JOEKNAUERBAND_rmm_v2[.]5[.]0[.]68_oid3194489f-d085-4291-8d78-656ac55707f3_bidYSHwnSuiR0OuVI-TFmGn5g[.]exe

resource
JOEKNAUERBAND_rmm_v2.5.0.68_oid3194489f-d085-4291-8d78-656ac55707f3_bidYSHwnSuiR0OuVI-TFmGn5g.exe
unpack001/$TEMP/Internal.RMM.TrayAppLauncher.exe
unpack001/$TEMP/RMM.TrayAppLauncher.exe
unpack001/Internal.RMM.Agent.Launcher.exe
unpack001/Internal.RMM.Agent.exe
unpack001/Internal.RMM.TrayApp.exe
unpack001/Internal.RMM.TrayAppLauncher.exe
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugin.Antivirus.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugin.Domain.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugin.EventLog.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugin.Hardware.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugin.Hdd.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugin.Host.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugin.HyperV.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugin.Network.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugin.PowerShellTerminal.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugin.Printer.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugin.Registry.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugin.Runtime.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugin.Service.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugin.Software.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugin.Summary.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugin.Update.dll
unpack001/RMM.Agent.Launcher.exe
unpack001/RMM.Agent.dll
unpack001/RMM.Agent.exe
unpack001/RMM.Plugin.Manager.dll
unpack001/RMM.TrayApp.exe
unpack001/RMM.TrayAppLauncher.exe
unpack001/uninst.exe

resource
unpack001/$PLUGINSDIR/INetC.dll
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UAC.dll
unpack001/$PLUGINSDIR/nsArray.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsJSON.dll
unpack001/$PLUGINSDIR/processwork.dll
unpack001/ArpLookup.dll
unpack001/Cloud.Backup.RM.SIO.dll
unpack001/CronExpressionDescriptor.dll
unpack001/Elasticsearch.Net.dll
unpack001/Hardware.Info.dll
unpack001/MBS.Configuration.Local.dll
unpack001/MBS.Helpers.Core.dll
unpack001/MBS.Identity.Common.dll
unpack001/MBS.Settings.Client.dll
unpack001/MBS.Settings.Common.dll
unpack001/MBS.Settings.Models.dll
unpack001/MessagePack.Annotations.dll
unpack001/MessagePack.dll
unpack001/Nest.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.ServicesExplorer.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Shared.Antivirus.dll
unpack001/Plugins/RMM.Plugin.Domain/Interop.WUApiLib.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.ServicesExplorer.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.UpdatesExplorer.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Shared.Domain.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugins.Shared.WU.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugins.Shared.EventLog.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugins.Shared.Hardware.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugins.Shared.Hdd.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.Location.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.ServicesExplorer.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.WebHelper.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugins.Shared.Host.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.HyperVExplorer.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugins.Shared.HyperV.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.PerformanceCounters.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugins.Shared.Network.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.ScriptLauncher.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Shared.PowerShellTerminal.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugins.Shared.Printer.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.RegistryExplorer.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugins.Shared.Registry.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.MemoryExplorer.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.ProcessesExplorer.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugins.Shared.Runtime.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.ServicesExplorer.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugins.Shared.Service.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugins.Shared.Software.dll
unpack001/Plugins/RMM.Plugin.Summary/Interop.WUApiLib.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.AlertCommon.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.Location.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.MemoryExplorer.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.PerformanceCounters.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.PostAction.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ProcessesExplorer.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ScriptLauncher.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ServicesExplorer.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.UpdatesExplorer.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.WebHelper.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Antivirus.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.EventLog.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Hardware.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Hdd.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Host.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Runtime.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Software.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Summary.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.WU.dll
unpack001/Plugins/RMM.Plugin.Update/Interop.WUApiLib.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Commands.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.CommonDefines.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.DataProvider.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.NetworkMonitor.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.ServicesExplorer.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.UpdatesExplorer.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.WmiHelper.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Models.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Root.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugins.Shared.WU.dll
unpack001/Polly.Extensions.Http.dll
unpack001/Quartz.Serialization.Json.dll
unpack001/Quartz.dll
unpack001/RMM.Agent.Auth.dll
unpack001/RMM.Agent.Common.dll
unpack001/RMM.Agent.Constants.dll
unpack001/RMM.Agent.Feedback.dll
unpack001/RMM.Agent.Libs.dll
unpack001/RMM.Agent.Models.dll
unpack001/RMM.Agent.SIO.Client.dll
unpack001/RMM.Agent.Settings.dll
unpack001/RMM.Alert.Models.dll
unpack001/RMM.Common.Snmp.dll
unpack001/RMM.Control.Models.dll
unpack001/RMM.Plugin.Base.dll
unpack001/RMM.Stat.Models.dll
unpack001/RMM.TrayApp.dll
unpack001/RMM.TrayAppLauncher.dll
unpack001/RMM.Utils.Network.dll
unpack001/RMM.Utils.Schedule.dll
unpack001/RMM.Utils.dll
unpack001/SQLitePCLRaw.batteries_v2.dll
unpack001/SQLitePCLRaw.core.dll
unpack001/SQLitePCLRaw.provider.e_sqlite3.dll
unpack001/Serilog.Enrichers.Thread.dll
unpack001/Serilog.Expressions.dll
unpack001/Serilog.Extensions.Logging.dll
unpack001/Serilog.Filters.Expressions.dll
unpack001/Serilog.Settings.Configuration.dll
unpack001/Serilog.Sinks.Async.dll
unpack001/Serilog.Sinks.Console.dll
unpack001/Serilog.Sinks.File.dll
unpack001/Serilog.dll
unpack001/SuperSocket.ClientEngine.dll
unpack001/SuperSocket.ProtoBase.dll
unpack001/Superpower.dll
unpack001/TopShelf.ServiceInstaller.dll
unpack001/Topshelf.dll
unpack001/WebSocket4Net.dll
unpack001/runtimes/win-arm/native/e_sqlite3.dll
unpack001/runtimes/win-x64/native/e_sqlite3.dll
unpack001/runtimes/win-x86/native/e_sqlite3.dll

resource
JOEKNAUERBAND_rmm_v2.5.0.68_oid3194489f-d085-4291-8d78-656ac55707f3_bidYSHwnSuiR0OuVI-TFmGn5g.exe
unpack001/$TEMP/Internal.RMM.TrayAppLauncher.exe
unpack001/$TEMP/RMM.TrayAppLauncher.exe
unpack001/Internal.RMM.Agent.Launcher.exe
unpack001/Internal.RMM.Agent.exe
unpack001/Internal.RMM.TrayApp.exe
unpack001/Internal.RMM.TrayAppLauncher.exe
unpack001/Plugins/RMM.Plugin.Antivirus/RMM.Plugin.Antivirus.dll
unpack001/Plugins/RMM.Plugin.Domain/RMM.Plugin.Domain.dll
unpack001/Plugins/RMM.Plugin.EventLog/RMM.Plugin.EventLog.dll
unpack001/Plugins/RMM.Plugin.Hardware/RMM.Plugin.Hardware.dll
unpack001/Plugins/RMM.Plugin.Hdd/RMM.Plugin.Hdd.dll
unpack001/Plugins/RMM.Plugin.Host/RMM.Plugin.Host.dll
unpack001/Plugins/RMM.Plugin.HyperV/RMM.Plugin.HyperV.dll
unpack001/Plugins/RMM.Plugin.Network/RMM.Plugin.Network.dll
unpack001/Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugin.PowerShellTerminal.dll
unpack001/Plugins/RMM.Plugin.Printer/RMM.Plugin.Printer.dll
unpack001/Plugins/RMM.Plugin.Registry/RMM.Plugin.Registry.dll
unpack001/Plugins/RMM.Plugin.Runtime/RMM.Plugin.Runtime.dll
unpack001/Plugins/RMM.Plugin.Service/RMM.Plugin.Service.dll
unpack001/Plugins/RMM.Plugin.Software/RMM.Plugin.Software.dll
unpack001/Plugins/RMM.Plugin.Summary/RMM.Plugin.Summary.dll
unpack001/Plugins/RMM.Plugin.Update/RMM.Plugin.Update.dll
unpack001/RMM.Agent.Launcher.exe
unpack001/RMM.Agent.dll
unpack001/RMM.Agent.exe
unpack001/RMM.Plugin.Manager.dll
unpack001/RMM.TrayApp.exe
unpack001/RMM.TrayAppLauncher.exe
unpack001/uninst.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

JOEKNAUERBAND_rmm_v2.5.0.68_oid3194489f-d085-4291-8d78-656ac55707f3_bidYSHwnSuiR0OuVI-TFmGn5g.exe

IMPHASH 12082e77cfc7e34f96f21f95764c8ac3
SHA256 6f35b915daa5c635f6a05e04cdb9b4aa5c682262139316df3ddd6cd412b18eb4
MD5 2415c2e603d6b2941942824eae665f3d
SHA1 24a878f6f853bb39e254cf1e97b747cdc61f84bd
SHA512 1f85d4586af6af9794b1b94b7c1c337440a03d96e2f315d320d36706eb2c0b139d9cb411a9c72b747f4f2ee6e8690f7a04ea29c6610ad7bced3fc98bfae65330
SSDEEP 393216:QzVfLUnmhNw32VNelklzfhPdkmpv5JwuFUvmB8SO3DOgwtEI0ppjagOibnaEIBT:QzVjUnlA88tPt5JhUvmOSADOgXOgOiju
TLSH
T1A20733917CD4F70EDCA8D838C8B053F041EB1EEEF6715417A4A17E6637B6283D29A846
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

ac:80:fa:0d:74:ec:07:08:5d:ac:3b:c6:ab:a7:5e:bc:62:13:7e:c2:b0:1d:2e:03:97:e7:16:d7:3a:db:8d:dc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13733

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetShortPathNameA GetFullPathNameA MoveFileA GetLastError SetCurrentDirectoryA GetFileAttributesA SearchPathA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime CompareFileTime lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrcatA GetSystemDirectoryA CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetCommandLineA GetTempPathA GetProcAddress DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary MulDiv LoadLibraryExA GetModuleHandleA

user32

GetWindowRect EnableMenuItem GetSystemMenu ScreenToClient SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetAsyncKeyState IsDlgButtonChecked GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SystemParametersInfoA RegisterClassA EndDialog TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA wvsprintfA DispatchMessageA PeekMessageA EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA SetTimer OpenClipboard SetWindowTextA GetDC LoadImageA ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA SetClipboardData EmptyClipboard DestroyWindow ExitWindowsEx SetForegroundWindow PostQuitMessage CreateDialogParamA

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_Destroy ord17 ImageList_AddMasked

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/INetC.dll

IMPHASH 8e4c63f70f7cc6490634d743e795c93e
SHA256 2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f
MD5 2b342079303895c50af8040a91f30f71
SHA1 b11335e1cb8356d9c337cb89fe81d669a69de17e
SHA512 550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47
SSDEEP 384:KOoVVefeWsI7rsIquPLNN546o0Ac9khYLMkIX0+Gzyekv:4VVaeE7wIqyJN5i
TLSH
T158A22B5353A01FFEF3E7153878B27B3745A99A6450938A9F07B32D8D2566282BD32342
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16201

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

TerminateThread CreateThread LocalAlloc lstrcpyA WaitForSingleObject MulDiv ReadFile GetModuleHandleA SleepEx lstrcatA GetTickCount CreateFileA GetFileSize DeleteFileA lstrcmpA lstrcmpiA SetFilePointer WriteFile GetProcAddress CloseHandle lstrlenA LoadLibraryA lstrcpynA LocalFree GlobalAlloc GlobalFree GetLastError WideCharToMultiByte

user32

LoadIconA SystemParametersInfoA GetWindowLongA GetParent MessageBoxA DispatchMessageA SetWindowLongA KillTimer PostMessageA IsWindow GetWindowTextA ShowWindow SendDlgItemMessageA TranslateMessage IsDialogMessageA CreateDialogParamA SetDlgItemTextA GetWindowRect SetWindowPos SetTimer SendMessageA RedrawWindow GetClientRect EnableWindow FindWindowExA UpdateWindow GetMessageA GetDlgItem wsprintfA DestroyWindow SetWindowTextA IsWindowVisible

comctl32

ord17

wininet

InternetSetOptionA InternetQueryOptionA FtpCreateDirectoryA InternetConnectA InternetWriteFile FtpOpenFileA InternetSetFilePointer HttpEndRequestA HttpAddRequestHeadersA HttpSendRequestA InternetGetLastResponseInfoA InternetOpenA InternetCrackUrlA HttpOpenRequestA HttpSendRequestExA InternetCloseHandle InternetReadFile HttpQueryInfoA InternetErrorDlg

$PLUGINSDIR/NSISdl.dll

IMPHASH b97e796968a976ef8d35f255a7819e88
SHA256 6d95897f302bd75a8aefc8db32a826393bd52c30057bb157fdc68d97c47bb919
MD5 114e8d7f1eb28894ece784c8d1370398
SHA1 4858085fb0d3f4e941b237e483e7d9c69f3bf9eb
SHA512 41cf4fc9b7287c64ff036b7a347363a4a36d7feeca7f39213a358cea2d3c7e3cc2c28d406d2984300e6897187d9b88f423846cb2a4a20aaa7e1cbc93dda910b5
SSDEEP 192:tQpTobBDV6g67UmsEw9E5aZxwXTBa1uayR/H3p+57CvZZ2DDFVnF01Dwn2GRbgso:mRoT6gw51IE5aZOjBaAN/XpWzqNw2io
TLSH
T1AF624C11A92008F6C761153470E33BBF6BB34E72571481C3ABE3595EBE25703AA71AC7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
MD5 56a321bd011112ec5d8a32b2f6fd3231
SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
TLSH
T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/UAC.dll

IMPHASH 2274cc1534607459cdd304a928601ef9
SHA256 e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42
MD5 88ad3fd90fc52ac3ee0441a38400a384
SHA1 08bc9e1f5951b54126b5c3c769e3eaed42f3d10b
SHA512 359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb
SSDEEP 384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk
TLSH
T16F724B25ABA083FFC5500571A6E1672217FA98301979586F8E73EEC62FB59436C3E703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15015

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateProcessA GlobalAlloc lstrlenA lstrcpynA GetVersionExA lstrcmpiA GetCurrentThreadId LoadLibraryA FreeLibrary GetLastError GetExitCodeProcess WaitForSingleObject DuplicateHandle Sleep GetCurrentProcessId CreateThread GetCommandLineA OpenProcess MultiByteToWideChar FormatMessageA LocalFree GlobalFree CloseHandle SetLastError GetModuleFileNameA GetPrivateProfileIntA GetPrivateProfileStringA GetProcAddress GetModuleHandleA

user32

SendMessageW DialogBoxParamA CharNextA UnhookWindowsHookEx CallNextHookEx GetClassNameA SetWindowsHookExA SendMessageTimeoutA WaitForInputIdle DefWindowProcA PostMessageA GetLastActivePopup PostQuitMessage SetForegroundWindow DispatchMessageA GetMessageA CreateWindowExA RegisterClassA UnregisterClassA GetWindowTextA TranslateMessage IsDialogMessageA PeekMessageA MsgWaitForMultipleObjects IsWindow GetWindowThreadProcessId MessageBoxA SetWindowLongA LoadImageA DestroyWindow GetWindowLongA EnableWindow ShowWindow SetWindowTextA wsprintfA GetDlgItem SendMessageA LoadStringA EndDialog

advapi32

RegCloseKey QueryServiceStatus OpenServiceA CloseServiceHandle OpenSCManagerA OpenProcessToken RegQueryValueExA RegOpenKeyExA

shell32

ShellExecuteExA

ole32

CoInitialize CoUninitialize

$PLUGINSDIR/modern-wizard.bmp

SHA256 bfb254c0cbb17a4350a312e79dcccda1beef44701b03e014841d367557840509
MD5 410d38983076a71136e9a9ad63cb72cf
SHA1 ec5b8fea719265f0c3af4adcbb98b2f8cb546450
SHA512 07bda5e35dc1ab40ce0657d96046c0603d638a6122e8eb01fedc8580b9da47164765c7b1452ad0501d5fa1fc2add316e205e729cddcc0f3c5545e732ead9cabc
SSDEEP 1536:chLDYndaa8vavzHYeRaOJm9a0HJHtjo8zORXCbugRqzqYFSf1cffgXSF:cxYUu
TLSH
T1BCE350F3C05E81C351EC3CA726CC1909AA527FE9845CE57437C7B788EA66D8E542E6C8
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/nsArray.dll

IMPHASH ddfc5272f0f38c6d49db71b2dfaa312e
SHA256 81745087f193b6fa131189f4b3ee9caa93e9692e408d3955fbcb9a4ec8516e2f
MD5 0917ee492308b691326e6581e8c793c9
SHA1 ff689c8051ffca7657461ac828bc46e303ab8e59
SHA512 2a4ae4b93b0eac113a0e65f459798466120f1af4605a82a11f9022d790fe0b4f7d368b312f8a073b1dcfe8760e529ea56a5b5d4289321dc9f2fc8a22691b42b5
SSDEEP 192:L+QMtjhIz23Tv7QpAXXcxwtXexpnGOO81h2xXP:SQ6nDv70AXXcWtXexpnGIhW
TLSH
T1C642090A1F6082F5F8F201BA557A2B355A1D7E19971E1EEB07A314142E209C73F39BE3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

9920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH f03b2bab186574d8892d3d73fa9fd3fd
SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
MD5 f832e4279c8ff9029b94027803e10e1b
SHA1 134ff09f9c70999da35e73f57b70522dc817e681
SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
TLSH
T19212F9675A0011B3E9A3223D306A2E3F977C9325D0527C03C677AE562BF031A7D3A355
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 8abe046ef411de4d3e6e831b6b1ee264
SHA256 3b15c6e4ca42036d7424f93ea0806a2d35220d65faaf2bd2479a54258f631b55
MD5 428c3a07fba184367a5085e46e4a790b
SHA1 f2de6cd4ec99ab784d18914a21de9d919a450089
SHA512 b34e1266e949d7cc5cdb7a809c3ca42652a1bb1ec72d83218604cb01b3118bbb42bfcaebc6134c4e6eb43fb566539414a49c1a0cd23a6c84da7c1c4b56ba2ab6
SSDEEP 96:L7GUeYNrwgcrEzyKwZxW4JxNABWweYkZleOe4I9d0qqyVgNr32E:XGgrwgcrEzylQBHkZwd0qJVgNy
TLSH
T1E1D1E93D76C33DB3C54ACA753C65292F0FB8D8261B540211AB5716C279D5AE3FE29382
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsJSON.dll

IMPHASH 67cfa491a15c2e6ae037612d4a7ef727
SHA256 15b527ac5d224b2b684ef07fecd6d71d61f05955e3a2bd3dd1de6378e927b3f8
MD5 b7878c46c342f851d35fb2dbc898a593
SHA1 dd0ebd231edcfdc0a561cbda733c58e22ce3156f
SHA512 d7f179d33695b62da5fc0643fac461129975e78a8694c02e8c8d74471d0ee4061b92f1010401209605146861b259d34079583b2080c8ba69382c2122d9b969c2
SSDEEP 384:QYUEEoUMA9RoB+cq4OJTv/ldPWUn2kaVC+DEbXG989qX6rMIZy9RrT:PeRoBXHoTXld3n2XubXf9+EMNvrT
TLSH
T152A25B566170A8F1F92618FAB9D26E237F7DF90834745897CB23056D2A91863BF3C312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

11469

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/processwork.dll

SHA256 27329ea7002d9ce81c8e28e97a5c761922097b33cedeada4db30d2b9d505007c
MD5 0a4fa7a9ba969a805eb0603c7cfe3378
SHA1 0f018a8d5b42c6ce8bf34b4a6422861c327af88c
SHA512 e13e29712457d5e6351bfd69cba6320795d8b2fd1a047923814f8699f7188ec730ec7f0d946fdff66c8b430fef011415ed045b6ea56e4cc0b1d010171ab88178
SSDEEP 3072:n/93Fm9hfGIGjk1qc55CDoGowH6Fb/CcXwuCoty1IKYOlIa+zUk9sfqQAPfujRzS:/94yj9c55CDorNqot43ndqQpzjIKW
TLSH
T1F2343B36E1C0CC76D5672B7CDC49E3D8556EBA302E2898866BE91E8C9B3D391351C287
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

208948

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

147B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

47B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$TEMP/Internal.RMM.TrayAppLauncher.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 dc797000cae005b4bedcf3876d622e83c0c4367023f2808dba6b65797716bd38
MD5 5a41bd11322a8e202ccb6f892dc92473
SHA1 8a58febae10c6b2dc7878405bf64ed57b01b90b7
SHA512 ca3e4f348facde227302134b7e2d1113a13af14a6db22f0d2ad1a31c95c03329ce2b1ec5ffb22daa432b68cfa6c894727badacbf8d5e7e748b517ccd3e547936
SSDEEP 3072:n+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwx4B6VEN:n+f4nKvaQhcF7qIBxuZjwKBEW
TLSH
T148E33A03B2A810FDE1BBA37889A21901F3B678554B7297CF0390C56A1F67BD09E7E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

4b:3d:5c:1d:24:3f:e8:18:91:76:4c:79:b7:90:12:9f:27:9d:9c:7a:87:76:3c:6d:ce:5b:3b:fd:be:0e:fb:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

$TEMP/RMM.TrayAppLauncher.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 dc797000cae005b4bedcf3876d622e83c0c4367023f2808dba6b65797716bd38
MD5 5a41bd11322a8e202ccb6f892dc92473
SHA1 8a58febae10c6b2dc7878405bf64ed57b01b90b7
SHA512 ca3e4f348facde227302134b7e2d1113a13af14a6db22f0d2ad1a31c95c03329ce2b1ec5ffb22daa432b68cfa6c894727badacbf8d5e7e748b517ccd3e547936
SSDEEP 3072:n+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwx4B6VEN:n+f4nKvaQhcF7qIBxuZjwKBEW
TLSH
T148E33A03B2A810FDE1BBA37889A21901F3B678554B7297CF0390C56A1F67BD09E7E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

4b:3d:5c:1d:24:3f:e8:18:91:76:4c:79:b7:90:12:9f:27:9d:9c:7a:87:76:3c:6d:ce:5b:3b:fd:be:0e:fb:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

ArpLookup.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5c93c0b7447f4578ba1460bbf2936f32250db7be6e5a40fa12b50711f82df0d1
MD5 836225137fd1b8872da2bb21134aeaad
SHA1 812ab6cd8b7f20c02ff9303e5e9eb9b1677503af
SHA512 ddb282598c64f7aea6518ed0afa49193567973c87db1678c7cd921b086b49aa567bd1cfebdd0618dc150cebcc8f8588de129ee7a2e3907d940e52d84a4942699
SSDEEP 384:54OeITVDIvgbY3OQMlWHtIxtTuJO7EnLv1tx1bf:4Am+QM4H08n1Bb
TLSH
T13C62060093985337CF6B2AFCECA323914279D3156503FF2FE68E95D62C46B5E8511BA2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

21406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/obj/ArpLookup/Release/netstandard2.0/ArpLookup.pdb

Cloud.Backup.RM.SIO.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7db80f1694aad508b47726f1b1827356f29d853a27006700f2473ce087037413
MD5 03947d8422aad4cd0ca2579d6d937399
SHA1 42c4422e29e7350a2474f474f1ed12c80d3e255a
SHA512 f6f9d9f32d3cceb761f7b6ae5efeded884d9f48da726995abcbfa0d816fae761d6639aee269a914b4c3c594af5d5bf260e40f5ede10e30a57d8da26b8f0fe5b5
SSDEEP 3072:34Ny1R2hVeF6Dr5AajSrvbBpoBc7mSfkmLS:L1MveF6DrZKvB
TLSH
T1F9A34A02336C5B33EBFF60BBF46142928776C916F007EB594D8CB5F968533909A0266B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

110542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\5c353af5f9de3404\src\Cloud.Backup.RM.SIO\obj\Release\netstandard2.0\Cloud.Backup.RM.SIO.pdb

CronExpressionDescriptor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 33392e8eae26d581f25f8f107d7ac1287d4b2291a02bfb07c988cda8c20c2284
MD5 744a36c008f35869d4551a38d8facabb
SHA1 b69788c04ae9e9403978f709aea00622aa5fa22e
SHA512 7b4bbc66298140e9e77791fa8476f68a2bbbea84459a9647d1291bb0294dbcc18acdda145cf60f2de0302e2a78a596f76018a5f3683f7e1ebf2514679241b9b8
SSDEEP 384:9O/D6uErTu8oFSTTTnr4umoFC56lF+kOWixFZ/ofNkTJ59enMM0cUVE:9Pa8NTM5s2TZ/olWden30ccE
TLSH
T170D2E921BEFD4059DBBFAF368974601506367F4A6D23EA1E0D96416F0836BD08CA1F35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

34902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/home/runner/work/cron-expression-descriptor/cron-expression-descriptor/lib/obj/release/net6.0/CronExpressionDescriptor.pdb

Elasticsearch.Net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 eff0ed9dd47e151cb4d6ab191b2412b60f8a482bae0db55e1478bd166bb74668
MD5 2fb7f857c4595b23d60cdc19b0b37f9f
SHA1 a48a5edc6fdcf488c540db88a8e59027680b733e
SHA512 c78575e5d8ecb3996639df696ef349a698236fa9cc03a6efe7e9c3dce84285823050a0f691a7c891e8ff5d7d05416098e73f6a88021b7dcc7ae6d09fa5ca82b8
SSDEEP 6144:gzpD/1GAW2JF8Sbqkew5S7mV0C8FZyBEH1ytu43fBx5Hi9yYYf2OkcUz/3U86sa:gisFZnmg/Hi9yHf068xWd3I0+g5
TLSH
T139254B8073909A2BD17F277AD0716A345379E0163B9AEF1F5121F9D92C93F442EB22E1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1011770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\SteveGordon\Code\elasticsearch-net-v7\src\Elasticsearch.Net\obj\Release\netstandard2.1\Elasticsearch.Net.pdb

