm
exit
_configure_narrow_argv
abort
api-ms-win-crt-string-l1-1-0
wcsncmp
api-ms-win-crt-math-l1-1-0
log
BrotliDecoderAttachDictionary
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetMetadataCallbacks
BrotliDecoderSetParameter
BrotliDecoderTakeOutput
BrotliDecoderVersion
BrotliDefaultAllocFunc
BrotliDefaultFreeFunc
BrotliEncoderAttachPreparedDictionary
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderDestroyPreparedDictionary
BrotliEncoderHasMoreOutput
BrotliEncoderIsFinished
BrotliEncoderMaxCompressedSize
BrotliEncoderPrepareDictionary
BrotliEncoderSetParameter
BrotliEncoderTakeOutput
BrotliEncoderVersion
BrotliGetDictionary
BrotliGetTransforms
BrotliSetDictionaryData
BrotliSharedDictionaryAttach
BrotliSharedDictionaryCreateInstance
BrotliSharedDictionaryDestroyInstance
BrotliTransformDictionaryWord
CompressionNative_Crc32
CompressionNative_Deflate
CompressionNative_DeflateEnd
CompressionNative_DeflateInit2_
CompressionNative_Inflate
CompressionNative_InflateEnd
CompressionNative_InflateInit2_
CompressionNative_InflateReset2_
_kBrotliContextLookupTable
_kBrotliPrefixCodeRanges
Name
.text
Size
408KB
Virtual Size
407KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
484KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
524B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=259, version=35207,
count=10, id=260, version=35207,
count=32, id=261, version=35207,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33145,
count=68, id=1, productName=Unmarked objects,
count=37, id=260, version=35225,
count=34, id=264, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
System.IO.Compression.ZipFile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 748de0badaa930026bc100699216f78874f7fc273ebce08a770ff8742c1d488e
- MD5 4604a39a23241ec59bf983f97c381629
- SHA1 3c718e252645b7df1756105efec0feda0b863319
- SHA512 71f1c22aa7746ef46279263b7dea930eac0995faf6b8fa4c5582d4c2b2e8afa8cdfb876ac12e93203072e4f2a4b34ebc2afc6a1f20ba9d6019067a3dffcd5078
- SSDEEP 192:6Mybl2YdX5jXDN79S/wH7u0irWPnREhW:6Mkl2Yd5zDN79kwFeWPRIW
- TLSH T114029411B3F80237FDF34F72AE27A2458735BDA8AD23C71D1085510E6866A149E32FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Compression.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95c427632aa95ab060b129d6f8ea63c380cdf41d25bd0c55d621774da39da6b0
- MD5 2f53b67f983387539434d6a74d5b09b5
- SHA1 fcd39fe6a346fc42e42f879da40d8250c43e572c
- SHA512 2969f7e7234774926aaaccacbcedbbd486ee267cd391468e80deca58812a4b8a040b7eb0ac0027897ce4b6ccefc127b1624245d5ac6d12d5850a15feb3e81f71
- SSDEEP 3072:/i3vFou9QhGfUOQISG0bJGenYOxb3jRd4jrlKNoG:/i3vFouXULbcepPuj
- TLSH T12EC34C7C23ED4A27F38F4A7DAA10956B43B6B226390BF7CD584C64DD29623C84D512E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
132990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
122KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.MemoryMappedFiles.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fd5569e5976d32eb56dc2b14a34fd3d5c8a6db29632fa13c92853c4f577268f0
- MD5 24dd4f6c5bcf23ff273b00bdd7de823e
- SHA1 9f1a959be41e29296718b0b802ce7cf371c5405c
- SHA512 c144b10328751a394ea2096854cd36547bcc80607cd6fba80004c7872672ab57ae534d9ece1f96672e918d3b6c2a5df1a609ad51d0fc83b19e8194e77cfcee93
- SSDEEP 384:aKhvSWoiLAQ2Yd5zb4NxomINS/ZMgZGyYXTh9+gwn562WVNsW:aaoGfPS/6q3inwo3
- TLSH T105B2F606B3F8422FFBFF0B74A97242444235F9EA5A12DB1D499A900F16537D84AB17A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Pipelines.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e216e1c72c2bb9efdd1625821efbf7b08a889ba35d62bc3147a005057093bb7d
- MD5 73bdce395647d249a0e34539a17ce1c1
- SHA1 9c30b72607ccecfbac96344f048db1670ff8c5c3
- SHA512 c948c59b4ead358fa524120b79f1f950e4cdaa7a9acf1f2fbdac0381ff590f4adc05071e334d256f1f4e2a596ee0f834126f275b9c98697d4dcb8dbca95c695f
- SSDEEP 96:JoPm/aL4ZlMHDVIH2VqUOr7iwTpm+jHO4uasqmoOOyXRZjL3xScsGTpDmDzLUPbW:GGaUfiVbVzpKdPiXJ1sorbvWllkW
- TLSH T1D9128451E3EA52B9FDF30F7A7976A5404636FE60E927CB5D4048840F1CA2B408A72B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Linq.Expressions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac3d200850e9a0538d6057d522c3e654774c6f683568145acc7d9ee0cdb0c150
- MD5 fbfeb23f3a793b30a52e97aed2cfbca4
- SHA1 bc9e973db51bd43dd80d339a012a107653587223
- SHA512 9e8e7be24309a3f0dea5f4cb59256fe10f0d1aad158e5e97e0a4333f62e5db244627b3f604c3df541d82bab7baabd86d38907247643f5b1ecb1d01390a5001f9
- SSDEEP 6144:CNGfKSJJaePauGTs2+XEhxzUBs1HvVXO0yXS+Tzi+5gkBHY5zEXPnt:CNGfln6bUBMM5FBRt
- TLSH T13F947C2127F85A2AD6EF0B75A0B018848BF5F447AA5ACF8F4C1176FA0D06381DF561B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
446382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
428KB
Virtual Size
427KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Linq.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5f405454ab2d2fc8a523a6ed325213e35c8bff18c74d7ccccef74f1378e8205
- MD5 3a8a6141eecf246e2c1488f02161b004
- SHA1 c63758c6ff4811c85610850a5ff63d55449367f1
- SHA512 7de460de718a5076a594c5363b202afc038b3bb75911a12768b93681bc0e356453054c20f9782efa6f0ec0830a33f592a0b21ce8a5929b6ee61a10942cbdd3df
- SSDEEP 1536:ZVJRjgeDgUXwaEAfvPN8i0+zMS9BdKxoAd6jryeD82PnVO2:rJ7XDftp0+zMyYoo6zDpX
- TLSH T11193080A72C95732DABF06BBB02211878BB1C253EA4FF385ACDC5BF49C9335448656B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
95630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2301fd561562e4b7e57e16baf3dcc3baef15a219d36d59d345f3dc7899b1e64f
- MD5 de4e73f70028d36ecb1a33e8c71cf2a0
- SHA1 ed54e81128b3dbf5a94fc32c931e04ea82f63ad0
- SHA512 8f95a1f437f493d9f641a48bdb4b57a6cb0ec8b00a7b90508ecbf58ed6c0ab5daed2e561c3b0607566116d983bb17653e90c0dd918ff15924f6fd8c84becdd11
- SSDEEP 384:6JWMStYXGZkYWuyptgDlUGyboXesGXg2WAcxi0dmoEHiD6if3qo7p+o3WrlkW:satYXIG/pCJU+AgViB1ifX7AoW
- TLSH T197B2391D13D95332FBBE47BBB47047940BB1E6058813FB6F8C9855280CB37E15A626AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d9d16de1eb354449c55dbb71f526fd371bbe7a7986cb8699940af8226a8c54b1
- MD5 919ec12a0c70a7ae372e446cfdc32f81
- SHA1 cf6bc6867fc8043de840a369bed684aa3eb99b13
- SHA512 f8dda4c2b0ac07a5d4c0953f16d5d2e8c0637619e973446b61f60cf4edd841a2192fafbd48c9ab7f2950e199885b26d991ee66035e287ca916fbaa61355042d5
- SSDEEP 6144:g2AC/K0B4PUTUh7lNcqgpzqVH/6mIrI5fJZgN17352wD0xkkV/WXi1pgezj:g2Db4cTUqo/Rfm1N8WSTzj
- TLSH T1B1B46C4073F48B17F2EF5B78E0754914CBBAB9466A15EB8E284890EE28A37C4CD51773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
522638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
502KB
Virtual Size
502KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.NameResolution.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0b07cb4e82aab24ed4b3e3c01a7d3b9c269d034166fab27eabb7d2aed0ff7b1
- MD5 9daf7e934afc9972a34673ac746eac57
- SHA1 b0a28aa6ec5972da85998dd30161ea9c5538a0e5
- SHA512 442e3585e489d6422af82327e7a52804851bd9c6f9cfe0b5b1e3d73fad559bd9761b49c51524556833046e33e4d78629ecf5cdf33a7e210b0cb1789dd61c89e7
- SSDEEP 768:1w+LcJlk8EtLeY5evc0z/NbRX4aEEKGKnYT2mOFFKYOjvuYme:1wOP8MLeY4l7dh4a8GKnpmPJuYme
- TLSH T1DB035D00B3D89732EEAF0F3A58B1819C1376E7951D12DF9C689C125A1DB3BC056627B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.NetworkInformation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 676e5d72717524f0226501bde01a725aafaaeb20deaf7655c431875fd4414b96
- MD5 5caf489dc77cbd1beda1206dd19f970c
- SHA1 a418cbc466085652ae0b19685b41256f78b45be3
- SHA512 97f87ef880c7e29fa91a120c1614b8908409c90196ebe119bd7fa924723063cf1445518d988acbfb389a809990bbae1144f7568834c7dbdca56b4d91f55c850b
- SSDEEP 384:9JK2sdUNJGfI0cyx7nUSRmZzSayWAYs+mG7D+8gnv59ujTfUFbSw1SMEolRwvkyr:9JK2sjfIiOZzlXJt+/8fgn9pyYE
- TLSH T13FE25B01E78DA73ADAEE0B3468B126160735E1803617EFAF16DC556E9AF37840B21773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 02db016f479331ccaef253d209edd6cde8ea1521e0e92211e78bef4a653bf341
- MD5 ade872940a063a908853651d0d954b85
- SHA1 f97ac9587dc42b57677560853ed74944904abb76
- SHA512 6867ddf3010eb09955ded4af44b55e5690991401c61753e368cfbd5dc728a0da94da961e2d2745757b24ab5097e99fe1df6e777fc792fb6fe49387084c5f9031
- SSDEEP 1536:w6J3hDSBr2cuyHQzgYsUQuWZ7slHvxypF05oJ5mj/cg:w6nSBrxwzgYyuWZ7s9vxypF0+Xm
- TLSH T170635C0463ED9B2AE3DE4FBDB46062150771DF532942EB6E2C84B5AA4D737C489223D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
75166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 34b47184e8caec0fffb06c198d14c27f738d75d97a6438c384e4d455f5d56207
- MD5 ccb11df649b7b65418be4939f20a967e
- SHA1 dabe01de7d7bdb21a773b6cd257816c336f65c57
- SHA512 d09e82ccfa71552f0e7dcf4f94d6229e590f22ac6982327f52f15651d94bbf35317f588c2d1c819c6c3487c825394c77fd5a050f2b000a414839c5664413cee6
- SSDEEP 3072:g+8bMPjESE2y3KGLTRkJQHB1WPNPhgQ8OTk+C1xAAJmxj+sQ6qKvbqGJw+eJLOyf:g+/PaRkJQHB1WlX8OTe1s+BpoqLOPj
- TLSH T10D246B7073F60E79F7EE1735E8709440867EA68B6E6ADB8D1C0440DE1983B9196263F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
217742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
205KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Sockets.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 348e08309710dbf45847d45a48184f8228e3c7b1768aba7970f04cdddfd0b9bb
- MD5 aabe422d5cb86f7483f8702a6186715c
- SHA1 50d088f4b3efeb41df0de365cc277cb721e470c3
- SHA512 3bc184c9b6e0d7fce37c112b1d3db9ea27535b9947300293af4a845bf379ce0d7a87dd73f7ac27278ed5fe02e4c9d1ae28a100a0c6ad564cfc05d93f123dd268
- SSDEEP 1536:yICF5Dg8z+vH/qlE05xOUWjMHvgg1zbWe/ggK+lofYMBOSOj7ji:RYVuAOUyMPDbTbRofYMsSR
- TLSH T155A36D6063F80A27F2FF0B3AB874254507B9F8962F03EB9EA55454AE19537C086617F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
110222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ObjectModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d1c1bc629499e2bd64b3cef02f69e8caf0d8b3e06c046b087cc7abd0b74b1a71
- MD5 8ae5fbfd476669af1f06304d64b74538
- SHA1 e3373e83598907f76855399115e50e4cd7f1f709
- SHA512 a0f66eced3fff7f522ca2856ead25c2b0900234dfb6d4afddfc2df1a4aacc48ede62b8ab69fd2782456075254b44a65cc185567d0488c6fd46317653b1388903
- SSDEEP 384:juj67fJ6P4L6rsIxbCtk2gEu2H6q8kGPMGamsVL0FRtaFBnjIONgejh5Ap3DG680:juu7foKIBmk9EPo+KEckoO
- TLSH T107920802B7DC933ADFEF0B35E8F611805231AAA67513DB5F1269040B9A677111BB2B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Private.CoreLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7fcc99e5354dad1ec78ebdc3ff60f51eea7e5c407b2d72216ed38ea495353fdb
- MD5 28bb6403194ee61058dab3e9fcfbf799
- SHA1 321a1e1085a6baa6ebaab45425d995ba09ff6f29
- SHA512 c25f6d7251a0b4fe0e5df139b9dcdcc1f59c1aba68fb30f540af76a7bbc2785e737f49bfd47265c3fd3cb899d548468664a1a176b2a422eb7643a42487a55d5a
- SSDEEP 49152:zgYQs3uXKJvBueMgMCoU09Rt5YvAwVUKkfUBW51Z:zgxs3uXKJvkT9H5Yv
- TLSH T19DE58E01F7ED9F6EE18F47396031841827B2ECDF6B4BDB4E204899D93C667401E256AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3152862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Private.Uri.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9bc134c54bddbfac033cbf08ce0c4cd8fc143812e47a1312f2744616b9421698
- MD5 8352d81363f57fca49ea773a84bd8390
- SHA1 97480eea2e169a1753083afa82a24089ed879c67
- SHA512 e89c6a7204c8041e97e63879c4f35a5efda2b714160d899c5033c5d4f67123fc5e6954620848ca576feae2dc7f1e8eddbfae0bc74ca9a9d603e96b3cdda64186
- SSDEEP 1536:NQZduMnYGFr7ALGRoCS6MjiHrX+AqSR3mZ3tEuXgpSCF1mtkO240MMYYMpSSY/Sw:edbnYGFr7ALGRoCS6MjiHrX+AqSR3mZ8
- TLSH T1D9832A04A7D8973EE7AE47BF54E2269343B4A61BB842F3D80CA420C92D363C6551DF97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Reflection.Metadata.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dc1dc49f1a996047171d7a8abd9ddf9d657183f57efc058ce2cb40123cc5655a
- MD5 05da325c34a51ac630f626ece8da521b
- SHA1 2198bb795734b98097a3f6d20af62a2b3fd46b15
- SHA512 b5a9bf2a2c5184ab0b8b64125f741c863c022cfef476dd7bd0991fe165ef2d2b640fa0abbe7b3c95543f1135153e51cb6a2e9a53c5c76a7120c233f992749605
- SSDEEP 3072:/Pax4oe2o3CRYV23vux+3XzbS42WhOtp5mf:qab3EEWSUX
- TLSH T14DB36B24A3FC236BF5FB8B79A47240160BB6B84E341BD75E0E0854DF256ABC45921B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
115118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.InteropServices.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d970aed8d603b04203d4c98338457a1d0986182c42878973aefed94458b0bee4
- MD5 aa91e349a95a6297842496e1efeeb601
- SHA1 a6fba6a4aea36cbe8897f2a4ec7ddc65e50e13ba
- SHA512 2c5542f082b8d33b5ab04ee6ebe5510fb7249e20237e819c04b25ca9460863c0ae84408a04fb1f39e8c4e59c9d38175ad2d8d109a042862ee035be53a913e8f7
- SSDEEP 384:BH30rl2Yd5zVNhVEyoOYW1ClACE9bYthenW0jiW:cfRXo+CQNYmz
- TLSH T13692091273D9577FDE6B0735DC76468147B2EEA85903EA3E8298541F448BB884730B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.Numerics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d79f1267c953d482e7a42489135fe8d64fd867e80da5d7ad357303c2650d8fc
- MD5 44e38429bd161e55fe13747f741a98ab
- SHA1 e7b7230263672ccfaffc98f6d396fad91faa5422
- SHA512 adb25da61f163b1121f0ec6463c454a58e7fddf5b1d52f43a72bb1f98de7d48efbf65cb0a85d735f5cce97508abc21c0f82ea0d93a2b556efaf8a0ba317eaa39
- SSDEEP 1536:AiNem3q7T+1FXRW33NrOQnrEFedntuLxG6E+T:SRTZ3NrOQnrEFEsL86E+T
- TLSH T10783F59D73AACA36DB8F8674792863268F319EA74167F3651CD811F4123B3857A021F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.AccessControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0b015f48fbc1806c506f5539260a00022cb6ea349f266f5fecebeeda10d0936b
- MD5 98b3daece33a2eed958a3d073ef7187f
- SHA1 6fef3198d765139ec408c55f9e7d9287b155f5c7
- SHA512 6ebb82d1d51150f85551e2a49aad62b587d8ce5e62af6abcf9b26c4d82ac1b2226c7cc31d9b0856cdfe0d21d74235e442bfe081412db2906bc3d59cfdd40528c
- SSDEEP 192:/Hjfpcrqmf9wtCtLtUItjVxd0fHGfwfk8SlluBYYlqHBo5xNNWBvWW:/Hjfpcrqmf9wEJqIxVMfHGYAkyYlqs3
- TLSH T106422D0167F81225FAF70BB5BE7A5D015D7BF8A47D22CA1D1198960F58A1E40CDB2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Claims.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e5a41f855db3e3a4d9f6805e3bc8029cc37477714cc2395b874dd666eb79f45c
- MD5 cd1c45512065b6662311663ce9a830e1
- SHA1 7dca0be9cfbaeddd222dab097e2f6d132792dd34
- SHA512 b828769dd2c9a8009d606225e7eed70ab7323f8ce1aa84e760ed2ea0f4036991f25f9799c470e07940e4a539dac6e0131de3c470432a030c053ac28b96e79c7a
- SSDEEP 384:z+ZLI2a2r2gCOUyelVall9AODsoijV1MJF96HX6WW1UW:zWHa2rfCO3riTMJFeE
- TLSH T1BE521B1573EC8337D9FF4F3DE8B642410376EA20A561DA6D49D8224E9857B00CB72B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Cryptography.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c513fb2abcf425002475cf6c664fac36236f8f4e67e0a47f40ce5e18995a8f35
- MD5 aca1a2ad6e8ab674569feebf8b406c60
- SHA1 5795fe178de1226351ffc0792e35ebb20acf944a
- SHA512 41afd50fbd21211b5a56bf00bb5fcc0a46ac1143e7896d248dc6f2fe393eb94639ae7fe794f64e3e8d75cf2bc4b656cb2134b59a447920605287f5a2d6187f11
- SSDEEP 6144:iAsYGJNfTB+GhdhlxhMZmufBPZbZnVAQ:vshNVhzOZ5ly
- TLSH T173245B287BE40F6EF5EF8779E1719401857EE497B923EB0C198516EE0463B808761B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
215486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
202KB
Virtual Size
202KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Principal.Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5da458637f1d54a12fb8495e899f9230a0caaac5dfd9a2768a30f41258334da
- MD5 e8680cd88956a7562f2d4346d41b7bf9
- SHA1 18884936ef3e1855a0fb898cdeb73279a8db6b22
- SHA512 364fa569e4df3e3330036368e41d47cdd89d44cde23a4af39497ba82c82120768804bb1a9815acc27d44a853918e3bec1aa4a4bca6c455c537a5dfaa7958d5f7
- SSDEEP 1536:LjmyjNtjkD0SAlqMFe2VY31TwBQhasACQ:PmyjNdqN31XAB
- TLSH T137335910A3EC432BE6FF4B3CA4F1625B16BAFA531B02EB9E4DB5455A1443BC18621733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12c422cfe08161d767921936292b5b61cadf8f37dcd6b0663f2085a7fc9638dc
- MD5 84f86052b4c23370c485c092b7da9a32
- SHA1 d0ae04674add9c99951aa207e5d7e2db8229f5ac
- SHA512 201ff8f94890f217de196392e77e355ad724bba5338ca7314dc59f032318d056d89f608c04e73c104f5af06d5345e87ab318c51ba599a05ebcad3341dc846fd7
- SSDEEP 384:URuM6A0XiGw0F/I2IVvtAhuCMyAaJueMLzdRBFKemBMMZIb+rjErE2cuyVVBWrhh:URV6dRTIMTMoJu7zXajddlI
- TLSH T181E23A117BC9D36AFEBE073268714151037ABF657826EF0A2DD876089477BD04B323A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Text.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95aabf911a668b5c687dda3f240837ca1985642bfafc2b668b9b9a3ed3466cd2
- MD5 d4e7900c4cbf9605ecb33c00bd6e40ec
- SHA1 62566ce3090c3ea6d0a29896fc7de3a15b60b9c9
- SHA512 bdbbae32da0ad4b6a9a989d2dcd4a8b461792d4d3f70d1b34c2e49a0ae2dcba8e773d9229a4d979605629cd11b586aab996beb8bf1bcf85a516d9e82f6275453
- SSDEEP 6144:NtL8icgNxI+GKbxyJER9Wvfb8u0KpVIoI5HV3DE:z0UxyJaUXwLiIb5H
- TLSH T19E547D2063FC4B6FD7EF0738E0749419CBBAB8263666DB8D854854ED2853BC0B5617A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
307310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
292KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Text.RegularExpressions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c68b376ff4f77fb3102428d6bb8c36ba5170f28e539eb72d4f7331018d9be836
- MD5 588dbc0ba9a6f7b6e94eb9ad584c604e
- SHA1 9b86d9d807e8d8718f9112e80c7919aecfbfbe5f
- SHA512 75cb1ff2e64537b3280019c042c0fd15fac6a3a897f226ddf711c84a086405630814027e04676adef74f46b30151613308902500d3abbca35314a198bbb2bc1c
- SSDEEP 6144:ifRosO0c5MZ4q7RKVKDAzI/ztvJc9KqjLj:iJosOvg76z8EpL
- TLSH T14F745BB853FC0922DBFFC736F0689059CBB59C92BB8ED6889C0871E81D7975079610A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
348142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
332KB
Virtual Size
331KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Channels.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b9b975284c16b61950883c97647a2cb2f263c8bb7027959b8c49963e3cee5c0e
- MD5 75f6f765419739a17ba49a07a2276432
- SHA1 d5c155388e4ad466c64df312f141d475677b9922
- SHA512 f6de6d672b16710381511c6c5cb19d3e3494db2cf8726906d4e03bcd6e98f58dc81f0a6ea9d78f23e5418d98ebfe6feaf2c79a85a9dc53846fbbc418afffcb05
- SSDEEP 384:L6hSTrSlH28x7F/ZkZ0ADiEQWGRW3c9MbkyzFAgRMw1tkFDF0E+MjnD0/NiP17CC:A865/LoQtW37VuJP6
- TLSH T1E4D22901D7DC1327DFAB1BBBE9B1161416B6EF50A812DF985D8CA2E4DCAB70017613B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b0f999337b36eb2881f518f12cabccf8a01a144b1ba9792022a243d4dd9e920
- MD5 633d8767054c5bb80064060387be0bf5
- SHA1 da77170ebef2f2d30dfc30488947f4196f1aca95
- SHA512 19042e7466042c9c693c2ccd7b30262fc5a6c42be6ed8ede022f9569e5fb92672721f5912df2ce384815025485f3b31b75983a26792d1a42e6fbc7784c51dbfc
- SSDEEP 48:6oZ6yzpbdiRd/aOK+wpTqwNPPDmD8bbZLHxnxZWV1KHhd5WmGEU9KH:TtpbdizagCDmDkLZWvALWf9
- TLSH T173B1502093A44337EDB74B73DDB39A8467BCBA10EE638B2D14D5124AAC17A148E31B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
av_libglesv2.dll
- IMPHASH 39e0b47d01cae06f42d925fb79045509
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
3816816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libGLESv2.dll.pdb
user32
GetClientRect
GetWindowThreadProcessId
IsIconic
IsWindow
WindowFromDC
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateFileW
CreateThread
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualProtect
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
dxgi
CreateDXGIFactory1
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressSingle
EGL_AcquireExternalContextANGLE
EGL_BindAPI
EGL_BindTexImage
EGL_ChooseConfig
EGL_ClientWaitSync
EGL_ClientWaitSyncKHR
EGL_CopyBuffers
EGL_CopyMetalSharedEventANGLE
EGL_CreateContext
EGL_CreateDeviceANGLE
EGL_CreateImage
EGL_CreateImageKHR
EGL_CreateNativeClientBufferANDROID
EGL_CreatePbufferFromClientBuffer
EGL_CreatePbufferSurface
EGL_CreatePixmapSurface
EGL_CreatePlatformPixmapSurface
EGL_CreatePlatformPixmapSurfaceEXT
EGL_CreatePlatformWindowSurface
EGL_CreatePlatformWindowSurfaceEXT
EGL_CreateStreamKHR
EGL_CreateStreamProducerD3DTextureANGLE
EGL_CreateSync
EGL_CreateSyncKHR
EGL_CreateWindowSurface
EGL_DebugMessageControlKHR
EGL_DestroyContext
EGL_DestroyImage
EGL_DestroyImageKHR
EGL_DestroyStreamKHR
EGL_DestroySurface
EGL_DestroySync
EGL_DestroySyncKHR
EGL_DupNativeFenceFDANDROID
EGL_ExportVkImageANGLE
EGL_ForceGPUSwitchANGLE
EGL_GetCompositorTimingANDROID
EGL_GetCompositorTimingSupportedANDROID
EGL_GetConfigAttrib
EGL_GetConfigs
EGL_GetCurrentContext
EGL_GetCurrentDisplay
EGL_GetCurrentSurface
EGL_GetDisplay
EGL_GetError
EGL_GetFrameTimestampSupportedANDROID
EGL_GetFrameTimestampsANDROID
EGL_GetMscRateANGLE
EGL_GetNativeClientBufferANDROID
EGL_GetNextFrameIdANDROID
EGL_GetPlatformDisplay
EGL_GetPlatformDisplayEXT
EGL_GetProcAddress
EGL_GetSyncAttrib
EGL_GetSyncAttribKHR
EGL_GetSyncValuesCHROMIUM
EGL_HandleGPUSwitchANGLE
EGL_Initialize
EGL_LabelObjectKHR
EGL_LockSurfaceKHR
EGL_LockVulkanQueueANGLE
EGL_MakeCurrent
EGL_PostSubBufferNV
EGL_PrepareSwapBuffersANGLE
EGL_PresentationTimeANDROID
EGL_ProgramCacheGetAttribANGLE
EGL_ProgramCachePopulateANGLE
EGL_ProgramCacheQueryANGLE
EGL_ProgramCacheResizeANGLE
EGL_QueryAPI
EGL_QueryContext
EGL_QueryDebugKHR
EGL_QueryDeviceAttribEXT
EGL_QueryDeviceStringEXT
EGL_QueryDisplayAttribANGLE
EGL_QueryDisplayAttribEXT
EGL_QueryDmaBufFormatsEXT
EGL_QueryDmaBufModifiersEXT
EGL_QueryStreamKHR
EGL_QueryStreamu64KHR
EGL_QueryString
EGL_QueryStringiANGLE
EGL_QuerySupportedCompressionRatesEXT
EGL_QuerySurface
EGL_QuerySurface64KHR
EGL_QuerySurfacePointerANGLE
EGL_ReacquireHighPowerGPUANGLE
EGL_ReleaseDeviceANGLE
EGL_ReleaseExternalContextANGLE
EGL_ReleaseHighPowerGPUANGLE
EGL_ReleaseTexImage
EGL_ReleaseThread
EGL_SetBlobCacheFuncsANDROID
EGL_SetDamageRegionKHR
EGL_SetValidationEnabledANGLE
EGL_SignalSyncKHR
EGL_StreamAttribKHR
EGL_StreamConsumerAcquireKHR
EGL_StreamConsumerGLTextureExternalAttribsNV
EGL_StreamConsumerGLTextureExternalKHR
EGL_StreamConsumerReleaseKHR
EGL_StreamPostD3DTextureANGLE
EGL_SurfaceAttrib
EGL_SwapBuffers
EGL_SwapBuffersWithDamageKHR
EGL_SwapInterval
EGL_Terminate
EGL_UnlockSurfaceKHR
EGL_UnlockVulkanQueueANGLE
EGL_WaitClient
EGL_WaitGL
EGL_WaitNative
EGL_WaitSync
EGL_WaitSyncKHR
EGL_WaitUntilWorkScheduledANGLE
GL_AcquireTexturesANGLE
GL_ActiveShaderProgram
GL_ActiveShaderProgramEXT
GL_ActiveTexture
GL_AlphaFunc
GL_AlphaFuncx
GL_AttachShader
GL_BeginPerfMonitorAMD
GL_BeginPixelLocalStorageANGLE
GL_BeginQuery
GL_BeginQueryEXT
GL_BeginTransformFeedback
GL_BindAttribLocation
GL_BindBuffer
GL_BindBufferBase
GL_BindBufferRange
GL_BindFragDataLocationEXT
GL_BindFragDataLocationIndexedEXT
GL_BindFramebuffer
GL_BindFramebufferOES
GL_BindImageTexture
GL_BindProgramPipeline
GL_BindProgramPipelineEXT
GL_BindRenderbuffer
GL_BindRenderbufferOES
GL_BindSampler
GL_BindTexture
GL_BindTransformFeedback
GL_BindUniformLocationCHROMIUM
GL_BindVertexArray
GL_BindVertexArrayOES
GL_BindVertexBuffer
GL_BlendBarrier
GL_BlendBarrierKHR
GL_BlendColor
GL_BlendEquation
GL_BlendEquationOES
GL_BlendEquationSeparate
GL_BlendEquationSeparatei
GL_BlendEquationSeparateiEXT
GL_BlendEquationSeparateiOES
GL_BlendEquationi
GL_BlendEquationiEXT
GL_BlendEquationiOES
GL_BlendFunc
GL_BlendFuncSeparate
GL_BlendFuncSeparatei
GL_BlendFuncSeparateiEXT
GL_BlendFuncSeparateiOES
GL_BlendFunci
GL_BlendFunciEXT
GL_BlendFunciOES
GL_BlitFramebuffer
GL_BlitFramebufferANGLE
GL_BlitFramebufferNV
GL_BlobCacheCallbacksANGLE
GL_BufferData
GL_BufferStorageEXT
GL_BufferStorageExternalEXT
GL_BufferStorageMemEXT
GL_BufferSubData
GL_CheckFramebufferStatus
GL_CheckFramebufferStatusOES
GL_Clear
GL_ClearBufferfi
GL_ClearBufferfv
GL_ClearBufferiv
GL_ClearBufferuiv
GL_ClearColor
GL_ClearColorx
GL_ClearDepthf
GL_ClearDepthx
GL_ClearStencil
GL_ClearTexImageEXT
GL_ClearTexSubImageEXT
GL_ClientActiveTexture
GL_ClientWaitSync
GL_ClipControlEXT
GL_ClipPlanef
GL_ClipPlanex
GL_Color4f
GL_Color4ub
GL_Color4x
GL_ColorMask
GL_ColorMaski
GL_ColorMaskiEXT
GL_ColorMaskiOES
GL_ColorPointer
GL_CompileShader
GL_CompressedCopyTextureCHROMIUM
GL_CompressedTexImage2D
GL_CompressedTexImage2DRobustANGLE
GL_CompressedTexImage3D
GL_CompressedTexImage3DOES
GL_CompressedTexImage3DRobustANGLE
GL_CompressedTexSubImage2D
GL_CompressedTexSubImage2DRobustANGLE
GL_CompressedTexSubImage3D
GL_CompressedTexSubImage3DOES
GL_CompressedTexSubImage3DRobustANGLE
GL_CopyBufferSubData
GL_CopyImageSubData
GL_CopyImageSubDataEXT
GL_CopyImageSubDataOES
GL_CopySubTexture3DANGLE
GL_CopySubTextureCHROMIUM
GL_CopyTexImage2D
GL_CopyTexSubImage2D
GL_CopyTexSubImage3D
GL_CopyTexSubImage3DOES
GL_CopyTexture3DANGLE
GL_CopyTextureCHROMIUM
GL_CoverageModulationCHROMIUM
GL_CreateMemoryObjectsEXT
GL_CreateProgram
GL_CreateShader
GL_CreateShaderProgramv
GL_CreateShaderProgramvEXT
GL_CullFace
GL_CurrentPaletteMatrixOES
GL_DebugMessageCallback
GL_DebugMessageCallbackKHR
GL_DebugMessageControl
GL_DebugMessageControlKHR
GL_DebugMessageInsert
GL_DebugMessageInsertKHR
GL_DeleteBuffers
GL_DeleteFencesNV
GL_DeleteFramebuffers
GL_DeleteFramebuffersOES
GL_DeleteMemoryObjectsEXT
GL_DeletePerfMonitorsAMD
GL_DeleteProgram
GL_DeleteProgramPipelines
GL_DeleteProgramPipelinesEXT
GL_DeleteQueries
GL_DeleteQueriesEXT
GL_DeleteRenderbuffers
GL_DeleteRenderbuffersOES
GL_DeleteSamplers
GL_DeleteSemaphoresEXT
GL_DeleteShader
GL_DeleteSync
GL_DeleteTextures
GL_DeleteTransformFeedbacks
GL_DeleteVertexArrays
GL_DeleteVertexArraysOES
GL_DepthFunc
GL_DepthMask
GL_DepthRangef
GL_DepthRangex
GL_DetachShader
GL_Disable
GL_DisableClientState
GL_DisableExtensionANGLE
GL_DisableVertexAttribArray
GL_Disablei
GL_DisableiEXT
GL_DisableiOES
GL_DiscardFramebufferEXT
GL_DispatchCompute
GL_DispatchComputeIndirect
GL_DrawArrays
GL_DrawArraysIndirect
GL_DrawArraysInstanced
GL_DrawArraysInstancedANGLE
GL_DrawArraysInstancedBaseInstanceANGLE
GL_DrawArraysInstancedBaseInstanceEXT
GL_DrawArraysInstancedEXT
GL_DrawBuffers
GL_DrawBuffersEXT
GL_DrawElements
GL_DrawElementsBaseVertex
GL_DrawElementsBaseVertexEXT
GL_DrawElementsBaseVertexOES
GL_DrawElementsIndirect
GL_DrawElementsInstanced
GL_DrawElementsInstancedANGLE
GL_DrawElementsInstancedBaseInstanceEXT
GL_DrawElementsInstancedBaseVertex
GL_DrawElementsInstancedBaseVertexBaseInstanceANGLE
GL_DrawElementsInstancedBaseVertexBaseInstanceEXT
GL_DrawElementsInstancedBaseVertexEXT
GL_DrawElementsInstancedBaseVertexOES
GL_DrawElementsInstancedEXT
GL_DrawRangeElements
GL_DrawRangeElementsBaseVertex
GL_DrawRangeElementsBaseVertexEXT
GL_DrawRangeElementsBaseVertexOES
GL_DrawTexfOES
GL_DrawTexfvOES
GL_DrawTexiOES
GL_DrawTexivOES
GL_DrawTexsOES
GL_DrawTexsvOES
GL_DrawTexxOES
GL_DrawTexxvOES
GL_EGLImageTargetRenderbufferStorageOES
GL_EGLImageTargetTexStorageEXT
GL_EGLImageTargetTexture2DOES
GL_Enable
GL_EnableClientState
GL_EnableVertexAttribArray
GL_Enablei
GL_EnableiEXT
GL_EnableiOES
GL_EndPerfMonitorAMD
GL_EndPixelLocalStorageANGLE
GL_EndQuery
GL_EndQueryEXT
GL_EndTilingQCOM
GL_EndTransformFeedback
GL_FenceSync
GL_Finish
GL_FinishFenceNV
GL_Flush
GL_FlushMappedBufferRange
GL_FlushMappedBufferRangeEXT
GL_Fogf
GL_Fogfv
GL_Fogx
GL_Fogxv
GL_FramebufferFetchBarrierEXT
GL_FramebufferFoveationConfigQCOM
GL_FramebufferFoveationParametersQCOM
GL_FramebufferMemorylessPixelLocalStorageANGLE
GL_FramebufferParameteri
GL_FramebufferParameteriMESA
GL_FramebufferPixelLocalClearValuefvANGLE
GL_FramebufferPixelLocalClearValueivANGLE
GL_FramebufferPixelLocalClearValueuivANGLE
GL_FramebufferPixelLocalStorageInterruptANGLE
GL_FramebufferPixelLocalStorageRestoreANGLE
GL_FramebufferRenderbuffer
GL_FramebufferRenderbufferOES
GL_FramebufferTexture
GL_FramebufferTexture2D
GL_FramebufferTexture2DMultisampleEXT
GL_FramebufferTexture2DOES
GL_FramebufferTexture3DOES
GL_FramebufferTextureEXT
GL_FramebufferTextureLayer
GL_FramebufferTextureMultiviewOVR
GL_FramebufferTextureOES
GL_FramebufferTexturePixelLocalStorageANGLE
GL_FrontFace
GL_Frustumf
GL_Frustumx
GL_GenBuffers
GL_GenFencesNV
GL_GenFramebuffers
GL_GenFramebuffersOES
GL_GenPerfMonitorsAMD
GL_GenProgramPipelines
GL_GenProgramPipelinesEXT
GL_GenQueries
GL_GenQueriesEXT
GL_GenRenderbuffers
GL_GenRenderbuffersOES
GL_GenSamplers
GL_GenSemaphoresEXT
GL_GenTextures
GL_GenTransformFeedbacks
GL_GenVertexArrays
GL_GenVertexArraysOES
GL_GenerateMipmap
GL_GenerateMipmapOES
GL_GetActiveAttrib
GL_GetActiveUniform
GL_GetActiveUniformBlockName
GL_GetActiveUniformBlockiv
GL_GetActiveUniformBlockivRobustANGLE
GL_GetActiveUniformsiv
GL_GetAttachedShaders
GL_GetAttribLocation
GL_GetBooleani_v
GL_GetBooleani_vRobustANGLE
GL_GetBooleanv
GL_GetBooleanvRobustANGLE
GL_GetBufferParameteri64v
GL_GetBufferParameteri64vRobustANGLE
GL_GetBufferParameteriv
GL_GetBufferParameterivRobustANGLE
GL_GetBufferPointerv
GL_GetBufferPointervOES
GL_GetBufferPointervRobustANGLE
GL_GetClipPlanef
GL_GetClipPlanex
GL_GetCompressedTexImageANGLE
GL_GetDebugMessageLog
GL_GetDebugMessageLogKHR
GL_GetError
GL_GetFenceivNV
GL_GetFixedv
GL_GetFloatv
GL_GetFloatvRobustANGLE
GL_GetFragDataIndexEXT
GL_GetFragDataLocation
GL_GetFramebufferAttachmentParameteriv
GL_GetFramebufferAttachmentParameterivOES
GL_GetFramebufferAttachmentParameterivRobustANGLE
GL_GetFramebufferParameteriv
GL_GetFramebufferParameterivMESA
GL_GetFramebufferParameterivRobustANGLE
GL_GetFramebufferPixelLocalStorageParameterfvANGLE
GL_GetFramebufferPixelLocalStorageParameterfvRobustANGLE
GL_GetFramebufferPixelLocalStorageParameterivANGLE
GL_GetFramebufferPixelLocalStorageParameterivRobustANGLE
GL_GetGraphicsResetStatus
GL_GetGraphicsResetStatusEXT
GL_GetGraphicsResetStatusKHR
GL_GetInteger64i_v
GL_GetInteger64i_vRobustANGLE
GL_GetInteger64v
GL_GetInteger64vEXT
GL_GetInteger64vRobustANGLE
GL_GetIntegeri_v
GL_GetIntegeri_vRobustANGLE
GL_GetIntegerv
GL_GetIntegervRobustANGLE
GL_GetInternalformativ
GL_GetInternalformativRobustANGLE
GL_GetLightfv
GL_GetLightxv
GL_GetMaterialfv
GL_GetMaterialxv
GL_GetMemoryObjectParameterivEXT
GL_GetMultisamplefv
GL_GetMultisamplefvANGLE
GL_GetMultisamplefvRobustANGLE
GL_GetObjectLabel
GL_GetObjectLabelEXT
GL_GetObjectLabelKHR
GL_GetObjectPtrLabel
GL_GetObjectPtrLabelKHR
GL_GetPerfMonitorCounterDataAMD
GL_GetPerfMonitorCounterInfoAMD
GL_GetPerfMonitorCounterStringAMD
GL_GetPerfMonitorCountersAMD
GL_GetPerfMonitorGroupStringAMD
GL_GetPerfMonitorGroupsAMD
GL_GetPointerv
GL_GetPointervANGLE
GL_GetPointervKHR
GL_GetPointervRobustANGLERobustANGLE
GL_GetProgramBinary
GL_GetProgramBinaryOES
GL_GetProgramInfoLog
GL_GetProgramInterfaceiv
GL_GetProgramInterfaceivRobustANGLE
GL_GetProgramPipelineInfoLog
GL_GetProgramPipelineInfoLogEXT
GL_GetProgramPipelineiv
GL_GetProgramPipelineivEXT
GL_GetProgramResourceIndex
GL_GetProgramResourceLocation
GL_GetProgramResourceLocationIndexEXT
GL_GetProgramResourceName
GL_GetProgramResourceiv
GL_GetProgramiv
GL_GetProgramivRobustANGLE
GL_GetQueryObjecti64vEXT
GL_GetQueryObjecti64vRobustANGLE
GL_GetQueryObjectivEXT
GL_GetQueryObjectivRobustANGLE
GL_GetQueryObjectui64vEXT
GL_GetQueryObjectui64vRobustANGLE
GL_GetQueryObjectuiv
GL_GetQueryObjectuivEXT
GL_GetQueryObjectuivRobustANGLE
GL_GetQueryiv
GL_GetQueryivEXT
GL_GetQueryivRobustANGLE
GL_GetRenderbufferImageANGLE
GL_GetRenderbufferParameteriv
GL_GetRenderbufferParameterivOES
GL_GetRenderbufferParameterivRobustANGLE
GL_GetSamplerParameterIiv
GL_GetSamplerParameterIivEXT
GL_GetSamplerParameterIivOES
GL_GetSamplerParameterIivRobustANGLE
GL_GetSamplerParameterIuiv
GL_GetSamplerParameterIuivEXT
GL_GetSamplerParameterIuivOES
GL_GetSamplerParameterIuivRobustANGLE
GL_GetSamplerParameterfv
GL_GetSamplerParameterfvRobustANGLE
GL_GetSamplerParameteriv
GL_GetSamplerParameterivRobustANGLE
GL_GetSemaphoreParameterui64vEXT
GL_GetShaderInfoLog
GL_GetShaderPrecisionFormat
GL_GetShaderSource
GL_GetShaderiv
GL_GetShaderivRobustANGLE
GL_GetString
GL_GetStringi
GL_GetSynciv
GL_GetTexEnvfv
GL_GetTexEnviv
GL_GetTexEnvxv
GL_GetTexGenfvOES
GL_GetTexGenivOES
GL_GetTexGenxvOES
GL_GetTexImageANGLE
GL_GetTexLevelParameterfv
GL_GetTexLevelParameterfvANGLE
GL_GetTexLevelParameterfvRobustANGLE
GL_GetTexLevelParameteriv
GL_GetTexLevelParameterivANGLE
GL_GetTexLevelParameterivRobustANGLE
GL_GetTexParameterIiv
GL_GetTexParameterIivEXT
GL_GetTexParameterIivOES
GL_GetTexParameterIivRobustANGLE
GL_GetTexParameterIuiv
GL_GetTexParameterIuivEXT
GL_GetTexParameterIuivOES
GL_GetTexParameterIuivRobustANGLE
GL_GetTexParameterfv
GL_GetTexParameterfvRobustANGLE
GL_GetTexParameteriv
GL_GetTexParameterivRobustANGLE
GL_GetTexParameterxv
GL_GetTransformFeedbackVarying
GL_GetTranslatedShaderSourceANGLE
GL_GetUniformBlockIndex
GL_GetUniformIndices
GL_GetUniformLocation
GL_GetUniformfv
GL_GetUniformfvRobustANGLE
GL_GetUniformiv
GL_GetUniformivRobustANGLE
GL_GetUniformuiv
GL_GetUniformuivRobustANGLE
GL_GetUnsignedBytei_vEXT
GL_GetUnsignedBytevEXT
GL_GetVertexAttribIiv
GL_GetVertexAttribIivRobustANGLE
GL_GetVertexAttribIuiv
GL_GetVertexAttribIuivRobustANGLE
GL_GetVertexAttribPointerv
GL_GetVertexAttribPointervRobustANGLE
GL_GetVertexAttribfv
GL_GetVertexAttribfvRobustANGLE
GL_GetVertexAttribiv
GL_GetVertexAttribivRobustANGLE
GL_GetnUniformfv
GL_GetnUniformfvEXT
GL_GetnUniformfvKHR
GL_GetnUniformfvRobustANGLE
GL_GetnUniformiv
GL_GetnUniformivEXT
GL_GetnUniformivKHR
GL_GetnUniformivRobustANGLE
GL_GetnUniformuiv
GL_GetnUniformuivKHR
GL_GetnUniformuivRobustANGLE
GL_Hint
GL_ImportMemoryFdEXT
GL_ImportMemoryZirconHandleANGLE
GL_ImportSemaphoreFdEXT
GL_ImportSemaphoreZirconHandleANGLE
GL_InsertEventMarkerEXT
GL_InvalidateFramebuffer
GL_InvalidateSubFramebuffer
GL_InvalidateTextureANGLE
GL_IsBuffer
GL_IsEnabled
GL_IsEnabledi
GL_IsEnablediEXT
GL_IsEnablediOES
GL_IsFenceNV
GL_IsFramebuffer
GL_IsFramebufferOES
GL_IsMemoryObjectEXT
GL_IsProgram
GL_IsProgramPipeline
GL_IsProgramPipelineEXT
GL_IsQuery
GL_IsQueryEXT
GL_IsRenderbuffer
GL_IsRenderbufferOES
GL_IsSampler
GL_IsSemaphoreEXT
GL_IsShader
GL_IsSync
GL_IsTexture
GL_IsTransformFeedback
GL_IsVertexArray
GL_IsVertexArrayOES
GL_LabelObjectEXT
GL_LightModelf
GL_LightModelfv
GL_LightModelx
GL_LightModelxv
GL_Lightf
GL_Lightfv
GL_Lightx
GL_Lightxv
GL_LineWidth
GL_LineWidthx
GL_LinkProgram
GL_LoadIdentity
GL_LoadMatrixf
GL_LoadMatrixx
GL_LoadPaletteFromModelViewMatrixOES
GL_LogicOp
GL_LogicOpANGLE
GL_LoseContextCHROMIUM
GL_MapBufferOES
GL_MapBufferRange
GL_MapBufferRangeEXT
GL_Materialf
GL_Materialfv
GL_Materialx
GL_Materialxv
GL_MatrixIndexPointerOES
GL_MatrixMode
GL_MaxShaderCompilerThreadsKHR
GL_MemoryBarrier
GL_MemoryBarrierByRegion
GL_MemoryObjectParameterivEXT
GL_MinSampleShading
GL_MinSampleShadingOES
GL_MultMatrixf
GL_MultMatrixx
GL_MultiDrawArraysANGLE
GL_MultiDrawArraysEXT
GL_MultiDrawArraysIndirectEXT
GL_MultiDrawArraysInstancedANGLE
GL_MultiDrawArraysInstancedBaseInstanceANGLE
GL_MultiDrawElementsANGLE
GL_MultiDrawElementsBaseVertexEXT
GL_MultiDrawElementsEXT
GL_MultiDrawElementsIndirectEXT
GL_MultiDrawElementsInstancedANGLE
GL_MultiDrawElementsInstancedBaseVertexBaseInstanceANGLE
GL_MultiTexCoord4f
GL_MultiTexCoord4x
GL_Normal3f
GL_Normal3x
GL_NormalPointer
GL_ObjectLabel
GL_ObjectLabelKHR
GL_ObjectPtrLabel
GL_ObjectPtrLabelKHR
GL_Orthof
GL_Orthox
GL_PatchParameteri
GL_PatchParameteriEXT
GL_PatchParameteriOES
GL_PauseTransformFeedback
GL_PixelLocalStorageBarrierANGLE
GL_PixelStorei
GL_PointParameterf