Hardware.Info.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0efe34682450aebb23b3ce017dc4b6644a370f776e293d0e628567914f6793da
MD5 a815d487985608cf7165ae1b47ee1940
SHA1 0de3ef4cbc1cd0814fec5f30b7168ac6191df201
SHA512 f196e1c9307c9601358fb3305407a314ee41fa3814c5170361fc42d5ed105d703699b6f410e6fb572bba09e46fcaaed5f582bc356f1627e3b1ca6f73bf62fece
SSDEEP 3072:TXlMRAX7S26IQYkdsQ8iyGIb4L4VTp7maakjwwcFbfdNwzfBqPejz8v0q3rBUyV0:AAX7S26IQYkdsQ8iyGIb4L4VTp7maakH
TLSH
T174A3EA2863EC5629E2FF4F397CB0422415B6BA593522E56C4D61ECCE3A73FC05690B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

108530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Jinjinov\Hardware.Info\Hardware.Info\obj\Release\netstandard2.0\Hardware.Info.pdb

Internal.RMM.Agent.Launcher.exe

IMPHASH dcfbbb0108128551601e8918fe373c84
SHA256 ad27e9ff808793f5254e0907bb59243b4a486f94e25dae48df52c98d5fc97763
MD5 bd6481a382c9c24a2ca38a3e965868d8
SHA1 e98141baf50da0454054e8be5633230dbd58fa57
SHA512 407a023bf867df2e7fdac5c67b791a344f73c5c78dd42e55c125defd4719ddbe375bde7a7c3857aef7175bcec8d3f30ea1b396c5e7a6ac19e2658471a23ac5c3
SSDEEP 6144:1e7Vojqeg8Fgvh5QO/J0q8PXjoqd5VbRt6hRVGlxMU7SE4vJUDWq:2oF80O/qqmoqdviRIlYhUV
TLSH
T1AB846C16EBA804F9E0B7927C89B64906E773BC5E07709BCF23A446561F236D09D3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

55:29:31:92:00:49:79:a6:8c:b8:b7:af:7d:49:b8:dc:4a:a6:c9:8d:e4:f8:8a:b2:4c:63:de:fc:d0:1b:ac:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

94320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\RMM.Agent\bin\Release\net8.0\RMM.Agent.Launcher.pdb

kernel32

WriteConsoleW GetModuleFileNameW Process32NextW TerminateProcess OpenProcess Process32FirstW CreateToolhelp32Snapshot WaitForSingleObject SetEvent CreateThread CreateEventW Sleep LocalFree LocalAlloc GetTickCount64 DeleteFileW GetLastError CloseHandle GetCurrentProcess SetEndOfFile HeapSize WideCharToMultiByte MultiByteToWideChar GetStringTypeW QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ReadFile GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc GetTimeZoneInformation GetFileSizeEx SetFilePointerEx GetConsoleMode ReadConsoleW FlushFileBuffers GetConsoleOutputCP FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW RtlUnwind

advapi32

OpenProcessToken StartServiceW RegDeleteKeyW DeleteService ControlService RegCloseKey RegSetValueExW RegCreateKeyExW ChangeServiceConfig2W CreateServiceW SetServiceStatus RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW CloseServiceHandle QueryServiceConfigW QueryServiceStatus OpenServiceW OpenSCManagerW GetTokenInformation

shell32

SHGetFolderPathW

Name

.text

Size

258KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Internal.RMM.Agent.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 6a89de024ca62536de6f5fc10e49896bb1ac330ca39dce30203afdcc45ae237e
MD5 d977e20c261c716faa4dbd7d0ffe1036
SHA1 e91e42b05908e53aa063c05b7bf2a5355dbdb112
SHA512 b15b5826006f5d44b3b305923604a8e04a2192ee3b2ab95e8c3fce31a3734aaa48ea0fd02bc7142fbdb44a7f18e14dbed646441703570c0f7cf52432125e2298
SSDEEP 3072:g+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwxWBd0ED:g+f4nKvaQhcF7qIBxuZjwABKM
TLSH
T166E33A03B2A810FDE1BBA37889A21901F7B678554B7297CF0390C57A1F67BD09E7A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

49:aa:9f:d6:9d:62:62:ab:8f:76:e5:54:2a:07:f6:85:4f:cd:36:4c:b4:3c:4b:63:c2:d3:26:4e:e7:76:56:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

Internal.RMM.TrayApp.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 a848caa7ef9ce2c6c4abaeda9d7ef2031a3d6071d4f134a401c3d4ca34fe82f8
MD5 d8d64985ca214a98e4fa00d7dd30b0e3
SHA1 8c48ace84e4f26689432fff6531a49352c0584e0
SHA512 bee4e9395dc19249e94820fa9a7ac83b73d2f411cc87e38b8009353daf12c55a2a58c248fba12bcd4f896b8f07f449af6b6aa8516f813b00f2533894434e5fb3
SSDEEP 3072:X+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwxkBPpE9:X+f4nKvaQhcF7qIBxuZjwCBxO
TLSH
T170E33A03B2A810FDE1BBA37C89A21901F7B678554B7197CF0390C66A1F67BD09E7A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

7b:14:9a:68:34:23:bc:27:20:73:3f:c8:38:27:03:79:8a:5b:51:0b:70:36:66:1c:c7:11:0d:0f:10:75:a1:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

Internal.RMM.TrayAppLauncher.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 dc797000cae005b4bedcf3876d622e83c0c4367023f2808dba6b65797716bd38
MD5 5a41bd11322a8e202ccb6f892dc92473
SHA1 8a58febae10c6b2dc7878405bf64ed57b01b90b7
SHA512 ca3e4f348facde227302134b7e2d1113a13af14a6db22f0d2ad1a31c95c03329ce2b1ec5ffb22daa432b68cfa6c894727badacbf8d5e7e748b517ccd3e547936
SSDEEP 3072:n+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwx4B6VEN:n+f4nKvaQhcF7qIBxuZjwKBEW
TLSH
T148E33A03B2A810FDE1BBA37889A21901F3B678554B7297CF0390C56A1F67BD09E7E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

4b:3d:5c:1d:24:3f:e8:18:91:76:4c:79:b7:90:12:9f:27:9d:9c:7a:87:76:3c:6d:ce:5b:3b:fd:be:0e:fb:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

MBS.Configuration.Local.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 417dd3d39ea16e984ac4a19fbe7f48dc6870a04174e40cff02a4b605bd7d2d1c
MD5 00e9ceceb2d0731cb7cad8457b261702
SHA1 62d99598f9e8d6da41fc0dd295f6cc4fe80f3e6d
SHA512 aeca4468e8947fd53d42608c498583ee429744c9d88a3da7f9d04c8a6ece6560d1c4afa7d0b5b80f592d249788b2f342202153cf4d8ed63e005416e790bd22c4
SSDEEP 192:Q1/npVPgh1LT2aYar2p9dxDAQ8t5C5Z6SsVoxLQDfvx:0oh1LTZWT8zC5YoVQbv
TLSH
T1AC32F911877C0619E66F0B3FFCF792115B70AB465C01DA2F8A5EB14E085A7E855133F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MBS.Helpers.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 311767b71cf6958d82146af6759c00a69d0e31c87e809e4f7b2cc10564f7cdba
MD5 a705c42e120c9c05c0d3cdf2a9bf93b9
SHA1 f72639b09c76586867f81ed66bd998d0fb525595
SHA512 e447f26636b740b0118d12902f7bf2215b44442172e451acde8314f7d1c7caf9e7d17758dc9e1a9013238c8f13323095dd56eb73cc324a7863c6cf7973246f92
SSDEEP 192:FR2NH3Vi0iID2bJYp+3iqXOZgexvmzO888dAcjHqU4G0cIRb3qwajZ54bS+hHHIo:b2XE0+3c6eEXjHqTG0cIRb3W+md/
TLSH
T16442F80AD7D89112C9BE077ECCB717464630DB00B612D76F48DCA1625E4339B6D522EE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MBS.Identity.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3fc116c1fd8a1070705dccdfadf46b02c5c971da95572cebb30daa5dc4caec7e
MD5 bf86c8f3518881686deb085ce9243ce2
SHA1 28897ce57e4996ce2be4d3c7fc07a5391d9ed19c
SHA512 a0f5db179a7bee0e3e11e71e29fe62d96b9f1f4a7c6af14997291d4c7930edaea417ca191f95e829c7b0717258fc1495d619dda79ffdbd6b385beab19935962f
SSDEEP 384:t+XlP2PCT9erAPokdU3CHiAREbxQdgx3NBM4rEWqAOCzkKMN:0Xldhe8uCheMmqA0
TLSH
T1C6E2F696A3F92376F1FB0FB4E8B210104A3ABF963D11DB4D4958D09A1D66F810920F77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

38142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent2\work\e1257e62cedd4b6f\src\common\MBS.Identity.Common\obj\Release\netstandard2.0\MBS.Identity.Common.pdb

MBS.Settings.Client.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a0791e29e66bdbb27049441aa5f57fed6d30c83f41030ad5cf7dd579655ec3c
MD5 ab509e7e3d12ecd03e453b28fbd8a1e1
SHA1 0f631c85750fdaa0e2cdef908bd34ea4e49b1736
SHA512 fb809f8da0cac944d009d75cee73e4290c64eb5367e2fdd6b6db349d235f50ca9a28d52d1cb05e5bbd8e4dbf4a3219dad8d2e304020f225cc196cb09aa226dea
SSDEEP 1536:SzhCBCZewRyN9a9qa1D1Dokv1iGzCqCZRwdSQZ4lcR:Qh4CZewRE9a9qa1D1DjvvzCqCZRwLZ4s
TLSH
T1E973F925B7C86932DAEF6FFD99A803319B76E1844D2FF78F044C59EC10013959E492AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

83082

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\5ca71ac4cc16430e\src\MBS.Settings.Client\obj\Release\netstandard2.0\MBS.Settings.Client.pdb

MBS.Settings.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7c4ddbc30de4f37766c3fbcfdb0fa9df8834c62447a87a8da0f93fbe83aaf3bc
MD5 ce5d71d7f78c0e08a9a85b2461606a4e
SHA1 a40c1c0ee94174a6b40fdabf8b2d506705be92d5
SHA512 4b2545123032726aaec0f55d133fbc50d592975ddea95fc9c9c4e35dec18cf3d1da042b0ec68cb9c205936a5323a53feb8d0634915950a6fcc51ab038fa273ca
SSDEEP 192:Xk9lKY4tGeS2DQ0QE8DV/SlL6w5TCirDLS0D/e:UdPw5TCirDW0D/e
TLSH
T1A9025352F3F80124F8FA1FBCECF11F925DBEB9439522D62D4566404E28B2A4196E1B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\5ca71ac4cc16430e\src\MBS.Settings.Common\obj\Release\netstandard2.0\MBS.Settings.Common.pdb

MBS.Settings.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7114a659931b0251f1767b29ac3ec1ea8455e8c41f52c34a1afd437ced1e74aa
MD5 2cccccafc18e7ae74ec26382febb7d87
SHA1 aaf53ac898e6161cef273e0957d95d387f963b9e
SHA512 1f1f3c0bd2fbce28699fb1fc5c14d6096f4af824223c2347bdfbc4174f25a1f03f68fc0d2902a24f5cb61d1728ebbf0a7261210b7fc7dc91f5a1473441eaf0d1
SSDEEP 384:MGlwLj9bPbiWrhYY7ZPuTBSUP0HLyZHEDUKYTM0JINHy9X6jJeRI/pFn0q/P:MWYjhvlYoPeSUMrokYKE/+N2X6jB/0M
TLSH
T1BED265215378837DFF3A0735B45DC26A23A6529D3516E6BBAB24F84E3F0378602915B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

35406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\5ca71ac4cc16430e\src\MBS.Settings.Models\obj\Release\netstandard2.0\MBS.Settings.Models.pdb

MessagePack.Annotations.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8b88fc241072fb9d01d3fb553e72b18ed5e78af67f0287158bcc679e9db4c123
MD5 c07ce6517d58d073574321a97aeb40fe
SHA1 1582394fe1e2049c3355a95844a5448854a5624b
SHA512 6b1c9a1d99c82fdc326cfa43388906264ca39e01f8259f7e4a5b3f6c6c9a40681dd438df4ff149ceef529ef81fb6e71381ef90d9a29284b3d4aef400989984d2
SSDEEP 384:KC9rT5pVmE6yc1xEpYFq/vkfLRcwkem9Pj3jW:Bj0E6yYxiOq/cf1cwkJ9PjT
TLSH
T1B582E835A398A37BDE7B4BB9FC2462510E3AE5487503E73B9708D4572B06BC146A0B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

23614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/home/runner/work/MessagePack-CSharp/MessagePack-CSharp/obj/src/MessagePack.Annotations/Release/netstandard2.0/MessagePack.Annotations.pdb

MessagePack.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bd40ea9a520de70db8571199573e53fff5e7de01d89a8b26fbd70bf907dcfefc
MD5 e499e103a8e772f190b1d7f197a435dd
SHA1 7a9f9ece5a415dfdd43464d8aaae774e890cbbaa
SHA512 04170912c62854c35caa541d68c29fe0d66b610d1b112560ddb283e0b0511e3acccc860c63b10f49e7c71ae5ca72479b9dc4f661debb01e09ad2ecbe98996fd8
SSDEEP 6144:2rLhjhKV4w3Y09c0t/GeohYWzIZsC0MsqLAcsZjxewZr4af4XP:UWV4yYl95znCFHsZswd4aA/
TLSH
T189846B6863E89F25CBAFEB38E43012C94BB9D55764A7E39E40D467F12C527C46E00B93
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

382506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/home/runner/work/MessagePack-CSharp/MessagePack-CSharp/obj/src/MessagePack/Release/net8.0/MessagePack.pdb

Microsoft.AspNetCore.Http.Features.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9e10ed40392f5d051689ec705b96adc6b126e9a6c52dbbf37950a5fc66f992f2
MD5 65a052d403aa36fda20e9e182dc2ff42
SHA1 6d5d7b47c8d8a29cde885eb442e12d4ab0cd27ea
SHA512 330954cf3650499ccb3452c7a107888808dcc27b66aba7aba591c8f911f1c89d19e88adae5e7e45951eda764736eb6e21633b8d6bcb453187adc2b2bdeea274a
SSDEEP 768:traj2Occog9RM1L8SFl6z/9wrNKWu/OQ69zL:4Cg9w8o6z/vWuazL
TLSH
T1D6E25C4D9BACE31ACE9B2F7CB594DA452D7CC7C61203DE6A4948EC5C1DA374486302BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d4:da:f4:d5:86:bc:e9:87:28:1c:a2:ea:ad:a8:d9:15:0e:c8:3f:26:55:db:49:30:64:c5:d3:7b:c8:e5:9a:dd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

28362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.AspNetCore.Http.Features/Release/net5.0/Microsoft.AspNetCore.Http.Features.pdb

Microsoft.Bcl.AsyncInterfaces.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 00f26117b0a77b562d5c01038d8b52f8d0b9e18b7c532e16dfae1857a19f2271
MD5 84520ccf3e7f424ce2c291529400a196
SHA1 1a462715db5f3e32eb88cfb87a7394ed08105093
SHA512 82c458970d0903933ed3da6c795de616915c7ef531f35b090fed3084429367036bbe00871c9353fb57d4e5f9c906273142eca95655fab6ad7c446ef9427895ba
SSDEEP 192:1zbtuPEO03EnqWeq/WLgW4GD5dHnhWgN7acWVqrOQophFKqnajKsNQK:x08O03EnqWeq/WvdHRN7JJXlGsNQK
TLSH
T123622A91C7AC4603EDB63BB056B4D9037C3DB3E71C51C16E146AF29A1C53BC29B21A2C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

44:06:04:b3:02:99:08:2e:67:26:09:74:32:11:35:f2:40:10:4d:af:23:af:7d:94:43:0b:fc:0e:68:36:9c:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 20, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

10894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/netstandard2.1-Release/Microsoft.Bcl.AsyncInterfaces.pdb

Microsoft.Bcl.Cryptography.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2815ff10ca10b9b6df5cbfa7ea839d10732b98d8d792355a708154e76956b07b
MD5 dca6a3b53b35fde1bd9d1e64bb83e673
SHA1 9a4d47507a9f4c73b522be6fc7da651ea229eeca
SHA512 44587bd0ce675b1a07b9731fc24ca5f0bb14b7efd886de0f2c5677af6747079152dccd136f227c71f3ce89e00d3b9ff50d67c891c673afe98b2cd2c10ff22617
SSDEEP 1536:5wbT3fyKJyvNjm4F+e4ZKPJYGXEc7Rx8tourkrZoJCNpp6F4KIjIqvQLAu/LQcWh:5wbbAjmkYG0cNxGourkrZo6pp6FTqILw
TLSH
T13A93493C27A4DB27DA8E42B0A1B045465F34D287E083F74C58CB6A6572137D25E86EFE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

69:c4:55:92:3e:c8:e3:c8:ad:40:3d:d9:e0:54:75:26:8f:85:3b:29:dd:d0:ce:78:a9:c1:22:80:84:28:36:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

90806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.Cryptography/Release/net8.0/Microsoft.Bcl.Cryptography.pdb

Microsoft.Data.Sqlite.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 08e8abc81a6bc977503ad6b3c0066875bde22bf942f9a81d7b03230fb1146c7f
MD5 4d664429d8f6468a503f8d5d654a1559
SHA1 056caf749eab6c46ed33396f5bdd46c2734b91b6
SHA512 1c017752602019c018c633d125b9ecab8f02ec9edd1b5c26cae3eb237026df2e3bdc29e21f986363419cfa7de5f7c267aab4a55f1b338eb5497dc5564d8cfde2
SSDEEP 3072:lsIo1UKOY71H6P/csxfE+cKmU5SO/trUxEGBKilr7DSILLmAdgIuWChdW:DomLi1HQcl+cs9AEhIIWCa
TLSH
T17A044BA50BA86653C3AFCD30A4BDA98147389546F5D1D74BAC40F8BD392331A7F8069F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

01:56:8e:4d:62:c4:8e:af:41:14:b3:95:12:7b:54:be:3c:8b:00:1a:36:5a:85:59:22:9f:b0:45:cf:41:b6:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 16, 2025

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

171010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net8.0/Microsoft.Data.Sqlite.pdb

Microsoft.Extensions.Configuration.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4b9d22825c748d971acaea69e0edc2abbad7301a247dd25dbdfba361f7b4a83e
MD5 d36d289142fd54f98ea4d929e78416ee
SHA1 7672aaeecf64278a081a22f4a4d11cebf054f1c7
SHA512 6b7d4e3bcea96e9e9ce82f76470e00a26493148384991f6356737aeb1a8ff5158237278c620ef6f8e75cc5cd1b0e8f2d78c655e82a80c45545eaab79a24adacf
SSDEEP 384:rRvL2bP1Hhf17Flk0Lv96TG/FwzzRjz6yMt4x2b/pWsbNWKfLXmztvGHRN7zMfpU:9L2btHpvLXy2THnjQtazMh/9zLO
TLSH
T12FD24A65A3EC9333DCBB0E71E9F1D6446F39E7A26811EA2D589DF10909A73804732739
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

1d:2e:d1:a2:40:ea:01:fd:3e:e4:66:22:33:b7:0c:c7:a4:3a:8f:4e:76:26:67:10:58:e3:dc:9f:1f:2a:4d:bc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

22622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Abstractions/Release/net8.0/Microsoft.Extensions.Configuration.Abstractions.pdb

Microsoft.Extensions.Configuration.Binder.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b7612593dc97a0280c47e955d28edda6b4b817414ae19fa1f193f5f50cba65b6
MD5 4adf6c91d4266b6383ce820ea0fbc441
SHA1 dd2eb0c1559031c3469a36b9b6db5c77f7427c96
SHA512 775d50d3f38a284eade71e691c69a3238728dd4b76d0b0677b91b9c5f4a0905470ec214306d7058bed07740173e78be48fd45ca9998e84333e15c62741fb6c18
SSDEEP 768:Ld5DhW3nlIEiIPlGQDndWVdrwgcjQtang7io9zkP:LdCnnbtGQDnd0wg+QcngegzkP
TLSH
T12A134B0653EC8616F9FF0B7068B1E4518F76BB967922E6095D89A06C0937BC08F6137B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

84:93:de:ff:c8:8c:37:e3:2d:0a:14:b4:e3:6b:3a:4f:84:58:45:a3:17:30:53:10:91:af:ac:c8:0d:fd:2e:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

37514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Binder/Release/net8.0/Microsoft.Extensions.Configuration.Binder.pdb

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 94fb00fe869f78b572e8564d2700b143f392a5ab7c110e8c81981d5edbf632f7
MD5 08f52a0ff6e9a3602259930674f95c5e
SHA1 4fd2e59545e6c845f8f9de6ce8fc4540acf1aa25
SHA512 cd695bb8ca9c5defeaeb0eb20ee79ed838467f430f600bde93e188d08c35691cfceb3e5524e07549976bbc5ae8fc78d2f94821f2f83519d8ce1388e3c8baa159
SSDEEP 384:psGu6f0Ux3STFWUQeWBgFsBlHRN7mhlj:psGuWRTW2j
TLSH
T1D0824A81CEAC8203E9B72E34A6E5D8573D3DE7D7A8509639045EF14B0C67BC09B51B39
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

1a:2c:67:41:a4:59:20:5c:33:4e:21:b5:0b:20:5e:1c:61:c5:bf:1c:f9:4c:62:e9:b3:76:3d:f9:7d:a3:66:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 20, 2022

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

14462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.EnvironmentVariables/netstandard2.0-Release/Microsoft.Extensions.Configuration.EnvironmentVariables.pdb

Microsoft.Extensions.Configuration.FileExtensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0739d9f57932b86e4c17ac713bff40cec1c78ea7d207dd34ee698e3b61f1e620
MD5 ed66aa52dbfe55e02f5268434dedbc85
SHA1 674fa695d8846e789cb59fe578843f7c9a9430e1
SHA512 4c1461f26ba9067ecdfa164f6bfff1228ce98fa046656f748aa145b1fc29cec68d0db315cc137db250c51ff0f5a1c172cc2f5d8fc290702775d7b3b92bcd7c90
SSDEEP 384:hq0fpFRdnMdby+2lFxLYp+LIx5XAqqWqL6W7fLXmztvGHRN7QuoJR9z3dR:vpFXnaE19q5VAHjQtau9zv
TLSH
T1BAD25B1696BC8313CDBF0B71F8F1E0051A35E7876801EA6A5D9DF10819B7380DA63BB9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

80:62:23:fd:7b:a5:ca:fa:3c:65:61:75:bf:0b:a3:e1:9d:b2:5c:f9:42:68:3c:da:45:f2:6b:70:c9:2a:38:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

22538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.FileExtensions/Release/net8.0/Microsoft.Extensions.Configuration.FileExtensions.pdb

Microsoft.Extensions.Configuration.Ini.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cf695d9525e3e8a579772506a77a357bedf2f3e5e624020ad7518deef42620bc
MD5 f29a5771355b4221ad42cae801f815da
SHA1 98d6cb6557ec7aba99e5e0722fbfab7e5cde67ac
SHA512 d39dd1a00e56f66bb2cc6176a8801c47fe06e3f47e95939b70450f0cbbc504ee5b121fb4ae90bad974337e77028ce5c7b0d3a5a25ba1cf979c64b4a65c03f504
SSDEEP 384:Srr4BHOHy2FL0VBieqnCp+H9tvWFbYWhfLXmztvGHRN7Phu0R9zIJSLT:S3Hy+GBlqhGHjQta5u49z
TLSH
T104B26E6797EC8303DDBB0E71A9F1E5866E38E7C6A421D61F198EE04809777C08B71729
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

42:14:eb:f5:8c:f5:3d:8c:02:67:e6:85:d2:29:c3:b8:a5:08:79:70:43:d0:db:76:4b:86:84:18:b8:70:77:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

19766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Ini/Release/net8.0/Microsoft.Extensions.Configuration.Ini.pdb

Microsoft.Extensions.Configuration.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 761cd5025122a4b54dc1943b0252effe601f97156c2c4c0309ab3b1dd59755d8
MD5 54aa7af62741ce895147b638bc0ff15b
SHA1 57346a3caa6e76e35c6639e5551d94c69aa88471
SHA512 10779573332c3bb3b3812ce40d51488821505f85b26c662d45c8a72b51fc4b63095a1e9443b46e9d7c3e3c273fb483be833f7bd0cc6f28af0884ce4b40930725
SSDEEP 384:IA604UpoFdFMv1orpe1lXWkb2WlfLXmztvGHRN7vCwGOrjR9zTXgIaCH:Ih047FMEp6tjQtaawGOrF9zDgIaw
TLSH
T1BBC26D22A3AC8327EABF1F30AAF5E9411D39A7C26811971F559DE1480D777C08F32725
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

dc:db:1e:a2:04:93:33:ee:3d:dc:d8:c9:97:48:c8:19:ed:f6:5c:02:6a:42:12:4a:ab:64:c7:da:72:58:80:66

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

21814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Json/Release/net8.0/Microsoft.Extensions.Configuration.Json.pdb

Microsoft.Extensions.Configuration.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aeb732438360b80e9db8ac45b3753dc4be95d68637b65344b6828d6c407f0a53
MD5 f0fa1557861f21fe24d213906c2a3207
SHA1 ad362aceaee0738c91ac3a499a52014d05156951
SHA512 5384d130d0886190f388d68feb947c0fc974464f6b8d1007d1b746d94c762e3700be99863900b796a9620a66d7a23555f9b88640a8916fb7e23176fa5b942403
SSDEEP 384:gnYfhf6uiErFW48e9bVONko8BgodNXrwHtg+Qcgy7fIy7fb+UWFbfW6/uPHRN7nl:TfAuioFW48eNVZo82odhrgPvEtMfd
TLSH
T16AE27C2357AC8337DE7E0FB168F4E0121E76A39A3512E7294D9DF5492CA77C043227A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

b5:ac:b6:88:95:3f:cf:b9:99:2d:5c:df:bc:fc:58:03:47:3d:89:1c:cf:ee:8c:88:66:44:21:d7:03:ed:68:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