GL_PointParameterfv
GL_PointParameterx
GL_PointParameterxv
GL_PointSize
GL_PointSizePointerOES
GL_PointSizex
GL_PolygonModeANGLE
GL_PolygonModeNV
GL_PolygonOffset
GL_PolygonOffsetClampEXT
GL_PolygonOffsetx
GL_PopDebugGroup
GL_PopDebugGroupKHR
GL_PopGroupMarkerEXT
GL_PopMatrix
GL_PrimitiveBoundingBox
GL_PrimitiveBoundingBoxEXT
GL_PrimitiveBoundingBoxOES
GL_ProgramBinary
GL_ProgramBinaryOES
GL_ProgramParameteri
GL_ProgramParameteriEXT
GL_ProgramUniform1f
GL_ProgramUniform1fEXT
GL_ProgramUniform1fv
GL_ProgramUniform1fvEXT
GL_ProgramUniform1i
GL_ProgramUniform1iEXT
GL_ProgramUniform1iv
GL_ProgramUniform1ivEXT
GL_ProgramUniform1ui
GL_ProgramUniform1uiEXT
GL_ProgramUniform1uiv
GL_ProgramUniform1uivEXT
GL_ProgramUniform2f
GL_ProgramUniform2fEXT
GL_ProgramUniform2fv
GL_ProgramUniform2fvEXT
GL_ProgramUniform2i
GL_ProgramUniform2iEXT
GL_ProgramUniform2iv
GL_ProgramUniform2ivEXT
GL_ProgramUniform2ui
GL_ProgramUniform2uiEXT
GL_ProgramUniform2uiv
GL_ProgramUniform2uivEXT
GL_ProgramUniform3f
GL_ProgramUniform3fEXT
GL_ProgramUniform3fv
GL_ProgramUniform3fvEXT
GL_ProgramUniform3i
GL_ProgramUniform3iEXT
GL_ProgramUniform3iv
GL_ProgramUniform3ivEXT
GL_ProgramUniform3ui
GL_ProgramUniform3uiEXT
GL_ProgramUniform3uiv
GL_ProgramUniform3uivEXT
GL_ProgramUniform4f
GL_ProgramUniform4fEXT
GL_ProgramUniform4fv
GL_ProgramUniform4fvEXT
GL_ProgramUniform4i
GL_ProgramUniform4iEXT
GL_ProgramUniform4iv
GL_ProgramUniform4ivEXT
GL_ProgramUniform4ui
GL_ProgramUniform4uiEXT
GL_ProgramUniform4uiv
GL_ProgramUniform4uivEXT
GL_ProgramUniformMatrix2fv
GL_ProgramUniformMatrix2fvEXT
GL_ProgramUniformMatrix2x3fv
GL_ProgramUniformMatrix2x3fvEXT
GL_ProgramUniformMatrix2x4fv
GL_ProgramUniformMatrix2x4fvEXT
GL_ProgramUniformMatrix3fv
GL_ProgramUniformMatrix3fvEXT
GL_ProgramUniformMatrix3x2fv
GL_ProgramUniformMatrix3x2fvEXT
GL_ProgramUniformMatrix3x4fv
GL_ProgramUniformMatrix3x4fvEXT
GL_ProgramUniformMatrix4fv
GL_ProgramUniformMatrix4fvEXT
GL_ProgramUniformMatrix4x2fv
GL_ProgramUniformMatrix4x2fvEXT
GL_ProgramUniformMatrix4x3fv
GL_ProgramUniformMatrix4x3fvEXT
GL_ProvokingVertexANGLE
GL_PushDebugGroup
GL_PushDebugGroupKHR
GL_PushGroupMarkerEXT
GL_PushMatrix
GL_QueryCounterEXT
GL_QueryMatrixxOES
GL_ReadBuffer
GL_ReadPixels
GL_ReadPixelsRobustANGLE
GL_ReadnPixels
GL_ReadnPixelsEXT
GL_ReadnPixelsKHR
GL_ReadnPixelsRobustANGLE
GL_ReleaseShaderCompiler
GL_ReleaseTexturesANGLE
GL_RenderbufferStorage
GL_RenderbufferStorageMultisample
GL_RenderbufferStorageMultisampleANGLE
GL_RenderbufferStorageMultisampleEXT
GL_RenderbufferStorageOES
GL_RequestExtensionANGLE
GL_ResumeTransformFeedback
GL_Rotatef
GL_Rotatex
GL_SampleCoverage
GL_SampleCoveragex
GL_SampleMaski
GL_SampleMaskiANGLE
GL_SamplerParameterIiv
GL_SamplerParameterIivEXT
GL_SamplerParameterIivOES
GL_SamplerParameterIivRobustANGLE
GL_SamplerParameterIuiv
GL_SamplerParameterIuivEXT
GL_SamplerParameterIuivOES
GL_SamplerParameterIuivRobustANGLE
GL_SamplerParameterf
GL_SamplerParameterfv
GL_SamplerParameterfvRobustANGLE
GL_SamplerParameteri
GL_SamplerParameteriv
GL_SamplerParameterivRobustANGLE
GL_Scalef
GL_Scalex
GL_Scissor
GL_SelectPerfMonitorCountersAMD
GL_SemaphoreParameterui64vEXT
GL_SetFenceNV
GL_ShadeModel
GL_ShaderBinary
GL_ShaderSource
GL_ShadingRateQCOM
GL_SignalSemaphoreEXT
GL_StartTilingQCOM
GL_StencilFunc
GL_StencilFuncSeparate
GL_StencilMask
GL_StencilMaskSeparate
GL_StencilOp
GL_StencilOpSeparate
GL_TestFenceNV
GL_TexBuffer
GL_TexBufferEXT
GL_TexBufferOES
GL_TexBufferRange
GL_TexBufferRangeEXT
GL_TexBufferRangeOES
GL_TexCoordPointer
GL_TexEnvf
GL_TexEnvfv
GL_TexEnvi
GL_TexEnviv
GL_TexEnvx
GL_TexEnvxv
GL_TexGenfOES
GL_TexGenfvOES
GL_TexGeniOES
GL_TexGenivOES
GL_TexGenxOES
GL_TexGenxvOES
GL_TexImage2D
GL_TexImage2DExternalANGLE
GL_TexImage2DRobustANGLE
GL_TexImage3D
GL_TexImage3DOES
GL_TexImage3DRobustANGLE
GL_TexParameterIiv
GL_TexParameterIivEXT
GL_TexParameterIivOES
GL_TexParameterIivRobustANGLE
GL_TexParameterIuiv
GL_TexParameterIuivEXT
GL_TexParameterIuivOES
GL_TexParameterIuivRobustANGLE
GL_TexParameterf
GL_TexParameterfv
GL_TexParameterfvRobustANGLE
GL_TexParameteri
GL_TexParameteriv
GL_TexParameterivRobustANGLE
GL_TexParameterx
GL_TexParameterxv
GL_TexStorage2D
GL_TexStorage2DEXT
GL_TexStorage2DMultisample
GL_TexStorage2DMultisampleANGLE
GL_TexStorage3D
GL_TexStorage3DEXT
GL_TexStorage3DMultisample
GL_TexStorage3DMultisampleOES
GL_TexStorageAttribs2DEXT
GL_TexStorageAttribs3DEXT
GL_TexStorageMem2DEXT
GL_TexStorageMem2DMultisampleEXT
GL_TexStorageMem3DEXT
GL_TexStorageMem3DMultisampleEXT
GL_TexStorageMemFlags2DANGLE
GL_TexStorageMemFlags2DMultisampleANGLE
GL_TexStorageMemFlags3DANGLE
GL_TexStorageMemFlags3DMultisampleANGLE
GL_TexSubImage2D
GL_TexSubImage2DRobustANGLE
GL_TexSubImage3D
GL_TexSubImage3DOES
GL_TexSubImage3DRobustANGLE
GL_TextureFoveationParametersQCOM
GL_TransformFeedbackVaryings
GL_Translatef
GL_Translatex
GL_Uniform1f
GL_Uniform1fv
GL_Uniform1i
GL_Uniform1iv
GL_Uniform1ui
GL_Uniform1uiv
GL_Uniform2f
GL_Uniform2fv
GL_Uniform2i
GL_Uniform2iv
GL_Uniform2ui
GL_Uniform2uiv
GL_Uniform3f
GL_Uniform3fv
GL_Uniform3i
GL_Uniform3iv
GL_Uniform3ui
GL_Uniform3uiv
GL_Uniform4f
GL_Uniform4fv
GL_Uniform4i
GL_Uniform4iv
GL_Uniform4ui
GL_Uniform4uiv
GL_UniformBlockBinding
GL_UniformMatrix2fv
GL_UniformMatrix2x3fv
GL_UniformMatrix2x4fv
GL_UniformMatrix3fv
GL_UniformMatrix3x2fv
GL_UniformMatrix3x4fv
GL_UniformMatrix4fv
GL_UniformMatrix4x2fv
GL_UniformMatrix4x3fv
GL_UnmapBuffer
GL_UnmapBufferOES
GL_UseProgram
GL_UseProgramStages
GL_UseProgramStagesEXT
GL_ValidateProgram
GL_ValidateProgramPipeline
GL_ValidateProgramPipelineEXT
GL_VertexAttrib1f
GL_VertexAttrib1fv
GL_VertexAttrib2f
GL_VertexAttrib2fv
GL_VertexAttrib3f
GL_VertexAttrib3fv
GL_VertexAttrib4f
GL_VertexAttrib4fv
GL_VertexAttribBinding
GL_VertexAttribDivisor
GL_VertexAttribDivisorANGLE
GL_VertexAttribDivisorEXT
GL_VertexAttribFormat
GL_VertexAttribI4i
GL_VertexAttribI4iv
GL_VertexAttribI4ui
GL_VertexAttribI4uiv
GL_VertexAttribIFormat
GL_VertexAttribIPointer
GL_VertexAttribPointer
GL_VertexBindingDivisor
GL_VertexPointer
GL_Viewport
GL_WaitSemaphoreEXT
GL_WaitSync
GL_WeightPointerOES
glAcquireTexturesANGLE
glActiveShaderProgram
glActiveShaderProgramEXT
glActiveTexture
glAlphaFunc
glAlphaFuncx
glAttachShader
glBeginPerfMonitorAMD
glBeginPixelLocalStorageANGLE
glBeginQuery
glBeginQueryEXT
glBeginTransformFeedback
glBindAttribLocation
glBindBuffer
glBindBufferBase
glBindBufferRange
glBindFragDataLocationEXT
glBindFragDataLocationIndexedEXT
glBindFramebuffer
glBindFramebufferOES
glBindImageTexture
glBindProgramPipeline
glBindProgramPipelineEXT
glBindRenderbuffer
glBindRenderbufferOES
glBindSampler
glBindTexture
glBindTransformFeedback
glBindUniformLocationCHROMIUM
glBindVertexArray
glBindVertexArrayOES
glBindVertexBuffer
glBlendBarrier
glBlendBarrierKHR
glBlendColor
glBlendEquation
glBlendEquationOES
glBlendEquationSeparate
glBlendEquationSeparatei
glBlendEquationSeparateiEXT
glBlendEquationSeparateiOES
glBlendEquationi
glBlendEquationiEXT
glBlendEquationiOES
glBlendFunc
glBlendFuncSeparate
glBlendFuncSeparatei
glBlendFuncSeparateiEXT
glBlendFuncSeparateiOES
glBlendFunci
glBlendFunciEXT
glBlendFunciOES
glBlitFramebuffer
glBlitFramebufferANGLE
glBlitFramebufferNV
glBlobCacheCallbacksANGLE
glBufferData
glBufferStorageEXT
glBufferStorageExternalEXT
glBufferStorageMemEXT
glBufferSubData
glCheckFramebufferStatus
glCheckFramebufferStatusOES
glClear
glClearBufferfi
glClearBufferfv
glClearBufferiv
glClearBufferuiv
glClearColor
glClearColorx
glClearDepthf
glClearDepthx
glClearStencil
glClearTexImageEXT
glClearTexSubImageEXT
glClientActiveTexture
glClientWaitSync
glClipControlEXT
glClipPlanef
glClipPlanex
glColor4f
glColor4ub
glColor4x
glColorMask
glColorMaski
glColorMaskiEXT
glColorMaskiOES
glColorPointer
glCompileShader
glCompressedCopyTextureCHROMIUM
glCompressedTexImage2D
glCompressedTexImage2DRobustANGLE
glCompressedTexImage3D
glCompressedTexImage3DOES
glCompressedTexImage3DRobustANGLE
glCompressedTexSubImage2D
glCompressedTexSubImage2DRobustANGLE
glCompressedTexSubImage3D
glCompressedTexSubImage3DOES
glCompressedTexSubImage3DRobustANGLE
glCopyBufferSubData
glCopyImageSubData
glCopyImageSubDataEXT
glCopyImageSubDataOES
glCopySubTexture3DANGLE
glCopySubTextureCHROMIUM
glCopyTexImage2D
glCopyTexSubImage2D
glCopyTexSubImage3D
glCopyTexSubImage3DOES
glCopyTexture3DANGLE
glCopyTextureCHROMIUM
glCoverageModulationCHROMIUM
glCreateMemoryObjectsEXT
glCreateProgram
glCreateShader
glCreateShaderProgramv
glCreateShaderProgramvEXT
glCullFace
glCurrentPaletteMatrixOES
glDebugMessageCallback
glDebugMessageCallbackKHR
glDebugMessageControl
glDebugMessageControlKHR
glDebugMessageInsert
glDebugMessageInsertKHR
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteFramebuffersOES
glDeleteMemoryObjectsEXT
glDeletePerfMonitorsAMD
glDeleteProgram
glDeleteProgramPipelines
glDeleteProgramPipelinesEXT
glDeleteQueries
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteRenderbuffersOES
glDeleteSamplers
glDeleteSemaphoresEXT
glDeleteShader
glDeleteSync
glDeleteTextures
glDeleteTransformFeedbacks
glDeleteVertexArrays
glDeleteVertexArraysOES
glDepthFunc
glDepthMask
glDepthRangef
glDepthRangex
glDetachShader
glDisable
glDisableClientState
glDisableExtensionANGLE
glDisableVertexAttribArray
glDisablei
glDisableiEXT
glDisableiOES
glDiscardFramebufferEXT
glDispatchCompute
glDispatchComputeIndirect
glDrawArrays
glDrawArraysIndirect
glDrawArraysInstanced
glDrawArraysInstancedANGLE
glDrawArraysInstancedBaseInstanceANGLE
glDrawArraysInstancedBaseInstanceEXT
glDrawArraysInstancedEXT
glDrawBuffers
glDrawBuffersEXT
glDrawElements
glDrawElementsBaseVertex
glDrawElementsBaseVertexEXT
glDrawElementsBaseVertexOES
glDrawElementsIndirect
glDrawElementsInstanced
glDrawElementsInstancedANGLE
glDrawElementsInstancedBaseInstanceEXT
glDrawElementsInstancedBaseVertex
glDrawElementsInstancedBaseVertexBaseInstanceANGLE
glDrawElementsInstancedBaseVertexBaseInstanceEXT
glDrawElementsInstancedBaseVertexEXT
glDrawElementsInstancedBaseVertexOES
glDrawElementsInstancedEXT
glDrawRangeElements
glDrawRangeElementsBaseVertex
glDrawRangeElementsBaseVertexEXT
glDrawRangeElementsBaseVertexOES
glDrawTexfOES
glDrawTexfvOES
glDrawTexiOES
glDrawTexivOES
glDrawTexsOES
glDrawTexsvOES
glDrawTexxOES
glDrawTexxvOES
glEGLImageTargetRenderbufferStorageOES
glEGLImageTargetTexStorageEXT
glEGLImageTargetTexture2DOES
glEnable
glEnableClientState
glEnableVertexAttribArray
glEnablei
glEnableiEXT
glEnableiOES
glEndPerfMonitorAMD
glEndPixelLocalStorageANGLE
glEndQuery
glEndQueryEXT
glEndTilingQCOM
glEndTransformFeedback
glFenceSync
glFinish
glFinishFenceNV
glFlush
glFlushMappedBufferRange
glFlushMappedBufferRangeEXT
glFogf
glFogfv
glFogx
glFogxv
glFramebufferFetchBarrierEXT
glFramebufferFoveationConfigQCOM
glFramebufferFoveationParametersQCOM
glFramebufferMemorylessPixelLocalStorageANGLE
glFramebufferParameteri
glFramebufferParameteriMESA
glFramebufferPixelLocalClearValuefvANGLE
glFramebufferPixelLocalClearValueivANGLE
glFramebufferPixelLocalClearValueuivANGLE
glFramebufferPixelLocalStorageInterruptANGLE
glFramebufferPixelLocalStorageRestoreANGLE
glFramebufferRenderbuffer
glFramebufferRenderbufferOES
glFramebufferTexture
glFramebufferTexture2D
glFramebufferTexture2DMultisampleEXT
glFramebufferTexture2DOES
glFramebufferTexture3DOES
glFramebufferTextureEXT
glFramebufferTextureLayer
glFramebufferTextureMultiviewOVR
glFramebufferTextureOES
glFramebufferTexturePixelLocalStorageANGLE
glFrontFace
glFrustumf
glFrustumx
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenFramebuffersOES
glGenPerfMonitorsAMD
glGenProgramPipelines
glGenProgramPipelinesEXT
glGenQueries
glGenQueriesEXT
glGenRenderbuffers
glGenRenderbuffersOES
glGenSamplers
glGenSemaphoresEXT
glGenTextures
glGenTransformFeedbacks
glGenVertexArrays
glGenVertexArraysOES
glGenerateMipmap
glGenerateMipmapOES
glGetActiveAttrib
glGetActiveUniform
glGetActiveUniformBlockName
glGetActiveUniformBlockiv
glGetActiveUniformBlockivRobustANGLE
glGetActiveUniformsiv
glGetAttachedShaders
glGetAttribLocation
glGetBooleani_v
glGetBooleani_vRobustANGLE
glGetBooleanv
glGetBooleanvRobustANGLE
glGetBufferParameteri64v
glGetBufferParameteri64vRobustANGLE
glGetBufferParameteriv
glGetBufferParameterivRobustANGLE
glGetBufferPointerv
glGetBufferPointervOES
glGetBufferPointervRobustANGLE
glGetClipPlanef
glGetClipPlanex
glGetCompressedTexImageANGLE
glGetDebugMessageLog
glGetDebugMessageLogKHR
glGetError
glGetFenceivNV
glGetFixedv
glGetFloatv
glGetFloatvRobustANGLE
glGetFragDataIndexEXT
glGetFragDataLocation
glGetFramebufferAttachmentParameteriv
glGetFramebufferAttachmentParameterivOES
glGetFramebufferAttachmentParameterivRobustANGLE
glGetFramebufferParameteriv
glGetFramebufferParameterivMESA
glGetFramebufferParameterivRobustANGLE
glGetFramebufferPixelLocalStorageParameterfvANGLE
glGetFramebufferPixelLocalStorageParameterfvRobustANGLE
glGetFramebufferPixelLocalStorageParameterivANGLE
glGetFramebufferPixelLocalStorageParameterivRobustANGLE
glGetGraphicsResetStatus
glGetGraphicsResetStatusEXT
glGetGraphicsResetStatusKHR
glGetInteger64i_v
glGetInteger64i_vRobustANGLE
glGetInteger64v
glGetInteger64vEXT
glGetInteger64vRobustANGLE
glGetIntegeri_v
glGetIntegeri_vRobustANGLE
glGetIntegerv
glGetIntegervRobustANGLE
glGetInternalformativ
glGetInternalformativRobustANGLE
glGetLightfv
glGetLightxv
glGetMaterialfv
glGetMaterialxv
glGetMemoryObjectParameterivEXT
glGetMultisamplefv
glGetMultisamplefvANGLE
glGetMultisamplefvRobustANGLE
glGetObjectLabel
glGetObjectLabelEXT
glGetObjectLabelKHR
glGetObjectPtrLabel
glGetObjectPtrLabelKHR
glGetPerfMonitorCounterDataAMD
glGetPerfMonitorCounterInfoAMD
glGetPerfMonitorCounterStringAMD
glGetPerfMonitorCountersAMD
glGetPerfMonitorGroupStringAMD
glGetPerfMonitorGroupsAMD
glGetPointerv
glGetPointervANGLE
glGetPointervKHR
glGetPointervRobustANGLERobustANGLE
glGetProgramBinary
glGetProgramBinaryOES
glGetProgramInfoLog
glGetProgramInterfaceiv
glGetProgramInterfaceivRobustANGLE
glGetProgramPipelineInfoLog
glGetProgramPipelineInfoLogEXT
glGetProgramPipelineiv
glGetProgramPipelineivEXT
glGetProgramResourceIndex
glGetProgramResourceLocation
glGetProgramResourceLocationIndexEXT
glGetProgramResourceName
glGetProgramResourceiv
glGetProgramiv
glGetProgramivRobustANGLE
glGetQueryObjecti64vEXT
glGetQueryObjecti64vRobustANGLE
glGetQueryObjectivEXT
glGetQueryObjectivRobustANGLE
glGetQueryObjectui64vEXT
glGetQueryObjectui64vRobustANGLE
glGetQueryObjectuiv
glGetQueryObjectuivEXT
glGetQueryObjectuivRobustANGLE
glGetQueryiv
glGetQueryivEXT
glGetQueryivRobustANGLE
glGetRenderbufferImageANGLE
glGetRenderbufferParameteriv
glGetRenderbufferParameterivOES
glGetRenderbufferParameterivRobustANGLE
glGetSamplerParameterIiv
glGetSamplerParameterIivEXT
glGetSamplerParameterIivOES
glGetSamplerParameterIivRobustANGLE
glGetSamplerParameterIuiv
glGetSamplerParameterIuivEXT
glGetSamplerParameterIuivOES
glGetSamplerParameterIuivRobustANGLE
glGetSamplerParameterfv
glGetSamplerParameterfvRobustANGLE
glGetSamplerParameteriv
glGetSamplerParameterivRobustANGLE
glGetSemaphoreParameterui64vEXT
glGetShaderInfoLog
glGetShaderPrecisionFormat
glGetShaderSource
glGetShaderiv
glGetShaderivRobustANGLE
glGetString
glGetStringi
glGetSynciv
glGetTexEnvfv
glGetTexEnviv
glGetTexEnvxv
glGetTexGenfvOES
glGetTexGenivOES
glGetTexGenxvOES
glGetTexImageANGLE
glGetTexLevelParameterfv
glGetTexLevelParameterfvANGLE
glGetTexLevelParameterfvRobustANGLE
glGetTexLevelParameteriv
glGetTexLevelParameterivANGLE
glGetTexLevelParameterivRobustANGLE
glGetTexParameterIiv
glGetTexParameterIivEXT
glGetTexParameterIivOES
glGetTexParameterIivRobustANGLE
glGetTexParameterIuiv
glGetTexParameterIuivEXT
glGetTexParameterIuivOES
glGetTexParameterIuivRobustANGLE
glGetTexParameterfv
glGetTexParameterfvRobustANGLE
glGetTexParameteriv
glGetTexParameterivRobustANGLE
glGetTexParameterxv
glGetTransformFeedbackVarying
glGetTranslatedShaderSourceANGLE
glGetUniformBlockIndex
glGetUniformIndices
glGetUniformLocation
glGetUniformfv
glGetUniformfvRobustANGLE
glGetUniformiv
glGetUniformivRobustANGLE
glGetUniformuiv
glGetUniformuivRobustANGLE
glGetUnsignedBytei_vEXT
glGetUnsignedBytevEXT
glGetVertexAttribIiv
glGetVertexAttribIivRobustANGLE
glGetVertexAttribIuiv
glGetVertexAttribIuivRobustANGLE
glGetVertexAttribPointerv
glGetVertexAttribPointervRobustANGLE
glGetVertexAttribfv
glGetVertexAttribfvRobustANGLE
glGetVertexAttribiv
glGetVertexAttribivRobustANGLE
glGetnUniformfv
glGetnUniformfvEXT
glGetnUniformfvKHR
glGetnUniformfvRobustANGLE
glGetnUniformiv
glGetnUniformivEXT
glGetnUniformivKHR
glGetnUniformivRobustANGLE
glGetnUniformuiv
glGetnUniformuivKHR
glGetnUniformuivRobustANGLE
glHint
glImportMemoryFdEXT
glImportMemoryZirconHandleANGLE
glImportSemaphoreFdEXT
glImportSemaphoreZirconHandleANGLE
glInsertEventMarkerEXT
glInvalidateFramebuffer
glInvalidateSubFramebuffer
glInvalidateTextureANGLE
glIsBuffer
glIsEnabled
glIsEnabledi
glIsEnablediEXT
glIsEnablediOES
glIsFenceNV
glIsFramebuffer
glIsFramebufferOES
glIsMemoryObjectEXT
glIsProgram
glIsProgramPipeline
glIsProgramPipelineEXT
glIsQuery
glIsQueryEXT
glIsRenderbuffer
glIsRenderbufferOES
glIsSampler
glIsSemaphoreEXT
glIsShader
glIsSync
glIsTexture
glIsTransformFeedback
glIsVertexArray
glIsVertexArrayOES
glLabelObjectEXT
glLightModelf
glLightModelfv
glLightModelx
glLightModelxv
glLightf
glLightfv
glLightx
glLightxv
glLineWidth
glLineWidthx
glLinkProgram
glLoadIdentity
glLoadMatrixf
glLoadMatrixx
glLoadPaletteFromModelViewMatrixOES
glLogicOp
glLogicOpANGLE
glLoseContextCHROMIUM
glMapBufferOES
glMapBufferRange
glMapBufferRangeEXT
glMaterialf
glMaterialfv
glMaterialx
glMaterialxv
glMatrixIndexPointerOES
glMatrixMode
glMaxShaderCompilerThreadsKHR
glMemoryBarrier
glMemoryBarrierByRegion
glMemoryObjectParameterivEXT
glMinSampleShading
glMinSampleShadingOES
glMultMatrixf
glMultMatrixx
glMultiDrawArraysANGLE
glMultiDrawArraysEXT
glMultiDrawArraysIndirectEXT
glMultiDrawArraysInstancedANGLE
glMultiDrawArraysInstancedBaseInstanceANGLE
glMultiDrawElementsANGLE
glMultiDrawElementsBaseVertexEXT
glMultiDrawElementsEXT
glMultiDrawElementsIndirectEXT
glMultiDrawElementsInstancedANGLE
glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE
glMultiTexCoord4f
glMultiTexCoord4x
glNormal3f
glNormal3x
glNormalPointer
glObjectLabel
glObjectLabelKHR
glObjectPtrLabel
glObjectPtrLabelKHR
glOrthof
glOrthox
glPatchParameteri
glPatchParameteriEXT
glPatchParameteriOES
glPauseTransformFeedback
glPixelLocalStorageBarrierANGLE
glPixelStorei
glPointParameterf
glPointParameterfv
glPointParameterx
glPointParameterxv
glPointSize
glPointSizePointerOES
glPointSizex
glPolygonModeANGLE
glPolygonModeNV
glPolygonOffset
glPolygonOffsetClampEXT
glPolygonOffsetx
glPopDebugGroup
glPopDebugGroupKHR
glPopGroupMarkerEXT
glPopMatrix
glPrimitiveBoundingBox
glPrimitiveBoundingBoxEXT
glPrimitiveBoundingBoxOES
glProgramBinary
glProgramBinaryOES
glProgramParameteri
glProgramParameteriEXT
glProgramUniform1f
glProgramUniform1fEXT
glProgramUniform1fv
glProgramUniform1fvEXT
glProgramUniform1i
glProgramUniform1iEXT
glProgramUniform1iv
glProgramUniform1ivEXT
glProgramUniform1ui
glProgramUniform1uiEXT
glProgramUniform1uiv
glProgramUniform1uivEXT
glProgramUniform2f
glProgramUniform2fEXT
glProgramUniform2fv
glProgramUniform2fvEXT
glProgramUniform2i
glProgramUniform2iEXT
glProgramUniform2iv
glProgramUniform2ivEXT
glProgramUniform2ui
glProgramUniform2uiEXT
glProgramUniform2uiv
glProgramUniform2uivEXT
glProgramUniform3f
glProgramUniform3fEXT
glProgramUniform3fv
glProgramUniform3fvEXT
glProgramUniform3i
glProgramUniform3iEXT
glProgramUniform3iv
glProgramUniform3ivEXT
glProgramUniform3ui
glProgramUniform3uiEXT
glProgramUniform3uiv
glProgramUniform3uivEXT
glProgramUniform4f
glProgramUniform4fEXT
glProgramUniform4fv
glProgramUniform4fvEXT
glProgramUniform4i
glProgramUniform4iEXT
glProgramUniform4iv
glProgramUniform4ivEXT
glProgramUniform4ui
glProgramUniform4uiEXT
glProgramUniform4uiv
glProgramUniform4uivEXT
glProgramUniformMatrix2fv
glProgramUniformMatrix2fvEXT
glProgramUniformMatrix2x3fv
glProgramUniformMatrix2x3fvEXT
glProgramUniformMatrix2x4fv
glProgramUniformMatrix2x4fvEXT
glProgramUniformMatrix3fv
glProgramUniformMatrix3fvEXT
glProgramUniformMatrix3x2fv
glProgramUniformMatrix3x2fvEXT
glProgramUniformMatrix3x4fv
glProgramUniformMatrix3x4fvEXT
glProgramUniformMatrix4fv
glProgramUniformMatrix4fvEXT
glProgramUniformMatrix4x2fv
glProgramUniformMatrix4x2fvEXT
glProgramUniformMatrix4x3fv
glProgramUniformMatrix4x3fvEXT
glProvokingVertexANGLE
glPushDebugGroup
glPushDebugGroupKHR
glPushGroupMarkerEXT
glPushMatrix
glQueryCounterEXT
glQueryMatrixxOES
glReadBuffer
glReadPixels
glReadPixelsRobustANGLE
glReadnPixels
glReadnPixelsEXT
glReadnPixelsKHR
glReadnPixelsRobustANGLE
glReleaseShaderCompiler
glReleaseTexturesANGLE
glRenderbufferStorage
glRenderbufferStorageMultisample
glRenderbufferStorageMultisampleANGLE
glRenderbufferStorageMultisampleEXT
glRenderbufferStorageOES
glRequestExtensionANGLE
glResumeTransformFeedback
glRotatef
glRotatex
glSampleCoverage
glSampleCoveragex
glSampleMaski
glSampleMaskiANGLE
glSamplerParameterIiv
glSamplerParameterIivEXT
glSamplerParameterIivOES
glSamplerParameterIivRobustANGLE
glSamplerParameterIuiv
glSamplerParameterIuivEXT
glSamplerParameterIuivOES
glSamplerParameterIuivRobustANGLE
glSamplerParameterf
glSamplerParameterfv
glSamplerParameterfvRobustANGLE
glSamplerParameteri
glSamplerParameteriv
glSamplerParameterivRobustANGLE
glScalef
glScalex
glScissor
glSelectPerfMonitorCountersAMD
glSemaphoreParameterui64vEXT
glSetFenceNV
glShadeModel
glShaderBinary
glShaderSource
glShadingRateQCOM
glSignalSemaphoreEXT
glStartTilingQCOM
glStencilFunc
glStencilFuncSeparate
glStencilMask
glStencilMaskSeparate
glStencilOp
glStencilOpSeparate
glTestFenceNV
glTexBuffer
glTexBufferEXT
glTexBufferOES
glTexBufferRange
glTexBufferRangeEXT
glTexBufferRangeOES
glTexCoordPointer
glTexEnvf
glTexEnvfv
glTexEnvi
glTexEnviv
glTexEnvx
glTexEnvxv
glTexGenfOES
glTexGenfvOES
glTexGeniOES
glTexGenivOES
glTexGenxOES
glTexGenxvOES
glTexImage2D
glTexImage2DExternalANGLE
glTexImage2DRobustANGLE
glTexImage3D
glTexImage3DOES
glTexImage3DRobustANGLE
glTexParameterIiv
glTexParameterIivEXT
glTexParameterIivOES
glTexParameterIivRobustANGLE
glTexParameterIuiv
glTexParameterIuivEXT
glTexParameterIuivOES
glTexParameterIuivRobustANGLE
glTexParameterf
glTexParameterfv
glTexParameterfvRobustANGLE
glTexParameteri
glTexParameteriv
glTexParameterivRobustANGLE
glTexParameterx
glTexParameterxv
glTexStorage2D
glTexStorage2DEXT
glTexStorage2DMultisample
glTexStorage2DMultisampleANGLE
glTexStorage3D
glTexStorage3DEXT
glTexStorage3DMultisample
glTexStorage3DMultisampleOES
glTexStorageAttribs2DEXT
glTexStorageAttribs3DEXT
glTexStorageMem2DEXT
glTexStorageMem2DMultisampleEXT
glTexStorageMem3DEXT
glTexStorageMem3DMultisampleEXT
glTexStorageMemFlags2DANGLE
glTexStorageMemFlags2DMultisampleANGLE
glTexStorageMemFlags3DANGLE
glTexStorageMemFlags3DMultisampleANGLE
glTexSubImage2D
glTexSubImage2DRobustANGLE
glTexSubImage3D
glTexSubImage3DOES
glTexSubImage3DRobustANGLE
glTextureFoveationParametersQCOM
glTransformFeedbackVaryings
glTranslatef
glTranslatex
glUniform1f
glUniform1fv
glUniform1i
glUniform1iv
glUniform1ui
glUniform1uiv
glUniform2f
glUniform2fv
glUniform2i
glUniform2iv
glUniform2ui
glUniform2uiv
glUniform3f
glUniform3fv
glUniform3i
glUniform3iv
glUniform3ui
glUniform3uiv
glUniform4f
glUniform4fv
glUniform4i
glUniform4iv
glUniform4ui
glUniform4uiv
glUniformBlockBinding
glUniformMatrix2fv
glUniformMatrix2x3fv
glUniformMatrix2x4fv
glUniformMatrix3fv
glUniformMatrix3x2fv
glUniformMatrix3x4fv
glUniformMatrix4fv
glUniformMatrix4x2fv
glUniformMatrix4x3fv
glUnmapBuffer
glUnmapBufferOES
glUseProgram
glUseProgramStages
glUseProgramStagesEXT
glValidateProgram
glValidateProgramPipeline
glValidateProgramPipelineEXT
glVertexAttrib1f
glVertexAttrib1fv
glVertexAttrib2f
glVertexAttrib2fv
glVertexAttrib3f
glVertexAttrib3fv
glVertexAttrib4f
glVertexAttrib4fv
glVertexAttribBinding
glVertexAttribDivisor
glVertexAttribDivisorANGLE
glVertexAttribDivisorEXT
glVertexAttribFormat
glVertexAttribI4i
glVertexAttribI4iv
glVertexAttribI4ui
glVertexAttribI4uiv
glVertexAttribIFormat
glVertexAttribIPointer
glVertexAttribPointer
glVertexBindingDivisor
glVertexPointer
glViewport
glWaitSemaphoreEXT
glWaitSync
glWeightPointerOES
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1022KB
Virtual Size
1022KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
177KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
337B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
malloc_h
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
clretwrc.dll
- SHA256 2b2070c4bd3a0560952119f22a060bd329785aa704ef62ed7dbc5238d6e99b0d
- MD5 bf9a34c2bec88732ba995e0a11a4c70e
- SHA1 69c8fa1e52c11883a377f3fa01208b3cc0adb059
- SHA512 4b19f6dbbcb2771623f724d5a98646d291e14cee0951963d7e90738b855950bc9d5d96af84beac32b5720211f7a397e6c1716b0452ad22d3eb8d1fb5b8f7a337
- SSDEEP 3072:6j9vKrcsTZ6y97YugoclWxKgEn49+XK2fyvTnCi6D:GEAHRfyvTnj+
- TLSH T1536499463BED4409F5B35FB0AAB75236A676BCA52E51C01D2054D22D2CF1F80CE62BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ef:6d:6d:f8:aa:34:ad:ed:5b:50:dd:5e:6a:9b:ba:0d:9d:3d:df:b1:26:17:31:22:32:57:2a:23:50:09:65:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:28:f0:a5:87:d7:f3:c8:1e:40:00:01:00:00:02:28
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\clretwrc\clretwrc.pdb
Name
.rdata
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
299KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=35225,
count=1, id=258, version=35225,
clrgc.dll
- IMPHASH fc6b7aa6e5f3b57777010baf258d6003
- SHA256 ad919c4113614c1ed23b7e9e0f1b145aaf19cf40fc6bafe8560ad379b32c5673
- MD5 3ac48c2edb4c23c7271c93e2fc78b300
- SHA1 ddaf53fb749cde81a1a5398d778267574e94e47b
- SHA512 1fd85c0a69d33bc7b86f92a136b164fe9699216526a2be5c840d0fda87394fd296e9b7a356c596db24526870a6f14727ac7662ff74c34487c1e78670b9df21d0
- SSDEEP 6144:jgUBrVOVeWfRdJNJiMbIK7+7BowVaX/W0+t1pXzPbaWA6x9c/yggPcmtJbOr8hln:jgU65jJyMbt+9UW0+t/6k5PBt/xdrL5
- TLSH T19BE47C2EF39D61ACD527D0B98A677233E7B634091B4179EB07948B246F63ED0673A304
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:88:70:fa:44:e8:ad:79:ef:89:4b:5e:f8:bb:e3:dc:b1:62:48:be:e0:4e:04:6c:4d:d5:1b:f9:52:be:77:69
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1e:a3:ac:a4:6e:39:6f:7c:49:00:01:00:00:02:1e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
566160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\gc\clrgc.pdb
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlVirtualUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
InitializeCriticalSection
GetEnabledXStateFeatures
GetProcessGroupAffinity
DebugBreak
SleepEx
GlobalMemoryStatusEx
SetThreadGroupAffinity
SwitchToThread
ResetEvent
GetSystemInfo
CloseHandle
QueryPerformanceFrequency
GetCurrentThread
GetLogicalProcessorInformation
SetEvent
K32GetProcessMemoryInfo
GetCurrentThreadId
GetLogicalProcessorInformationEx
GetTickCount64
CreateEventW
IsProcessInJob
WaitForSingleObject
GetLargePageMinimum
FlushProcessWriteBuffers
SetThreadPriority
VirtualUnlock
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
QueryInformationJobObject
GetCurrentProcessorNumberEx
VirtualFree
GetThreadIdealProcessorEx
VirtualAlloc
GetProcessAffinityMask
VirtualAllocExNuma
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
abort
terminate
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
calloc
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
strlen
strcpy_s
strcmp
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GC_Initialize
GC_VersionInfo
Name
.text
Size
570KB
Virtual Size
569KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33145,
count=104, id=1, productName=Unmarked objects,
count=8, id=259, version=35207,
count=11, id=260, version=35207,
count=42, id=261, version=35207,
count=29, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
clrgcexp.dll
- IMPHASH 7339c605e783235c2335d9b6c360976e
- SHA256 ba268f192801b3b24f22153efaf073ac133d61ebf7866043b52e5d26b2dcb52b
- MD5 f68dac07f16cc6142d3258264698fae0
- SHA1 eeec8c1d505b6c05557901fa9eb76438da695973
- SHA512 bce6e3142354fde6be51e828e53e9ba145e1547c8b1772e0d7b65d463aa7637cea4dc557c34370b1ab58f1e861072744ca95ed48f077763467d23d1bca8b4c8b
- SSDEEP 12288:LAFXIY7JwxaAgon+Mj62R2wZyzVAhgBv8GNQYyaoqqy4:+Iiywwz2wu+GBv4YyaoX
- TLSH T1E5E47B1EF6D920ACC917D0798A637237F775311A1B1179EB07988B246FA7ED06B3A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9c:51:f1:87:40:ed:14:9c:94:53:8c:f5:cf:73:d2:6e:68:2a:e5:3b:33:fb:fa:32:de:0a:c7:54:0f:aa:43:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:10:ab:cd:e4:16:18:ef:39:b0:00:01:00:00:02:10
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
596112
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\gc\clrgcexp.pdb
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
GetLastError
RtlLookupFunctionEntry
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
IsProcessInJob
WaitForSingleObject
GetLargePageMinimum
RtlVirtualUnwind
RtlCaptureContext
FlushProcessWriteBuffers
SetThreadPriority
SetLastError
GetCurrentThreadId
InitializeCriticalSection
GetEnabledXStateFeatures
GetProcessGroupAffinity
DebugBreak
SleepEx
GlobalMemoryStatusEx
SetThreadGroupAffinity
SwitchToThread
ResetEvent
GetSystemInfo
VirtualUnlock
GetNumaProcessorNodeEx
CloseHandle
QueryPerformanceFrequency
VirtualAllocExNuma
GetCurrentThread
GetLogicalProcessorInformation
GetProcessAffinityMask
SetEvent
K32GetProcessMemoryInfo
GetLogicalProcessorInformationEx
VirtualAlloc
GetTickCount64
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
QueryInformationJobObject
GetCurrentProcessorNumberEx
VirtualFree
GetThreadIdealProcessorEx
CreateEventW
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
api-ms-win-crt-math-l1-1-0
sqrt
round
pow
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm
_initterm_e
_seh_filter_dll
_execute_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
abort
terminate
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsncmp
strcmp
strlen
strcpy_s
advapi32
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GC_Initialize
GC_VersionInfo
Name
.text
Size
599KB
Virtual Size
598KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33145,
count=107, id=1, productName=Unmarked objects,
count=8, id=259, version=35207,
count=11, id=260, version=35207,
count=42, id=261, version=35207,
count=29, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
clrjit.dll
- IMPHASH 343caf36c077099bfc3434052a423e63
- SHA256 18fe968846117d13edf3262bcb305ca28f678742a3281f8b4228a44047966f79
- MD5 20523aaef93c259bf3929d187db592a1
- SHA1 167a37a4b84df90364db6646f8fa0563df572d05
- SHA512 7edeb6446b7c207191f5bf1a19ff3d647de911cefff98e37845107b8341d0da92a38a1175aa6d8f997ccd09eb71fa6c4ec8fd3d556cb5e9dbfe60ef72046f3ab
- SSDEEP 49152:k1NyfVyKIaKUnctJfilvld1oZgpdZTctkQLFbD/Mq+Nyupy1wmp/Ky7f5hwbq:kx2nctJfGvld1oZGdZQtkQLdD0q9upyZ
- TLSH T17CA5AE47A2B900FCD46F9274C6274A07EBB2B80527719FDF03F04A556F23BA2296E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
60:7e:18:ce:a7:10:01:22:df:49:b9:1a:43:07:0d:69:a7:0a:a8:40:07:15:4b:d4:1d:88:0e:78:7f:d5:36:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
1340144
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\jit\clrjit.pdb
kernel32
RaiseException
DebugBreak
OutputDebugStringA
MultiByteToWideChar
DisableThreadLibraryCalls
QueryThreadCycleTime
GetCurrentThread
QueryPerformanceFrequency
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fseek
fflush
_fileno
__stdio_common_vsprintf
_wfopen
__acrt_iob_func
__stdio_common_vsprintf_s
_dup
_setmode
ftell
setvbuf
fclose
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_initterm
_errno
_configure_narrow_argv
_initialize_narrow_environment
abort
terminate
_cexit
_execute_onexit_table
_initialize_onexit_table
_invalid_parameter_noinfo
api-ms-win-crt-math-l1-1-0
sinf
sin
powf
pow
_fdopen
logf
log2f
log2
log10f
log10
log
fmod
floorf
copysign
copysignf
ilogbf
floor
acosh
asinh
atanh
cbrt
trunc
acoshf
asinhf
atanhf
cbrtf
truncf
expf
exp
sinhf
sqrt
coshf
cosh
cosf
sqrtf
cos
ceilf
ceil
atanf
atan2f
atan2
atan
asinf
asin
acosf
acos
sinh
tan
tanf
tanh
tanhf
api-ms-win-crt-string-l1-1-0
strnlen
strcpy_s
strcmp
_stricmp
wcsncmp
strncmp
strlen
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
free
malloc
getJit
getLikelyClasses
getLikelyMethods
jitBuildString
jitStartup
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
245KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33145,
count=153, id=1, productName=Unmarked objects,
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=38, id=261, version=35207,
count=117, id=270, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
coreclr.dll
- IMPHASH e20750a195ea32e71cacb69fc211d72f
- SHA256 85135fcf132fae2c3e03d3480dfbb51f910e78e8a6c35ffa367ea33b243216d7
- MD5 9db0fbaf52c9fdceb59b2b1be0dfd76e
- SHA1 d972628c8db3a131de08bd3b076a02765895f614
- SHA512 67d10ea09298ca34978312dfb83f12bb1bed74e8affe35d6f5e29a321c6415f5c757f4aa4335a65cf7dc894c22fd7eaf832d2277d65eee1923c93288891c55ee
- SSDEEP 49152:sOyyR7TkLEH6ut8PjdCRxKe2b7b7b7b7br7b7b7b7b7/IqnAXYIxmRL3zeE24QIF:tyyJRvcO0qQzX0T1Ur
- TLSH T156268E25F6AD01DCC4BAD178C6E74A1BFBB238591338DBEB026146651F237E16A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8c:54:7f:b5:a6:95:8a:87:db:b8:32:78:18:31:bf:fd:6a:6f:34:15:5f:53:6b:4f:b9:e4:ce:60:be:f0:09:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:23:4f:d9:60:24:53:cf:fe:2b:00:01:00:00:02:23
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
1617760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscoree\coreclr\coreclr.pdb
kernel32
FormatMessageW
ReadFile
WriteFile
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
DebugBreak
FlushInstructionCache
GetCurrentProcess
LCMapStringEx
LocalFree
VerSetConditionMask
VerifyVersionInfoW
TerminateProcess
OutputDebugStringW
GetLogicalProcessorInformationEx
SetThreadGroupAffinity
GetThreadGroupAffinity
GetProcessGroupAffinity
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
HeapAlloc
HeapFree
CreateFileMappingW
MapViewOfFileEx
HeapCreate
GetProcessHeap
VirtualQuery
HeapDestroy
GetModuleFileNameW
RaiseFailFastException
CreateProcessW
GetCPInfo
GetEnvironmentVariableW
LoadLibraryExW
CreateFileW
GetFullPathNameW
RtlCaptureContext
VirtualAlloc
VirtualProtect
GetThreadContext
SetThreadContext
OpenEventW
WaitForSingleObject
ResetEvent
WaitForMultipleObjectsEx
ExitThread
LocateXStateFeature
VirtualFree
HeapReAlloc
InitializeContext
CopyContext
ResumeThread
DisconnectNamedPipe
ConnectNamedPipe
FlushFileBuffers
CreateNamedPipeA
WaitForMultipleObjects
DuplicateHandle
CreateFileA
CancelIoEx
GetOverlappedResult
SetFilePointer
MapViewOfFile
UnmapViewOfFile
FlushProcessWriteBuffers
SetThreadErrorMode
GetModuleHandleExW
GetCommandLineW
SetLastError