27750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration.Xml/netstandard2.0-Release/Microsoft.Extensions.Configuration.Xml.pdb

Microsoft.Extensions.Configuration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cacfafe6f53b37dac27b37fe8d38b2c3f8b74674bb4f35785c82e2f0185879cd
MD5 67949ac94494dc38f8cbec2d737af665
SHA1 0365baeaee8c1a02b4610b06b97b77fa4761f281
SHA512 8ccf78bf811c114bb69fa5300b128a1599a76660c0acc89dbe802041d0075001b548606a8e137bfef9750704354c15e310a0f72ae2d1396119b162a5fca796a2
SSDEEP 768:w0bPUqPUvtEQEnzrcpPqCwHfyDF+ukugzBjQtaE5u49zAu:rb88UvtEQ6rQUKB+uwzVQcEdzAu
TLSH
T13D135B56A3AC8B27D66E0B72F5F0A80A2F3593877511E31E4E9EF08619677D00B12737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

c7:d5:17:9a:a9:bb:1f:a6:50:3c:b9:57:b4:b7:b1:92:ac:74:53:05:62:6d:6a:1d:c2:33:77:4c:94:ea:11:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

39022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Configuration/Release/net8.0/Microsoft.Extensions.Configuration.pdb

Microsoft.Extensions.DependencyInjection.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e9b74e2588016dc28452a3acb696e4e062bcedd00732c8dc388925bc41d2b6b8
MD5 e374a5bcd177799bd6805307ce8f182c
SHA1 f9de58b1c92fb029c15bf20e1455c599c922abb2
SHA512 282d4eed010d3dbbd048ec040b7b65e745d79589f9e8e8eb0c3ead7dee59c5059e967aa8e68d77d55bb4e1758156e600327fc2e5c692ff83fd05dca1549dce54
SSDEEP 1536:NrMG0YbfdUtklk4hh4yKmzQj60OGdyWQclz:Ndyny9k60OGYWQg
TLSH
T11A53091833E8D627D7BF573415B391719734BE873601FB0E799AC0EA08A27C859129BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

c4:40:74:9d:0f:3a:9d:1b:f1:79:ad:f1:e0:1f:ac:40:b9:32:31:26:4f:04:4e:54:0c:db:2f:8e:d9:4f:95:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

59506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/Release/net8.0/Microsoft.Extensions.DependencyInjection.Abstractions.pdb

Microsoft.Extensions.DependencyInjection.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 118cf955cb33521058e47beeda2c4cac50e9e3d647281e75dda136c3293a0cf5
MD5 6c0993d2ecb8d3a8f00f5f5a9ffa0b84
SHA1 6470c21c0d9dc28ddc1ca3a4b214a361b4173dba
SHA512 0e3291326e96b1cbd67590d6480dd563a84cc5100e67aedbed938ec7cc6032b315c8773938959bc4cf5afee6dd6b68dbbaa4524b99dd6424f5d9df16318301ec
SSDEEP 1536:VzpKB9q/W+xUTT6nEMk5aT9dznOa6MVs1vB9HbTWZsrL4mdgFyQcbozyXF:BpKB9q/aTOa5Wn6MVs1ZZ/WZsRgyQ6oE
TLSH
T1A0935C3427EC8B26DAEF1A75647540544BB5BA5B3003E75D0ED4E0AC1EA7FC60B3227A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

9a:22:9c:62:e8:ce:fa:f7:b4:b9:78:64:b2:08:30:41:c9:b6:03:7f:eb:28:7b:45:8b:f5:dc:3c:ba:65:cc:73

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

87398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/Release/net8.0/Microsoft.Extensions.DependencyInjection.pdb

Microsoft.Extensions.DependencyModel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9ed505b395eed0acad8cc27139301e84e0897850ded8be96becbfb6403719156
MD5 ce1b6131d6aad08b8ed7e87a129ab95e
SHA1 af6141e7a7c5605fb4357bb1e44a9fb152209385
SHA512 3658df0c6d494e39026eafb6673917a702ec9d2c565b68f94c06939792fa06cd7252ad5347f670a1178bc22e285d499c40fedc936dc9585801e3f621eb282954
SSDEEP 1536:Wm2OrSgo9OUZze9LrKhCLK43egtteic3zx9:Z2IUK9/7K4pted3/
TLSH
T125835B1133EC9716DAEF1AB874B0A09A4773F69A3423EB5D6D6DB1890813BC04711B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

b4:ec:e4:df:cd:fc:20:cc:e8:89:dd:51:4a:e9:74:dd:4b:20:93:64:4f:76:f4:62:22:65:2b:1f:f7:39:11:08

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

77382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.DependencyModel/Release/net8.0/Microsoft.Extensions.DependencyModel.pdb

Microsoft.Extensions.Diagnostics.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 988eb635e13b70aebbaae3df6b1dcddff480efa1e1921d224684c8a98f9525f4
MD5 70dd8b6f9d71ca90183c930e47a0198b
SHA1 a103608edc7f0538c0b6def5440d74c3031b0cf2
SHA512 6459307c00ddd6159d562a893897481ff81e5ac29b1542820fc79579b2701e65e12d33ff9d9aa6259435d9a53b0d61efe116ee144b04a885f4c0d5545d061ad4
SSDEEP 768:otrPRmOyjEvXPw3CWP5ulijQta6QZs49z91b:oRPRmOhI3f5ulUQcmwz9B
TLSH
T1F1D24B90A3BC5326FEBB1E30B9F1C6151A76D7576401EB2E4E8CE0481A73BD09932B35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

56:51:e5:d7:80:f0:2b:b0:19:4b:73:c6:3e:17:6d:60:1e:98:a7:27:db:f3:f3:56:8e:2c:95:d3:10:41:65:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

24590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Diagnostics.Abstractions/Release/net8.0/Microsoft.Extensions.Diagnostics.Abstractions.pdb

Microsoft.Extensions.Diagnostics.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4e4dee5d685bcd62ffbb41f198530b78bea9b0a33f3edd165a316ae588a31424
MD5 ff4b69bc6b20e032d1e3e96ea5d6dd3f
SHA1 3f1e7f843753e0b31d8f5d0fdb03522d6089b468
SHA512 170e9aa3f8efb99d24a72a8deee9f5fed3f186a8eb0f31d08f216442f2d72fa9ced1fb837bf27a307e0347a04fd5d8eba1a2f700e84a10ea527974c98081a7c9
SSDEEP 768:5/mAPzAl7EfwWdVSDRTMv9Yg/HCjQta3149zGsJx:1zdfz2ev9vP0Qc32zxn
TLSH
T12BF25A46A79C8316D8BF1DF1BAF0C5061B3AD793A411EB291DDCA0C81DA77D08722779
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

e2:f7:54:c7:f7:a3:f8:d9:2d:97:69:4d:1c:f4:8d:54:aa:d9:26:20:d9:67:ac:d1:fa:24:bb:98:07:49:24:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

30738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Diagnostics/Release/net8.0/Microsoft.Extensions.Diagnostics.pdb

Microsoft.Extensions.FileProviders.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 11bd6e4dddd94e57b404a5b417d38b9a8f187a1492634fd9288d92e3d2887b7f
MD5 6940bf951666a4f466071b0106cd38ef
SHA1 3e39d9a45281bdcc87205dcfd5faf2e3c38d814b
SHA512 bc4026954f6740a8d583f58eb28c1a210b6d522ba437714a0270ec354ad23111799a321436c487df714580b33f024396cfa6eb3e6f7a252b78e01b8ba09e39ab
SSDEEP 384:U/eGBs/ilo+MVc1rwsRWsrhWufLXmztvGHRN7n8KER9ziLqbl:Urs6GyPHjQtan8R9ziuB
TLSH
T15BA26C2697A88363DEFA4E7069A5C50B2E3DD3DB4C04A52A05C9F2481EF3BC48731779
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

07:e0:59:3d:bf:ca:cf:7b:f3:59:ab:dd:bd:b1:4f:a3:8b:03:0d:ea:0e:69:55:64:fa:50:c4:a0:42:96:1a:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

17134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.FileProviders.Abstractions/Release/net8.0/Microsoft.Extensions.FileProviders.Abstractions.pdb

Microsoft.Extensions.FileProviders.Physical.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ccd1cd8a61810705dd773469184ad664c2a1586bb56862f0448c1335b20578cd
MD5 c52611f0db45786f759099bcfbdda071
SHA1 e21dde231d5515939825dcd5e2efaaff6a695290
SHA512 549a7bf4a1aca62eed84963eda821f7b7f4444e051c1d843f307f4699d40ea3cc49911e2b6200225fcbf5e7365ced260fe13cf58fc503f05c929195a3cd48f8d
SSDEEP 768:5TAvLtI92z79lIIdO6A5u8eHopdtULqaZFZC0j3jQtaU49zGZJXbX:5EztI92zZ25u8eIpdtUZFZ5TQcxzIFbX
TLSH
T182136D2293EC4317CDEE1A7469E4F6860735E3D72102FB492D48B18B38E37845B657EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

71:50:05:9f:39:3a:4f:b4:0a:b9:f9:79:cc:fe:6a:68:58:21:c0:79:eb:4c:e9:08:8e:93:b1:f6:1e:6f:c6:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

40258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.FileProviders.Physical/Release/net8.0/Microsoft.Extensions.FileProviders.Physical.pdb

Microsoft.Extensions.FileSystemGlobbing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 65d19eb96df24594c271fda70eb8da3ff0d82ca2726985cbe5b8818d2cd57954
MD5 054dfb2ded74063824138b24e36dd96a
SHA1 5475e8af407e08bc216783ff6afeb727ce7acf12
SHA512 79972a7c7af36f846a73cd308991ea0aca182c4ef4ee94deababe55f39d94d4e6687d180d462bcde81350c2a633a0f55b0b6d32a8c80421936c77eb10f1d71bd
SSDEEP 768:diKNfJd16NqwouKJjikRU+3bELwGvfO7oUfY09cAgOZgjQtaZAzxOW9z:d1NfJd16NqNuKzoUgIcAgOZyQcZAzUiz
TLSH
T1E4236C92A3ACC71BDAFE1BBCB4E0E0544A36C667B422F75A4E8DE54518637C40670B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

37:94:b8:b3:11:25:8b:62:9e:81:31:a1:f2:f5:71:16:e5:7a:5e:4e:c2:26:00:78:1c:71:7d:fe:4b:21:ee:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

40562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.FileSystemGlobbing/Release/net8.0/Microsoft.Extensions.FileSystemGlobbing.pdb

Microsoft.Extensions.Http.Polly.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c281ce33380995f9adcd5d8e4eaeb9a58ec4fcb5de5a737b79e189832c4298fe
MD5 1c357a844a8e4866415bd63b0fbbd6d9
SHA1 ae6cd09ba93d19da5585ecc4c60e3ed658731807
SHA512 6e3ef6a5ba334fba699ae46bd0a2033d3a483a3c268321899f01257d12fe9aa37b33b501522576e09f9d2d89ba3611e2bd2c1fc087fb7c45bb35504f985dcd1b
SSDEEP 768:Py8jkIzOchcbRizq/BAlWDSn1wcXA9zhyM:PFjrbO1/52nbXIzhn
TLSH
T118E25C45676C4322DEBB4A74FC75E2419E38F686AC21EA1E118CD24F0E67785CA2173F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

12:cb:ce:41:2c:ef:2b:25:39:7d:eb:97:d3:84:61:93:bf:30:6f:91:56:8b:d0:90:c1:76:f7:57:34:be:05:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 29, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Http.Polly/Release/netstandard2.0/Microsoft.Extensions.Http.Polly.pdb

Microsoft.Extensions.Http.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 40216c6d1241cf5041397320df3e76e6af05e00e9b53000a8a6689f4e2230035
MD5 323709554abd12e08e70fddce686e674
SHA1 8b0468ed7f4174bc7da9776a371275e40e22e45e
SHA512 ad9638800d3c80490c790e3d273a9a2f287591e83aecf76d1d6e3c2e3a2e1796be7ede3796a096e9d1dbca3765ca917479afbb6a23f63d81df7f2bb81a809ce7
SSDEEP 1536:yysvNsc6uVTDrj5R8JTq2CQDUrN29jWY6k1jK/X4BbWmX5Rns58Qc69zV:yfsDwg41Y6k1jtWYRg8QVp
TLSH
T155934A5473EC8A2AD7FB6B74E8B094284B76FB4B2512E79E5D49A0DC08E37C04920767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ec:48:62:61:02:12:1f:5b:f0:b8:d7:aa:6b:27:90:47:2a:c8:b1:d7:d9:b0:65:a3:bc:d0:97:b1:7b:9c:99:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

85562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Http/Release/net8.0/Microsoft.Extensions.Http.pdb

Microsoft.Extensions.Logging.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 82a555e236f215b697509bba263e4f998621f263698ef5393ac0c301965bfa18
MD5 490a17675bab8683411d5263519c0eac
SHA1 c9fd1fedc9b729b8bd2c5ca5f46b9f52ea5311f9
SHA512 c9eb107d42e3b54b2a5bd2d1e6e65327f7d1abe56a9a725b8cfc9540cfc8fc0efc955c18006793f0268e8fae297e408aec30fa0747ace395c10cacc62f792444
SSDEEP 768:EUp++cjNPPRGMEB8/RL+bmozvjmTYuiT/envDeH6ZzqxzIT9Jw7isr3L9SjqJYqN:ZjGPsB8/++roevDeHWzj07ejLQc5Yz8+
TLSH
T168535B0467EC4333CFBF89B5E4A152010B79C3662146E3AB2CDCB56C29677D84E227B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

7d:b1:6f:a1:2b:29:d6:37:a7:98:4a:90:f2:b0:34:af:4c:30:6e:cd:ec:20:63:22:a3:6a:91:14:51:3d:c4:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

60710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/Release/net8.0/Microsoft.Extensions.Logging.Abstractions.pdb

Microsoft.Extensions.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e77646219cf449b7b03d7a1da8109abb0823f180ab320dd0302b3e6d263167d5
MD5 648007c46f660cc3890189e46fe2c4d8
SHA1 01d4a0e8fbdf41a56fd429a2f182aaeeb5b07edf
SHA512 51dcaa6528e39c0c2d134d26f8f99950ebadcb6f687a698987123847dc305c4369fddff4fa1b86dde1b5a216c404a747e20e79226088dcfc712dd3e88c315211
SSDEEP 768:cHfnremnphnpxelAwvitXNE+eu78o7+XTwiv2ljQtaF9zf2:cvreUhjwKtXNEM3fiv25QcXzu
TLSH
T12A335A2153AC4362DABE0E38F8F0A4451B7AC7876411EB865FCDB1A518B37D44A217BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d8:7e:ea:02:97:c5:d0:89:e0:dd:cc:14:74:19:05:34:c3:fe:4c:12:80:1c:11:b3:a6:74:ca:ea:18:b5:2b:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

46322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Logging/Release/net8.0/Microsoft.Extensions.Logging.pdb

Microsoft.Extensions.ObjectPool.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ce5b0a485dcc4c63a242757499220d319b7ff655693fab8b87f6d328875d9c41
MD5 5cec4ce46263adf2955cea6100a99107
SHA1 bb2c799bfc1059d89909132149f5b58f3970f9a0
SHA512 42e39c8e2a0eb8b1dd875cc15ba5213e1919e17cd2d9d97a0fa96f351ea07f42372ba90f0bd484351a656b41bcd0477eb344b15fc6138e7b4f8a688839729707
SSDEEP 384:jXJHWb2gAGYmFilKHVhqtqW0Wc3kQWlD/HRN7VlhlZS:7J2fAbmwlMk/nfDvVlc
TLSH
T175A25C55D7AC8227DEBB2AB0EA75E621BC3993CB7812D319044DF6C41C937C09F2172A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d0:da:9d:6d:65:58:2d:d8:c4:0a:21:05:0d:0c:d2:7c:d3:30:24:12:90:25:e2:31:b7:73:16:92:38:5b:fa:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 24, 2021

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

17618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.ObjectPool/Release/net5.0/Microsoft.Extensions.ObjectPool.pdb

Microsoft.Extensions.Options.ConfigurationExtensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 089e1555f370ac190b1d9a99d4cc0b13c933fccdd0947c9a49baef01628b37d8
MD5 69b64434eebc364bcce469e1e067d29b
SHA1 6814e3534620a8c76911c05908223e3bb3ee5dc4
SHA512 9d496a26667bcb980f9109f2cd5bf240028481faa54925f0fcdf6137d71ac340f2a322d9593ac9d8be43a3f9f84f7bfee56024c72b99cdc74ffea9fa728eb25e
SSDEEP 384:wi0GkzWOM66OxdR7+C5zWzr0WLfLXmztvGHRN7o/P3U0R9zGCpFJ+:wvLzWURyC54RjQtao049zGCJ+
TLSH
T1EBA239998B68C357E9BB1A71E9F1D5823D39D7891804E62E498DF2840CA7394DF3133E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

3e:d7:98:f0:a5:01:7f:3a:ff:13:c3:14:dd:f6:68:ee:39:84:3c:3f:cc:e4:6a:95:13:83:a9:5a:ff:75:f4:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

17766

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Options.ConfigurationExtensions/Release/net8.0/Microsoft.Extensions.Options.ConfigurationExtensions.pdb

Microsoft.Extensions.Options.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 20cd0e01e7796318c8112e0b82c8efbc46d6d7a0da2d8bdf1791e3c7be02de2a
MD5 93b77ddc2fd422532d745b68ac3ce901
SHA1 012738e9106f863103bba44b8767c5c72043ed49
SHA512 70d0322c588ed6994fc6be7ef03c6d8c264970c3b2a6916248553a92a767156798babb8fa3d9b5ba8cfce458515ed684b915079d37a994faf4c65b417d8d8dcc
SSDEEP 1536:ugxhqHoZ1jQFU23vIy9WeTPIq0RhS1LBp1HQclzC:ua16ZI/eTPIqSS1pHQ8+
TLSH
T18F536D11968C5B11DBBF89B1B468F1A22E30C31BF587BB2791EDE6401867FE0CD25636
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

fb:20:cc:a0:77:72:64:0d:e0:64:3a:81:18:02:48:58:13:4d:27:aa:24:86:32:5c:03:93:c1:9d:3a:14:f2:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

60046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Options/Release/net8.0/Microsoft.Extensions.Options.pdb

Microsoft.Extensions.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c06c9ba409d2da48bdaf6bf4b57a1f1f4cf59e3091b7984b58262d5250930ff8
MD5 d244729d82aef8b920223071e5b54abb
SHA1 3607177a9002ab579c2d8f8b113ebf0f73877f1b
SHA512 21ba5d9966940ffce982250f62f4ed9365e90f3fe19b3e4fd9d47fd6646caffdca05c3f0cf42d9bcbce84ded644bc5a16eed85743d8d390a1becb33975574523
SSDEEP 768:CPNon+YcgKF/1WfRg3T3YTg/HZgRP65N7OP7yW5yKyqLuiU+350njdjQtaIA9zHZ:CGvcg61WfKX5iP8N7OP7yVKHLuiU+3ep
TLSH
T11A135A15B3AC8323CFFF9D75B4A1D0452A3893A6B426EB2B51C4A1A41C737C44B7267B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

82:9d:0c:63:2c:32:e1:f3:76:f3:4d:dc:be:23:b7:3b:62:d4:31:88:db:43:ce:1a:9d:bc:a1:cb:f4:a2:7c:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

38402

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.Primitives/Release/net8.0/Microsoft.Extensions.Primitives.pdb

Microsoft.IdentityModel.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0b9c5bd95962c220c06439358ab02667c03b6a1edfbb9eef1bdc558d2d9109f9
MD5 a481f681176be42ce2dbac9dd13c80c7
SHA1 5c4154f683660d3ccdfa8e1078c1d5a0df602c15
SHA512 3019c23300f427d7c1eda387d1cb1f381489031b376e5e27383f69442a76ab2ab50d654a8183d91b5210f86b0aad85714f740f7144128b329025bb144bedb61a
SSDEEP 384:3kTvrDL1SbJvZXmDxzWdaoWA7HRN7fiR9zm5TI:3ODyJv2VGW9zD
TLSH
T1CB823B56CBAC8603ED972F3162EAC9032E39B7D69410D66F0785F50A1C537C95B3423E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6b:74:36:9d:a1:f0:b9:08:0a:05:37:61:d0:61:93:a7:1e:27:ec:49:55:58:d4:74:96:c3:6e:b5:43:5e:e0:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 12, 2022 - May 11, 2023

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b8:08:d4:c1:b8:79:e0:51:49:00:01:00:00:01:b8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

14066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net6.0/Microsoft.IdentityModel.Abstractions.pdb

Microsoft.IdentityModel.JsonWebTokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 54f92a2ee531aa7a1449e1c1e7cee45f8f844788f931f57d43d570a8268a6976
MD5 d16230af7b1ebeb9cd5f8fab198c2135
SHA1 7b232c274fb205222d86e9d8595fd9bacec9fde9
SHA512 84924d4dee4b9bf1261c3ddff0a7f12767eb4413cb9891527ecc7307b6b332520a751be8bb54429c9d113a048064ccf9f27e69733c15cc03b92acfba7ce3bc79
SSDEEP 1536:JH495BtLY430XO4aCViaPkpgUc655Qbaa5O1S0m+zQ:JHy5YNBaCViaPkpKby8
TLSH
T14B93F754A7FC8349F2FF3B7665B2A2010976BE9EA835E38D1D80D15E1D22B808E50777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

db:e5:f0:4e:fc:5a:dd:56:5d:93:84:f9:79:65:45:33:ac:dd:0e:4c:44:b7:ae:51:05:07:f6:5e:7f:d4:cb:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 12, 2022 - May 11, 2023

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b1:ca:90:43:ee:0b:f0:03:ab:00:01:00:00:01:b1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

84646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net6.0/Microsoft.IdentityModel.JsonWebTokens.pdb

Microsoft.IdentityModel.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 971685dd2b8d6b01e74e7d329b8701941b7a048db30ed8cefc6b69609ed0c76a
MD5 b00b7f3165e0f0e8e9f94a0441e7496c
SHA1 1f05aadc6c370047ad5d592438b2a1898221113a
SHA512 ce8ab586aedc56f388f9fcf5d4905996f3fe497db83fcf100d36bd482c2651d5fc136c74194ff1fd7c2116874754fbfe167d52a8bc3a48f571ec5887dc539041
SSDEEP 768:ESENBHc5R7AYMJE3AYzLolyv50Zi9zuMS/:E3+5SY6kL4ypzuV
TLSH
T1E8E24C5563EC820BEDDB2E30B5FAEA011636BB8368B0DB5E6654F18D0D13BD54B1072B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

7f:f6:17:84:f2:74:d6:bc:f8:43:8f:c0:ec:fc:77:02:94:30:2c:55:5c:8a:27:19:36:ba:78:11:22:4b:a4:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

29626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Logging/obj/Release/net6.0/Microsoft.IdentityModel.Logging.pdb

Microsoft.IdentityModel.Tokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 960cdde10fec9ae94590ae7aca9a65ff42ea01edd3748808e0047acd6e03225e
MD5 99982a443d1543f693aebb1b5b399f6b
SHA1 c8f8dab6b1bdb40ceeb32323dac0dfb71651c6c3
SHA512 c558c39d5ab72e19d4e384b85c0876ddec47746f4d40fcd3eadad9a4ec94f7ed98f0567fc659b88b8a668a812e7e228d4a09c56d7a6210ee4c12bb5611f94625
SSDEEP 24576:TMbKsZrJ8QsyaysgRqkEwIe5ZBVyB6j0hG:TM2sZrJ8QCysgkkhIenyB6j5
TLSH
T1B8254B11B7F88B1AE0EF2739A47A192547F9F446ABB6D74F3604D5AE2C92740CD103A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

87:95:7f:04:fb:6e:1a:af:60:d8:b2:4c:9a:4e:49:fa:13:0e:16:8d:9e:be:04:83:62:b0:10:b5:2a:68:6a:e4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

978094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net6.0/Microsoft.IdentityModel.Tokens.pdb

Microsoft.NET.StringTools.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e51c8678fd602a21c249b369e833966019935132476f9434da896bef808ba3b1
MD5 33f51f14a28ce500e2d004558359ac02
SHA1 6c2e542d44219abac7d0a12545ce09961bc22785
SHA512 6af1d2097503f7298b9928f0aef9aac2ed66abcb7c67fcd36f6fd019b00bc0735bedf9a5c206ece634b9bb8cc57840be6e299946106764078ac33991fdae02d7
SSDEEP 384:J3lfQvstsW5NYKRKE92QFqvY/tgJggP9/WeKzW5EYA6VFHRN76C6Bmo8R9z38Uh1:RlXBfKE9estU3PEkEFCl6CYmoQ9zJ1
TLSH
T1C3D26D8193AC4317FDFE3970A165D5479E31AF971861EF6A5C9CF04D088A398CE2273A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

15:71:4e:17:da:b6:71:5f:8e:e3:8d:16:9c:82:66:b1:01:61:54:9d:fc:4b:c0:03:a0:0d:88:1b:ae:b0:19:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 6, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

25890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/StringTools/Release/net8.0/Microsoft.NET.StringTools.pdb

Microsoft.Win32.Registry.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3847dfbdf7fd6d3a38899623b5e138d781b8cba4dc58ace6e3d766523c7df459
MD5 13b111230008e616defb7a50392a3f37
SHA1 f39d34e2965f41a9aa54d852d20d7ce524bd852b
SHA512 86c223c2ae6a3b8de70e70d47947b85c9a0f363627428908362c1b3cb704696e7fcdd35e60f3d7f084125b904d8d1ae7e3422284b3002d13ed330273cb1d0208
SSDEEP 384:gEsAJ+XSx9hpWFrrWS2+fLXmztvGHRN7D6vDyR9zQGHbf:gEfJISx9yH2+jQtaD0D+9zHHT
TLSH
T1ED924A16D7B80223EEB31C356AF3E4552D3AA7D68C01AB1E1599F2494AB33C4CB32735
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