TlsSetValue
SetErrorMode
GetExitCodeProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RtlLookupFunctionEntry
QueueUserAPC
SetThreadPriority
GetThreadPriority
TlsAlloc
SignalObjectAndWait
SetThreadStackGuarantee
GetConsoleOutputCP
GetModuleHandleW
ExitProcess
Sleep
CreateMemoryResourceNotification
SleepEx
SuspendThread
SetXStateFeaturesMask
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetFileSize
GetEnabledXStateFeatures
RtlRestoreContext
WerRegisterRuntimeExceptionModule
RtlInstallFunctionTableCallback
GetSystemDefaultLCID
GetUserDefaultLCID
RtlUnwind
RtlDeleteFunctionTable
SetConsoleCtrlHandler
FlsAlloc
FlsSetValue
FlsGetValue
GetLocaleInfoEx
GetUserDefaultLocaleName
RtlAddFunctionTable
LoadLibraryExA
CreateFileMappingA
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
VirtualAllocExNuma
GetNumaProcessorNodeEx
VirtualUnlock
GetLargePageMinimum
IsProcessInJob
GetTickCount64
K32GetProcessMemoryInfo
GetLogicalProcessorInformation
QueryPerformanceFrequency
GlobalMemoryStatusEx
QueryPerformanceCounter
RtlVirtualUnwind
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsFree
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetEnvironmentStringsW
GetSystemTime
GetSystemTimeAsFileTime
FreeLibrary
GetCurrentProcessId
GetProcAddress
CreateThread
GetSystemInfo
CloseHandle
GetActiveProcessorGroupCount
GetCurrentThread
GetCurrentProcessorNumberEx
GetLastError
FreeEnvironmentStringsW
GetCurrentThreadId
SetEnvironmentVariableW
TlsGetValue
GetStdHandle
advapi32
EventWrite
LookupPrivilegeValueW
AdjustTokenPrivileges
EventRegister
SetKernelObjectSecurity
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
SetThreadToken
RevertToSelf
OpenThreadToken
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventWriteTransfer
ole32
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoRevokeInitializeSpy
CoGetClassObject
CoGetContextToken
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetMarshalSizeMax
CLSIDFromProgID
CoReleaseMarshalData
CoTaskMemAlloc
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoTaskMemFree
oleaut32
SysStringByteLen
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
GetRecordInfoFromTypeInfo
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
SafeArrayGetLBound
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SetErrorInfo
CreateErrorInfo
SysFreeString
SysStringLen
GetErrorInfo
SysAllocString
SysAllocStringLen
SafeArrayGetDim
VariantChangeType
SafeArrayDestroy
QueryPathOfRegTypeLi
LoadTypeLibEx
SafeArrayGetVartype
SysAllocStringByteLen
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
wcsncmp
wcsnlen
towupper
iswascii
strncmp
towlower
iswspace
wcscat_s
strnlen
isdigit
isalpha
strncat_s
wcsncat_s
strncpy_s
wcscpy_s
wcsncpy_s
wcscmp
iswupper
isspace
strcat_s
_stricmp
_wcsnicmp
strcpy_s
strncpy
strcmp
_strnicmp
_strdup
strtok_s
strlen
_wcsicmp
api-ms-win-crt-heap-l1-1-0
_callnewh
realloc
malloc
free
calloc
api-ms-win-crt-convert-l1-1-0
strtoull
_wcstoui64
wcstoul
strtol
_wtoi
_atoi64
atol
_ltow_s
strtoul
api-ms-win-crt-stdio-l1-1-0
_write
fopen
fwrite
fflush
__stdio_common_vsnwprintf_s
_flushall
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
fputs
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fgets
_wfopen
_fileno
fclose
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_controlfp_s
_seh_filter_dll
terminate
abort
_cexit
_crt_atexit
_initterm
_errno
_invalid_parameter_noinfo
_initterm_e
_execute_onexit_table
api-ms-win-crt-math-l1-1-0
cosh
cosf
cos
ceilf
ceil
atanf
log2
atan2f
atan2
atan
log2f
logf
pow
log10f
asinf
asin
acosf
acos
fma
powf
fmaf
fmod
fmodf
roundf
sin
exp
log
sinf
sinh
sinhf
sqrt
log10
round
expf
tan
modf
atanh
acosh
cbrt
asinh
asinhf
modff
atanhf
cbrtf
acoshf
tanf
tanh
tanhf
coshf
api-ms-win-crt-time-l1-1-0
_time64
CLRJitAttachState
DotNetRuntimeContractDescriptor
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_set_error_writer
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics
g_dacTable
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
745KB
Virtual Size
745KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Section
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=33145,
count=11, id=257, version=33145,
count=392, id=1, productName=Unmarked objects,
count=11, id=259, version=35207,
count=17, id=260, version=35207,
count=51, id=261, version=35207,
count=26, id=259, version=35225,
count=449, id=270, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=151,
count=1, id=258, version=35225,
createdump.exe
- IMPHASH 4af0151186b7939a582eacbb0c85b139
- SHA256 b1560ad95316e64fd7f4b634f66e153a5a923a27b198d29c33596ebc2134ea1d
- MD5 a457ec5a6570b12060b6e6c437bc53d5
- SHA1 e931751d4bf4deab7311ad695658f460994b37db
- SHA512 9b05b40933d3866e194ecf8c1777eb3034cd279294787a457652cb5851cdc37decd414ed94770705138097052a5ae06f2f61fccd8dcf2740b913f72bed5101c1
- SSDEEP 768:xzc/aw1lkK5GNunVAmBfnXE8Sl3OlBwd34xif9z54:S/avK5l/U89Bwiilz54
- TLSH T113634A16DA2A50EBD25E8C78C5534906EE71BC838BE0B6CB6B514DD60D62FD09F3D306
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
56:81:6e:ec:31:c7:b1:ac:01:e1:71:dc:08:d3:f3:b9:19:43:d7:c9:8f:4d:04:22:0a:b5:b2:7b:9c:43:98:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:14:8d:cd:23:44:ee:06:df:72:00:01:00:00:02:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
12160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\debug\createdump\createdump.pdb
kernel32
GetCurrentProcess
OpenProcess
GetTempPathA
GetLastError
CreateFileA
CloseHandle
K32GetModuleBaseNameA
GetProcAddress
LocalFree
FormatMessageA
LoadLibraryExW
SetUnhandledExceptionFilter
TerminateProcess
FreeLibrary
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
QueryPerformanceFrequency
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
UnhandledExceptionFilter
dbghelp
MiniDumpWriteDump
ws2_32
WSAGetLastError
gethostname
WSAStartup
ntdll
NtQueryInformationProcess
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fclose
fflush
__acrt_iob_func
fopen
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
terminate
abort
_initialize_onexit_table
strerror
_invoke_watson
__p___argv
_register_onexit_function
_register_thread_local_exe_atexit_callback
__p___argc
_c_exit
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_errno
_set_app_type
_seh_filter_exe
_cexit
api-ms-win-crt-string-l1-1-0
strcat_s
strcmp
wcsncmp
strcpy_s
strlen
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
free
_set_new_mode
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
388B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35207,
count=12, id=260, version=35207,
count=46, id=261, version=35207,
count=9, id=257, version=33145,
count=100, id=1, productName=Unmarked objects,
count=5, id=265, version=35225,
count=1, id=255, version=35225,
count=1, id=151,
count=1, id=258, version=35225,
hostfxr.dll
- IMPHASH 073409ff6b2095593ea0375e90fc8959
- SHA256 dec56b41cf09cfcae002a3bb752b0b381c68b6217ed9e4b41b1ac2b645b5fdc5
- MD5 15210d3243249fe60b443ff678225af9
- SHA1 26c75d046727c1d2d32e1e56c9f56d16b8adc0ae
- SHA512 c2c043c1b872699a4f96ddca5548e6d1fad6f80b67d84112424fbdd37966398e0c6e76d797e33a47a6da9c1a00e10bc83988a83cb7d68ca9bb91e22ea00c39be
- SSDEEP 6144:falRvjNggqbRqhaUzIS64W+zz3Z0UCVvfpJEl0FsGxilKmkVAwBA8/UMs2CUHFhr:f5q0iOnpq2TDdl9BqAR
- TLSH T162840816D3E8057CF0B79678DAB29942EB727C494BB0E5DF139088651E73BD08A39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a3:1c:3f:cf:17:03:0b:26:0b:a9:42:50:32:55:5e:cf:2f:7f:9e:1f:ef:a5:3b:d4:10:6a:5f:51:58:23:5d:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:11:45:18:39:9b:43:cf:fc:6c:00:01:00:00:02:11
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
233760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\fxr\standalone\hostfxr.pdb
advapi32
RegOpenKeyExW
RegCloseKey
RegGetValueW
kernel32
UnmapViewOfFile
GetFileSizeEx
FindFirstFileExW
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetFinalPathNameByHandleW
GetModuleFileNameW
GetEnvironmentVariableW
FindClose
CreateFileW
GetFileAttributesW
FreeEnvironmentStringsW
MultiByteToWideChar
GetConsoleMode
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
WriteConsoleW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
CreateFileMappingW
MapViewOfFile
GetEnvironmentStringsW
LoadLibraryExW
OutputDebugStringW
GetCurrentProcessId
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
WakeAllConditionVariable
SleepConditionVariableSRW
SwitchToThread
QueryPerformanceCounter
GetSystemTimeAsFileTime
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_register_onexit_function
_initterm
terminate
_wcserror_s
_errno
_execute_onexit_table
_cexit
_initialize_onexit_table
_crt_atexit
_invoke_watson
abort
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
realloc
malloc
free
api-ms-win-crt-string-l1-1-0
strlen
_wcsicmp
_wcsnicmp
wcsncmp
tolower
strcpy_s
strcmp
api-ms-win-crt-stdio-l1-1-0
setvbuf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
_wfsopen
__acrt_iob_func
fputwc
__stdio_common_vfwprintf
fflush
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
api-ms-win-crt-locale-l1-1-0
_free_locale
_create_locale
api-ms-win-crt-math-l1-1-0
ceilf
hostfxr_close
hostfxr_get_available_sdks
hostfxr_get_dotnet_environment_info
hostfxr_get_native_search_directories
hostfxr_get_runtime_delegate
hostfxr_get_runtime_properties
hostfxr_get_runtime_property_value
hostfxr_initialize_for_dotnet_command_line
hostfxr_initialize_for_runtime_config
hostfxr_main
hostfxr_main_bundle_startupinfo
hostfxr_main_startupinfo
hostfxr_resolve_frameworks_for_runtime_config
hostfxr_resolve_sdk
hostfxr_resolve_sdk2
hostfxr_run_app
hostfxr_set_error_writer
hostfxr_set_runtime_property_value
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
93KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=11, id=260, version=35207,
count=52, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33145,
count=154, id=1, productName=Unmarked objects,
count=27, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
hostpolicy.dll
- IMPHASH e187d74e6e8371418443482d3996db32
- SHA256 385c3c4cddab07e1763a1fb1f978c57e31bb0f478b30b4c535ca1a3db50d28db
- MD5 15cf6a2c9195970e025dae32555327de
- SHA1 3ada2fa09f6255f0f36f406f6559827b2000a944
- SHA512 09ccad0029485307864c0b5b8b1a5d4c570d2eba6edb586892808a718c4165c1555fe1513fa510248243e5bceb668bdb2e934f6d66a1be322a09b70e3585b82c
- SSDEEP 6144:fsQpbUUvKO93ss3JDpMBqyiNlCCxO7ptsuBNV3h3BjcZjKr9HLhLuxJb/JDtkwKB:fHFvK+H5Kcyi8JHpa2wKdMFwEs
- TLSH T11C842916D6EC007CF0B7E679CAB28901EB727C4947B196DF139099A61E73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
82:05:db:4a:16:75:9f:83:ea:7e:65:65:42:6c:b0:f3:43:53:62:7a:ff:81:fd:d6:90:2c:10:35:fe:c6:45:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:25:80:c7:37:c6:cd:aa:77:49:00:01:00:00:02:25
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
234288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\hostpolicy\standalone\hostpolicy.pdb
advapi32
RegOpenKeyExW
RegCloseKey
RegGetValueW
kernel32
CreateDirectoryW
RemoveDirectoryW
Sleep
GetLastError
GetCurrentProcessId
UnmapViewOfFile
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
WriteConsoleW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
LoadLibraryExW
OutputDebugStringW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetStringTypeW
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
api-ms-win-crt-runtime-l1-1-0
_wcserror_s
_configure_narrow_argv
_cexit
_errno
terminate
_beginthreadex
_invoke_watson
_initialize_narrow_environment
abort
_initterm_e
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm
_seh_filter_dll
api-ms-win-crt-string-l1-1-0
_wcsicmp
strcpy_s
strlen
tolower
_wcsnicmp
_wcsdup
wcsnlen
wcsncmp
strcmp
api-ms-win-crt-heap-l1-1-0
free
_callnewh
calloc
realloc
malloc
api-ms-win-crt-stdio-l1-1-0
fputwc
__acrt_iob_func
fflush
setvbuf
__stdio_common_vsnwprintf_s
__stdio_common_vfwprintf
fwrite
_wfsopen
fclose
__stdio_common_vswprintf
api-ms-win-crt-filesystem-l1-1-0
_wrename
_wremove
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_time64
wcsftime
_gmtime64_s
api-ms-win-crt-locale-l1-1-0
_lock_locales
setlocale
___lc_locale_name_func
_free_locale
___lc_codepage_func
___mb_cur_max_func
_create_locale
__pctype_func
_unlock_locales
api-ms-win-crt-math-l1-1-0
ceilf
corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
Name
.text
Size
252KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=11, id=260, version=35207,
count=83, id=261, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33145,
count=194, id=1, productName=Unmarked objects,
count=30, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
libHarfBuzzSharp.dll
- IMPHASH ec7fff8f58c3f1ed14aaf7c661442137
- SHA256 145ade963eba427027d5e1381db5d51a0ef9e98e9fef9efbfa6074ca20da246f
- MD5 fdfc5facbb8d7ed52bcfeda911586cd6
- SHA1 ae248fd8f3e3df80bab5dacdc098a0a7136ba94d
- SHA512 d49b78bda3a0e70e5b70eb537ce5cf28b00c5578d8edd2e5bd0e9b8dbc3e6cb983bb5ea38dfda0170ff2851fecd78e702c00c7483628d920527546e94903a5b1
- SSDEEP 49152:48lOq9ewF9RTbAsC0e+yPWojc7dGl09x4HJg:I2dclAJ
- TLSH T19C85AE4AE2AA10E9D9BFC078D666950BE7A274050314DFEF25E08695EF23FF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
83:c0:94:b0:03:f5:52:fe:4c:b6:9e:6c:85:21:ee:9b:3e:97:e7:ef:f6:d1:6d:19:71:b6:eb:b4:4d:31:cb:e4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 6, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:04:d8:e0:0e:07:97:32:58:98:00:01:00:00:02:04
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
1356464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\a\_work\1\s\native\windows\libHarfBuzzSharp\bin\x64\Release\libHarfBuzzSharp.pdb
kernel32
CreateFileW
UnmapViewOfFile
MultiByteToWideChar
CloseHandle
GetFileSize
CreateFileMappingW
MapViewOfFile
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
ReadFile
GetConsoleMode
ReadConsoleW
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
SetStdHandle
HeapSize
SetEndOfFile
WriteConsoleW
hb_aat_layout_feature_type_get_name_id
hb_aat_layout_feature_type_get_selector_infos
hb_aat_layout_get_feature_types
hb_aat_layout_has_positioning
hb_aat_layout_has_substitution
hb_aat_layout_has_tracking
hb_blob_copy_writable_or_fail
hb_blob_create
hb_blob_create_from_file
hb_blob_create_from_file_or_fail
hb_blob_create_or_fail
hb_blob_create_sub_blob
hb_blob_destroy
hb_blob_get_data
hb_blob_get_data_writable
hb_blob_get_empty
hb_blob_get_length
hb_blob_get_user_data
hb_blob_is_immutable
hb_blob_make_immutable
hb_blob_reference
hb_blob_set_user_data
hb_buffer_add
hb_buffer_add_codepoints
hb_buffer_add_latin1
hb_buffer_add_utf16
hb_buffer_add_utf32
hb_buffer_add_utf8
hb_buffer_allocation_successful
hb_buffer_append
hb_buffer_clear_contents
hb_buffer_create
hb_buffer_create_similar
hb_buffer_deserialize_glyphs
hb_buffer_deserialize_unicode
hb_buffer_destroy
hb_buffer_diff
hb_buffer_get_cluster_level
hb_buffer_get_content_type
hb_buffer_get_direction
hb_buffer_get_empty
hb_buffer_get_flags
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_buffer_get_invisible_glyph
hb_buffer_get_language
hb_buffer_get_length
hb_buffer_get_not_found_glyph
hb_buffer_get_replacement_codepoint
hb_buffer_get_script
hb_buffer_get_segment_properties
hb_buffer_get_unicode_funcs
hb_buffer_get_user_data
hb_buffer_guess_segment_properties
hb_buffer_has_positions
hb_buffer_normalize_glyphs
hb_buffer_pre_allocate
hb_buffer_reference
hb_buffer_reset
hb_buffer_reverse
hb_buffer_reverse_clusters
hb_buffer_reverse_range
hb_buffer_serialize
hb_buffer_serialize_format_from_string
hb_buffer_serialize_format_to_string
hb_buffer_serialize_glyphs
hb_buffer_serialize_list_formats
hb_buffer_serialize_unicode
hb_buffer_set_cluster_level
hb_buffer_set_content_type
hb_buffer_set_direction
hb_buffer_set_flags
hb_buffer_set_invisible_glyph
hb_buffer_set_language
hb_buffer_set_length
hb_buffer_set_message_func
hb_buffer_set_not_found_glyph
hb_buffer_set_replacement_codepoint
hb_buffer_set_script
hb_buffer_set_segment_properties
hb_buffer_set_unicode_funcs
hb_buffer_set_user_data
hb_color_get_alpha
hb_color_get_blue
hb_color_get_green
hb_color_get_red
hb_color_line_get_color_stops
hb_color_line_get_extend
hb_direction_from_string
hb_direction_to_string
hb_draw_close_path
hb_draw_cubic_to
hb_draw_funcs_create
hb_draw_funcs_destroy
hb_draw_funcs_get_empty
hb_draw_funcs_get_user_data
hb_draw_funcs_is_immutable
hb_draw_funcs_make_immutable
hb_draw_funcs_reference
hb_draw_funcs_set_close_path_func
hb_draw_funcs_set_cubic_to_func
hb_draw_funcs_set_line_to_func
hb_draw_funcs_set_move_to_func
hb_draw_funcs_set_quadratic_to_func
hb_draw_funcs_set_user_data
hb_draw_line_to
hb_draw_move_to
hb_draw_quadratic_to
hb_face_builder_add_table
hb_face_builder_create
hb_face_builder_sort_tables
hb_face_collect_nominal_glyph_mapping
hb_face_collect_unicodes
hb_face_collect_variation_selectors
hb_face_collect_variation_unicodes
hb_face_count
hb_face_create
hb_face_create_for_tables
hb_face_destroy
hb_face_get_empty
hb_face_get_glyph_count
hb_face_get_index
hb_face_get_table_tags
hb_face_get_upem
hb_face_get_user_data
hb_face_is_immutable
hb_face_make_immutable
hb_face_reference
hb_face_reference_blob
hb_face_reference_table
hb_face_set_glyph_count
hb_face_set_index
hb_face_set_upem
hb_face_set_user_data
hb_feature_from_string
hb_feature_to_string
hb_font_add_glyph_origin_for_direction
hb_font_changed
hb_font_create
hb_font_create_sub_font
hb_font_destroy
hb_font_draw_glyph
hb_font_funcs_create
hb_font_funcs_destroy
hb_font_funcs_get_empty
hb_font_funcs_get_user_data
hb_font_funcs_is_immutable
hb_font_funcs_make_immutable
hb_font_funcs_reference
hb_font_funcs_set_draw_glyph_func
hb_font_funcs_set_font_h_extents_func
hb_font_funcs_set_font_v_extents_func
hb_font_funcs_set_glyph_contour_point_func
hb_font_funcs_set_glyph_extents_func
hb_font_funcs_set_glyph_from_name_func
hb_font_funcs_set_glyph_func
hb_font_funcs_set_glyph_h_advance_func
hb_font_funcs_set_glyph_h_advances_func
hb_font_funcs_set_glyph_h_kerning_func
hb_font_funcs_set_glyph_h_origin_func
hb_font_funcs_set_glyph_name_func
hb_font_funcs_set_glyph_shape_func
hb_font_funcs_set_glyph_v_advance_func
hb_font_funcs_set_glyph_v_advances_func
hb_font_funcs_set_glyph_v_kerning_func
hb_font_funcs_set_glyph_v_origin_func
hb_font_funcs_set_nominal_glyph_func
hb_font_funcs_set_nominal_glyphs_func
hb_font_funcs_set_paint_glyph_func
hb_font_funcs_set_user_data
hb_font_funcs_set_variation_glyph_func
hb_font_get_empty
hb_font_get_extents_for_direction
hb_font_get_face
hb_font_get_glyph
hb_font_get_glyph_advance_for_direction
hb_font_get_glyph_advances_for_direction
hb_font_get_glyph_contour_point
hb_font_get_glyph_contour_point_for_origin
hb_font_get_glyph_extents
hb_font_get_glyph_extents_for_origin
hb_font_get_glyph_from_name
hb_font_get_glyph_h_advance
hb_font_get_glyph_h_advances
hb_font_get_glyph_h_kerning
hb_font_get_glyph_h_origin
hb_font_get_glyph_kerning_for_direction
hb_font_get_glyph_name
hb_font_get_glyph_origin_for_direction
hb_font_get_glyph_shape
hb_font_get_glyph_v_advance
hb_font_get_glyph_v_advances
hb_font_get_glyph_v_kerning
hb_font_get_glyph_v_origin
hb_font_get_h_extents
hb_font_get_nominal_glyph
hb_font_get_nominal_glyphs
hb_font_get_parent
hb_font_get_ppem
hb_font_get_ptem
hb_font_get_scale
hb_font_get_serial
hb_font_get_synthetic_bold
hb_font_get_synthetic_slant
hb_font_get_user_data
hb_font_get_v_extents
hb_font_get_var_coords_design
hb_font_get_var_coords_normalized
hb_font_get_var_named_instance
hb_font_get_variation_glyph
hb_font_glyph_from_string
hb_font_glyph_to_string
hb_font_is_immutable
hb_font_make_immutable
hb_font_paint_glyph
hb_font_reference
hb_font_set_face
hb_font_set_funcs
hb_font_set_funcs_data
hb_font_set_parent
hb_font_set_ppem
hb_font_set_ptem
hb_font_set_scale
hb_font_set_synthetic_bold
hb_font_set_synthetic_slant
hb_font_set_user_data
hb_font_set_var_coords_design
hb_font_set_var_coords_normalized
hb_font_set_var_named_instance
hb_font_set_variation
hb_font_set_variations
hb_font_subtract_glyph_origin_for_direction
hb_glyph_info_get_glyph_flags
hb_language_from_string
hb_language_get_default
hb_language_matches
hb_language_to_string
hb_map_allocation_successful
hb_map_clear
hb_map_copy
hb_map_create
hb_map_del
hb_map_destroy
hb_map_get
hb_map_get_empty
hb_map_get_population
hb_map_get_user_data
hb_map_has
hb_map_hash
hb_map_is_empty
hb_map_is_equal
hb_map_keys
hb_map_next
hb_map_reference
hb_map_set
hb_map_set_user_data
hb_map_update
hb_map_values
hb_ot_color_glyph_get_layers
hb_ot_color_glyph_has_paint
hb_ot_color_glyph_reference_png
hb_ot_color_glyph_reference_svg
hb_ot_color_has_layers
hb_ot_color_has_paint
hb_ot_color_has_palettes
hb_ot_color_has_png
hb_ot_color_has_svg
hb_ot_color_palette_color_get_name_id
hb_ot_color_palette_get_colors
hb_ot_color_palette_get_count
hb_ot_color_palette_get_flags
hb_ot_color_palette_get_name_id
hb_ot_font_set_funcs
hb_ot_layout_collect_features
hb_ot_layout_collect_features_map
hb_ot_layout_collect_lookups
hb_ot_layout_feature_get_characters
hb_ot_layout_feature_get_lookups
hb_ot_layout_feature_get_name_ids
hb_ot_layout_feature_with_variations_get_lookups
hb_ot_layout_get_attach_points
hb_ot_layout_get_baseline
hb_ot_layout_get_baseline2
hb_ot_layout_get_baseline_with_fallback
hb_ot_layout_get_baseline_with_fallback2
hb_ot_layout_get_font_extents
hb_ot_layout_get_font_extents2
hb_ot_layout_get_glyph_class
hb_ot_layout_get_glyphs_in_class
hb_ot_layout_get_horizontal_baseline_tag_for_script
hb_ot_layout_get_ligature_carets
hb_ot_layout_get_size_params
hb_ot_layout_has_glyph_classes
hb_ot_layout_has_positioning
hb_ot_layout_has_substitution
hb_ot_layout_language_find_feature
hb_ot_layout_language_get_feature_indexes
hb_ot_layout_language_get_feature_tags
hb_ot_layout_language_get_required_feature
hb_ot_layout_language_get_required_feature_index
hb_ot_layout_lookup_collect_glyphs
hb_ot_layout_lookup_get_glyph_alternates
hb_ot_layout_lookup_get_optical_bound
hb_ot_layout_lookup_substitute_closure
hb_ot_layout_lookup_would_substitute
hb_ot_layout_lookups_substitute_closure
hb_ot_layout_script_find_language
hb_ot_layout_script_get_language_tags
hb_ot_layout_script_select_language
hb_ot_layout_script_select_language2
hb_ot_layout_table_choose_script
hb_ot_layout_table_find_feature_variations
hb_ot_layout_table_find_script
hb_ot_layout_table_get_feature_tags
hb_ot_layout_table_get_lookup_count
hb_ot_layout_table_get_script_tags
hb_ot_layout_table_select_script
hb_ot_math_get_constant
hb_ot_math_get_glyph_assembly
hb_ot_math_get_glyph_italics_correction
hb_ot_math_get_glyph_kerning
hb_ot_math_get_glyph_kernings
hb_ot_math_get_glyph_top_accent_attachment
hb_ot_math_get_glyph_variants
hb_ot_math_get_min_connector_overlap
hb_ot_math_has_data
hb_ot_math_is_glyph_extended_shape
hb_ot_meta_get_entry_tags
hb_ot_meta_reference_entry
hb_ot_metrics_get_position
hb_ot_metrics_get_position_with_fallback
hb_ot_metrics_get_variation
hb_ot_metrics_get_x_variation
hb_ot_metrics_get_y_variation
hb_ot_name_get_utf16
hb_ot_name_get_utf32
hb_ot_name_get_utf8
hb_ot_name_list_names
hb_ot_shape_glyphs_closure
hb_ot_shape_plan_collect_lookups
hb_ot_tag_from_language
hb_ot_tag_to_language
hb_ot_tag_to_script
hb_ot_tags_from_script
hb_ot_tags_from_script_and_language
hb_ot_tags_to_script_and_language
hb_ot_var_find_axis
hb_ot_var_find_axis_info
hb_ot_var_get_axes
hb_ot_var_get_axis_count
hb_ot_var_get_axis_infos
hb_ot_var_get_named_instance_count
hb_ot_var_has_data
hb_ot_var_named_instance_get_design_coords
hb_ot_var_named_instance_get_postscript_name_id
hb_ot_var_named_instance_get_subfamily_name_id
hb_ot_var_normalize_coords
hb_ot_var_normalize_variations
hb_paint_color
hb_paint_color_glyph
hb_paint_custom_palette_color
hb_paint_funcs_create
hb_paint_funcs_destroy
hb_paint_funcs_get_empty
hb_paint_funcs_get_user_data
hb_paint_funcs_is_immutable
hb_paint_funcs_make_immutable
hb_paint_funcs_reference
hb_paint_funcs_set_color_func
hb_paint_funcs_set_color_glyph_func
hb_paint_funcs_set_custom_palette_color_func
hb_paint_funcs_set_image_func
hb_paint_funcs_set_linear_gradient_func
hb_paint_funcs_set_pop_clip_func
hb_paint_funcs_set_pop_group_func
hb_paint_funcs_set_pop_transform_func
hb_paint_funcs_set_push_clip_glyph_func
hb_paint_funcs_set_push_clip_rectangle_func
hb_paint_funcs_set_push_group_func
hb_paint_funcs_set_push_transform_func
hb_paint_funcs_set_radial_gradient_func
hb_paint_funcs_set_sweep_gradient_func
hb_paint_funcs_set_user_data
hb_paint_image
hb_paint_linear_gradient
hb_paint_pop_clip
hb_paint_pop_group
hb_paint_pop_transform
hb_paint_push_clip_glyph
hb_paint_push_clip_rectangle
hb_paint_push_group
hb_paint_push_transform
hb_paint_radial_gradient
hb_paint_sweep_gradient
hb_script_from_iso15924_tag
hb_script_from_string
hb_script_get_horizontal_direction
hb_script_to_iso15924_tag
hb_segment_properties_equal
hb_segment_properties_hash
hb_segment_properties_overlay
hb_set_add
hb_set_add_range
hb_set_add_sorted_array
hb_set_allocation_successful
hb_set_clear
hb_set_copy
hb_set_create
hb_set_del
hb_set_del_range
hb_set_destroy
hb_set_get_empty
hb_set_get_max
hb_set_get_min
hb_set_get_population
hb_set_get_user_data
hb_set_has
hb_set_hash
hb_set_intersect
hb_set_invert
hb_set_is_empty
hb_set_is_equal
hb_set_is_inverted
hb_set_is_subset
hb_set_next
hb_set_next_many
hb_set_next_range
hb_set_previous
hb_set_previous_range
hb_set_reference
hb_set_set
hb_set_set_user_data
hb_set_subtract
hb_set_symmetric_difference
hb_set_union
hb_shape
hb_shape_full
hb_shape_list_shapers
hb_shape_plan_create
hb_shape_plan_create2
hb_shape_plan_create_cached
hb_shape_plan_create_cached2
hb_shape_plan_destroy
hb_shape_plan_execute
hb_shape_plan_get_empty
hb_shape_plan_get_shaper
hb_shape_plan_get_user_data
hb_shape_plan_reference
hb_shape_plan_set_user_data
hb_style_get_value
hb_subset_input_create_or_fail
hb_subset_input_destroy
hb_subset_input_get_flags
hb_subset_input_get_user_data
hb_subset_input_glyph_set
hb_subset_input_keep_everything
hb_subset_input_old_to_new_glyph_mapping
hb_subset_input_pin_all_axes_to_default
hb_subset_input_pin_axis_location
hb_subset_input_pin_axis_to_default
hb_subset_input_reference
hb_subset_input_set
hb_subset_input_set_flags
hb_subset_input_set_user_data
hb_subset_input_unicode_set
hb_subset_or_fail
hb_subset_plan_create_or_fail
hb_subset_plan_destroy
hb_subset_plan_execute_or_fail
hb_subset_plan_get_user_data
hb_subset_plan_new_to_old_glyph_mapping
hb_subset_plan_old_to_new_glyph_mapping
hb_subset_plan_reference
hb_subset_plan_set_user_data
hb_subset_plan_unicode_to_old_glyph_mapping
hb_subset_preprocess
hb_tag_from_string
hb_tag_to_string
hb_unicode_combining_class
hb_unicode_compose
hb_unicode_decompose
hb_unicode_decompose_compatibility
hb_unicode_eastasian_width
hb_unicode_funcs_create
hb_unicode_funcs_destroy
hb_unicode_funcs_get_default
hb_unicode_funcs_get_empty
hb_unicode_funcs_get_parent
hb_unicode_funcs_get_user_data
hb_unicode_funcs_is_immutable
hb_unicode_funcs_make_immutable
hb_unicode_funcs_reference
hb_unicode_funcs_set_combining_class_func
hb_unicode_funcs_set_compose_func
hb_unicode_funcs_set_decompose_compatibility_func
hb_unicode_funcs_set_decompose_func
hb_unicode_funcs_set_eastasian_width_func
hb_unicode_funcs_set_general_category_func
hb_unicode_funcs_set_mirroring_func
hb_unicode_funcs_set_script_func
hb_unicode_funcs_set_user_data
hb_unicode_general_category
hb_unicode_mirroring
hb_unicode_script
hb_variation_from_string
hb_variation_to_string
hb_version
hb_version_atleast
hb_version_string
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
264KB
Virtual Size
264KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=260, version=27412,
count=15, id=259, version=27412,
count=152, id=261, version=27412,
count=15, id=260, version=30034,
count=12, id=259, version=30034,
count=42, id=261, version=30034,
count=3, id=257, version=27412,
count=126, id=1, productName=Unmarked objects,
count=1, id=265, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
libHarfBuzzSharp.pdb
- SHA256 4300d75d5af09fbb79d565d9a18573243a93214c811d4f24a33f11f0d4242d93
- MD5 4a22cc7ce2ce190d315fb1ceba4a5913
- SHA1 066380e9f8b3fb3212ef8fbc1fde415f5eac1783
- SHA512 b8c391d6118d8a17f5d5ccfe05f56a03d44ffae1e9f8288a3fe2178b90cc1cf338594d7f674f965652dd158e1f1dacf9fd81d4dadcc9d1c6921c2b7c074cbedc
- SSDEEP 98304:GM0rybH6RPjWiaO1K7vCW4jdQC5pfFdY:WRPjWiaOE1G+apN
- TLSH T196272A22B6444C12D55F573BE1BB1B9C43628A06E7CFAB8BD50CA31D9EC63B09E1E1D1
- MD5 SHA1 SHA512 SSDEEP TLSH
libSkiaSharp.dll
- IMPHASH 9a7f4d47faf5a6d0fb21aa9efde60d3c
- SHA256 6d6eca64ec333daed78858a637b54c545aa01558204b8e2ae8870692acada127
- MD5 9f1deaee40e34c7c08952a3e5ebb3ca6
- SHA1 36f50165a5688289bb3877b8f29a354c4d5fd458
- SHA512 a5c9178ac02cda3feee7f8e1f26dce5cae247e6bb38ba596fc843d985636dc53a08cf20c9e3f4a8c542864f9dbb1d1d9f02cb7b9e879bbbd622219962df60a53
- SSDEEP 98304:61DvlpF6Tf9V805SPZYjyPytfdn93P8bZaFcbNB/ezHL84dYTFffN6G:61DATjy6d38ZaFcbMn6TFfff
- TLSH T114C64B067A5A54ADC48AC4B4934B4967AD2034CB0B35BCEF41C596393FBABF42F39718
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:b9:7f:20:ac:52:3c:1e:12:e4:ee:e1:52:10:10:9c:92:09:8e:3c:7e:85:90:2c:7c:9b:16:d2:cb:59:4f:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 22, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
8816768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\a\_work\1\s\externals\skia\out\windows\x64\libSkiaSharp.pdb
ole32
CoCreateGuid
CoCreateInstance
fontsub
CreateFontPackage
user32
SystemParametersInfoW
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
CloseHandle
CompareStringW
CreateEventA
CreateFileMappingA
CreateFileW
CreateSemaphoreA
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
KeepSkiaCSymbols
gr_backendrendertarget_delete
gr_backendrendertarget_get_backend
gr_backendrendertarget_get_gl_framebufferinfo
gr_backendrendertarget_get_height
gr_backendrendertarget_get_samples
gr_backendrendertarget_get_stencils
gr_backendrendertarget_get_width
gr_backendrendertarget_is_valid
gr_backendrendertarget_new_direct3d
gr_backendrendertarget_new_gl
gr_backendrendertarget_new_metal
gr_backendrendertarget_new_vulkan
gr_backendtexture_delete
gr_backendtexture_get_backend
gr_backendtexture_get_gl_textureinfo
gr_backendtexture_get_height
gr_backendtexture_get_width
gr_backendtexture_has_mipmaps
gr_backendtexture_is_valid
gr_backendtexture_new_direct3d
gr_backendtexture_new_gl
gr_backendtexture_new_metal
gr_backendtexture_new_vulkan
gr_direct_context_abandon_context
gr_direct_context_dump_memory_statistics
gr_direct_context_flush
gr_direct_context_flush_and_submit
gr_direct_context_flush_image
gr_direct_context_flush_surface
gr_direct_context_free_gpu_resources
gr_direct_context_get_resource_cache_limit
gr_direct_context_get_resource_cache_usage
gr_direct_context_is_abandoned
gr_direct_context_make_direct3d
gr_direct_context_make_direct3d_with_options
gr_direct_context_make_gl
gr_direct_context_make_gl_with_options
gr_direct_context_make_metal
gr_direct_context_make_metal_with_options
gr_direct_context_make_vulkan
gr_direct_context_make_vulkan_with_options
gr_direct_context_perform_deferred_cleanup
gr_direct_context_purge_unlocked_resources
gr_direct_context_purge_unlocked_resources_bytes
gr_direct_context_release_resources_and_abandon_context
gr_direct_context_reset_context
gr_direct_context_set_resource_cache_limit
gr_direct_context_submit
gr_glinterface_assemble_gl_interface
gr_glinterface_assemble_gles_interface
gr_glinterface_assemble_interface
gr_glinterface_assemble_webgl_interface
gr_glinterface_create_native_interface
gr_glinterface_has_extension
gr_glinterface_unref
gr_glinterface_validate
gr_recording_context_get_backend
gr_recording_context_get_direct_context
gr_recording_context_get_max_surface_sample_count_for_color_type
gr_recording_context_is_abandoned
gr_recording_context_max_render_target_size
gr_recording_context_max_texture_size
gr_recording_context_unref
gr_vk_extensions_delete
gr_vk_extensions_has_extension
gr_vk_extensions_init
gr_vk_extensions_new
sk_bitmap_destructor
sk_bitmap_erase
sk_bitmap_erase_rect
sk_bitmap_extract_alpha
sk_bitmap_extract_subset
sk_bitmap_get_addr
sk_bitmap_get_addr_16
sk_bitmap_get_addr_32
sk_bitmap_get_addr_8
sk_bitmap_get_byte_count
sk_bitmap_get_info
sk_bitmap_get_pixel_color
sk_bitmap_get_pixel_colors
sk_bitmap_get_pixels
sk_bitmap_get_row_bytes
sk_bitmap_install_pixels
sk_bitmap_install_pixels_with_pixmap
sk_bitmap_is_immutable
sk_bitmap_is_null
sk_bitmap_make_shader
sk_bitmap_new
sk_bitmap_notify_pixels_changed
sk_bitmap_peek_pixels
sk_bitmap_ready_to_draw
sk_bitmap_reset
sk_bitmap_set_immutable
sk_bitmap_set_pixels
sk_bitmap_swap
sk_bitmap_try_alloc_pixels
sk_bitmap_try_alloc_pixels_with_flags
sk_blender_new_arithmetic
sk_blender_new_mode
sk_blender_ref
sk_blender_unref
sk_canvas_clear
sk_canvas_clear_color4f
sk_canvas_clip_path_with_operation
sk_canvas_clip_rect_with_operation
sk_canvas_clip_region
sk_canvas_clip_rrect_with_operation
sk_canvas_concat
sk_canvas_destroy
sk_canvas_discard
sk_canvas_draw_annotation
sk_canvas_draw_arc
sk_canvas_draw_atlas
sk_canvas_draw_circle
sk_canvas_draw_color
sk_canvas_draw_color4f
sk_canvas_draw_drawable
sk_canvas_draw_drrect
sk_canvas_draw_image
sk_canvas_draw_image_lattice
sk_canvas_draw_image_nine
sk_canvas_draw_image_rect
sk_canvas_draw_line
sk_canvas_draw_link_destination_annotation
sk_canvas_draw_named_destination_annotation
sk_canvas_draw_oval
sk_canvas_draw_paint
sk_canvas_draw_patch
sk_canvas_draw_path
sk_canvas_draw_picture
sk_canvas_draw_point
sk_canvas_draw_points
sk_canvas_draw_rect
sk_canvas_draw_region
sk_canvas_draw_round_rect
sk_canvas_draw_rrect
sk_canvas_draw_simple_text
sk_canvas_draw_text_blob
sk_canvas_draw_url_annotation
sk_canvas_draw_vertices
sk_canvas_get_device_clip_bounds
sk_canvas_get_local_clip_bounds
sk_canvas_get_matrix
sk_canvas_get_save_count
sk_canvas_is_clip_empty
sk_canvas_is_clip_rect
sk_canvas_new_from_bitmap
sk_canvas_new_from_raster
sk_canvas_quick_reject
sk_canvas_reset_matrix
sk_canvas_restore
sk_canvas_restore_to_count
sk_canvas_rotate_degrees
sk_canvas_rotate_radians
sk_canvas_save
sk_canvas_save_layer
sk_canvas_save_layer_rec
sk_canvas_scale
sk_canvas_set_matrix
sk_canvas_skew
sk_canvas_translate
sk_codec_destroy
sk_codec_get_encoded_format
sk_codec_get_frame_count
sk_codec_get_frame_info
sk_codec_get_frame_info_for_index
sk_codec_get_info
sk_codec_get_origin
sk_codec_get_pixels
sk_codec_get_repetition_count
sk_codec_get_scaled_dimensions
sk_codec_get_scanline_order
sk_codec_get_scanlines
sk_codec_get_valid_subset
sk_codec_incremental_decode
sk_codec_min_buffered_bytes_needed
sk_codec_new_from_data
sk_codec_new_from_stream
sk_codec_next_scanline
sk_codec_output_scanline
sk_codec_skip_scanlines
sk_codec_start_incremental_decode