53:4f:9f:e0:81:5b:84:65:12:0d:93:70:2b:fc:94:14:64:4c:df:1b:f2:e7:a0:3e:46:85:f7:c5:11:cf:c2:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

15350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Win32.Registry.AccessControl/Release/net8.0/Microsoft.Win32.Registry.AccessControl.pdb

Microsoft.Win32.SystemEvents.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6218e0beb51ad895e14511ffca03379e84996b21dc3fc0a82d1307ecf1e5359e
MD5 fcb9aea192751fb3f3f8da120b2c6022
SHA1 5777d2979fd78aaef1d14bbbdf5e4e95f417a887
SHA512 39c9dc85ccfe8fb36f23deccef9729ce5fa3113b3926429edc9c30e239a83e54eac65b7accb8d7d498531dd071e6443d431859a43cc4845d4c0377c0b1dd4948
SSDEEP 384:Q/+UKd+XwadOxoYuQnWqWrLJW7fLXmztvGHRN7VqpA9bFs0R9zDfxV:Q/+UKILdnYudDWjQtaVqpQZs49z7j
TLSH
T1C6C23962DB44C576CCF70E3169A5D2122F38E3E6A801E79B144EE0080FB7BE597B17A4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

b7:b7:31:12:81:f1:33:22:93:37:d7:78:16:43:eb:5e:8a:bf:6e:18:a4:3f:5b:fd:98:24:98:fb:19:09:23:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

21254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Win32.SystemEvents/Release/net8.0/Microsoft.Win32.SystemEvents.pdb

Nest.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4a634850f05d7b024b5c3d110ad30ec330d47053f1cacf68e4870b90c56a5ddb
MD5 f431aae565c3a395d26c915aa2c76496
SHA1 045c701cc5d23addd11246e33f08ffaa1d20a483
SHA512 18262373bf5f2d7f2d48a3386aef4d658d2e4de60777a0d00f5cddfd029e134f39344e9f902d96baa3ed600f3b8d1da9af5665f284e0693c86d4237bb1b9fdd8
SSDEEP 49152:GpFSJoBFpFsA33s7KckRip9X0t9aYL8dfm/WhVT:EFSsFpFHAH
TLSH
T18B360A82AB7C4F57C81B1F36E8770F261675F6ED2615EAA05348BC923F433052AD922D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5056954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\SteveGordon\Code\elasticsearch-net-v7\src\Nest\obj\Release\netstandard2.0\Nest.pdb

Newtonsoft.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
MD5 adf3e3eecde20b7c9661e9c47106a14a
SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
TLSH
T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 8, 2023

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

705086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugin.Antivirus.deps.json

SHA256 fcf13b8d8b9a995ccdbfabe24168e62dc24d48ca8ea4691af8acaaffdbcf2a18
MD5 98f8de21f3a43a8dcb466051af6fb410
SHA1 7998a0df33aee3600ffabb5e742d83f39eee199b
SHA512 aa13f965ae0ed9df02616c815130fb49f98d8da6d26dbf83d48ff604874cd0ffc7b8dc0e2d0fec82a7e39945ae3250c2cf8278e05be0ad8e36aa0fc8ca55f0d9
SSDEEP 768:CU0vJcNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFVgZtiSUYsZ3:LNb8hqODTrHRZ3aWv3UfT20fr7D+/Q
TLSH
T1E1137825D8544E6740B6BBB6E8794681F635433F2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Antivirus/RMM.Plugin.Antivirus.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c95cfd14e643263d552342dfa7d3b4718b57ac7026c5809d8f8060d6121e54b4
MD5 d853018d8ac28f775d5c0fb4e457dc10
SHA1 dc90c55e131cc304d74ffe76fcd8b0b12da85222
SHA512 e5546963a24c6acec14d649157d1c0ca69d825e70e9246cab4afce53a1765af37f3acab0d423a60c7c1dbe14dad880e6d4fe0346749c12b0d31c9f2e13580949
SSDEEP 384:88ZHFXXslFS2gaLVBtKx0i8SPKJPKgNkc1rcVGykqRWOHlLf2KmX0Xv8K4/iy8RY:TZXsltvHYPEPJkcVcLkqR3b2Kj8W5ALf
TLSH
T1D3C26C6287881223CC9A5F7AFCC9488267B667451CE6CB42359C90504FD37476AFB3EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

5b:c5:9f:02:66:93:7e:a0:64:72:77:15:4e:1b:ff:55:35:e4:b9:10:e9:8f:93:c2:c3:83:fd:91:02:c9:0e:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

20478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.ServicesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 914578e769efbeb0268805cd0862f530c513aa4a58db7aa6aca68e90eb6d8048
MD5 3a1bd6477d29b02da9932818c2d2b1e7
SHA1 b8d283e322ffbe08afa90b2e38378350b220dfa0
SHA512 a1659c13e16d58794e3ebe9ff90aeb8963adda1cdebc6e23bbdc15d724ae17ac2908ec7897947af823ce10839dd8986f8368173dd9077c0be48ffc0feda17d1d
SSDEEP 192:97D1zs4uNm2YVKhVLUbKkFabDvLCZ6aA8g1MgLpyyUWf:bspm2YVKhVLU2JbDvLCZ658g7LpyJWf
TLSH
T1C622D600FBE54369E5FE4E75A87307000173B9A5AA27EB5F0ED8A01D6CB27409A67B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ServicesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ServicesExplorer.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Antivirus/RMM.Plugins.Shared.Antivirus.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9a35ca8015f15a9f5f1925331730d3251d1e5f76f4d9664d747f0abc96239539
MD5 f3bcb492cb5d643d51555568c66facd7
SHA1 5ec6dc4b9178a7ad14c6acb31934bbc53c421886
SHA512 ee8546a9ff2698568efbaaf1f72da2d9d62b068b29f0ad41ad23af35a79ec5852b83eddd23eb5cf8ea910bceb8aec32f711ffcbdef17cd36175acb1832e0169c
SSDEEP 1536:8YsLTgQMNBjBywWHCE62CJi5NaFrDaehWZm+d53MQj/0CKH:cvgQMNBjBDWHN6pyNatDlYAy53Nj//a
TLSH
T160A37F3BE60F0DDDC4BC477D49160045F6A34B8F82A09E2B36B6508D1F7264A9B6739E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

103534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Antivirus/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Antivirus/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Domain/Interop.WUApiLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d24914bcfa157943feb32b034bb227be7fa32adea936adf8abce67bacef49fb
MD5 03b503d157262841db3adc45cd342429
SHA1 c85b9fd0b0141591d430f61431afc558bc193df7
SHA512 a66c585ca597574857de0a0e38d5ade772541907ab4f7a7c53cce77804b33f827a252957a8b5daa72ae0af30287a6c3f2f3e01df6aa4b8749523bed4bb6ab907
SSDEEP 1536:RAQRbACRIDLslRV26EFPbWs9akSAvx4ExO+6Oh:i6QLslRsPbWkakSY4+jh
TLSH
T1AE73E69B72DEC634D81547BF546B4B052BF0F2441236CF4749AE16AAEF832642A4B373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

84526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Domain/RMM.Plugin.Domain.deps.json

SHA256 5de6431374c1747957477f1da07a2b77b6d19912e6f785ac661bcf5d20121388
MD5 7748b02ca64146c4b7446bb94005e850
SHA1 184ec8c942aa3fe0b863cb276df5dfb2f0f228ee
SHA512 934e55a014977d7126b783fafb1f73f8f49ca199b8057b7e6d3706e156a5501162a6dcab5306125a4b8d9b082805a49abb803160fe76b9fbfb37c4387f92a6b1
SSDEEP 768:CUrvcwhNb8hqODTrHuWLZCulJWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFVgZtilRGg:BNb8hqODTrHRZ3lJWv3UfT2nAfDoFD+V
TLSH
T1AB137726D8544E6740B6BFB6E8794681F675433F2104694FB8FC204C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Domain/RMM.Plugin.Domain.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b9ae836d133cd2b4e9aaeef66385f6a551517e79ff524e722aff0c1536c85f3b
MD5 abcd89bb26a49a390c5cc90e31372d30
SHA1 db1f4bb918076994dd746d71ce2d7201b6724bb5
SHA512 3e2a8299d5419a8286bfc8d34ab51d96a2d26a96ba34ae14e3337de7bf70e11e866958781e9b1a4fef53022ec269261d8687ef7c4aab485474b5c61413a26c14
SSDEEP 384:Zfn3PVfYjvrk9WWOHlLf2KmX0Xv8QjPy8RbmL4nNy0J7:Zfn3VCYW3b2Kj80P5ALG7
TLSH
T11F826C67C6A80913ED6F9F38F4C059439BB0A7921DD3D6E7B04981140E467912EEA36E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

a2:d3:ba:a0:27:0e:e7:e9:d6:00:21:a3:be:f3:06:52:7a:98:60:54:48:d3:65:f3:f9:ff:eb:42:f8:9c:78:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Domain/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Domain/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.ServicesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 914578e769efbeb0268805cd0862f530c513aa4a58db7aa6aca68e90eb6d8048
MD5 3a1bd6477d29b02da9932818c2d2b1e7
SHA1 b8d283e322ffbe08afa90b2e38378350b220dfa0
SHA512 a1659c13e16d58794e3ebe9ff90aeb8963adda1cdebc6e23bbdc15d724ae17ac2908ec7897947af823ce10839dd8986f8368173dd9077c0be48ffc0feda17d1d
SSDEEP 192:97D1zs4uNm2YVKhVLUbKkFabDvLCZ6aA8g1MgLpyyUWf:bspm2YVKhVLU2JbDvLCZ658g7LpyJWf
TLSH
T1C622D600FBE54369E5FE4E75A87307000173B9A5AA27EB5F0ED8A01D6CB27409A67B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ServicesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ServicesExplorer.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.UpdatesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0d7d96e79d009c6c380409f5145c5ad8bc647c454eb8389a9b88e233765cd1a7
MD5 7becb49a993d545ea69a3409caa67e59
SHA1 b8e284776a6158440b60c14dba31409e7cf44819
SHA512 342a6c3c45974068b90918b4b46354cb3c73379501528f7d44dd0ed174dbbf76c0647ed64cbfd751d42629381febe370ed87040c550aaa8da7053978d8e2feda
SSDEEP 1536:v5oKCv3vUJ7rm0OOPDNaxg9lG6rk4e8hadAyilBYPr8FflFQtBdTE/3Zoa:hIv3vKPO4lG6ndyiMrklFQtBdTE/h
TLSH
T12DB3E7192BF88329FAFF3F38A4F405110A7679C7FA32D65C0A85549E1962B85C931B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

118630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\UpdatesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.UpdatesExplorer.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Domain/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Domain/RMM.Plugins.Shared.Domain.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d43eced011f4b740228e0abac7ca9d1649559e53314b60f71be21ca7ef5adb55
MD5 7891f5f3524b3eb785964fb093a42ce4
SHA1 be73564edd8f1f09bd2f77aaf74820b0f925d9b3
SHA512 dfe935fbd41b3e59b4ea4f7b48dc963a8a15e1cdeeb05be2279e4e6a5af26ec53d65392436cb08a556e2aa803e632222758c0ecb5cbf95ea9ba9f39107ab1745
SSDEEP 192:wYbBqqtOT5wQQFo2a7mQM0ngZiwBt4bkBxP3sj9:DB2dwpo2a7mQM0nbcPw9
TLSH
T10812071AB7DC873EC8FB0B3C7573412642B1F7A24585CB5B9C880517ACA37519A32BAD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Domain/RMM.Plugins.Shared.WU.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0c68abaffdea25314331c9e151a47e203ad19a58d65922a06469e9ed0b401f85
MD5 1bd3f8b3ea011f113982daf9d3c27eb5
SHA1 3e7a53920344ca127854a7c3ed3e69c3666bf1cb
SHA512 4d8fe53591ee3b35e377b792b5cc0ba1ab3a61d130776947540a0726055e791438188738922b1147ddbe80ee007dccdbeea63b632c81f293671ea08905a69097
SSDEEP 192:XeAr1gqqOgME6ZB/BdB8BoBiBdBxBwB/BGB2BOlSlVygZbwB9dJiBJ4roUA4Ea:71Xe6kSoJi4rxAI
TLSH
T19512D74AFAE4C333DCBF1B3968350A0616B7EA016AD3DBE60CD842E98D127664D51379
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Plugins\RMM.Plugins.Shared\RMM.Plugins.Shared.WU\obj\Release\net8.0\RMM.Plugins.Shared.WU.pdb

Plugins/RMM.Plugin.Domain/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Domain/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.EventLog/RMM.Plugin.EventLog.deps.json

SHA256 3edf4b12889822eef44ee3e5b2f91c1b5487ca5f458eaee23ebaa868dd33d216
MD5 ddf01e783e4891b5fa7e55d2b568b346
SHA1 25d9ed8ef1f82ef104a4eb549e68c17125b8059c
SHA512 1f42e7ab3d83c868622524e4c72a35fc5f01520fb2e1dc1667fd5874ce680889a4fda2fc2134129232abfb4b49995234c3416dd80befff366479fc63971d4bb3
SSDEEP 768:CU5v8SgKNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlGYsZUvUZ7d68ZtsWkDk7Z:XNb8hqODTrHRZ3aWv3UGfRUD+lt
TLSH
T18A038725D8545E7740B6BBB2E8794681F635433B2104694FBCFC244C8F77EAA62A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.EventLog/RMM.Plugin.EventLog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 149d186e823cde74b4aea237ffc0d127e1bf9e4301ce3479c4a677294e6b0755
MD5 2f35b6f7d277f8d30e3b2f187f1ccc0c
SHA1 b5dca001e63c77dfc5e7bd65a70adc601333bc48
SHA512 edef0be253cc7e71e1a335f3f00bc4f225a7719270882c9274c3f687e2d426e4c3f89dadc2b250237db5dd3df0d792e2d5fccee7d2e9b25ab73c78481f92b914
SSDEEP 384:W1zBEXYmfuBjarrPmWOHlLf2KmX0Xv8/1j9y8RbmL4nNyooe/P:W1MLuxem3b2Kj8dj95AL7e3
TLSH
T102826CA6CBA40413ED7E4F34F8C91A436AF4A3C21DD1C5AB705C84050F563922EEA3AD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

0f:89:9f:32:f6:42:66:ca:89:6e:f2:47:aa:69:15:f9:26:65:11:07:18:9c:f0:01:b7:e9:86:1c:13:cd:73:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.EventLog/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.EventLog/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.EventLog/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.EventLog/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.EventLog/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.EventLog/RMM.Plugins.Shared.EventLog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2502a4893fde3f4303f35a69aef418e04abd24e876404f41ea0e1424a0bde0de
MD5 70143b19b8d6ab55f1033738a89f4eff
SHA1 91c378bf83ecce2efbce7c7bfe11d27a28a8f91f
SHA512 c45fd0ddf5f8da28b25ccca1bd2ac487a3bf6ed0b4c9d3223c27c19fdada09e2641aba1aa538940a298a198d2a2e119af1f6ad702c00ece1b629e1cb0aa596a6
SSDEEP 384:QtIxYaFDsTR9sShzmJauMguGKme/RFa8At3/DJz2U:JxzwFUTKX/RUFf
TLSH
T18C923C07AB40D22EDAFD0378F4D3061993F04B071A21E7566FDC2C4AAE13BD95C8A6E5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

26014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.EventLog/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.EventLog/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Hardware/RMM.Plugin.Hardware.deps.json

SHA256 386eb5830e22a4c7715bc9181a55aaeb39acc278b0cc692cee1806ab02825c44
MD5 4fd45b4352f6e79aa6b1d5ca416e90e7
SHA1 f239e734980d947163bdf7c902c3e4921d0e7892
SHA512 ac2ec7707b77de5d0409e2c71e4e3e3628473f34b62043cdc91775784abd83b2ece767203f8ad6b34a2bdcb5c3e134419d11281544b99c5bde44df5079b8730a
SSDEEP 768:CU3vAdNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFSUYsZUvUZ7U:WNb8hqODTrHRZ3aWv3UfT1fP8D+Uz
TLSH
T1AB137725D8544E6740B6BBB6E8794681F636433B2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Hardware/RMM.Plugin.Hardware.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 923feded00ea9806a38440f4efc22d318281f83977e9537812973e1b4e0b2790
MD5 6fbaf247c30bd2e266873209bec33846
SHA1 57f286a8a935d3d0b908d54bdb8de42d9612fef5
SHA512 c7fdf4dc1deeab891151703b272473423cf6caf6a3df28ac58563889debd09280365e869c1f54662e254e1aac9f0a708e71f1e94f0918f8a096b5c000f9962bf
SSDEEP 384:/kvgk98of4DK4AUqCvPhWOHlLf2KmX0Xv8sjy8RbmL4nNy7MnGbr:sgqgmEh3b2Kj8E5ALGc
TLSH
T1E3927D9696880633EC6B8F35E8D665026BB1A7C219D0DAD720D8C1414F953433FA736A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

29:40:d5:d3:b1:9a:63:8c:a3:3d:a7:25:5a:72:be:52:0e:43:a9:3e:ed:53:fe:cb:39:fe:fe:6e:0d:f4:0c:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

14878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hardware/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Hardware/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hardware/RMM.Plugins.Shared.Hardware.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e60dd4764914b70a1c8bad4c96030d5ae633bd1ffba59a4bdc422b7fc4416dce
MD5 6021b4116002f77ca5b57317c4da131b
SHA1 c1c9953f2369476a27ac1fc804fc54e006fd67da
SHA512 c90772a6ce923cb3f74b21b45af065a0ab01daef9d5a7f9ee07cd03c5a8f8a5a4e8b65046e0ed306a9f82ca657d2214fc5577d3c9f5fab5d036b90238107ea8a
SSDEEP 96:4H2WnfE+yuddOzpYE7TcYQSF1LSR5Wt3NaICQ4H5lqK7vaq7upt:+2WfryudYzNkSD+fWt3gIsH5B7Za
TLSH
T1C9F1E705F7A48732CCBF0B3698F3568102F5FF828C668BAE119850536C1B29A5E627F5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hardware/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Hardware/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Hdd/RMM.Plugin.Hdd.deps.json

SHA256 bfb18856d5f79484eff67f2098aaa78d47327790f176175c4f7bd8cb75fa399a
MD5 cffe43b8842547d27396c817a86a8248
SHA1 6f39055adc4feed0e9d49a9db3747704cbe597a5
SHA512 b9e194df42b1e7916853b79bc5a2e6bad8bce164657604ca5c52dd7baf9f3acc56dce4f925e399b83af00cbc7fb0448e7ae69824d1bb5fec7cbb90d14f6f0266
SSDEEP 768:CU/vIVNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFSUYsZUvUZ7F:oNb8hqODTrHRZ3aWv3UfT1fXdD+UL
TLSH
T129137725D8544E7740B6BBB2E8794681F636433B2104694FBCFC245C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Hdd/RMM.Plugin.Hdd.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1fe76a95450c5518599b23c960e880dff01c555ea936bf4bd3ebb385d3aede60
MD5 5f28c30630df432cab8dc6ff76ca824f
SHA1 4027a1909b4ccb4fff0e2710903aa628f52ef1bf
SHA512 d0c9677cb49af0088f314fff8b08efe34a901281a5c16c44720ab03404f745497b2b545eb35fe075e615d974ff6a95072f757c27ff4ac195089a2ff5c0ad1feb
SSDEEP 384:rOoyivEmfJj1r+os0WOHlLf2KmX0Xv8ZvDjNy8RbmL4nNysA/:rty2XJJT3b2Kj81F5AL3
TLSH
T137826C6BC7981813ED6F4E3AB8D916938AF0A7811DC2D2D7219D80545F023963DEA369
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

39:fb:29:1e:97:8e:42:58:48:9c:f3:30:1f:01:2e:3a:ec:57:94:75:4b:13:7f:a6:c8:e6:9c:b2:85:5b:cc:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

14430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hdd/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Hdd/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hdd/RMM.Plugins.Shared.Hdd.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6e4f739cef6afb31c358a37870376c8fbea9c9cb42ca15c07cf6b94fc946338a
MD5 c1317f403291b3f2f7a7fa1134d51fc7
SHA1 8b60fa7979dd1ddda58f7d2b789acd7364fb76fb
SHA512 c9f15e20f8c4216924a6e125fb0ea63a1dcc471adf6597eace50696e25c9b7cf876ec47a5ff4915a76fc1fc164ebd05e3562dd235a3938d6a6b9099e1fb495d1
SSDEEP 768:vg8aUboshVRsrISawcdwBMDwPkW0j/ZdKVXiSt:muhVRSawcdwBMDwPf0Qt
TLSH
T10FC2C56A7B8A5361CFBF96BDA8CB020442F2FF6B8821C757999D00D94453ACCBD8D5C1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

33358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Hdd/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Hdd/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Host/RMM.Plugin.Host.deps.json

SHA256 eb4872911e6b2d3cfae959d45458a850054daac49ccb140560e1dc0cbefbb5ac
MD5 0bf03a1447f0bf6312899eeba93548fd
SHA1 5ad184b366a87d426930ff8ee3c6d638ea2ad4cf
SHA512 862c1e5f1c72e2bdb64a6c30e2b75a8ac0569a0b97f524660e6fe8d32df18914a72d42ec27a9aa40bc9e2e9be31651ea4835757adf8a4fd7f5a32a13684b11f0
SSDEEP 768:CUBvqDNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlGxvZtG8ZtD2jHgZVFVgZtib:0Nb8hqODTrHRZ3aWv3Ua7T2WfZ9D+El
TLSH
T14C138825D8544E6740B6BBB6E8794681F676433F2104694F7CFC204C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Host/RMM.Plugin.Host.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7ad4841ef18c9a8c63b2b5bff39aadba2e9d02ac9c6d68c7ded8d1d3eb56bf42
MD5 e07dfdc4b8c1fa2e6eb94ecf99c087e5
SHA1 6052ebdd2c629da785fd75a3bb433ecc2dae4e43
SHA512 ada32d2aa5414a7e04acaed2a2044e7fffcfdb34d966e494e18e89e48b79f9046f93ac2238b4567e8c51852cdc4cbfd23ec0374179a8bdb063665397b8b18bb4
SSDEEP 384:H+z4UuTCq2fEjwcrwGL2YWOHlLf2KmX0Xv80fGy8RbmL4nNyHig:ezGT0Owi2Y3b2Kj8OG5ALP
TLSH
T1E0827EAAC6A80913EE6F8F35F4C51563AAF0A7832DD2C5A7304C80155F453963EEB379
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

72:69:33:e2:80:de:2c:19:f0:19:55:e1:08:e3:e2:08:0c:f5:a2:07:62:a3:d4:df:0a:d0:08:a6:7a:03:40:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Host/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Host/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.Location.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 480f25342f859e797ecf757cd5c8d16972df4b015a2d6bbb8f174101bfe4822c
MD5 971e7daf70d4e575ec812dfa926ee932
SHA1 7cc120db96c4dcd734568559b1366a6bd9cb3636
SHA512 4b54d7a7c2e3d8505516578332597bb0077d9397d6f85d44378d24ae29370e0aaa6e7eaa11308c9eed4a61cb36740a1dab3776cdad46ced6d2d91b170f7956d7
SSDEEP 96:tp6hOc7DeGv9k4RkXVc+OiegfLEH1Y4GBdVvMzEKCErZLllp:ahD3tRScSuxSdtKJJ
TLSH
T155F1B847EBB84316D9FE4F36F163830142B6AA39E912CB6E4588641F6D237001AE2F75
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\Location\obj\Release\net8.0\RMM.Plugins.Extensions.Location.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.ServicesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 914578e769efbeb0268805cd0862f530c513aa4a58db7aa6aca68e90eb6d8048
MD5 3a1bd6477d29b02da9932818c2d2b1e7
SHA1 b8d283e322ffbe08afa90b2e38378350b220dfa0
SHA512 a1659c13e16d58794e3ebe9ff90aeb8963adda1cdebc6e23bbdc15d724ae17ac2908ec7897947af823ce10839dd8986f8368173dd9077c0be48ffc0feda17d1d
SSDEEP 192:97D1zs4uNm2YVKhVLUbKkFabDvLCZ6aA8g1MgLpyyUWf:bspm2YVKhVLU2JbDvLCZ658g7LpyJWf
TLSH
T1C622D600FBE54369E5FE4E75A87307000173B9A5AA27EB5F0ED8A01D6CB27409A67B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ServicesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ServicesExplorer.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.WebHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ac5d41fb93f347ce85b586d2158c48c7163ec2952b40efb6842ef6cf2aa47c85
MD5 4df9ded244ce89c3d8c6d278dc7cb6d5
SHA1 cba133e5f0e47d5657fd9ec7fea9da0cba85d385
SHA512 dcc5edb254065d95077189629837c0c619586ae084034aebeb4423ccd31004e2685f7bdcab61e11e15b7acfb73c7b7ff0561f1fa3864393a688df473b328e908
SSDEEP 48:6hKowGnRWf6dlTfIWtnDZHDfAuAzCwSf/Tt9CA3KXUUCdsyWqwbZLP2voqeVqDl+:G0uTfFnDWPzed61CdsHZLcFA
TLSH
T102C17421A7D8422AECBE8A72FCF783515572FE01EF938B7F18841456AC212349922A75
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WebHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WebHelper.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Host/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Host/RMM.Plugins.Shared.Host.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d7db34fd38ec8288b5355569afbb7315abfb08fae755a524ec8d47716d7e0187
MD5 2cdb6b02beb1f735e2e5b9267d4907a2
SHA1 df0626ad6aad0fde52e9081df0cd07a4ed38908d
SHA512 fbaed9c534597115daafc834ef8c16fdcd7169e6b19887448cdc1110fd12d87d93801b768a1b2148cb79d1711572aaf2800e957dd217c06ca24842f9b12fe4ad
SSDEEP 1536:8kUcjAz2iqow2qjsxhIi2oUIulpqGzRUNzLQeywV+:81gztiqIDGzWN4eyww
TLSH
T1B753083AF358AE06FEBD867C5193885252F28E1B4172D7036EEE18C514433CDEA4D6E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

71966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Host/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Host/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugin.HyperV.deps.json

SHA256 239521eb0b9eb06d37f0e3e2deab654cd6ba6554a87770438a13547d6665fdf5
MD5 5289f8bd9311b9ec0725f3084f3ad300
SHA1 0c9b6ae1607aad5d154704532a5b670b3d4f6f1f
SHA512 abada7b4ab9150a400a0d39099306ed4432aee71b8756a6b99de6333baec461a55da8c961d42ad326b6486bc90f5e81d94b1ff9d7cfe4d20d614c2d8121b8eca
SSDEEP 768:CUrvMhNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG1ZtC8ZtD2jHgZVFSUYsZUK:ONb8hqODTrHRZ3aWv3U0rT1fw9D+bT
TLSH
T19D137726D8544E6740B6BBB6E8794681F635433F2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.HyperV/RMM.Plugin.HyperV.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a6e55b81e06fbd034c7d4d288ee0c10c50edbea9e4c6ae0e9d16cac52ee5610d
MD5 03d28b913b531007601a265e3690ba16
SHA1 4c28674aa80f12521f47ec266a5ea773fc9f7e54
SHA512 318b2b08b7e42aa4bb49b8937aef166c8c5857a89122f558d5331bf4c1874da119593f5649ee47fc6c4ef44ddaa4eea157ee1d66ed8d225a3426af933c5ed67d
SSDEEP 384:fHuzZV0mfcjtrAtN+WOHlLf2KmX0Xv8MhJy8RbmL4nNyewL:fHCHWWN+3b2Kj8G5ALR
TLSH
T160827DABC7A40813DD6F8F35B4D56953AAB0B7836DD2C687318CC0154F423A629EB36C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

3e:f5:3f:24:0f:56:4a:86:db:3d:e8:19:3f:f1:94:aa:27:06:a9:22:6c:93:79:76:49:f9:d5:be:6d:59:4e:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.HyperV/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.HyperVExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ef41bf6806840dda68dd1b4978deaad24bebe518fc04a202f6119e34d0ab7a6e
MD5 727eed77652867134c838c994595e544
SHA1 247e2feef41a8c2b588ae9adb320b86e5c854bfb
SHA512 1d97db53baef4359bd4b4e19f9bd155188ccb9cc33407225ce98abac579663c5661a51307adfee6ac58e082c466ce8056beaf41fa6bd9085ae0c62492e5f48e4
SSDEEP 384:hGNKTZFpVotxDklFP64vGmFIucW/lsUTAmkbN9quEl3Q9pMAbOKJs7Z70:hGNCpQgv7vGmWMAbO7x0
TLSH
T1D9A27302B7ECC209FAFB6F35787242110A76BC5AAD31DA1C0E95108E1CB2B95D970B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

27146

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\HyperVExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.HyperVExplorer.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.HyperV/RMM.Plugins.Shared.HyperV.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2b9d96d4c9927a1234e214b24bc3e6574f64b873e8702b0632c361c2671dd8bd
MD5 183eb0506602db82e4fca7b8a354fabb
SHA1 65a0cb0a48b94fc69ab8b299f2ca30e9c55452e1
SHA512 633fb4f497715224b10e967aa51b202277cebf7eea84065d73f410579c84f539490268032e7fcaba1dfec6cc03b9e56afabd7ee35725fe984642f949f4533f20
SSDEEP 192:Sw3bYkEAlv0ZkxEpIgc07TDgZiwB9MBQuL:93bYkEAiZew7TUuL
TLSH
T157F1B412EB94462BCD7F463A24F7461502FEAF129955CFEF0DE800620D176B985227AC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.HyperV/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.HyperV/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Network/RMM.Plugin.Network.deps.json

SHA256 140bf63b55a5d6280519a70ad44e248c1acec921932fa3ba156477e6a04a83a3
MD5 663e0bbc1dac2397aa4202c497136304
SHA1 98c30524c09643421246c0381c3957bcc6982e89
SHA512 82cc24a49b18ab98a2d71095d24fa66bcc7442dcb82ae77258cb9c4e216bc37093d98db53732a7ef50437690c3f64f987b66e3afbb9cad5292e781318ae52f2e
SSDEEP 768:CUFvuHNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtDDHgZoc2jHgZVFSUYsx:WNb8hqODTrHRZ3aWv3UfSB1fL8D+JB
TLSH
T1CF137726D8544E6740B6BBB6E8794681F635433F2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Network/RMM.Plugin.Network.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ae0035a8204d59cb84bfb0b6634621525b29ad60ef087cfd9f9ef432e5c119fc
MD5 2b456d5f4b235e508c6d2f2db1eb0d4c
SHA1 7d283472a07542833d4eba6a14496b8849f37833
SHA512 e26c2a303f07dc30cb35c979a596e037fc15a18ed990ae0fe09a5808e925db07a4d176207eb1942f49c9b931fb715507f02df2965f0b895eccd831b7055153b9
SSDEEP 384:AxHXVfojzhr26HsWOHlLf2KmX0Xv83Z6yy8RbmL4nNyOe:AxHtyzFs3b2Kj8sy5AL5
TLSH
T151827DA7C6A40503FD7E8E34F4D5665399F0B3822DD2C9E7718881091E423922EEF3AD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

1b:22:69:55:05:b0:8f:fe:3a:55:82:e8:71:01:6f:f6:dd:5a:8e:a6:8f:be:3d:33:d0:87:a3:7b:39:61:36:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Network/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Network/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Network/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.PerformanceCounters.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c532608a729de882e105f03a05b5b7d1f71d67e156d3bddbaafa3371c0307b56
MD5 311d68066e292ad839b5777f8aa00f9d
SHA1 f761c48a29ae33166843d548679eae0e0e55b170
SHA512 af24a00fdb7b1d4088e6b58873c1631e3caf2eb486258da19f4f697dde2c2abd0f4ec596b7978565fa4dc950a01eb7ab4dd49812590f46f56e0ea97348d29455
SSDEEP 768:hwkObRTlZPumbU17Lq5iceCJ9km5fBd+BYBYSvEjhFSAjHq/xNtJ2GkzT:6kObRxZPumbU17La5/1N3EjhSAGkX
TLSH
T12F139721D3BD460EE5AF9B7EB17081310D3AA6493E21D9FE16B0700B54A7FB74821F66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

48150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\PerformanceCounters\obj\Release\net8.0\RMM.Plugins.Extensions.PerformanceCounters.pdb

Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Network/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Network/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Network/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Network/RMM.Plugins.Shared.Network.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0bc8e91da88a770de5aaab31a75eb51ef7756c1bb82fbd847a3bcd86a1189b46
MD5 6d8993686f4510f54ecb8149c57b7f8e
SHA1 efa8e210ed5bd1e45dba35544306a4a0be399e8e
SHA512 adf1f9a228aa5a6623a7fb85284cab0274434448aacec2857acbf2321293aa04e3c4acea6f8b22fa61105a52480d8b1aa7645340a8cf049b00ddd32d65d75ec9
SSDEEP 96:yTATBEmlhM+L7i+GQuF5nIHgZiwBGdBGwKmL4dkLeuq:yTATr3M+L7z5mnwgZiwBGdBxZBi
TLSH
T168E1B616E7E4423BF97F063A68F3574606F5EB119E93CBEF4594001B6C237624932BA4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Network/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Network/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugin.PowerShellTerminal.deps.json

SHA256 cd3c5f891b2d5a64a130c41c5ee1b8b6bb71f885d562d9b33bad1a976f3a9799
MD5 b243609b9e2d1dafcb25f73eda3ad999
SHA1 f8d60ca85b0e7f73c02645d75e2fd3dea0006d7c
SHA512 28654b07912b52f81eeb23f4657896485f786502b419840f47ac88fd4ac0ef372de34fd7fd8388be7e75b0cfebe1c147c9e024057ce16358ce068f5e47a20299
SSDEEP 768:CUAvFYNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVF5jRZtuSUYsh:vNb8hqODTrHRZ3aWv3UfTtgfCuD+7o
TLSH
T1B0137726D8544E6740B6BBB6E8794681F635433F2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugin.PowerShellTerminal.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 01c06a527e3b166372eb2c7cb63024df3c58f073020034d95bd5f8f163a8b3ff
MD5 ef2826c5936cfd578d0f820c64b92b26
SHA1 e9e6090cefc1e0de83e342e7a6d466a2ef940966
SHA512 0799cce00d98163595dd714b4a46eb3dced1e3704e9371c4077cc98267b5a71c2883df9cb3458eec00869c1c3f71b26d6dddb35f38c3319cde35e32d887ffe61
SSDEEP 384:/ZPGwfJUVfCjNPxhSWWOHlLf2KmX0Xv83za8y8RbmL4nNy9a:/ZPdOoPhl3b2Kj8DX5ALm
TLSH
T1EF826C6AC7F80413ED6F8F38B8D916439AB1FB424DC1C6D7715880005F467922EEA36A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

34:39:aa:39:6c:1e:4d:a8:2e:8a:27:a7:c6:c7:9d:57:43:9b:ed:b4:d4:f5:73:90:4d:9d:aa:17:2a:a3:8b:d7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.ScriptLauncher.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d6f0f2a00c06aa3c30932b014e237d5a9145f34277f0a82f85a2b41abc838274
MD5 a7316fb24220a7096781b3330192f79f
SHA1 867cb91e108d97094763a2274c954f15e89abd04
SHA512 fe90915152c71418f5906b6f8b34422fe7884ca189efab698aedee97fd79b31178d5aa841b90b15f0b0ac11d9559c55cfec375e2a69f4e8c0da5173140f3a872
SSDEEP 384:aTT28zi1fPdeNi6Z+u8LQFiR4N4+B8kHDLnvxwjq+0WMEuynG+b4SdlcktE2Tunc:u28G1f0foR6Z7vyDnG+AnDib
TLSH
T1EFE219403BECC213E8BFCB7E5DB2C24845F1B6576512E39D1DACB8CA58B67490940BA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

38322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ScriptLauncher\obj\Release\net8.0\RMM.Plugins.Extensions.ScriptLauncher.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.PowerShellTerminal/RMM.Plugins.Shared.PowerShellTerminal.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dee59bff9cd0702281596f6e6208d854ac1d4fffad4fa1e21caa4412acf8aad4
MD5 75dbb6da6ef0052bf17815e9c077dbd2
SHA1 6d5b29c84e0d5f142f7fd5afc2c64db1f575578d
SHA512 34d6512af80444369e2eb5e48e2eaa9509a92556fdb363e2f2de16cc9c165720816f6433abc0ab232cd2194835253f79cd67114687b39098a0fa454038c92cd8
SSDEEP 768:Z/1r9T7EXj7d9XxNxWKmSGyrVfuuTBKQXTbgWeK+HaxX:ZB9Tu7d3+KmDCVfnvjbgWyHW
TLSH
T164F20A02BF498326C9AC453E98EF121143F54F1B9531DB572EFC44A86B83BCD6AC92D9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

39982

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.PowerShellTerminal/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.PowerShellTerminal/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Printer/RMM.Plugin.Printer.deps.json

SHA256 bcf771502b4b1eecdc4d3f816b6095eb0ccc517e167bd18929ca85bc6155f7a6
MD5 611bb875971c5fd3d95b09d471827d1e
SHA1 aabf106443bb0b6006c2891f18481de0dbc09591
SHA512 d830fd9904ff8088189efcbc4bc44d0a4a64e7fcbfa39790d4513ec51272d72f28ace69aaf1132eeaa75da1aea8f4e7abec66f3bb53dba04ab14d3dbc4860052
SSDEEP 768:CU7vMxNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFSUYsZUvUZ7H:0Nb8hqODTrHRZ3aWv3UfT1fT7D+Uz
TLSH
T1EC137825D8544E6740B6BBB2E8794681F636433F2104694FBCFC245C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Printer/RMM.Plugin.Printer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3d1928c61b53428f8fff0bb7d0c02ce1fb4f8c55d9988b7736b69c3d5dc3e336
MD5 2b0801bd1f461f53159396aeea27d8de
SHA1 fbc759ddbac89c23260e057b46980162031d89fc
SHA512 5c2521712a3c3223879030e72d26d33da343bc7424071e50154a1186ecb72ce1938dd114f07ff68e98d0b97389b2a3bbbe1a40356ac21f38e75f3dad3580faa3
SSDEEP 384:85QYmfMjXri6H0WOHlLf2KmX0Xv8U1dy8RbmL4nNyog:85QLmz03b2Kj8A5AL9
TLSH
T1CE827CA7C6E80913ED2F9F75B4C526839AB177821DD1C697715CC0050F923D22EDB3A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

5d:ad:83:1e:2d:75:24:95:aa:24:90:13:1f:0c:2f:5d:b8:63:17:67:c7:a0:eb:df:06:81:8c:85:3f:82:90:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Printer/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Printer/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Printer/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Printer/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Printer/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Printer/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Printer/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Printer/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Printer/RMM.Plugins.Shared.Printer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ae5f0b38f602f4f07ee642601fb7d07d51b24e4e01b803bc83e189cfadefae17
MD5 5bf15081cac1de0b65d2adfd328dcc94
SHA1 cdb3116f07c3cb1da98e47ca6225227c32c51394
SHA512 f7f4a171521fab333367283b178ddee52258cb3c3dee0bc728960c525fde3f7b4e21c0bbf781c37b24569a4463c8bdfbda7bbb1d5ecb422d28c37bb0b2135eb4
SSDEEP 384:qnWEpEL/t0TgFZ3mN5KzDji1WsRt2PU0pLE2:qbmLF00FZ3mbAWWCmUELN
TLSH
T1F8729417A7486122CAACCB380297E51183E24F6702F2C76F297D1C690A177FCB9AD7D1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

22782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Printer/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Printer/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugin.Registry.deps.json

SHA256 b641f00c2e5651d39421bf0cd0bfc897e3afa84b6b8e579c10d63af811104325
MD5 20df94e650c0834aa1d1c96a4dffbdc4
SHA1 fab36f04f0c5758d6cecf0f3c8f770d3159d83fc
SHA512 8ce0c39683fc2584d403a1ed521165c42bc4c90c8d46b8c164f6e260463582a455d3f208060479a0a8b00fa03cf63cb982e5a4bf7c88428dc1fab70938626790
SSDEEP 768:CU2vryNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFUZt7SUYsZUm:RNb8hqODTrHRZ3aWv3UfT8TfT+D+MC
TLSH
T1A4137725D8544E7740B6BBB6E8794681F636433B2104694FBCFC205C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Registry/RMM.Plugin.Registry.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f8491bbcdb72876ba855724634f4d8bd19031f1297fc2ca41ef4a66ae07b3fd5
MD5 f6662aa77e1e27befbb8951630f86033
SHA1 81200a785d7a73bc2577ede299713d283ad061ad
SHA512 0b453770db7f75018d10dcc8ad05d87a204c4052046cc68df08f9a372d566caba4acd27e7b271011723b74d5a967b9f0c46e69b21e78c6804172dac2afdf1aec
SSDEEP 384:FOvCq8GVfNcj+ru/vKpWOHlLf2KmX0Xv88gyy8RbmL4nNyjG7mD:FOvGuNW1Sp3b2Kj88r5ALB
TLSH
T12C828D97CA980513FEAE9F74B4C81983AAF1B7825ED1E5C7704881055F423D22AEB378
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

3e:ed:b1:e3:a0:f0:7d:45:2a:7e:9d:e2:31:12:c3:24:c3:12:39:d1:09:82:46:7a:ae:2c:f0:3f:0e:9d:90:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Registry/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Registry/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.RegistryExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 59b3e324425760d3a3522187548abb297ff674a40c73ce07f052d63c6179df26
MD5 73c7b832841a842426936a306047034b
SHA1 c1b0bf1fddfdeade32ed5e0f9e21ad0d1dca69c5
SHA512 e034f9994fefdda7c3fe7aa6607ac86d96b8b0511f9afd13f2677d78c8eca4316de68c37e868983a65f2684cd0f2b9611420c653ef90ddacdaf56fcfa206b377
SSDEEP 384:BspOniPY4ewAUIYjPpVh5MLTEumQ6UU0d:BsBY4zN9jzMhpjd
TLSH
T104721B06875C836FCEFD0A7CB4E2025843F6C954B812E7658DDCF0E269637E29B016B9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

21814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RegistryExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.RegistryExplorer.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Registry/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Registry/RMM.Plugins.Shared.Registry.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 587b852614e987634d56f2c705ce7c7964d2df80a6f66b0c3f99f26059167e4f
MD5 8c53405ed14e2b95abb63f3e44c70a99
SHA1 2c8c26a90822b64e57f0fcef5093fcd3b54c050f
SHA512 672eb3d598b7d1aa2d58d3e82c0822281ed235848586038de74f862204fb192d391a5ab5b49f46912a0f192beb9b8c1492283e51d85555791b3032efbae85287
SSDEEP 96:ooTdVfkVSbChAc9vjaVBLN0/zfro6sMUzK9qEe52gZiwBesGiB7c01b6RDsGru4t:zNChA4vMBLNqVqB2gZiwBRGiB7ZM/
TLSH
T1EE12B725AFA4C233C9BE0EBE1863492081F76F015581DFCF9DD612F879133B549262AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Registry/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Registry/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugin.Runtime.deps.json

SHA256 7edd07395144dced9cf4e15cd6d0e1bb3829831605701525d12735c26e418708
MD5 82e78bdd79031f50acbb2c833a6a3377
SHA1 ecbfc8ad1ac8b2b41b233148d1a72704e8b02715
SHA512 7585339681b3a351d194edcb3c0b32e542440b9ce35c617f246a2db664d4e8c050f36992d3dcbf8cb44702fee9218a2c3cd470c8864094b76a549feb0d1bae8a
SSDEEP 768:CUjv0JNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlGcgZej8ZtD2jHgZVFoZtHSe:UNb8hqODTrHRZ3aWv3UuLTQjfpND+q/
TLSH
T11B138826D8544E6740B6BBB6E8794681F635433F2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Runtime/RMM.Plugin.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 eb2dfe2cc3f6af0bffa5af4eb7bbb2f66387a590ca118e9517179c1a163c9264
MD5 160ec9c946f9804bc962893a826c9516
SHA1 319dae68f869b87a2ead94d3f09b284df1308153
SHA512 893ab8356c03bf99bf6aef83ea031279f1c9abbc8c2c3824190d7ea50c4b3d1ae0bdd4117589aa396cf9455588dd918923d0a02a24d712e0a4d771a4ba4177e6
SSDEEP 384:+QelS1X07ColKxIllMBmn6HkL2WOHlLf2KmX0Xv8xN8oFy8RbmL4nNyi/9v8:+dSeBlWka3b2Kj80M5ALO90
TLSH
T15CA26E274F8C0623DDAE8E71B8D949835BF0E74608A1DA96216DD0524F837422FEA3F5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

e7:9c:5c:a4:85:0f:7d:92:91:8f:c5:38:38:6a:9b:39:53:10:8d:5b:3a:cf:3f:a6:75:6d:40:0f:3c:7b:8e:de

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

17102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Runtime/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.MemoryExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6a7e9c9c98bfa691e5bd6f8c3d652c5f216cdf978d55b1cb010a97fc144081f2
MD5 d2c4fba76457c9642478d096298a4353
SHA1 687c5b448cc4247440d08678d4b6882b61fb7823
SHA512 42b0b5d65660ced9c33dff12dd90822c0ac4edcdaa1341b5c72798f1ae0f78bd5151c14e4e5f418bbf95e1d367d37c718dd6d368ae841f0b8113dc0ff03ac7b0
SSDEEP 96:y32kng3HHPGpt83ypmKxc5IY7FEL7MDcr1Ic8RW79/ZLamShiVzPc:sg3UbrMIZP8YTR
TLSH
T10BF1B602DBE9421BDCEF0735F87653A25279FB21EA63DF9E69D800551C223A91231B72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\MemoryExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.MemoryExplorer.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.ProcessesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e43a1835321092997c2d6c69a9a38b3bb44b4891e01c64de75610164b1c0c9bc
MD5 cfa1016218369508abc647ad7e0829ab
SHA1 a0a9b1c300022402d8be3bdf4999bbac3c0b8542
SHA512 fb8ae4c496000c8e69d63bf190f3f2e5df434950479ceba4a8109075fb99f32548a65b5991a045f7e87d3a12a35306b91f0d7a4379f62dc8c467f7e8155bd129
SSDEEP 192:oZG8uxl0FS+9IImPLMeysfcQk2KL49krTQex35GLp:o0Zl0N9kPKEvkhM9kfQA35GLp
TLSH
T12612D8C1DBDD8276E8FE0F36ACF702424676A6005E22977F54C941424CB163B9771F61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ProcessesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessesExplorer.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Runtime/RMM.Plugins.Shared.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 804969421296d499a094bd80fede5fa0b31202aa2cef9f2bd5cccbcebe33ff6a
MD5 0079887d8a86c3144d18f5ac2cc1e181
SHA1 22d0bc5e2499da2cc18f5793bbcdbb512be2da6d
SHA512 7ab9e65fd0a148fd00e8c4d09d44400323aefe83f4a9bee0d79a4e5dbda1973b2b978c73aa73339345c46199d610b112ca3cecb500237c93110fffa7669f5863
SSDEEP 768:kzgWOKhPb6Iq7yHjg+VVrGvj8AcCGXEf1HS:MgWXb6Iq/KrOqUf1HS
TLSH
T10AC2FA04575CC23DCAEC0A7DB4670A5606F1CB863526FB360EF8A0D65E97F9B24912B2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

32142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Runtime/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Runtime/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Service/RMM.Plugin.Service.deps.json

SHA256 d62f174c686906fdbf2d65c50b8dcd24c5007c948de80c27fae0b23cc4c227df
MD5 b887b78a0effb69c0c35c2b73a73b4a7
SHA1 e11225b02c9b3e058a8d7cef448486daad0c6e36
SHA512 bdd49a1854e9292e532260b4cea6f7fcd75a508c65d3e2346a3bb881a6df4538d47c0e5c62cf0e5d768cd76e798cc905d1175f7f7cda79b66263974d684ec179
SSDEEP 768:CUCvfuNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFVgZtiSUYsZI:RNb8hqODTrHRZ3aWv3UfT20fFcD+/S
TLSH
T123137726D8544E7740B6BBB6E8794681F635433B2104694FBCFC244C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Service/RMM.Plugin.Service.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3ceaafaf2e849536062a488a516d0cc5963c3d3e8c435bca8856ed82bfe0e69e
MD5 bdff7ff618cbd480a898b0dbaba9dea0
SHA1 e051d6027b7205678288d01aae64143399d924ab
SHA512 57dcc7552e10ef9098a7811a9db221cdf081c63ad5beb4463bf9aae004e5fd43740857209d21e64ecb7b5d80c32c1488261add23d0a575dcc30cc8129a9468ac
SSDEEP 384:n5YU2vmfuj+rs6X3cWOHlLf2KmX0Xv8o16y8RbmL4nNyrZP:n5f2ok83c3b2Kj8c65ALx9
TLSH
T1CD827CA6C2A80817EDAE5F34F8D516835EB0B7C21DD2C693618CC1155F423D62EEE3A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

bd:9f:d6:f1:2d:de:30:e2:7c:52:7c:bd:68:ec:a6:11:18:ad:3a:ff:a8:c9:ce:81:cf:9d:c7:f0:19:2c:ef:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Service/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Service/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Service/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.ServicesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 914578e769efbeb0268805cd0862f530c513aa4a58db7aa6aca68e90eb6d8048
MD5 3a1bd6477d29b02da9932818c2d2b1e7
SHA1 b8d283e322ffbe08afa90b2e38378350b220dfa0
SHA512 a1659c13e16d58794e3ebe9ff90aeb8963adda1cdebc6e23bbdc15d724ae17ac2908ec7897947af823ce10839dd8986f8368173dd9077c0be48ffc0feda17d1d
SSDEEP 192:97D1zs4uNm2YVKhVLUbKkFabDvLCZ6aA8g1MgLpyyUWf:bspm2YVKhVLU2JbDvLCZ658g7LpyJWf
TLSH
T1C622D600FBE54369E5FE4E75A87307000173B9A5AA27EB5F0ED8A01D6CB27409A67B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ServicesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ServicesExplorer.pdb

Plugins/RMM.Plugin.Service/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Service/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Service/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Service/RMM.Plugins.Shared.Service.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 15b229c1d9cf9fef837eedb5b351da67a0d86e5a8966146429da2973199e12d1
MD5 d4f644df6b14ecb8ca10d41e76ae33e7
SHA1 bf1b4d40e628f6d7331b24362f39b7e03561834b
SHA512 5a99ad049125ca3c55ee6590ea5a362339708b9239e2ee42e997efdabdf79f6cca687039b31e2b68a92bb76f1cccefe3bae0f94f32850de0c9c025a7653d291c
SSDEEP 96:a/DW58vsdZYuRtymUtjzodlGP5egZiwB9wiByItxXDOrq:uDvsXUtjzWlUegZiwB9wiByITf
TLSH
T144F1C716EBD8423BECBF1B7964B3430143F5EB514DA7DBDF99E810526813A7911317A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Service/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Service/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Software/RMM.Plugin.Software.deps.json