sk_codec_start_scanline_decode
sk_color4f_from_color
sk_color4f_to_color
sk_color_get_bit_shift
sk_color_premultiply
sk_color_premultiply_array
sk_color_unpremultiply
sk_color_unpremultiply_array
sk_colorfilter_new_color_matrix
sk_colorfilter_new_compose
sk_colorfilter_new_high_contrast
sk_colorfilter_new_hsla_matrix
sk_colorfilter_new_lerp
sk_colorfilter_new_lighting
sk_colorfilter_new_linear_to_srgb_gamma
sk_colorfilter_new_luma_color
sk_colorfilter_new_mode
sk_colorfilter_new_srgb_to_linear_gamma
sk_colorfilter_new_table
sk_colorfilter_new_table_argb
sk_colorfilter_unref
sk_colorspace_equals
sk_colorspace_gamma_close_to_srgb
sk_colorspace_gamma_is_linear
sk_colorspace_icc_profile_delete
sk_colorspace_icc_profile_get_buffer
sk_colorspace_icc_profile_get_to_xyzd50
sk_colorspace_icc_profile_new
sk_colorspace_icc_profile_parse
sk_colorspace_is_numerical_transfer_fn
sk_colorspace_is_srgb
sk_colorspace_make_linear_gamma
sk_colorspace_make_srgb_gamma
sk_colorspace_new_icc
sk_colorspace_new_rgb
sk_colorspace_new_srgb
sk_colorspace_new_srgb_linear
sk_colorspace_primaries_to_xyzd50
sk_colorspace_ref
sk_colorspace_to_profile
sk_colorspace_to_xyzd50
sk_colorspace_transfer_fn_eval
sk_colorspace_transfer_fn_invert
sk_colorspace_transfer_fn_named_2dot2
sk_colorspace_transfer_fn_named_hlg
sk_colorspace_transfer_fn_named_linear
sk_colorspace_transfer_fn_named_pq
sk_colorspace_transfer_fn_named_rec2020
sk_colorspace_transfer_fn_named_srgb
sk_colorspace_unref
sk_colorspace_xyz_concat
sk_colorspace_xyz_invert
sk_colorspace_xyz_named_adobe_rgb
sk_colorspace_xyz_named_display_p3
sk_colorspace_xyz_named_rec2020
sk_colorspace_xyz_named_srgb
sk_colorspace_xyz_named_xyz
sk_colortype_get_default_8888
sk_compatpaint_clone
sk_compatpaint_delete
sk_compatpaint_get_filter_quality
sk_compatpaint_get_font
sk_compatpaint_get_lcd_render_text
sk_compatpaint_get_text_align
sk_compatpaint_get_text_encoding
sk_compatpaint_make_font
sk_compatpaint_new
sk_compatpaint_new_with_font
sk_compatpaint_reset
sk_compatpaint_set_filter_quality
sk_compatpaint_set_is_antialias
sk_compatpaint_set_lcd_render_text
sk_compatpaint_set_text_align
sk_compatpaint_set_text_encoding
sk_data_get_bytes
sk_data_get_data
sk_data_get_size
sk_data_new_empty
sk_data_new_from_file
sk_data_new_from_stream
sk_data_new_subset
sk_data_new_uninitialized
sk_data_new_with_copy
sk_data_new_with_proc
sk_data_ref
sk_data_unref
sk_document_abort
sk_document_begin_page
sk_document_close
sk_document_create_pdf_from_stream
sk_document_create_pdf_from_stream_with_metadata
sk_document_create_xps_from_stream
sk_document_end_page
sk_document_unref
sk_drawable_approximate_bytes_used
sk_drawable_draw
sk_drawable_get_bounds
sk_drawable_get_generation_id
sk_drawable_new_picture_snapshot
sk_drawable_notify_drawing_changed
sk_drawable_unref
sk_dynamicmemorywstream_copy_to
sk_dynamicmemorywstream_destroy
sk_dynamicmemorywstream_detach_as_data
sk_dynamicmemorywstream_detach_as_stream
sk_dynamicmemorywstream_new
sk_dynamicmemorywstream_write_to_stream
sk_filestream_destroy
sk_filestream_is_valid
sk_filestream_new
sk_filewstream_destroy
sk_filewstream_is_valid
sk_filewstream_new
sk_font_break_text
sk_font_delete
sk_font_get_edging
sk_font_get_hinting
sk_font_get_metrics
sk_font_get_path
sk_font_get_paths
sk_font_get_pos
sk_font_get_scale_x
sk_font_get_size
sk_font_get_skew_x
sk_font_get_typeface
sk_font_get_widths_bounds
sk_font_get_xpos
sk_font_is_baseline_snap
sk_font_is_embedded_bitmaps
sk_font_is_embolden
sk_font_is_force_auto_hinting
sk_font_is_linear_metrics
sk_font_is_subpixel
sk_font_measure_text
sk_font_measure_text_no_return
sk_font_new
sk_font_new_with_values
sk_font_set_baseline_snap
sk_font_set_edging
sk_font_set_embedded_bitmaps
sk_font_set_embolden
sk_font_set_force_auto_hinting
sk_font_set_hinting
sk_font_set_linear_metrics
sk_font_set_scale_x
sk_font_set_size
sk_font_set_skew_x
sk_font_set_subpixel
sk_font_set_typeface
sk_font_text_to_glyphs
sk_font_unichar_to_glyph
sk_font_unichars_to_glyphs
sk_fontmgr_count_families
sk_fontmgr_create_default
sk_fontmgr_create_from_data
sk_fontmgr_create_from_file
sk_fontmgr_create_from_stream
sk_fontmgr_create_styleset
sk_fontmgr_get_family_name
sk_fontmgr_match_family
sk_fontmgr_match_family_style
sk_fontmgr_match_family_style_character
sk_fontmgr_ref_default
sk_fontmgr_unref
sk_fontstyle_delete
sk_fontstyle_get_slant
sk_fontstyle_get_weight
sk_fontstyle_get_width
sk_fontstyle_new
sk_fontstyleset_create_empty
sk_fontstyleset_create_typeface
sk_fontstyleset_get_count
sk_fontstyleset_get_style
sk_fontstyleset_match_style
sk_fontstyleset_unref
sk_get_recording_context
sk_get_surface
sk_graphics_dump_memory_statistics
sk_graphics_get_font_cache_count_limit
sk_graphics_get_font_cache_count_used
sk_graphics_get_font_cache_limit
sk_graphics_get_font_cache_used
sk_graphics_get_resource_cache_single_allocation_byte_limit
sk_graphics_get_resource_cache_total_byte_limit
sk_graphics_get_resource_cache_total_bytes_used
sk_graphics_init
sk_graphics_purge_all_caches
sk_graphics_purge_font_cache
sk_graphics_purge_resource_cache
sk_graphics_set_font_cache_count_limit
sk_graphics_set_font_cache_limit
sk_graphics_set_resource_cache_single_allocation_byte_limit
sk_graphics_set_resource_cache_total_byte_limit
sk_image_get_alpha_type
sk_image_get_color_type
sk_image_get_colorspace
sk_image_get_height
sk_image_get_unique_id
sk_image_get_width
sk_image_is_alpha_only
sk_image_is_lazy_generated
sk_image_is_texture_backed
sk_image_is_valid
sk_image_make_non_texture_image
sk_image_make_raster_image
sk_image_make_raw_shader
sk_image_make_shader
sk_image_make_subset
sk_image_make_subset_raster
sk_image_make_texture_image
sk_image_make_with_filter
sk_image_make_with_filter_raster
sk_image_new_from_adopted_texture
sk_image_new_from_bitmap
sk_image_new_from_encoded
sk_image_new_from_picture
sk_image_new_from_texture
sk_image_new_raster
sk_image_new_raster_copy
sk_image_new_raster_copy_with_pixmap
sk_image_new_raster_data
sk_image_peek_pixels
sk_image_read_pixels
sk_image_read_pixels_into_pixmap
sk_image_ref
sk_image_ref_encoded
sk_image_scale_pixels
sk_image_unref
sk_imagefilter_new_arithmetic
sk_imagefilter_new_blend
sk_imagefilter_new_blender
sk_imagefilter_new_blur
sk_imagefilter_new_color_filter
sk_imagefilter_new_compose
sk_imagefilter_new_dilate
sk_imagefilter_new_displacement_map_effect
sk_imagefilter_new_distant_lit_diffuse
sk_imagefilter_new_distant_lit_specular
sk_imagefilter_new_drop_shadow
sk_imagefilter_new_drop_shadow_only
sk_imagefilter_new_erode
sk_imagefilter_new_image
sk_imagefilter_new_image_simple
sk_imagefilter_new_magnifier
sk_imagefilter_new_matrix_convolution
sk_imagefilter_new_matrix_transform
sk_imagefilter_new_merge
sk_imagefilter_new_merge_simple
sk_imagefilter_new_offset
sk_imagefilter_new_picture
sk_imagefilter_new_picture_with_rect
sk_imagefilter_new_point_lit_diffuse
sk_imagefilter_new_point_lit_specular
sk_imagefilter_new_shader
sk_imagefilter_new_spot_lit_diffuse
sk_imagefilter_new_spot_lit_specular
sk_imagefilter_new_tile
sk_imagefilter_unref
sk_jpegencoder_encode
sk_linker_keep_alive
sk_manageddrawable_new
sk_manageddrawable_set_procs
sk_manageddrawable_unref
sk_managedstream_destroy
sk_managedstream_new
sk_managedstream_set_procs
sk_managedtracememorydump_delete
sk_managedtracememorydump_new
sk_managedtracememorydump_set_procs
sk_managedwstream_destroy
sk_managedwstream_new
sk_managedwstream_set_procs
sk_maskfilter_new_blur
sk_maskfilter_new_blur_with_flags
sk_maskfilter_new_clip
sk_maskfilter_new_gamma
sk_maskfilter_new_shader
sk_maskfilter_new_table
sk_maskfilter_ref
sk_maskfilter_unref
sk_matrix_concat
sk_matrix_map_points
sk_matrix_map_radius
sk_matrix_map_rect
sk_matrix_map_vector
sk_matrix_map_vectors
sk_matrix_map_xy
sk_matrix_post_concat
sk_matrix_pre_concat
sk_matrix_try_invert
sk_memorystream_destroy
sk_memorystream_new
sk_memorystream_new_with_data
sk_memorystream_new_with_length
sk_memorystream_new_with_skdata
sk_memorystream_set_memory
sk_nodraw_canvas_destroy
sk_nodraw_canvas_new
sk_nvrefcnt_get_ref_count
sk_nvrefcnt_safe_ref
sk_nvrefcnt_safe_unref
sk_nvrefcnt_unique
sk_nway_canvas_add_canvas
sk_nway_canvas_destroy
sk_nway_canvas_new
sk_nway_canvas_remove_all
sk_nway_canvas_remove_canvas
sk_opbuilder_add
sk_opbuilder_destroy
sk_opbuilder_new
sk_opbuilder_resolve
sk_overdraw_canvas_destroy
sk_overdraw_canvas_new
sk_paint_clone
sk_paint_delete
sk_paint_get_blender
sk_paint_get_blendmode
sk_paint_get_color
sk_paint_get_color4f
sk_paint_get_colorfilter
sk_paint_get_fill_path
sk_paint_get_imagefilter
sk_paint_get_maskfilter
sk_paint_get_path_effect
sk_paint_get_shader
sk_paint_get_stroke_cap
sk_paint_get_stroke_join
sk_paint_get_stroke_miter
sk_paint_get_stroke_width
sk_paint_get_style
sk_paint_is_antialias
sk_paint_is_dither
sk_paint_new
sk_paint_reset
sk_paint_set_antialias
sk_paint_set_blender
sk_paint_set_blendmode
sk_paint_set_color
sk_paint_set_color4f
sk_paint_set_colorfilter
sk_paint_set_dither
sk_paint_set_imagefilter
sk_paint_set_maskfilter
sk_paint_set_path_effect
sk_paint_set_shader
sk_paint_set_stroke_cap
sk_paint_set_stroke_join
sk_paint_set_stroke_miter
sk_paint_set_stroke_width
sk_paint_set_style
sk_path_add_arc
sk_path_add_circle
sk_path_add_oval
sk_path_add_path
sk_path_add_path_matrix
sk_path_add_path_offset
sk_path_add_path_reverse
sk_path_add_poly
sk_path_add_rect
sk_path_add_rect_start
sk_path_add_rounded_rect
sk_path_add_rrect
sk_path_add_rrect_start
sk_path_arc_to
sk_path_arc_to_with_oval
sk_path_arc_to_with_points
sk_path_clone
sk_path_close
sk_path_compute_tight_bounds
sk_path_conic_to
sk_path_contains
sk_path_convert_conic_to_quads
sk_path_count_points
sk_path_count_verbs
sk_path_create_iter
sk_path_create_rawiter
sk_path_cubic_to
sk_path_delete
sk_path_effect_create_1d_path
sk_path_effect_create_2d_line
sk_path_effect_create_2d_path
sk_path_effect_create_compose
sk_path_effect_create_corner
sk_path_effect_create_dash
sk_path_effect_create_discrete
sk_path_effect_create_sum
sk_path_effect_create_trim
sk_path_effect_unref
sk_path_get_bounds
sk_path_get_filltype
sk_path_get_last_point
sk_path_get_point
sk_path_get_points
sk_path_get_segment_masks
sk_path_is_convex
sk_path_is_line
sk_path_is_oval
sk_path_is_rect
sk_path_is_rrect
sk_path_iter_conic_weight
sk_path_iter_destroy
sk_path_iter_is_close_line
sk_path_iter_is_closed_contour
sk_path_iter_next
sk_path_line_to
sk_path_move_to
sk_path_new
sk_path_parse_svg_string
sk_path_quad_to
sk_path_rarc_to
sk_path_rawiter_conic_weight
sk_path_rawiter_destroy
sk_path_rawiter_next
sk_path_rawiter_peek
sk_path_rconic_to
sk_path_rcubic_to
sk_path_reset
sk_path_rewind
sk_path_rline_to
sk_path_rmove_to
sk_path_rquad_to
sk_path_set_filltype
sk_path_to_svg_string
sk_path_transform
sk_path_transform_to_dest
sk_pathmeasure_destroy
sk_pathmeasure_get_length
sk_pathmeasure_get_matrix
sk_pathmeasure_get_pos_tan
sk_pathmeasure_get_segment
sk_pathmeasure_is_closed
sk_pathmeasure_new
sk_pathmeasure_new_with_path
sk_pathmeasure_next_contour
sk_pathmeasure_set_path
sk_pathop_as_winding
sk_pathop_op
sk_pathop_simplify
sk_pathop_tight_bounds
sk_picture_approximate_bytes_used
sk_picture_approximate_op_count
sk_picture_deserialize_from_data
sk_picture_deserialize_from_memory
sk_picture_deserialize_from_stream
sk_picture_get_cull_rect
sk_picture_get_recording_canvas
sk_picture_get_unique_id
sk_picture_make_shader
sk_picture_playback
sk_picture_recorder_begin_recording
sk_picture_recorder_begin_recording_with_bbh_factory
sk_picture_recorder_delete
sk_picture_recorder_end_recording
sk_picture_recorder_end_recording_as_drawable
sk_picture_recorder_new
sk_picture_ref
sk_picture_serialize_to_data
sk_picture_serialize_to_stream
sk_picture_unref
sk_pixmap_compute_is_opaque
sk_pixmap_destructor
sk_pixmap_erase_color
sk_pixmap_erase_color4f
sk_pixmap_extract_subset
sk_pixmap_get_colorspace
sk_pixmap_get_info
sk_pixmap_get_pixel_alphaf
sk_pixmap_get_pixel_color
sk_pixmap_get_pixel_color4f
sk_pixmap_get_row_bytes
sk_pixmap_get_writable_addr
sk_pixmap_get_writeable_addr_with_xy
sk_pixmap_new
sk_pixmap_new_with_params
sk_pixmap_read_pixels
sk_pixmap_reset
sk_pixmap_reset_with_params
sk_pixmap_scale_pixels
sk_pixmap_set_colorspace
sk_pngencoder_encode
sk_refcnt_get_ref_count
sk_refcnt_safe_ref
sk_refcnt_safe_unref
sk_refcnt_unique
sk_region_cliperator_delete
sk_region_cliperator_done
sk_region_cliperator_new
sk_region_cliperator_next
sk_region_cliperator_rect
sk_region_contains
sk_region_contains_point
sk_region_contains_rect
sk_region_delete
sk_region_get_boundary_path
sk_region_get_bounds
sk_region_intersects
sk_region_intersects_rect
sk_region_is_complex
sk_region_is_empty
sk_region_is_rect
sk_region_iterator_delete
sk_region_iterator_done
sk_region_iterator_new
sk_region_iterator_next
sk_region_iterator_rect
sk_region_iterator_rewind
sk_region_new
sk_region_op
sk_region_op_rect
sk_region_quick_contains
sk_region_quick_reject
sk_region_quick_reject_rect
sk_region_set_empty
sk_region_set_path
sk_region_set_rect
sk_region_set_rects
sk_region_set_region
sk_region_spanerator_delete
sk_region_spanerator_new
sk_region_spanerator_next
sk_region_translate
sk_rrect_contains
sk_rrect_delete
sk_rrect_get_height
sk_rrect_get_radii
sk_rrect_get_rect
sk_rrect_get_type
sk_rrect_get_width
sk_rrect_inset
sk_rrect_is_valid
sk_rrect_new
sk_rrect_new_copy
sk_rrect_offset
sk_rrect_outset
sk_rrect_set_empty
sk_rrect_set_nine_patch
sk_rrect_set_oval
sk_rrect_set_rect
sk_rrect_set_rect_radii
sk_rrect_set_rect_xy
sk_rrect_transform
sk_rtree_factory_delete
sk_rtree_factory_new
sk_runtimeeffect_get_child_from_index
sk_runtimeeffect_get_child_from_name
sk_runtimeeffect_get_child_name
sk_runtimeeffect_get_children_size
sk_runtimeeffect_get_uniform_byte_size
sk_runtimeeffect_get_uniform_from_index
sk_runtimeeffect_get_uniform_from_name
sk_runtimeeffect_get_uniform_name
sk_runtimeeffect_get_uniforms_size
sk_runtimeeffect_make_blender
sk_runtimeeffect_make_color_filter
sk_runtimeeffect_make_for_blender
sk_runtimeeffect_make_for_color_filter
sk_runtimeeffect_make_for_shader
sk_runtimeeffect_make_shader
sk_runtimeeffect_unref
sk_shader_new_blend
sk_shader_new_blender
sk_shader_new_color
sk_shader_new_color4f
sk_shader_new_empty
sk_shader_new_linear_gradient
sk_shader_new_linear_gradient_color4f
sk_shader_new_perlin_noise_fractal_noise
sk_shader_new_perlin_noise_turbulence
sk_shader_new_radial_gradient
sk_shader_new_radial_gradient_color4f
sk_shader_new_sweep_gradient
sk_shader_new_sweep_gradient_color4f
sk_shader_new_two_point_conical_gradient
sk_shader_new_two_point_conical_gradient_color4f
sk_shader_ref
sk_shader_unref
sk_shader_with_color_filter
sk_shader_with_local_matrix
sk_stream_asset_destroy
sk_stream_destroy
sk_stream_duplicate
sk_stream_fork
sk_stream_get_length
sk_stream_get_memory_base
sk_stream_get_position
sk_stream_has_length
sk_stream_has_position
sk_stream_is_at_end
sk_stream_move
sk_stream_peek
sk_stream_read
sk_stream_read_bool
sk_stream_read_s16
sk_stream_read_s32
sk_stream_read_s8
sk_stream_read_u16
sk_stream_read_u32
sk_stream_read_u8
sk_stream_rewind
sk_stream_seek
sk_stream_skip
sk_string_destructor
sk_string_get_c_str
sk_string_get_size
sk_string_new_empty
sk_string_new_with_copy
sk_surface_draw
sk_surface_draw_with_sampling
sk_surface_get_canvas
sk_surface_get_props
sk_surface_get_recording_context
sk_surface_new_backend_render_target
sk_surface_new_backend_texture
sk_surface_new_image_snapshot
sk_surface_new_image_snapshot_with_crop
sk_surface_new_metal_layer
sk_surface_new_metal_view
sk_surface_new_null
sk_surface_new_raster
sk_surface_new_raster_direct
sk_surface_new_render_target
sk_surface_peek_pixels
sk_surface_read_pixels
sk_surface_unref
sk_surfaceprops_delete
sk_surfaceprops_get_flags
sk_surfaceprops_get_pixel_geometry
sk_surfaceprops_new
sk_svgcanvas_create_with_stream
sk_swizzle_swap_rb
sk_text_utils_get_path
sk_text_utils_get_pos_path
sk_textblob_builder_alloc_run
sk_textblob_builder_alloc_run_pos
sk_textblob_builder_alloc_run_pos_h
sk_textblob_builder_alloc_run_rsxform
sk_textblob_builder_alloc_run_text
sk_textblob_builder_alloc_run_text_pos
sk_textblob_builder_alloc_run_text_pos_h
sk_textblob_builder_alloc_run_text_rsxform
sk_textblob_builder_delete
sk_textblob_builder_make
sk_textblob_builder_new
sk_textblob_get_bounds
sk_textblob_get_intercepts
sk_textblob_get_unique_id
sk_textblob_ref
sk_textblob_unref
sk_typeface_copy_table_data
sk_typeface_count_glyphs
sk_typeface_count_tables
sk_typeface_create_default
sk_typeface_create_from_data
sk_typeface_create_from_file
sk_typeface_create_from_name
sk_typeface_create_from_stream
sk_typeface_get_family_name
sk_typeface_get_font_slant
sk_typeface_get_font_weight
sk_typeface_get_font_width
sk_typeface_get_fontstyle
sk_typeface_get_kerning_pair_adjustments
sk_typeface_get_post_script_name
sk_typeface_get_table_data
sk_typeface_get_table_size
sk_typeface_get_table_tags
sk_typeface_get_units_per_em
sk_typeface_is_fixed_pitch
sk_typeface_open_stream
sk_typeface_ref_default
sk_typeface_unichar_to_glyph
sk_typeface_unichars_to_glyphs
sk_typeface_unref
sk_version_get_increment
sk_version_get_milestone
sk_version_get_string
sk_vertices_make_copy
sk_vertices_ref
sk_vertices_unref
sk_webpencoder_encode
sk_wstream_bytes_written
sk_wstream_flush
sk_wstream_get_size_of_packed_uint