SHA256 d922b1c9e6e03514276b5b47254a650bd4ee9d97b66eee1e47b31c4bcf99b8b9
MD5 f148e57993250c6cc2065238cab14636
SHA1 368299793f1ac898a58ea54762673fc6c2447d4a
SHA512 ed9335462ca3667c4b8d39f49c7cb41b176b03aa294883fae5f0274a1af0b456dd77542b9800cd98fbc5dd85c21a1cd854bf1e8d13ee6a2fbb78a7c5f1b1fb7b
SSDEEP 768:CU0v5cNb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFSUYsZUvUZ7z:fNb8hqODTrHRZ3aWv3UfT1fpuD+UI
TLSH
T1D0137725D8544E6740B6BBB2E8794681F636433F2104694FBCFC245C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Software/RMM.Plugin.Software.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bfe9880a61d53f8970e1dd71d017ad5fe8d8cc5992cbba0ec7defc7eb22497f9
MD5 68973bc2c3bd9099d92add7b6cd1fd37
SHA1 3bc021900570bd523f5ccaf1b21edcebb6e66f21
SHA512 3963dffd1c61fba58f2426401fa80d3abe29de6c62bbb7230e083e1b1b431710f61fb8c2482a4001487342f3b3a6adf2c1a044f8a36735a48f7f094fff66398c
SSDEEP 768:5mvCjy5EGiBL1fnoRldJzBHlTqI8xEC28Ue1FDKojdf6D3b2Kj8VUj5ALT:1UoLdYJNhQGLIFDKoxf6D3qK4N
TLSH
T19F435B89730C9623DEAF4FBCA41545829BB2632B1521E3D62DCDC4E12EB3781699C3D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

d8:f3:9c:f4:2f:9e:31:8b:5d:ed:7c:4a:c3:90:c0:12:34:ef:e8:96:d1:d8:fb:5f:79:c6:a2:5d:3e:7e:c5:d5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

52142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Software/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Software/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Software/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Software/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Software/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Software/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Software/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Software/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Software/RMM.Plugins.Shared.Software.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e56ebb02db6fdc49e330d9e4017629afc1c402e9e70ff11319573009b38b8029
MD5 1d4b86321f69f998e730e597210adf43
SHA1 7593e617bf0ed68629c6ff2aee4e360d03bc27e5
SHA512 0aa7a3c650c96c44190b50be46a193b9f395170537df79ae788e13a67036bf5614ac679f972e73ce01699340e654a0829f4e7fdc3e51c55392f65275218290d9
SSDEEP 1536:kpXCyqwjFmq0aJAjpP0EZ+K/itsFS4G436NFUFTiG:kpXjEkKuso4sNFSTH
TLSH
T18D934BB9B3488E62C5BE46FC907B449583F3891E8935FB871BED4CDA09063957C8C1DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

96382

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Software/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Software/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Summary/Interop.WUApiLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d24914bcfa157943feb32b034bb227be7fa32adea936adf8abce67bacef49fb
MD5 03b503d157262841db3adc45cd342429
SHA1 c85b9fd0b0141591d430f61431afc558bc193df7
SHA512 a66c585ca597574857de0a0e38d5ade772541907ab4f7a7c53cce77804b33f827a252957a8b5daa72ae0af30287a6c3f2f3e01df6aa4b8749523bed4bb6ab907
SSDEEP 1536:RAQRbACRIDLslRV26EFPbWs9akSAvx4ExO+6Oh:i6QLslRsPbWkakSY4+jh
TLSH
T1AE73E69B72DEC634D81547BF546B4B052BF0F2441236CF4749AE16AAEF832642A4B373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

84526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugin.Summary.deps.json

SHA256 68d7e77131ef92edbc9d16c7ed6b002d4507fffd220d07fb7a8821b66e3b7257
MD5 89bd21941b1b0c06501aea38fe718988
SHA1 8ce23b5c924335507f0f75e73ab57657b5f1f12c
SHA512 1b0869277951bf21470014f59a916c3471163cdc4a1ad5a600015a718bb2b20dc330a8e1a43dfe8811906d0615d59e9a7589fa88175679f043424150e03c410e
SSDEEP 1536:MNb8hqODTrHRZ3aWv3FCaaLSXQr5nKfri6G7HPTn/D+gS:MNb8hqODTrHRZ3aWv3gy1
TLSH
T142336716D8544EA740B5BFB6A8B94681F266033F5100694FB8FC205CCFB7FAA51A2F35
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Summary/RMM.Plugin.Summary.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8a1b964fbdd7b3e2d5f92a06a85d62da96934a6a321f239d87338bef02001b91
MD5 c135a1e8a0cbed8fa857038758ba2b1e
SHA1 9456b87a0217113de2d65cd7858af71a615db643
SHA512 7a513106c7c114831fccd83175feefc5d37f90ecfb0d2eb9759fbea854905e0d76b02d61131652aec9aa78061b8be3872e21323342f66e7c7428289a6f7d3379
SSDEEP 384:l5JT4y+Ixrlfxif4+vFJyrC6nlWOHlLf2KmX0Xv8dkpfy8RbmL4nNycJ:lHEDIW59Ql3b2Kj8mV5ALg
TLSH
T13E927D56C7680903EE6F5F79B4C909839DF5A70369D2CAD331AD80055E433923ADB3A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

12:a6:57:3b:78:41:8f:30:ca:3e:4d:23:c2:0b:71:6d:e0:fc:a2:3f:5f:c1:a5:b8:a9:d3:f2:1b:8e:c5:a8:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

15774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.AlertCommon.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 40e74018e3b02820bf2f4f3645a6c62d10b52c5d36eb6c5658065f4ce212d0ed
MD5 f428873eadbc0d01edef33c2d0779f98
SHA1 9d185189f22c817830177134cd7adb527ddb44c0
SHA512 90bd234a0f1626b6b95c99aba4e158cc416aac7a160719616499e14f381e61b18fc51d775637d1a022d5b9ddffc48bba78fe18f5260f84d6c27f0590f60af032
SSDEEP 768:7p1JTkcSfvTlDze82AtaYFAgb9TM6SLAcLz:Fovp/24bAgZmLp
TLSH
T17B033B5063F9CB3BD6AE0B3D7434016106F1974A7912EB5ACECA70DE1E57B8096A06F3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

45978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\AlertBase\AlertBase\obj\Release\net8.0\RMM.Plugins.AlertCommon.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.Location.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 480f25342f859e797ecf757cd5c8d16972df4b015a2d6bbb8f174101bfe4822c
MD5 971e7daf70d4e575ec812dfa926ee932
SHA1 7cc120db96c4dcd734568559b1366a6bd9cb3636
SHA512 4b54d7a7c2e3d8505516578332597bb0077d9397d6f85d44378d24ae29370e0aaa6e7eaa11308c9eed4a61cb36740a1dab3776cdad46ced6d2d91b170f7956d7
SSDEEP 96:tp6hOc7DeGv9k4RkXVc+OiegfLEH1Y4GBdVvMzEKCErZLllp:ahD3tRScSuxSdtKJJ
TLSH
T155F1B847EBB84316D9FE4F36F163830142B6AA39E912CB6E4588641F6D237001AE2F75
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\Location\obj\Release\net8.0\RMM.Plugins.Extensions.Location.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.MemoryExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6a7e9c9c98bfa691e5bd6f8c3d652c5f216cdf978d55b1cb010a97fc144081f2
MD5 d2c4fba76457c9642478d096298a4353
SHA1 687c5b448cc4247440d08678d4b6882b61fb7823
SHA512 42b0b5d65660ced9c33dff12dd90822c0ac4edcdaa1341b5c72798f1ae0f78bd5151c14e4e5f418bbf95e1d367d37c718dd6d368ae841f0b8113dc0ff03ac7b0
SSDEEP 96:y32kng3HHPGpt83ypmKxc5IY7FEL7MDcr1Ic8RW79/ZLamShiVzPc:sg3UbrMIZP8YTR
TLSH
T10BF1B602DBE9421BDCEF0735F87653A25279FB21EA63DF9E69D800551C223A91231B72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\MemoryExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.MemoryExplorer.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.PerformanceCounters.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c532608a729de882e105f03a05b5b7d1f71d67e156d3bddbaafa3371c0307b56
MD5 311d68066e292ad839b5777f8aa00f9d
SHA1 f761c48a29ae33166843d548679eae0e0e55b170
SHA512 af24a00fdb7b1d4088e6b58873c1631e3caf2eb486258da19f4f697dde2c2abd0f4ec596b7978565fa4dc950a01eb7ab4dd49812590f46f56e0ea97348d29455
SSDEEP 768:hwkObRTlZPumbU17Lq5iceCJ9km5fBd+BYBYSvEjhFSAjHq/xNtJ2GkzT:6kObRxZPumbU17La5/1N3EjhSAGkX
TLSH
T12F139721D3BD460EE5AF9B7EB17081310D3AA6493E21D9FE16B0700B54A7FB74821F66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

48150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\PerformanceCounters\obj\Release\net8.0\RMM.Plugins.Extensions.PerformanceCounters.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.PostAction.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b61e94c1a3b6427507e0278badb2454d9d71c0035002079d1609df60fa9922f0
MD5 35d255f6e38708843fd4cb3f0fb3eb81
SHA1 77e1049c644025ec15dc828021f72573d12d0f16
SHA512 7cddf815d874574deeb6e8cf2b6dc69e6396de139931792590adafb3d8d431cb7ca5ffaca5358e1f58f31b4dbb83098c074c5dce1d659c04fec1b1683c8c8f21
SSDEEP 192:tA8FzNmyEwcw8QOhEs0iasmpseuByE0/E8Vzp6pOvwABMRqapt/3M:tA8FzNmyEwcw8QOKs0ngFa+pOvwABzaM
TLSH
T15432D702BBE48315D2BE6F3E61B642401A71BB585932EB2E5ED910CF4C23B455E31F6A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\PostAction\obj\Release\net8.0\RMM.Plugins.Extensions.PostAction.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ProcessesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e43a1835321092997c2d6c69a9a38b3bb44b4891e01c64de75610164b1c0c9bc
MD5 cfa1016218369508abc647ad7e0829ab
SHA1 a0a9b1c300022402d8be3bdf4999bbac3c0b8542
SHA512 fb8ae4c496000c8e69d63bf190f3f2e5df434950479ceba4a8109075fb99f32548a65b5991a045f7e87d3a12a35306b91f0d7a4379f62dc8c467f7e8155bd129
SSDEEP 192:oZG8uxl0FS+9IImPLMeysfcQk2KL49krTQex35GLp:o0Zl0N9kPKEvkhM9kfQA35GLp
TLSH
T12612D8C1DBDD8276E8FE0F36ACF702424676A6005E22977F54C941424CB163B9771F61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ProcessesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessesExplorer.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ScriptLauncher.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d6f0f2a00c06aa3c30932b014e237d5a9145f34277f0a82f85a2b41abc838274
MD5 a7316fb24220a7096781b3330192f79f
SHA1 867cb91e108d97094763a2274c954f15e89abd04
SHA512 fe90915152c71418f5906b6f8b34422fe7884ca189efab698aedee97fd79b31178d5aa841b90b15f0b0ac11d9559c55cfec375e2a69f4e8c0da5173140f3a872
SSDEEP 384:aTT28zi1fPdeNi6Z+u8LQFiR4N4+B8kHDLnvxwjq+0WMEuynG+b4SdlcktE2Tunc:u28G1f0foR6Z7vyDnG+AnDib
TLSH
T1EFE219403BECC213E8BFCB7E5DB2C24845F1B6576512E39D1DACB8CA58B67490940BA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

38322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ScriptLauncher\obj\Release\net8.0\RMM.Plugins.Extensions.ScriptLauncher.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.ServicesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 914578e769efbeb0268805cd0862f530c513aa4a58db7aa6aca68e90eb6d8048
MD5 3a1bd6477d29b02da9932818c2d2b1e7
SHA1 b8d283e322ffbe08afa90b2e38378350b220dfa0
SHA512 a1659c13e16d58794e3ebe9ff90aeb8963adda1cdebc6e23bbdc15d724ae17ac2908ec7897947af823ce10839dd8986f8368173dd9077c0be48ffc0feda17d1d
SSDEEP 192:97D1zs4uNm2YVKhVLUbKkFabDvLCZ6aA8g1MgLpyyUWf:bspm2YVKhVLU2JbDvLCZ658g7LpyJWf
TLSH
T1C622D600FBE54369E5FE4E75A87307000173B9A5AA27EB5F0ED8A01D6CB27409A67B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ServicesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ServicesExplorer.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.UpdatesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0d7d96e79d009c6c380409f5145c5ad8bc647c454eb8389a9b88e233765cd1a7
MD5 7becb49a993d545ea69a3409caa67e59
SHA1 b8e284776a6158440b60c14dba31409e7cf44819
SHA512 342a6c3c45974068b90918b4b46354cb3c73379501528f7d44dd0ed174dbbf76c0647ed64cbfd751d42629381febe370ed87040c550aaa8da7053978d8e2feda
SSDEEP 1536:v5oKCv3vUJ7rm0OOPDNaxg9lG6rk4e8hadAyilBYPr8FflFQtBdTE/3Zoa:hIv3vKPO4lG6ndyiMrklFQtBdTE/h
TLSH
T12DB3E7192BF88329FAFF3F38A4F405110A7679C7FA32D65C0A85549E1962B85C931B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

118630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\UpdatesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.UpdatesExplorer.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.WebHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ac5d41fb93f347ce85b586d2158c48c7163ec2952b40efb6842ef6cf2aa47c85
MD5 4df9ded244ce89c3d8c6d278dc7cb6d5
SHA1 cba133e5f0e47d5657fd9ec7fea9da0cba85d385
SHA512 dcc5edb254065d95077189629837c0c619586ae084034aebeb4423ccd31004e2685f7bdcab61e11e15b7acfb73c7b7ff0561f1fa3864393a688df473b328e908
SSDEEP 48:6hKowGnRWf6dlTfIWtnDZHDfAuAzCwSf/Tt9CA3KXUUCdsyWqwbZLP2voqeVqDl+:G0uTfFnDWPzed61CdsHZLcFA
TLSH
T102C17421A7D8422AECBE8A72FCF783515572FE01EF938B7F18841456AC212349922A75
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WebHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WebHelper.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Antivirus.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9a35ca8015f15a9f5f1925331730d3251d1e5f76f4d9664d747f0abc96239539
MD5 f3bcb492cb5d643d51555568c66facd7
SHA1 5ec6dc4b9178a7ad14c6acb31934bbc53c421886
SHA512 ee8546a9ff2698568efbaaf1f72da2d9d62b068b29f0ad41ad23af35a79ec5852b83eddd23eb5cf8ea910bceb8aec32f711ffcbdef17cd36175acb1832e0169c
SSDEEP 1536:8YsLTgQMNBjBywWHCE62CJi5NaFrDaehWZm+d53MQj/0CKH:cvgQMNBjBDWHN6pyNatDlYAy53Nj//a
TLSH
T160A37F3BE60F0DDDC4BC477D49160045F6A34B8F82A09E2B36B6508D1F7264A9B6739E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

103534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.EventLog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2502a4893fde3f4303f35a69aef418e04abd24e876404f41ea0e1424a0bde0de
MD5 70143b19b8d6ab55f1033738a89f4eff
SHA1 91c378bf83ecce2efbce7c7bfe11d27a28a8f91f
SHA512 c45fd0ddf5f8da28b25ccca1bd2ac487a3bf6ed0b4c9d3223c27c19fdada09e2641aba1aa538940a298a198d2a2e119af1f6ad702c00ece1b629e1cb0aa596a6
SSDEEP 384:QtIxYaFDsTR9sShzmJauMguGKme/RFa8At3/DJz2U:JxzwFUTKX/RUFf
TLSH
T18C923C07AB40D22EDAFD0378F4D3061993F04B071A21E7566FDC2C4AAE13BD95C8A6E5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

26014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Hardware.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 65125c8142174982f6b3d6ceb1ffd9b8d74b6b1938a48415bbe1380574e7c24c
MD5 68f9e6c03bff5f8162aab2b175eb2460
SHA1 5ca846a1be4016090158572acba9e5eded09169f
SHA512 3b2c6b007ad85978531b7a715b21e14101c5cc4b6db0278068c926c32d31130fdd123b10ff5a8b1bd33d34c10979a8cbc7fdbef6adca8449081140928526acb5
SSDEEP 96:k/Pfu5NmMP5pQ6V7pF1Ky+Ct3NaI7Q3hBwLoqVKpAOI0yupt:5VvQ6hpDNzt3gIyBwL4edZa
TLSH
T110F1D925F7E48631E47F0F369CB256851ABBF7D2C922C75E00AD11431C327026E71BA5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Plugins\RMM.Plugins.Shared\RMM.Plugins.Shared.Hardware\obj\Release\net8.0\RMM.Plugins.Shared.Hardware.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Hdd.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 222f9403616f258cbf8ad1b53483bd75b73768aefd60e6fd7e4cee1f0a712e24
MD5 0844637ba2f28c08064665194f87676d
SHA1 778670692a9d60266863292fa2fb8c77c83ccfe0
SHA512 37cd3a3463d19e1ad913f49518d46ced90e5f488c038776362b7277f8a10898f2569a8c7182d4dd6ed1187efd5b7b54d0a8c93315693c34fb9dbbac2d401e795
SSDEEP 384:afV0vZkBykiqq+PaHbTMo2pCWDOcX0JZES3j0Mfc3FCqjhVxip3:hvZkBeBTPqCyX0JlQMkgahVxi5
TLSH
T1A8C2D709B3ED6613FBFE7B796EF146580AB2FD9EA421D2AE0989109D4835700DC50B72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

32202

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Plugins\RMM.Plugins.Shared\RMM.Plugins.Shared.Hdd\obj\Release\net8.0\RMM.Plugins.Shared.Hdd.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Host.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b09d0d9d983c6116b3c5ad5fee9cc999a8766934757fbf938f5e65135fb81e63
MD5 8cb78655fb3d24a2918f79ed1ffa0f76
SHA1 b9898ded23b8991ba44d1580c3c8596f74560657
SHA512 9479a2c502159b8b5f86ff5afa093b24738faba118d2cae835fa6f808f996d482405b11c16fbc556d2a89fbb445b924f994b9bbc7646b4884f61ddc18ef5d3b8
SSDEEP 768:gNYBTzD6m7zIU8lRiEKf7E9Jyz4M2yZxAyOVbylyJYqN5oz2puHQ7aEMwG:gNY6vHeEGEincbylyr5DsyMwG
TLSH
T188533A02B7EC9706F1FEDB7D58B09C1A02B2B656A562DB4C0EDD24CD09A37809E10B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

67706

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Plugins\RMM.Plugins.Shared\RMM.Plugins.Shared.Host\obj\Release\net8.0\RMM.Plugins.Shared.Host.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Runtime.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 804969421296d499a094bd80fede5fa0b31202aa2cef9f2bd5cccbcebe33ff6a
MD5 0079887d8a86c3144d18f5ac2cc1e181
SHA1 22d0bc5e2499da2cc18f5793bbcdbb512be2da6d
SHA512 7ab9e65fd0a148fd00e8c4d09d44400323aefe83f4a9bee0d79a4e5dbda1973b2b978c73aa73339345c46199d610b112ca3cecb500237c93110fffa7669f5863
SSDEEP 768:kzgWOKhPb6Iq7yHjg+VVrGvj8AcCGXEf1HS:MgWXb6Iq/KrOqUf1HS
TLSH
T10AC2FA04575CC23DCAEC0A7DB4670A5606F1CB863526FB360EF8A0D65E97F9B24912B2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

32142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Software.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a4d03bdb04c3d45ad6060e06972ddd65017a809c62ac344b8678256cb8c5c933
MD5 322b9e6e3a7ee5e93f27daee7f238cc6
SHA1 916adedf4e10a5633db3c8ae98961f959ceee924
SHA512 0c8b959fe87de3837d0adc3d9061a3145b6a893a876d50fc88c1af81bc2465a36f77ddd925d6a23f3e0a8a2c4bbd67d25f3628e81c3ca7aa52a53e56715fbca5
SSDEEP 1536:Q4tXre90QSxXTS2HuW/gAug/nEtXGasc0tVdZDvqb5xqhAc:Q4tXVQSxHuW/PHERGLVjDvAxqj
TLSH
T140A3C31173E88766F6FB2B7CB8B445650B76BD9AA935EB8C0E4840DD19327818D70B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

103538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Plugins\RMM.Plugins.Shared\RMM.Plugins.Shared.Software\obj\Release\net8.0\RMM.Plugins.Shared.Software.pdb

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.Summary.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 32acfd7b243996aebcd545343325a87df2cf188c048b0d294f03d47fbed134e5
MD5 00b32e836637a540d70e4437ebd4d690
SHA1 9e7174f79f725d0bfbacfe820ab8690930cd4119
SHA512 5d52f53f0b7fffa82a67adf9bb140819f670b2b21afc052152262f31c514429eb4a52ba651c03af35b5b0002a3888b4b63e669394f57594b1bb05258c5bd6dbd
SSDEEP 1536:Ygyo1J/KfK6y78WtiOdfltx5d+vH4c9CmQpN0IIQD:Ygyo1kC7NXdfnEH4c9CmQpV
TLSH
T1A163082E7B08CF39CAFE053CA012509151F1AB47A562EB575ED90CCC5B137CAEE4A1E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/RMM.Plugins.Shared.WU.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 356e1a61e8342e52e841e1fafd6bb7402740988b5bfce823aa6eb5ae666dda8b
MD5 5a4d30c3c050fcb04339800c8498f3a0
SHA1 6604b1facd7db732fe8d2ad194f46ec10b0ed3a6
SHA512 78a75de9a15456ac3d58f9e66c79f8e461aa342c731f89fc542a69f1a3e0a9a9c5abe9de1ef776e1b03048ddc73c29481e735647282beff8d8965b5c4015df14
SSDEEP 192:fKitzWkx5O+B2+SV5TdAnfwygZbwB9dJiB+4uYUJP:jWTMYV5TyfVJ/4uY+P
TLSH
T1EC121906FB90C337C9BF1B3BBC678B4002B5AB423A97D7EF9CD84056AC2366515127A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Summary/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Summary/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Update/Interop.WUApiLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d24914bcfa157943feb32b034bb227be7fa32adea936adf8abce67bacef49fb
MD5 03b503d157262841db3adc45cd342429
SHA1 c85b9fd0b0141591d430f61431afc558bc193df7
SHA512 a66c585ca597574857de0a0e38d5ade772541907ab4f7a7c53cce77804b33f827a252957a8b5daa72ae0af30287a6c3f2f3e01df6aa4b8749523bed4bb6ab907
SSDEEP 1536:RAQRbACRIDLslRV26EFPbWs9akSAvx4ExO+6Oh:i6QLslRsPbWkakSY4+jh
TLSH
T1AE73E69B72DEC634D81547BF546B4B052BF0F2441236CF4749AE16AAEF832642A4B373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

84526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Update/RMM.Plugin.Update.deps.json

SHA256 4592f497a739454f72655da5676f2439b23e159c721e9ae25c03867f7900b97a
MD5 e562c8b06c505143f8d8bb5f08d84d49
SHA1 2be0c7e5a8537820a942544055ff9f8cd5f349be
SHA512 8970a5a95e851bc5a800285ecc0e5a1566cab31b3801b5a5382ebf840be77a8c70886df5d3d929cfbdab4c35088fa70df675ea2f12a9bd64601d2e1793c6db44
SSDEEP 768:CUwvwINb8hqODTrHuWLZCuaWv3mQvKsvhs2xvjKZlG8ZtD2jHgZVFVgZtilRGg8h:+Nb8hqODTrHRZ3aWv3UfT2nAf0wD+eU
TLSH
T114137726D8544E7740B6BBB6E8794681F675433F2104694FB8FC204C8F77EAA52A2F34
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Plugins/RMM.Plugin.Update/RMM.Plugin.Update.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 44c5dbf046c0d3ca7052717d78b88c0969aac1f9fd7dd91593ae0d48405a21f0
MD5 bb32f31b5455244204d7002e81194be5
SHA1 16b6a1d8346bc5b5d8f51e16637f88eedb7a100e
SHA512 a4a52cf70571b5281e2a0fcb89e539723ce6e2fa75aac4a6d8d0283be5a31388f7da47ef3cb1d230cd3ae7ecc740250da9f6c2115679f02998c6c1172fc825ee
SSDEEP 384:S0NsAp2NDBfajErNdrSWOHlLf2KmX0Xv8r2yy8RbmL4nNycUO:S0Nsj3worS3b2Kj875ALxO
TLSH
T114827DABCAA80823EE5E4F38B4D516C39AB0BB926CD1D693715DC0154F433922DDB379
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

4b:62:91:d8:90:9e:9d:0e:46:9f:1e:7e:f4:05:cd:67:b4:a4:23:91:32:e1:ce:a2:5e:63:6b:27:0b:bd:57:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13966

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Update/RMM.Plugins.Commands.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a31a24e8b408a8b96fac4ef62321430249259dd36674d69f8d98b68029913e2
MD5 e1fd11a2bb8a50a4e471ad7457605028
SHA1 ea64eb64faab0291bb46b2315f54f6dfbd48f044
SHA512 8e01eba482a22a7b953b3a9af2ecce18a73a4b36ab9ba15cc03454ec95c393d4510209a177eda7e4672ddf38fd1c7c219a929bb79428bb8f728be5c710e20579
SSDEEP 1536:3v8XgyGuRlHICrM+LZdbPHKg6KfMf6gkuS1x:/JyjbM+/HKg62MygkuS1x
TLSH
T135630B3EB3859D63C9FC077CF137443055E54B9A2232A70F1A7A2858C50368EADBD6E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

72926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Update/RMM.Plugins.CommonDefines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab03ecadea74bccf12386e20024c8b9793abc63c8b079c903eebba973bdb6bed
MD5 c52957cf4ba1e325734ff2add5a758c3
SHA1 908c3df46254b21b8cfac6ee9af0118bc93fad39
SHA512 bce1cab8641ba273ccc0dc13cb5637b0a9cd13fc88565bb1739fb5c7f81c285d138a4e39bfa962d8c2960f34c36c94b361ce121c5ae5e11a8318790829b2d0cc
SSDEEP 384:hUxr4vV9RNPoBmd3KRvsckfYA8ETwZGSDgaczApP6pVkTpE5hPABEIfZ:KFOgId6v33A07cEp5TpoP6
TLSH
T1FCB2E615F3ECC25DEBBE1AB868B692049671F71B9811DA4F4D9500DF0D236C89A12BF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

30438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Common\obj\Release\net8.0\RMM.Plugins.CommonDefines.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.DataProvider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17ba83c380017ec65f0d9176e03ecc77a14701ad31eeae66f53182a66217d487
MD5 4f0d523b5879663e4d7f35260a66f104
SHA1 027fa9e27db18ad1f5842f208074a4483af8befa
SHA512 5a4ebbbde0b344eb5f9a876e1103db0a8fedadbb99adcd9e5c10f48d3e13e360efa159c345061744ecb771eb883d106775ad6ac022a14c047c093088378e7f79
SSDEEP 1536:2oFGlfimaxuQAfF2ob9HUiQpJmavJd0VgXWAcXbZwrr:KlfpQAfF2w9HBchv5rcNwv
TLSH
T108932A36F344CA2BC69E4A3CF422444147F34A0B5465FF176B9D78E62A837187D8A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

101390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.NetworkMonitor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0e8725c1829a9f7b3eca1e0b1ed6a13260647b36ac5abcbef3e4bc909ea34a5
MD5 cbfdfa8a1ada09e7810efee49fab605b
SHA1 38f3b8d5b015dbc1b761b04c6438a2ee3f1ad610
SHA512 bd1bc9540a4b7dbadf3d82621438c0a0f9accd08b2a2235e620b6ce46357a5d3d4661714fcaa566aaf972dc9f74b12fcacda053bcdbd4746f56cb770daf2db36
SSDEEP 96:bAJ1UPhxqJWAofmv8EyNlFlZL4JKMNgzw0:bll+v8EUL
TLSH
T125C1941293E9426BE5FD4B72AEF753805676FA11BA53E7FF0C8802079C625A04A71B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\NetworkMonitor\obj\Release\net8.0\RMM.Plugins.Extensions.NetworkMonitor.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.ProcessAsyncExecutor.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7d0d6a22070ba2d4ab28a449f74a68ca5a0de159e74d51e18a450fdd3e4d2077
MD5 a238f786000cca470d87b15dd1bd8794
SHA1 2804f1d3d8acf104df6a3aa5e08bce092be77800
SHA512 696be0727c3da9796f1e75ab2305af6cb320039d176c373c8fd928a08eebd227dd89d24201c566629c7f3b5bcaa5d6117746099d1d880f43291376123b56bc8d
SSDEEP 192:vR3b9XoU8O4IuUy1Rw/h6WyCoQothg37EMxZcTpYWlK+5k555cDJ1EiLLq:vRrdBKIuUy1qpdKiLEgcTpVjDPEiLLq
TLSH
T124321A05EBAC8217D87F7FFEE6F646524AB2BA005E11D72E2C8C60D818927511870B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\RMM.Tools\obj\Release\net8.0\RMM.Plugins.Extensions.ProcessAsyncExecutor.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.ServicesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 914578e769efbeb0268805cd0862f530c513aa4a58db7aa6aca68e90eb6d8048
MD5 3a1bd6477d29b02da9932818c2d2b1e7
SHA1 b8d283e322ffbe08afa90b2e38378350b220dfa0
SHA512 a1659c13e16d58794e3ebe9ff90aeb8963adda1cdebc6e23bbdc15d724ae17ac2908ec7897947af823ce10839dd8986f8368173dd9077c0be48ffc0feda17d1d
SSDEEP 192:97D1zs4uNm2YVKhVLUbKkFabDvLCZ6aA8g1MgLpyyUWf:bspm2YVKhVLU2JbDvLCZ658g7LpyJWf
TLSH
T1C622D600FBE54369E5FE4E75A87307000173B9A5AA27EB5F0ED8A01D6CB27409A67B30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\ServicesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.ServicesExplorer.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.UpdatesExplorer.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0d7d96e79d009c6c380409f5145c5ad8bc647c454eb8389a9b88e233765cd1a7
MD5 7becb49a993d545ea69a3409caa67e59
SHA1 b8e284776a6158440b60c14dba31409e7cf44819
SHA512 342a6c3c45974068b90918b4b46354cb3c73379501528f7d44dd0ed174dbbf76c0647ed64cbfd751d42629381febe370ed87040c550aaa8da7053978d8e2feda
SSDEEP 1536:v5oKCv3vUJ7rm0OOPDNaxg9lG6rk4e8hadAyilBYPr8FflFQtBdTE/3Zoa:hIv3vKPO4lG6ndyiMrklFQtBdTE/h
TLSH
T12DB3E7192BF88329FAFF3F38A4F405110A7679C7FA32D65C0A85549E1962B85C931B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

118630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\UpdatesExplorer\obj\Release\net8.0\RMM.Plugins.Extensions.UpdatesExplorer.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.Extensions.WmiHelper.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cbc311f937bda9292a7fbc59e41469586a788c185702ad53dd1f53b990877e35
MD5 40151e3aa9fa4c039c91bcb4994efa77
SHA1 f52d119c17b315453414649b3a0502eb840e2fd9
SHA512 6d7a3bebb2175063d0429cbd8aef6335a3b1a5dcd633f2ca42b62be7def0b7413324cd3e7421b2d10c486509d5b142078330d17a1d24351d4c3dff39a706d366
SSDEEP 192:L8OzOxEgW9kAP6MzKsXy6gRUezMMUWMjn/AGfbl2jO+TN:LkxEgM7P6MzfXyBzMMUWMjnzMO+T
TLSH
T15932D821E74C4335C8FD4F7EACE2929052B1DAB5A8319F5F36DC40E3AC266241762776
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\Extensions\WmiHelper\obj\Release\net8.0\RMM.Plugins.Extensions.WmiHelper.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0937cad675225275766b9eea54f17537d7d6fea6a6e69cc35bf2816b70e7fae5
MD5 964ddce217d7102d21a0de0e3fcd3335
SHA1 8cab5031f7b5a495e690071dc7cba98456075e9f
SHA512 4e8df1cf5385302a9e93918edae2fa6c3fa4fa81c24de15f033efe636f071f3a11c5f327e607b92e43a1b7d04ab80b2b6684de9c6e71f8497625922a73449ddb
SSDEEP 192:Ai5+6ftR43DzBgZv1sOPC+PcfHQFYBTf6GIYqdODkF6H:Z4msDzBm1LqDWYBUjdODu6H
TLSH
T1AF22D8219A7CC3BEF5990B36B973039511FA93457211DE7E8B21F81F3E01B5B9221978
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

16486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\658e932c82c1ae40\src\RMM.Plugins.Models\obj\Release\netstandard2.0\RMM.Plugins.Models.pdb

Plugins/RMM.Plugin.Update/RMM.Plugins.Root.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ad3a68c5a070e684c6da819ccc95b3e297499d138e46ece91f83c1f6948aad05
MD5 5ff2eb45fb1481ecd764f84a7d828906
SHA1 bdacdeee2059dd0ea73cd88ed647a7505b765a54
SHA512 d46298997f3c9ecc1167a85577e926332ca92ce8b85e7c887980b8b938d547d82a315f574f2886c284b6c6ccf43b6c45b7b6f209ef07f76acc6eccc2a16d34c1
SSDEEP 384:rwyil+brbBTDVvYG2zpt6deaVvGl5AUrMHE1:rwyil+bvFDVMzCGlaUrKE1
TLSH
T13282E80A7BA4C61DEFED477DD4E3172097B1C70B3A32EB5BA58C04651E033C629892DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Update/RMM.Plugins.Shared.WU.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 356e1a61e8342e52e841e1fafd6bb7402740988b5bfce823aa6eb5ae666dda8b
MD5 5a4d30c3c050fcb04339800c8498f3a0
SHA1 6604b1facd7db732fe8d2ad194f46ec10b0ed3a6
SHA512 78a75de9a15456ac3d58f9e66c79f8e461aa342c731f89fc542a69f1a3e0a9a9c5abe9de1ef776e1b03048ddc73c29481e735647282beff8d8965b5c4015df14
SSDEEP 192:fKitzWkx5O+B2+SV5TdAnfwygZbwB9dJiB+4uYUJP:jWTMYV5TyfVJ/4uY+P
TLSH
T1EC121906FB90C337C9BF1B3BBC678B4002B5AB423A97D7EF9CD84056AC2366515127A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Plugins/RMM.Plugin.Update/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b5756c389708289c8b7439607a729878d7f35b2667dcff7b13c61b498f5e5ed
MD5 7c032a3caf701378c6dd116ea8abdf28
SHA1 55013b9d64877b6d32c663371a1d41767df4ca57
SHA512 0bf1a091fa382a5634f52fd9e0ee5f58ae76d985bb9597ec1faef6aa31a73e3e0f84ccd15b0f0255bf3c88effdab541b1353ed7fcf84b54758ac5ddc4c7709f1
SSDEEP 768:ShFdElflmlElHlEl3lEld1qObZTfiH7ODWnuK9z/z:SZObZJDWLz7
TLSH
T18EE2E912B3F8022AEDB74A70B6B487755A31B5E54D02C25E359AB01D199BFC0CF6273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a6:11:08:df:e6:cb:c7:5d:71:65:2a:4a:7d:cf:34:80:b1:a6:db:77:b0:03:83:57:4f:e6:be:3e:ad:64:ca:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

Plugins/RMM.Plugin.Update/runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1715d83ad69ccc4920b53fe2bbaf00095482f603795976bfe7d461f0d6cbb925
MD5 1a000b614bad9e066dac5fbdc030461d
SHA1 05e6075e2f63319b9c8445d759ebc0857da4ee8b
SHA512 04b2a6a65122a4ef5b8ef88d54742f46dd2336fb13f24e6dcf13d9a86bbd9571cd52c9b6e4f44bca47ddd062cadd7d20900924fcafe9e32a4decce63c0965ec5
SSDEEP 768:eyCo43wgxJ46O/tttEKvd9abMK/9cTW8DjTfu7OjyFCl2F9zr:R/1RNCM//PPiiQzr
TLSH
T157334C19B3E8033EEEAF0A31F97190095932B6CA5E03F77F5595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

cf:c0:e1:a4:83:a4:ba:18:26:20:11:6b:27:b2:13:86:b6:45:67:09:94:6b:c0:78:23:54:8f:34:b0:5c:b9:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 29, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

Polly.Extensions.Http.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d85928ecbae1a7ba8ef218bcbc38e731daa531456b5d18e160f49a5e3844025c
MD5 0bdc8421f135c085fb491b5c6fa4f93c
SHA1 91a8b45338e371d1a362c1cd27c1d75aa8802ca1
SHA512 d2ba77af3e3a9f583396865b6e7f7eda71ac37d35624ab5d4a28c18e0693d63dec295ecefc1204096debab7903f510ba32386273d50eb78c8e72e6fbcafb8b67
SSDEEP 96:ooevLQi6wBnAPHV0IbGVTm0bydVgBEA5xm4Exox:ooeT760naeU2KVeMg
TLSH
T11CC16261A7E80336DDFA9B71FDF31201C635FE95BD63DA2F1894824A4816A0489B1B36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\polly-extensions-http\src\Polly.Extensions.Http\obj\Release\netstandard2.0\Polly.Extensions.Http.pdb

Polly.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4fb8ff4f77b031f4ed51aadb0e494ef62c9f4f0a8382b972d34a9999707073dc
MD5 a896414741f6f7e09e757481d9dda5cf
SHA1 0f8dca12658906797d30ce4368756d52b8c6dd91
SHA512 6db6d3f5f880d978ee0d20029dc54aa4f6ec2b05a6502f6031660fbf965201351eba00af479ec2f2eb515a7d4a87b99dcc150ae6ba37ced96ef7c724fb61b392
SSDEEP 3072:LHpMGReTAE1EWGGK2GPbRFFjQs8biIyBsnu4NzoEgkcRHkyrJUqkU7VPYq6zE:LHpMOEuWHsPbfFjJxGnZ8qE
TLSH
T12A544B09A3947629D3CF62377EF0DA778AB3D83848DB9796AC4CB7F078927241D40256
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d7:bf:a1:81:6f:37:65:07:11:1a:48:a5:3f:20:26:e2:a1:f1:60:37:9e:46:39:95:69:03:97:b7:e7:8a:0e:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jun 13, 2023

SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Polly (.NET Foundation),O=Polly (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:c7:0c:2e:d0:30:ed:1c:6f:67:8e:ba:97:5f:a8:9b

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 2, 2023 - Jun 1, 2026

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:3DA5-963B-E1F4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:2a:24:bf:e5:49:49:11:b6:eb:00:00:00:00:00:2a

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 18, 2023 - May 16, 2024

Minor OS version

0

Major OS version

4

Entry point

281410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Polly/obj/Release/netstandard2.0/Polly.pdb

Quartz.Serialization.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 77e8abf8e2ae79df57bbbc842e5bfe9ab32c6de441163f6ee1eba7655ff8abd2
MD5 0d899e011859c09ee357ffd0c0bfa545
SHA1 8bf7ed9b412bda0ed1fe6e20951b8fc5085a8c9c
SHA512 61eabe3c1376d813799af6d576918abf2928935837a5e90bef3f1327d60826ee9858d49ab27068716ec5a5e7d2a500f7f9be7fc63b7c0a0dd460359db3234a0c
SSDEEP 768:p/hZZF8PunNvJO+F+y+y+y+YKL2nUBQnu8BQjDN864UpFSoQipkH:zZGunNrnUQu8wDN86X0ok
TLSH
T127C2196D63D48A36EBFE7978FC7181816271FA2A5517F7880D8661FE88B33A04210F75
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

32938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Quartz.Serialization.Json/obj/Release/netstandard2.0/Quartz.Serialization.Json.pdb

Quartz.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3f140dfff30bc56c17ca6a336b51706ef6c38f4ce8ca8f8bc96e63ba41216930
MD5 882ec1589a08fd7b343a3362622a32e0
SHA1 a6d0dd838d3d060c27805c84815455213a0e3b0f
SHA512 6dd3df9eae0f197b6ba51a78075a2352bcbd820517d3ab65bae5af557a7af9116f168bb7f750c3852806e051630e319f3830d9965f296d1f93cd766b8bfbaadc
SSDEEP 12288:7YshHljtqftUxPG9pI4uDWszTtmJHTm27pE8aUcqZVJA7S+:xkUok4uDWs9PfqZVAS+
TLSH
T13C155B8333E8872EEA9F1E3CA87485148FB2F516967ED74F9649E0A51D633036D90363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

957462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Quartz/obj/Release/net8.0/Quartz.pdb

RMM.Agent.Auth.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c26f7a36852f8de80ce1b58ed4f1ab74b022cceb2ef39fe5a35b53dd5bf466d
MD5 6630d3b3adbc10322e68b99cdfc40b6b
SHA1 459c3361c732ec383f51529b8bc4c4a020e4a9fd
SHA512 5ccdeff318d44b913b5a632f6ab2c498e1426577fdb6c3f6aa93f6c54107271254555771eaccd203721f7f5a2763d93f0a9bb9416e85330bb7280c701b12457f
SSDEEP 768:OTrgdEyYB6mCc28YZhN+NZajz6eX2ieGwnR:RM28uhqZaaeGHxnR
TLSH
T1A4F21A4163EC4223EB6F9F7DE9F141138B31BA476D03E74E248D60D914A378199267B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

40266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\RMM.Agent.Auth\obj\Release\net8.0\RMM.Agent.Auth.pdb

RMM.Agent.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 def843d81230ad4bf34fc9da76fe60691eacf8f91899a9d18325ddfb999269f3
MD5 3bcefc5991a1f2aed195bb5ae2142d99
SHA1 d0db29363e5fe243626bc3abb02fff3b0938e0cd
SHA512 b777d22d643e8da046dc89371562ddc7ac2cb06155f15ff464e7519fc0db9a8a402c340fe6dfc85a6299f9e3e9e71929895df354054677c5f6a522e65d4a811e
SSDEEP 384:tY6OCsfC0syvusEuKCubx4F98IQPNY1gkHo9I/DUK31zDLxFDNY+pa7O33zfN3vU:thP0syyXFEg6o+zDBa7QLpGOf0
TLSH
T1AFD219227344A726DEBC47BC91F7028087F09B070122EF5BA9DD6DDD49577C8AD182E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

34622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Agent.Constants.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8a12dd02cbcdab4341b6e3b7e94690565c97f9cd2ae459b68f9144cf641e36e1
MD5 353724ce73d17373e3fda27f8be7d942
SHA1 c65bc79405dbf523f3aa9f1aedbaf06ad69f7cad
SHA512 fd8c5054e1175f1ac432bb1e6b53d93610b12cab2e1a9c55ef2ed5a5dea4e67de53d84e33653b0f02de883ba5c918297266d837c93a437c3859ff1f76c8fa74f
SSDEEP 192:Ymdp/r87nhWU6ky70UG8G5CIJ2nrGJGx3DtwOR2:vdp/47nhWU6fG8G5CUuGJGx3DtV2
TLSH
T154E13152E7D907A8FCBB5B7556B10A13C92BFE70D522CB1FE430464E1933A481511F7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

13050

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\RMM.Agent.Constants\obj\Release\netstandard2.0\RMM.Agent.Constants.pdb

RMM.Agent.Feedback.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a947e9aab3b82ba5d0a84483385757eac6e35cd49fe9ebe9e0b4bf5fed4074fd
MD5 748ae6117004a57d90d62541f4241fc3
SHA1 cc3bc20220b39fcc36994f0ec124119c14941967
SHA512 08bbd4655486e14685d59a83c596f9394234ff37b6fed3a400b775d2a5067b387877d316729b185a4ad7d230b699ea8268ebdda7a68de96d2536fcf8f60fca57
SSDEEP 768:S+lu76ZaTPii0eX5Je+xJs6jtK0S/bel6R6PoHbgG3KgB36b:xu76ZCqi0YewJsd0gg6YNG3fl6b
TLSH
T1D1231A1573C89B01DA9E477C62B32B9592F14F1312B0D2577EEE9AD40963BCE988C1D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

54510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Agent.Launcher.exe

IMPHASH dcfbbb0108128551601e8918fe373c84
SHA256 ad27e9ff808793f5254e0907bb59243b4a486f94e25dae48df52c98d5fc97763
MD5 bd6481a382c9c24a2ca38a3e965868d8
SHA1 e98141baf50da0454054e8be5633230dbd58fa57
SHA512 407a023bf867df2e7fdac5c67b791a344f73c5c78dd42e55c125defd4719ddbe375bde7a7c3857aef7175bcec8d3f30ea1b396c5e7a6ac19e2658471a23ac5c3
SSDEEP 6144:1e7Vojqeg8Fgvh5QO/J0q8PXjoqd5VbRt6hRVGlxMU7SE4vJUDWq:2oF80O/qqmoqdviRIlYhUV
TLSH
T1AB846C16EBA804F9E0B7927C89B64906E773BC5E07709BCF23A446561F236D09D3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

55:29:31:92:00:49:79:a6:8c:b8:b7:af:7d:49:b8:dc:4a:a6:c9:8d:e4:f8:8a:b2:4c:63:de:fc:d0:1b:ac:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

94320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\RMM.Agent\bin\Release\net8.0\RMM.Agent.Launcher.pdb

kernel32

WriteConsoleW GetModuleFileNameW Process32NextW TerminateProcess OpenProcess Process32FirstW CreateToolhelp32Snapshot WaitForSingleObject SetEvent CreateThread CreateEventW Sleep LocalFree LocalAlloc GetTickCount64 DeleteFileW GetLastError CloseHandle GetCurrentProcess SetEndOfFile HeapSize WideCharToMultiByte MultiByteToWideChar GetStringTypeW QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ReadFile GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc GetTimeZoneInformation GetFileSizeEx SetFilePointerEx GetConsoleMode ReadConsoleW FlushFileBuffers GetConsoleOutputCP FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW RtlUnwind

advapi32

OpenProcessToken StartServiceW RegDeleteKeyW DeleteService ControlService RegCloseKey RegSetValueExW RegCreateKeyExW ChangeServiceConfig2W CreateServiceW SetServiceStatus RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW CloseServiceHandle QueryServiceConfigW QueryServiceStatus OpenServiceW OpenSCManagerW GetTokenInformation

shell32

SHGetFolderPathW

Name

.text

Size

258KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

RMM.Agent.Libs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 00ba03f28f684af9e512b2f979cfcacb9d305634d0ac0630b5b815a4ac70f9b4
MD5 f2d670da6c2109baa4c6376f60f80c03
SHA1 a5feed7aebf9952c66c6fec5d18a5c9b06f36f25
SHA512 7164d0614f46c271203524d553132954593acf1b6630cf2acddc9397f6be8cff0d91fd05726f98ff10242c25c87b47c88a70abe758acd9d79c9b58ba0fb3477f
TLSH
T1EC814211A3D4037AF8B74B72EEA21B83A63AFA10D9139F6F559607124C366648923F60
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\RMM.Agent.Libs\obj\Release\net8.0\RMM.Agent.Libs.pdb

RMM.Agent.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 34540f555ae66b5b67df1359e472a55fa43ad07b8486dab452dca7ffd1b64179
MD5 ada16b7325586c6666460788144da649
SHA1 9e2414dde67c4c3897729126af312a3bacb696e2
SHA512 1437a94efec5915714ad7ffb94349c29c0695ebac8e6e5762fa0a944f1de432353c483ca9f16cd190ffb420babd2ed373700f8565a1cc7f6ec2ca6f1ec05911a
SSDEEP 768:jYpp5Gger8kvRjAxcg9Nbx9lOiuNy3EO3hZDg:jek/ixbx9lWcbTg
TLSH
T14DF23FA85658D36DCB9E167AFCA0437A17E0818C3B22EB771724F51CBC67BC454111FA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

41902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Agent.SIO.Client.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b6054aa8da0e3d49b7931b143369d184276381091504971d54a24e4a247ac83b
MD5 a2247d6fc36b8495011a3d65629a1b70
SHA1 4a3391cf0c37bcf10230bdda6c40f99980a36ccf
SHA512 5f21624674d0ff771e4a27dce9c2858caa234a0ece84e3b3263967830027f748ba495c17166f872f1cb2e59ce82d3f44fa47e1611e6f3219db1cd66636f10bbe
SSDEEP 384:KLILad53rm5ackv/Rp+3uvGjY7N+2OIE+Gk+HfEi1KT2qUyQWuxy2SmvPGwEla4E:m57unkK3FNOen1+tmW87QzH6
TLSH
T16AE26D0167FC8626E99E4BBAA87140024B71EE067E02EB5D7D8858DD19F3FA12D117F3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

36674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\RMM.Agent.SIO.Client\obj\Release\net8.0\RMM.Agent.SIO.Client.pdb

RMM.Agent.Settings.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1dea1709ef0e73b299401647036f084cf68ef01ee23afde94e30923b33e3652e
MD5 d79cb25fc249f0ec0a75df627cb1e0db
SHA1 db3d12d3936d7f0c916337a5d66b31aaab208360
SHA512 3f460851ec2cbc71535caa56c5606fbffb3edbc69518123985232c12c1caee78ff0aa61c3bc625f8c393e7e128958ca8bb5158f0ee968893e20ef234ac8cc98d
SSDEEP 384:67zP6pNjwKH4/ulwfQz1XXXXwynKXxAvuQdUEP304eHI4m6O:6/PSZHZuc1XXXXsGFPPH9
TLSH
T18D82E9046798C33DCB7D4238F47F429103B5C3093212EB6A16ADA56D7C277EB19992EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

24670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Agent.deps.json

SHA256 3ee343c41bbc8d48af3591c4e63ef58fced734eedf2b9f96c0e29668d2078047
MD5 85d6ea0520afb7bae2e2bc2400bfc85b
SHA1 68eafd253f87969d516ad50d98b5d1fb4483051b
SHA512 840d5188a8d052f2487c09e4b44a9f4c95e9fd426a980783901a53b24c33eb9f75e015555a8f7d14debe276165b9ab69f254d46af32fc920a98c40f14acd5bc9
SSDEEP 3072:ZNb8WqR9TFHy9Z3iCHDrKXE93SY/HZX74OXFBKCY5/:nBm1
TLSH
T13FC3A926DA945DB305B6BBA6A8348181F325432F51006D8FB8FC214DCF73E9B52A2F35
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

RMM.Agent.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 fba423b195205baff2661831bed6da2ab42c1369d804bf80154ff3e9e62cf809
MD5 d0251ae24d3758d2411a875c8eeeac63
SHA1 c2047525526b0dcfce21551ceb7b529321e542bf
SHA512 0fcbb61bfac8c20bef5dc6e610b08abc448d275a679433f7a65aed1096c30e58f5d2c6e29cb213a4a901f8a95d3c8e13d96755d3d42f0c108f5ca52b6d36d9fe
SSDEEP 6144:gREJX7mI8DM+BYLVQWioJjz3bu/UMqwlNZ65TxFu+LhF/XOTe1uX7b9faiAgc75:gmX7mI8VBYL3nbnMq4Nk7LhF/ZQX8pV
TLSH
T15A944C01EAA49E23FDDE933C9516846DC3F5A90AD2E7974B158D5DFC28C630DAE881C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

15:a5:84:98:35:46:ec:f0:b7:4f:68:0a:b4:2e:fa:cc:7f:22:5f:1d:17:dc:58:54:68:77:34:75:42:10:ff:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

430654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

RMM.Agent.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 6a89de024ca62536de6f5fc10e49896bb1ac330ca39dce30203afdcc45ae237e
MD5 d977e20c261c716faa4dbd7d0ffe1036
SHA1 e91e42b05908e53aa063c05b7bf2a5355dbdb112
SHA512 b15b5826006f5d44b3b305923604a8e04a2192ee3b2ab95e8c3fce31a3734aaa48ea0fd02bc7142fbdb44a7f18e14dbed646441703570c0f7cf52432125e2298
SSDEEP 3072:g+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwxWBd0ED:g+f4nKvaQhcF7qIBxuZjwABKM
TLSH
T166E33A03B2A810FDE1BBA37889A21901F7B678554B7297CF0390C57A1F67BD09E7A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

49:aa:9f:d6:9d:62:62:ab:8f:76:e5:54:2a:07:f6:85:4f:cd:36:4c:b4:3c:4b:63:c2:d3:26:4e:e7:76:56:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