sk_wstream_newline
sk_wstream_write
sk_wstream_write_16
sk_wstream_write_32
sk_wstream_write_8
sk_wstream_write_bigdec_as_text
sk_wstream_write_bool
sk_wstream_write_dec_as_text
sk_wstream_write_hex_as_text
sk_wstream_write_packed_uint
sk_wstream_write_scalar
sk_wstream_write_scalar_as_text
sk_wstream_write_stream
sk_wstream_write_text
skottie_animation_builder_delete
skottie_animation_builder_get_stats
skottie_animation_builder_make_from_data
skottie_animation_builder_make_from_file
skottie_animation_builder_make_from_stream
skottie_animation_builder_make_from_string
skottie_animation_builder_new
skottie_animation_builder_set_font_manager
skottie_animation_builder_set_resource_provider
skottie_animation_delete
skottie_animation_get_duration
skottie_animation_get_fps
skottie_animation_get_in_point
skottie_animation_get_out_point
skottie_animation_get_size
skottie_animation_get_version
skottie_animation_make_from_data
skottie_animation_make_from_file
skottie_animation_make_from_stream
skottie_animation_make_from_string
skottie_animation_ref
skottie_animation_render
skottie_animation_render_with_flags
skottie_animation_seek
skottie_animation_seek_frame
skottie_animation_seek_frame_time
skottie_animation_unref
skresources_caching_resource_provider_proxy_make
skresources_data_uri_resource_provider_proxy_make
skresources_file_resource_provider_make
skresources_resource_provider_delete
skresources_resource_provider_load
skresources_resource_provider_load_audio_asset
skresources_resource_provider_load_image_asset
skresources_resource_provider_load_typeface
skresources_resource_provider_ref
skresources_resource_provider_unref
sksg_invalidation_controller_begin
sksg_invalidation_controller_delete
sksg_invalidation_controller_end
sksg_invalidation_controller_get_bounds
sksg_invalidation_controller_inval
sksg_invalidation_controller_new
sksg_invalidation_controller_reset
Name
.text
Size
8.6MB
Virtual Size
8.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
392KB
Virtual Size
391KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
24B
Characteristics
Name
.tls
Size
512B
Virtual Size
49B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1024B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
libSkiaSharp.pdb
- SHA256 2940fae5d8ea96012b3850ff9e8a2cc3b96b28b9e4613e9422b57492d32f5279
- MD5 2f9ef07c2e83fea6d78fbeba6d97a34b
- SHA1 610fc597ba9d2c044344bccabfad5655a80bda9f
- SHA512 b97ba325550a8fa92762daf6595bf3e5eb9afeada87a084071158ca5f0e8027253661590f982a041b3e9fc5ee3df3d5029fc972184d4bee1ed857f01c2c8e63c
- SSDEEP 196608:sXxCuj0GEIcn7mVp0Wd4C9DmQ2jOTOREM+cVTitKfyTmtfaZg2+4YrPqHHQ+ePVf:uHSyyrLW2dnwrTYGCBnWidXvq1W
- TLSH T1F20806A2FB184953CC1F1F35B0EA0B0C03668A1A9BEFD747DE8CD286DC86658DD1E951
- MD5 SHA1 SHA512 SSDEEP TLSH
mscordaccore.dll
- IMPHASH 0ae18dfbe5ce9ae2ec912b2d0956092e
- SHA256 20ec1a3a31e5287c4de606aad2eae7d0ccbe5c2e1d17db44f543b556a3166b8a
- MD5 f14671a0ed917f839155451575c45230
- SHA1 a7d9c73838aedae5cd838162d48674ed098a9ea7
- SHA512 696e2dfb960a004e6916f2e927635d5800c319f0751c426505f7862875a6a59dfad214213fae8b6e025af9e993bcc446381feca4a7eb7ea3dd93a7189b1fc54f
- SSDEEP 24576:KTrX9PYEOVAlGH1yso1Ree0P3JlluHjwALnzjpm+PjGnE:wxPYEOVAoHvRP3puHjwALnzjpmEJ
- TLSH T112554A56D6BC5499CEA9D0F8C507491FE7B23810037466FF46A48B192F3BBE66BB8310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e6:34:8c:ce:e1:f3:28:3b:5a:d5:2f:2c:5f:dc:17:bc:ea:c8:1b:1d:ec:f9:66:cd:99:d0:bd:87:8d:c8:db:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:38:cb:5f:a0:b8:d0:e0:6e:ca:00:00:00:00:01:38
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 5, 2026 - Mar 3, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:27:d5:c0:83:c3:b1:2e:57:2d:00:01:00:00:02:27
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
931008
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb
kernel32
DebugBreak
GetCurrentProcess
FlushInstructionCache
GetProcAddress
FreeLibrary
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
LCMapStringEx
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
CloseHandle
GetThreadGroupAffinity
GetProcessGroupAffinity
GetCurrentThread
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
SetLastError
GetModuleFileNameW
GetEnvironmentVariableW
LoadLibraryExW
CreateFileW
GetFullPathNameW
TerminateProcess
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
WakeAllConditionVariable
ReadProcessMemory
GetProcessHeap
HeapAlloc
GetSystemInfo
GetThreadId
GetProcessIdOfThread
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
GetLogicalProcessorInformationEx
MultiByteToWideChar
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
TlsFree
SleepConditionVariableSRW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ole32
CoTaskMemFree
CoCreateGuid
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_errno
abort
_cexit
_invalid_parameter_noinfo
terminate
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_initterm
api-ms-win-crt-convert-l1-1-0
strtoul
wcstoul
api-ms-win-crt-string-l1-1-0
wcscpy_s
wcsncpy_s
strncmp
wcsncmp
strcmp
strncpy_s
strcat_s
strcpy_s
strlen
wcsncat_s
strncat_s
wcscat_s
strnlen
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
calloc
_callnewh
free
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35207,
count=15, id=260, version=35207,
count=47, id=261, version=35207,
count=4, id=260, version=33145,
count=11, id=257, version=33145,
count=168, id=1, productName=Unmarked objects,
count=187, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
mscordaccore_amd64_amd64_10.0.826.23019.dll
- IMPHASH 0ae18dfbe5ce9ae2ec912b2d0956092e
- SHA256 20ec1a3a31e5287c4de606aad2eae7d0ccbe5c2e1d17db44f543b556a3166b8a
- MD5 f14671a0ed917f839155451575c45230
- SHA1 a7d9c73838aedae5cd838162d48674ed098a9ea7
- SHA512 696e2dfb960a004e6916f2e927635d5800c319f0751c426505f7862875a6a59dfad214213fae8b6e025af9e993bcc446381feca4a7eb7ea3dd93a7189b1fc54f
- SSDEEP 24576:KTrX9PYEOVAlGH1yso1Ree0P3JlluHjwALnzjpm+PjGnE:wxPYEOVAoHvRP3puHjwALnzjpmEJ
- TLSH T112554A56D6BC5499CEA9D0F8C507491FE7B23810037466FF46A48B192F3BBE66BB8310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e6:34:8c:ce:e1:f3:28:3b:5a:d5:2f:2c:5f:dc:17:bc:ea:c8:1b:1d:ec:f9:66:cd:99:d0:bd:87:8d:c8:db:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:38:cb:5f:a0:b8:d0:e0:6e:ca:00:00:00:00:01:38
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 5, 2026 - Mar 3, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:27:d5:c0:83:c3:b1:2e:57:2d:00:01:00:00:02:27
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
931008
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb
kernel32
DebugBreak
GetCurrentProcess
FlushInstructionCache
GetProcAddress
FreeLibrary
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
LCMapStringEx
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
CloseHandle
GetThreadGroupAffinity
GetProcessGroupAffinity
GetCurrentThread
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
SetLastError
GetModuleFileNameW
GetEnvironmentVariableW
LoadLibraryExW
CreateFileW
GetFullPathNameW
TerminateProcess
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
WakeAllConditionVariable
ReadProcessMemory
GetProcessHeap
HeapAlloc
GetSystemInfo
GetThreadId
GetProcessIdOfThread
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
GetLogicalProcessorInformationEx
MultiByteToWideChar
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
TlsFree
SleepConditionVariableSRW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ole32
CoTaskMemFree
CoCreateGuid
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_errno
abort
_cexit
_invalid_parameter_noinfo
terminate
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_initterm
api-ms-win-crt-convert-l1-1-0
strtoul
wcstoul
api-ms-win-crt-string-l1-1-0
wcscpy_s
wcsncpy_s
strncmp
wcsncmp
strcmp
strncpy_s
strcat_s
strcpy_s
strlen
wcsncat_s
strncat_s
wcscat_s
strnlen
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
calloc
_callnewh
free
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35207,
count=15, id=260, version=35207,
count=47, id=261, version=35207,
count=4, id=260, version=33145,
count=11, id=257, version=33145,
count=168, id=1, productName=Unmarked objects,
count=187, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
mscordbi.dll
- IMPHASH 12112fc4687a82e2f46ddfb18e8ca71b
- SHA256 c8e31f19caa920ee3d934345ad8e83508218d4f1ea2b26a3cc96848e8b6c4cbe
- MD5 0ef8c73d34ec0d5f89324ca83f855a55
- SHA1 0f39dc95c4980f9ccdb647c1c5442af7b4ebac28
- SHA512 ed736da3fc61e9bcfee4ca0f1cd46083dd8e18b9699190a37f5a5b84a39b73c6871952b064d48b2b5d452b08c904a14edfe8e4bce12c0c4f2e89813efe0d2080
- SSDEEP 24576:DtRmOsAhXwtFqZT8F5yVjk1/ngp99CriyJ:DtRmOaM8Qj7P4J
- TLSH T175456D56ABFD9199D8B6C0BEC55B421BFA70384623246BDB1790C21D2F3BBE46D78310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:0c:ab:87:dc:b4:4e:16:b3:8a:cf:14:77:be:47:0e:10:8e:d9:82:5c:4f:80:0c:cb:51:92:00:84:44:52:ef
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:38:cb:5f:a0:b8:d0:e0:6e:ca:00:00:00:00:01:38
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 5, 2026 - Mar 3, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:24:3b:84:21:b0:2c:ac:64:22:00:01:00:00:02:24
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
795600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordbi\mscordbi.pdb
kernel32
WaitForSingleObject
DuplicateHandle
CreateEventW
WideCharToMultiByte
SuspendThread
ResumeThread
GetProcAddress
WaitForMultipleObjectsEx
SetEvent
ResetEvent
GetCurrentThreadId
FlushInstructionCache
OpenThread
CreateThread
GetThreadContext
InitializeContext
CopyContext
SetThreadContext
VirtualProtectEx
TerminateProcess
ContinueDebugEvent
GetProcessId
FreeLibrary
VirtualQueryEx
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
Sleep
DebugActiveProcess
DebugActiveProcessStop
WaitForDebugEvent
OpenProcess
IsWow64Process
ReadProcessMemory
WriteProcessMemory
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
HeapCreate
GetProcessHeap
DebugBreak
VirtualQuery
RaiseException
SetLastError
LCMapStringEx
MultiByteToWideChar
FormatMessageW
LocalFree
GetModuleFileNameW
GetEnvironmentVariableW
LoadLibraryExW
GetFullPathNameW
GetSystemInfo
GetCurrentThread
SwitchToThread
CreateProcessW
SleepEx
VirtualAlloc
VirtualFree
CreateSemaphoreExW
WaitForSingleObjectEx
ReleaseSemaphore
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
TlsSetValue
GetCurrentProcess
GetCurrentProcessId
FlushFileBuffers
CloseHandle
GetLastError
CreateFileW
WriteFile
ReadFile
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TlsFree
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
SetThreadToken
RevertToSelf
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
calloc
free
api-ms-win-crt-string-l1-1-0
wcscat_s
wcscpy_s
strncmp
wcsncmp
wcsncpy_s
strcmp
wcsncat_s
strncpy_s
wcsnlen
strcpy_s
strlen
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_invalid_parameter_noinfo
terminate
_seh_filter_dll
_errno
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_cexit
abort
api-ms-win-crt-convert-l1-1-0
wcstoul
CoreCLRCreateCordbObject
CoreCLRCreateCordbObject3
CoreCLRCreateCordbObjectEx
CreateCordbObject
DllGetClassObjectInternal
OpenVirtualProcess
OpenVirtualProcess2
OpenVirtualProcessImpl
OpenVirtualProcessImpl2
Name
.text
Size
955KB
Virtual Size
954KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35207,
count=15, id=260, version=35207,
count=46, id=261, version=35207,
count=4, id=260, version=33145,
count=11, id=257, version=33145,
count=192, id=1, productName=Unmarked objects,
count=1, id=259, version=35225,
count=114, id=265, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
mscorrc.dll
- SHA256 3a11443f4c0c0b9adbe836fba441ea7c2a7170d72ec22ff5d88cc1717a3b6b1d
- MD5 afec8a4151c237018303c36e3f225759
- SHA1 5da315a9a8c33414a0ac5bd33703ff6d93638d4c
- SHA512 6bf50abc8299c273056c032d444b9c8477aaa6957c74ed58c369cbede477f36fcdef81b99bed85758dfcbf5927a65640d4cb5c14a3f38cd46764fa6f5fc2c508
- SSDEEP 1536:Dwg91ntuvh7xChdZUutVHSfignwJfcvVMgSIctpoEC6gzJ:DwInTdZUufSfHnqCSpSIgF
- TLSH T1ADD37891A7F95218FAF73B746DB95AA00E7ABC96FCB9C21D1240805E5D71A40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
be:72:cb:db:2b:e7:36:54:e5:f3:57:57:13:0d:c4:01:da:07:92:53:d8:0e:64:47:87:65:bb:48:4b:6a:5f:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 30, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1f:3a:70:69:e4:a2:30:2e:95:00:01:00:00:02:1f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscorrc\mscorrc.pdb
Name
.rdata
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=35225,
count=1, id=258, version=35225,
msquic.dll
- IMPHASH e03d2e28c6417fd633aac131f09b26f3
- SHA256 99daf179ee2dfb5c36493543647b64fc58a24aba0b16d5e9232b06003fbc9054
- MD5 401735d3c397644c2dc050e651099fc3
- SHA1 617eebe18cd60fa3819057ad293a81d40535a70f
- SHA512 822405a659299d64ac3c39575a7451fff8f842b8f8bb0694c4aee6a2b458b1393642228c512f87e50d3c462cc613fb632254cb491ad984a13346dbe22ff5dd68
- SSDEEP 6144:oK5tzsadUadXmn9NUKVqFbcOjbjjG4rSNaZEHATfN9AVic7wIFZPL6/rRkzMz:R5pZuadGoKgpDS4eNVgJ9Z
- TLSH T159B48D1267FC14A9E0B7C378C9278527FAB27C244721C65F6291922D1F63B50AF3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
85:ec:7b:82:f1:96:7a:87:c0:45:a6:41:f1:70:80:6a:57:9f:67:e4:2c:00:3d:6d:d4:b5:9f:25:43:e3:11:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 14, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:2b:bb:00:50:ff:4d:3b:9a:a1:00:01:00:00:02:2b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
191296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\msquic\artifacts\bin\winuser\cmakeouttemp\msquic.pdb
winmm
timeGetDevCaps
secur32
SetCredentialsAttributesW
FreeCredentialsHandle
AcquireCredentialsHandleW
QueryContextAttributesW
DeleteSecurityContext
AcceptSecurityContext
QuerySecurityContextToken
FreeContextBuffer
InitializeSecurityContextW
kernel32
GetCurrentThreadId
SetEvent
ResetEvent
SetThreadPriority
GetLastError
CreateThread
SetThreadIdealProcessor
SetThreadGroupAffinity
HeapCreate
HeapFree
InterlockedPopEntrySList
MultiByteToWideChar
GetLogicalProcessorInformationEx
QueryPerformanceFrequency
HeapAlloc
InitializeSListHead
HeapDestroy
GlobalMemoryStatusEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
SetThreadpoolWait
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryExW
TlsFree
TlsSetValue
CloseHandle
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwindEx
IsDebuggerPresent
GetCurrentProcessId
LeaveCriticalSection
GetSystemTimeAdjustment
WaitForSingleObject
IsProcessorFeaturePresent
TerminateProcess
PostQueuedCompletionStatus
Sleep
GetQueuedCompletionStatusEx
CreateIoCompletionPort
GetCurrentProcess
SetUnhandledExceptionFilter
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EnterCriticalSection
GetCurrentProcessorNumberEx
LoadLibraryA
QueryDepthSList
GetProcAddress
FreeLibrary
CreateEventA
GetActiveProcessorGroupCount
InterlockedFlushSList
InterlockedPushEntrySList
AcquireSRWLockShared
ReleaseSRWLockShared
SetFileCompletionNotificationModes
GetActiveProcessorCount
CancelIoEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
TlsGetValue
InitializeSRWLock
CloseThreadpoolWait
InterlockedPushListSListEx
advapi32
EventUnregister
RegOpenKeyExA
RegQueryValueExA
EventWriteTransfer
RegCloseKey
RegNotifyChangeKeyValue
EventRegister
iphlpapi
GetIpNetEntry2
SetCurrentThreadCompartmentId
ConvertInterfaceLuidToAlias
GetIfTable2
FreeMibTable
ConvertInterfaceIndexToLuid
GetCurrentThreadCompartmentId
ResolveIpNetEntry2
GetAdaptersAddresses
GetBestRoute2
bcrypt
BCryptDestroyKey
BCryptEncrypt
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptSetProperty
BCryptCreateHash
BCryptGenerateSymmetricKey
BCryptDecrypt
ws2_32
htonl
GetAddrInfoW
FreeAddrInfoW
WSAGetLastError
setsockopt
getsockopt
WSARecv
htons
WSACleanup
bind
WSAIoctl
connect
closesocket
WSASend
shutdown
socket
getsockname
WSASocketW
WSAStartup
crypt32
CertEnumCertificatesInStore
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertCloseStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateContextProperty
CertGetNameStringA
CertAddCertificateLinkToStore
CertSaveStore
CertGetCertificateChain
sspicli
QueryContextAttributesExW
ntdll
RtlNtStatusToDosError
RtlInitUnicodeString
NtSetInformationThread
RtlIpv6AddressToStringExA
RtlIpv4AddressToStringExA
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SysFreeString
SysAllocString
SafeArrayUnaccessData
VariantClear
SafeArrayAccessData
ole32
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
api-ms-win-crt-stdio-l1-1-0
fgets
fclose
__stdio_common_vfprintf
__acrt_iob_func
fopen
__stdio_common_vsnprintf_s
api-ms-win-crt-string-l1-1-0
wcscmp
wcscat_s
strnlen
strcmp
wcsncmp
_strnicmp
api-ms-win-crt-convert-l1-1-0
strtoul
mbstowcs_s
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
abort
_initialize_narrow_environment
_cexit
_execute_onexit_table
_initialize_onexit_table
terminate
_initterm_e
_configure_narrow_argv
_initterm
MsQuicClose
MsQuicOpenVersion
Name
.text
Size
327KB
Virtual Size
327KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=35207,
count=11, id=260, version=35207,
count=31, id=261, version=35207,
count=32, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=30795,
count=209, id=1, productName=Unmarked objects,
count=2, id=260, version=30795,
count=56, id=269, version=35223,
count=1, id=256, version=35223,
count=1, id=255, version=35223,
count=2, id=151,
count=1, id=258, version=35223,