RMM.Agent.runtimeconfig.json

SHA256 28329cf08f6505e73806b17558b187c02f0c1c516fe47ebfb7a013d082aaa306
MD5 253333997e82f7d44ea8072dfae6db39
SHA1 03b9744e89327431a619505a7c72fd497783d884
SHA512 56d99039e0fb6305588e9f87361e7e0d5051507bf321ba36619c4d29741f35c27c62f025a52523c9e1c7287aabf1533444330a8cdf840fa5af0fa2241fcb4fc2
TLSH
T114E02664CE006CA701FA727FC531C183EB30632700101891B4FC080C2F775B50112F5A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

RMM.Alert.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9ed8b0d81e915d914367acd35cfe7af853c097e03c7afa05e2f071148415bb45
MD5 c1437844b54d8455f17df05b5cb11b27
SHA1 cf5d95a69683517e58d5d939d36bed7ea4d252eb
SHA512 8d6a1aae6f8b522d8525f95264afa6f9c1b1e4411acf7563f38f8db6eff5005cbccb8a093cba97f8ad5e47aba494497a641160457b637461708450a63cbe8b44
SSDEEP 768:lwXXuqZ5WIMNp6M6VGNmDw+smbMf86ZhTOWUmZHtyB2VX9a6pZt:lwXMJ6NDtbBaamZHzB93b
TLSH
T1934385151308C62FCBE94339F81A066AC3F2C6843621FB775F48F099B91FBC96A56179
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

61854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Common.Snmp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e590351d26cd657f96095e631f4a12ba305d3989d50f99832f2743e1d8e00296
MD5 b1f847b548297492462925a2e6eaf4c4
SHA1 bfdb6416b5fdccbe46d4f0bf9d7dfbed499283e9
SHA512 a47ef5ddf753c87ab4fff746d4137ff81c7cdb60ea25123e8d8fe042ba5a264673533afedddfe04c0a87157a60daa9b70394191f8e42683241f2db60fe7ea41b
SSDEEP 384:HfRknF7Y3TCrGJ4K5t4FvM8uPUelZ2s4pPJhpWs6vfK:5k2co4FXu9l0ssPpWHn
TLSH
T188D2E60D89506765E7BCCFB09497860519F0C69AF8D2DF2D0DC919E12CBA347BC86EAC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

36398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\222c329757d554ff\src\RMM.Common.Snmp\obj\Release\net8.0\RMM.Common.Snmp.pdb

RMM.Control.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5a9fc204a0f4dc3c72f342d959b37002c66e4d7a3e74129d2fb07c0bcacce17b
MD5 d488b8dbdf04eb89be8e6dd082373080
SHA1 629f0e1345a40194b7cddd50a09b56b627d1e956
SHA512 9ad25401d613fad6767264288e57ff41310b00f9d016faed74d076ebd472decfa8ec52c33e9ceaef3f307565b721d83c5ddb6f3c0073d69b0b59acf5a5af0f33
SSDEEP 768:RpXJehtpoAp46jmcueN9g1Jkp0KGNMzAvdI5q0aENTcPd+58dDLwv:RpKoJcwkpF8MzAvdFfL4
TLSH
T1781385209338C2BEFB56C679F52D43BA29B4D288B151F7B15724FC4A3E277C46A804B5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

48310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\222c329757d554ff\src\RMM.Control.Models\obj\Release\netstandard2.0\RMM.Control.Models.pdb

RMM.Plugin.Base.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8701a00518dbdd22b1d8f3518984aee8676e72be1549e5652f3b479613863ead
MD5 7c6cd335a716549432fb4ab2b57b7f93
SHA1 4e83154dcaccea38ebb4b7987e852789bdabb2d0
SHA512 e7f4748eba4ec86c345b76150010dd8fe48cb187f42000d0f27193dccbb46a472798970f8f98cfd27ed07cbc8b160a47be1595c99fe3ab3a12f6031de1dbb73f
SSDEEP 768:L+PSIRILip5X2ht4U73uC+5cegDFeiI0HBYdhyemUWS6eu4w+NqHFujtoe5qxPWd:rGzjEJVNCDpsUe3NS
TLSH
T17443832C4F1F6336CEBC07F5946391305B74E993F196E39B16C8E4E69913B8A2B060D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

64174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Plugin.Manager.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 31f288e8bd742702119cebec330370cbf2142e7ed4dbb985f5fa074608655d47
MD5 b6d81c4c7b6b97cd00a667ab28a5c7d9
SHA1 80bdd8e6c654fa9f8931b2fc47c715d68548dc68
SHA512 5cc68774bc82bc4ae272342676a48a2897eff5362e368056594a6859ae994388ea4723df75769ebb229ebc0d7cb39dcfac5a46ddf2140f9b9e612b9fe57b0391
SSDEEP 1536:pk34y0fV10s39TLAzPs0u53ZqLF4rKzoj66gtOhK7xkTj3qK4w:pk34ymR39T8EfpqLF4rKkNgos7iTjEw
TLSH
T1EC933BBE674C8D13D86E47BDA0177255C3F08B0B3865FB4B19CDE9E52983B847A081DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

64:90:89:4e:64:98:f0:1f:2e:6b:84:88:ea:89:46:7c:7c:6f:22:5f:a6:61:69:9f:d2:09:3c:32:90:bd:9f:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

84670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.Stat.Models.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0f0f276e3f96ffd4681725caa84fa40d15ed04cee456d0b57cb7fac42f08079c
MD5 fc3ea6d79a32a2007160b637a0d646fd
SHA1 b247f640a1c846682ba6d23905a06c7fb135be63
SHA512 a49c6945c06d3bf68336c52406302f19df44967f52a4519acbb259814788a347ad599f9284a7efd29d4b10166f2b796bd37dae520b86af3b79ee016d74a47c8b
SSDEEP 1536:VStNZPiWvpuNjmSHjgcxXShnNs3kN2+rbFfEhWvvEB90Z2WT4vMxf:1zKikkShnNs3LQFRvv490UWSKf
TLSH
T1B293F9205B08CB1DDACE3539F899B93A43A1D6863036E7F26B54D98D7C137C6D20A1B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

103150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

RMM.TrayApp.deps.json

SHA256 724418cbf3ed9503630a4cebd1e0c4e0130bcd214b7c01408c97d8aea5064ffe
MD5 e917f9ab0e2c06d7a3e4d5c600eecdeb
SHA1 862f8f254378f52db88f894b4b5282a7760e3d56
SHA512 99e0366c6088e6a95bed37dbf8b85fa7b19355e3a006b658666e029ffc65835a510fa580d2d89d9ef5964fe5371b399f692f8994410ad3dcd1fa558ce9668973
SSDEEP 1536:foIqRLTkLHWF3Q+NQ88rLvZ3lQAEp8r/CS39EGaifOBN/woGog:AIqRLTkLHWF3Q3rLvZ3lQAEp8r/CS39t
TLSH
T175935625DA945DA70476ABA2A8784281F631433F61047C4FBCFC245CCF77E9A62A2F35
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

RMM.TrayApp.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6e559e955e1f51fe03d49fd8b73c389203b4b8d44adee1e3a47319c151df8c30
MD5 ddc198e0ad127b55a8de12dea915aa91
SHA1 5ae8ffc21c26710f7c056b871877fc9e96305ac8
SHA512 0f8219d7731525125133d927af7e1b17a1016f3b302ee8f629ec2cb93ff9750160813a005ec492c8786b7471c8a578a7fac72da7b25ec083aa66a1b35f5707f6
SSDEEP 6144:O4ElE9ecOL9b+EsCjOd6nPEHjlskwBBLuW75xC7lq97CUdW1adFmHz1dMvK+Tcbt:6QecOj8qss32quz1d3qcbMsJ
TLSH
T14EF459007FA0F7A9DDA60A70E86523F415E32CDEF5B4950B95983E2DB7B2303C626257
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

759462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\BuildAgent\work\14464d4c2ff55075\src\TrayApp\obj\Release\RMM.TrayApp.pdb

RMM.TrayApp.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 a848caa7ef9ce2c6c4abaeda9d7ef2031a3d6071d4f134a401c3d4ca34fe82f8
MD5 d8d64985ca214a98e4fa00d7dd30b0e3
SHA1 8c48ace84e4f26689432fff6531a49352c0584e0
SHA512 bee4e9395dc19249e94820fa9a7ac83b73d2f411cc87e38b8009353daf12c55a2a58c248fba12bcd4f896b8f07f449af6b6aa8516f813b00f2533894434e5fb3
SSDEEP 3072:X+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwxkBPpE9:X+f4nKvaQhcF7qIBxuZjwCBxO
TLSH
T170E33A03B2A810FDE1BBA37C89A21901F7B678554B7197CF0390C66A1F67BD09E7A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

7b:14:9a:68:34:23:bc:27:20:73:3f:c8:38:27:03:79:8a:5b:51:0b:70:36:66:1c:c7:11:0d:0f:10:75:a1:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

RMM.TrayApp.runtimeconfig.json

SHA256 c71152bf25e40d647b2440c5b39be157a3d356106be9d5b678ab97bb87b4e782
MD5 07b9a30265ca4e69c7016a1b6e3ffc27
SHA1 3a4af82a2695b1423aedd8b60a5c86793c011b02
SHA512 efd582f8edcdba5ef48d02eee5f73d83ff35071af99b49e08e0213928568d728d0856e3b903bfcccb9237f786846cf94da83139f99e9bee86287aff2071c3f1c
TLSH
T104F0227ACA106CB704FA77BEC626C182FB30132B10001DA674FC080C6F77AB60212F5A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

RMM.TrayAppLauncher.deps.json

SHA256 85e39e8e10b259667b1470754581b7172eb8c9541239fc63008f68dba8c23ddf
MD5 710804a216040cb057c41c9c0fc95c06
SHA1 11c958dbbbaa4107737cbaed6573f120edb885e0
SHA512 9f7f071ada01fd94a79e63c6166584e2d8ffcacf12cd02135b79f809777d2f8588c37e4c2950354696c3c9081ef9b497a5567b1c244b74f896d6991e186cb1ba
TLSH
T1B9F06D0DD1A40C9700F167B15A3A8B92F5326B3381112816B9FE806C5F7A91F6C20E7A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

RMM.TrayAppLauncher.dll

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 682f475ee3aadc1062460aa790092fc30ebbf612a964fd1391058d307b77a3e5
MD5 2d3f264aadb124a902d4f83be53af9b2
SHA1 eedbed3aaa6431e98365455fe7e5012ff51a0116
SHA512 067fb875b141f549928ff1e7e97cbb9de4d968cec7b97fb91d3a69df8483ad1be233919f07880e06631f4daf55c2820649c35e4777292d9cf07333140ac36fbe
SSDEEP 192:t2Q3bChQXKQaxWu5S+GXC9bfMlqpXKdTTiPUgapjnkh4AHhT6x:tRC8KQtYrGX+bUlqpKTT5pAqAHF6
TLSH
T1C7523A1593C4C339CF7C473A26B352428BB2DB038932E7AFA46E941B4B6738C5A461F1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

18974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

RMM.TrayAppLauncher.exe

IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
SHA256 dc797000cae005b4bedcf3876d622e83c0c4367023f2808dba6b65797716bd38
MD5 5a41bd11322a8e202ccb6f892dc92473
SHA1 8a58febae10c6b2dc7878405bf64ed57b01b90b7
SHA512 ca3e4f348facde227302134b7e2d1113a13af14a6db22f0d2ad1a31c95c03329ce2b1ec5ffb22daa432b68cfa6c894727badacbf8d5e7e748b517ccd3e547936
SSDEEP 3072:n+f4nYTC3LwjBzaQhlG4a7qWdCXcXxuZjwx4B6VEN:n+f4nKvaQhcF7qIBxuZjwKBEW
TLSH
T148E33A03B2A810FDE1BBA37889A21901F3B678554B7297CF0390C56A1F67BD09E7E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

4b:3d:5c:1d:24:3f:e8:18:91:76:4c:79:b7:90:12:9f:27:9d:9c:7a:87:76:3c:6d:ce:5b:3b:fd:be:0e:fb:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

70192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FreeLibrary LoadLibraryExW OutputDebugStringW FindFirstFileExW EnterCriticalSection GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection GetEnvironmentVariableW GetModuleHandleW MultiByteToWideChar GetFileAttributesExW LoadLibraryA DeleteCriticalSection WideCharToMultiByte IsWow64Process TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetProcAddress GetWindowsDirectoryW FindResourceW GetLastError ActivateActCtx FindClose CreateActCtxW SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW SwitchToThread GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _errno abort __p___wargv _c_exit _register_thread_local_exe_atexit_callback terminate __p___argc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fputwc __p__commode _set_fmode fputws _wfsopen fflush __stdio_common_vfwprintf __stdio_common_vsnwprintf_s __stdio_common_vswprintf setvbuf

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode free _callnewh malloc

api-ms-win-crt-string-l1-1-0

toupper _wcsdup wcsncmp wcsnlen strcpy_s

api-ms-win-crt-convert-l1-1-0

wcstoul _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64 wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale ___mb_cur_max_func _configthreadlocale ___lc_codepage_func ___lc_locale_name_func __pctype_func _lock_locales _unlock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr

RMM.TrayAppLauncher.runtimeconfig.json

SHA256 28329cf08f6505e73806b17558b187c02f0c1c516fe47ebfb7a013d082aaa306
MD5 253333997e82f7d44ea8072dfae6db39
SHA1 03b9744e89327431a619505a7c72fd497783d884
SHA512 56d99039e0fb6305588e9f87361e7e0d5051507bf321ba36619c4d29741f35c27c62f025a52523c9e1c7287aabf1533444330a8cdf840fa5af0fa2241fcb4fc2
TLSH
T114E02664CE006CA701FA727FC531C183EB30632700101891B4FC080C2F775B50112F5A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

RMM.Utils.Network.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e9ef108de5c88c56b99f8351b7ab6b2abc0403355774312abdb73a79eaac3866
MD5 eef4a3d1ba6b32e1bf4d1d1424c97380
SHA1 9b732b399fcff3644ff4eae592ba6d90a3d48299
SHA512 e098a3f24029c5df002ace58c2bdab233eaa1e37281c4948eac02108f7b492584824871e06c55f039a15d9e08345fe72e5690a03f41f6f474ced7bd9ce3b322c
SSDEEP 768:N7lk2EggHyYk10SO8ovQSFLG8LJDQBdEKv4t:dlWZ8oLlTLV0bv4t
TLSH
T145034A04A31C832BE7EF4FBCE8A1A25903B19252E452FB9E1D4D64E91D637418D907F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

44022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\dbdff835e863e7de\src\RMM.Utils.Network\obj\Release\net8.0\RMM.Utils.Network.pdb

RMM.Utils.Schedule.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9cb61f69445ecc8bcb3aec775433bd89321945ea4a261e0c7a6526cdda55fa2f
MD5 b6e2f1fe7808415a7b33924ebf718f79
SHA1 814e383f314b44b7c9023960db89fde41b2e75b6
SHA512 a4b3344c45c2a4fe6a4461c6167cfd29ca04314686e37e9520377dbcefe9f3d647fa386285f8fe0c69e9ab4cf747a2afaa61dcbcd861f7ba965711bbf159fcb5
SSDEEP 768:7/W4P2cz/btDti5rVcfq7ybT1Xs9NkY4iuzCbgfLDVmg0id:7Yv5rVNWnhs9YiuzCOVZ3
TLSH
T12223A40162DDA219E91F7BB9DFE5C5ECCB33A6A42036DB6F00EC60571B8374096097B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

55778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\buildAgent\work\dbdff835e863e7de\src\RMM.Utils.Schedule\obj\Release\netstandard2.0\RMM.Utils.Schedule.pdb

RMM.Utils.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fd09b1066ef4b6fac2fe2a226231033846580255629badc0d083238d002e116b
MD5 e3a73fd9b75ff7ada9e354ef3dce1c06
SHA1 3ca1718d801c1995629ff0241a15b92fa63ac7ac
SHA512 8c38875e19dad6d387d3ef567c1dcad44a0a9a1876162d5b052a914b849c1e4356e0e2c80b2caf25fc314d4808ee6ceb1029af89887c8f89cbdaccebabd33956
SSDEEP 3072:w01Z+BBRGP8VRxaAuUi43x/VtFxsa/zlyfSA6fCN9anliAH62WnLM+X5DGb7XTB4:nfWBYfSzjliAH62WQpb7Dc3A66WFfeW7
TLSH
T140043904A3908F16D59F87BEA0560361D7B7891BE667FB4F659CA4E838033DCE8C91C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

181134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

SQLitePCLRaw.batteries_v2.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0981b1e1e24ddf18e42d0f6cea7a318e735b875f987b3e306f555118726b24a7
MD5 6fc95b565bdec3a76e3da589d1b8b4c2
SHA1 f40e88e5fc80d1bf1c304d8d16b89b409d1c267a
SHA512 82c5e60473db128158f637e9300a961c78547cf79379057f107e0c9e23c3ebafc6c86aebd007c745752308fee1bd56223287fb586ea3adff35d8f13d2918a21a
SSDEEP 48:6o+lPLvBaMW4HQEcIcU1N4zOuSOiW2VWCzTKVsuAAwnakl4LsnOVjddi6:yVaMW4wEcI/Yz1SOxGTidAAXMe
TLSH
T101B194A0D397423BF97B8FB3BD7216414370B950DE73AF2F8C85820A5C129199A20772
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.bundle_e_sqlite3\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb

SQLitePCLRaw.core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dbcfd04e95aefa9ef0dcad4cd20009b018dd3d2943c8ccf3f40597b9ed9161b8
MD5 46520c910e0a9dc3a36fc5470b0092d5
SHA1 43f32308463784ea6913187b1648f18519366df7
SHA512 0fd6cc8d9562f6294c86841954b6bfa3ba63c05382d79192c413917f86105738715033c328e4016035bdfa242208f963845d648d3ee14674bba4180448741b61
SSDEEP 768:sUTwxD03Fy5WiUxBPHVNaDJqq4qLN75Z4c9q1ITd9P581I9m/DshW:2AFy5WiUx1PaDJqq4qLN1OirPi1nLsY
TLSH
T18D33E7759396DE2AF4CE5130A43B00D5A670C118E7BBDB23FA90E0B06D723CB59751BA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

56762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\netstandard2.0\SQLitePCLRaw.core.pdb

SQLitePCLRaw.provider.e_sqlite3.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 30dd6ae7899281f9b715ab9f8ceb1d67b6d4c8d76a21daaafc215955fcf37f0c
MD5 24291df09547073f298a20f98413b57e
SHA1 8451780b822ef8efe083d7d8e57ae3ccf98e7c79
SHA512 0f7fb8b589f0146423945bd3a2a97b99bdb5ebfee97445ee807d661fbffb962ec3e378be7b491ccf5f98a85d95d42520406dd16427e984d95a93b9aecd216602
SSDEEP 768:wwTwIKrvlZySlQ5IPI/3ja9qJqRJ2i8P:wwTRKnySlpPI/3ezJ21P
TLSH
T18EF285E6934F0A64F29D163378371E8A81B4E390FB732B079A93C3799DB39854D542B1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

42030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net6.0\SQLitePCLRaw.provider.e_sqlite3.pdb

Serilog.Enrichers.Thread.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 74b88ad495b8699fb214d83f7ea371f3470ece05948111c99e72ddd5f3f1d852
MD5 a712c16fefb382d58283a53c1b5e7477
SHA1 e96719a79204c8b871df4ccab377a35f8a932be4
SHA512 06d18458d6d7ae6aff1e2584ddd1ed091c7bad4d947b393e0e3b705f04d1558ebbf62949c66d5b50d176a42bd2b62d6fd5ac18ffcb8e4a21130a219cc948f254
SSDEEP 96:EoPwsj2g+goUC+lBH/v4P2UJQOx/q/WDd4X4ryWE:H1j5oFQ6BJrJsw+F
TLSH
T17DD19491D3EC0797FCFB0F77DC7A52895636F916A837CB2F254189162C2B6144B60631
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Serilog.Enrichers.Thread/obj/Release/net8.0/Serilog.Enrichers.Thread.pdb

Serilog.Expressions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e3fc0c1c14ab4221ce55f6b926f1a6bb33654009242d3527526064995f70b9e8
MD5 42dbed4c696a55c665663afd34205cf1
SHA1 46650cbec4c50cede6843849d7d267d425c79ca9
SHA512 a58ca041188cdce15d95ca7b1c789fc67efa15b99f94146f603edecf208582d2d8a112f970b85c09e463e4f877e16d5a716d95858e9e4596d338f6ce3147db13
SSDEEP 3072:uL35bX8hRDo99YimTBQUkdPJJpAjspdNt1km5PIC8TbZVOXeFQCmnj2:y3uW99Y9TWUkRugTtJPpsEnj
TLSH
T191143C26A3AD0B5ADBBF47FDD4701802C6B7E91366F6F78E2D4522EA0C43B515D003A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

205830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\serilog-expressions\src\Serilog.Expressions\obj\Release\net8.0\Serilog.Expressions.pdb

Serilog.Extensions.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8436c9690c580d44de14603ae64f6c273953799fd4038ddce384ef8c8d5e16cb
MD5 a27048294bd4cc3c0648092b2dac8863
SHA1 d2c0a1053752382f91c9e057133d079b5fa89de8
SHA512 42b67528ad6391bfd838070a97c5234b3657dcc533a143e04eb6bc2a687925596191673599d9dd8c7f9fdfb260eb3606ff77d0f11c7ed4fc8456757b8d895aa4
SSDEEP 384:hDM1rifGqlZdnYPDb3OYhsAEKuvkH25bmuqYYhTBT6c6YaWpmZwj8WqQLdX5WrvI:tOJEE3HmKBYYhejn5wm
TLSH
T150C21706B79D8736EDDE0F36B4F586905734C671A121EB496DCCA6A08C73B011AB236F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

33266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Serilog.Extensions.Logging/obj/Release/net8.0/Serilog.Extensions.Logging.pdb

Serilog.Filters.Expressions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 261e9a51cab4615ad236a9588988b45dd5a2d8d68dbeeaf48b9942a64c8f4d66
MD5 65dcfb12b6a8dd15af03d82472726f26
SHA1 5c9a60d513c1f43f3eaf4229df740df1288175fc
SHA512 5cda084152ed5781e67d7016cfddfc0596ea0c689ddca45cfa89a88e8f45b9394e0ad22296ebdb1b91c679e3a075b086cb887ea1e538a06dd561bda11382bcac
SSDEEP 1536:/xr4+Ik1UheFJvRL0LAHmIxWToibbbbbbbbbbbbbhbbbbcuizmh1IoyYWO5i:CqUheFALFIWToibbbbbbbbbbbbbhbbbS
TLSH
T1F7733B7623DE4B2AD3EE5F7B657422225B31E8827162F39D1D8916F60E837418A103F3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

82826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\serilog-filters-expressions\src\Serilog.Filters.Expressions\obj\Release\netstandard2.0\Serilog.Filters.Expressions.pdb

Serilog.Settings.Configuration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 700e69a254f36dc27c1f7829a254c86471cdb57510ec948a24fc7e9795f912e8
MD5 2da227e24cf898b5b5011b689b66a2b9
SHA1 1f10c102fbebff3c36795cd64aac058000cf906f
SHA512 ecd5c25521c204b4454d2aff6cafb047565df7678b974c8d1630ad8c393fbfbc73df2c43ce9aac049d84a59a71c9662b4261e9c74d58c20be3a43d6c4e1f1b9e
SSDEEP 1536:kD5Ny1ykzwOP/7UXRI6/pfJ9FfBPu+6tQ8o7Nk4sq:kD5Ny1yksOP/AXFjnf5/cQ37Nnt
TLSH
T194632A1273ED8716E3FD1B7AF8B521140F71FA567425E78C9E8EA4EE0866B010D107AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

75566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Serilog.Settings.Configuration/obj/Release/net8.0/Serilog.Settings.Configuration.pdb

Serilog.Sinks.Async.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1031cd50ee3f0d62bbfdad3e07de0e953f26b90edac475e1b06fc65d2b42619c
MD5 78251f8069115231c1cddf8dbb57788a
SHA1 4e1b3adbe820deedda6e7e89ba74ec1af3c0fef8
SHA512 ea6ba00374feb9292a82734257892ac66f35beb55e85fe8933541773d34db266a7f7bc7f73b5606ab925d452989773416b2b18ae0e7d2b60316f9a7e5dbea86d
SSDEEP 384:w8GGAFa7wY6silzFBTER7YTWuZwj9g/WqqchX5Wrm/5WGJszMvaU/H84OMjnsC0H:pGxFa0YJilJtjNT
TLSH
T1B7628519B79C6736DCDF2F7A74B242A01334E7F1A825DA0E24A866D4CC779110BB270B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

19978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\serilog-sinks-async\src\Serilog.Sinks.Async\obj\Release\net8.0\Serilog.Sinks.Async.pdb

Serilog.Sinks.Console.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cd84c110a96a28b969f9b75873801ded483ff8e2396507e2a53ab977584f39c6
MD5 3a5ff30999e1ddb36c1af375661bb5e6
SHA1 83f6bc5d01624aa2c62f42d17fa41c579699d00e
SHA512 d5c689509a10c093dfaca74e9aed403582ccb7454a9cf9e9b9c7fc3d3fecc8d210d1825c9d385423dfa806c9ca8798bb15de30b311a166b0ea2a098d19387ccd
SSDEEP 768:uaZiZaiYqEociP0jGI4DQg5P2rqMuncg89q3VY:nZiZYqWkxGqMY89q32
TLSH
T1A003288DB7EDF726E0B88B7CD4D198C54630AA5E0513F71D9C8DBA951822B443351B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

43818

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\serilog-sinks-console\src\Serilog.Sinks.Console\obj\Release\net8.0\Serilog.Sinks.Console.pdb

Serilog.Sinks.File.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 642a271b254ca70d35a02a4ae9c6d86b38c4bb2d0656012c1dc93839bf82b8b0
MD5 7841f1e177e0ad434374cbc9c73898b7
SHA1 c73f214933648bacab584a1a4b3b294c099dd0c0
SHA512 bf949e886d4d6385761aab57e79d8a1ea46528f8b60f43299bc4d57288ec26c0a06744ef5baa46aa0c77d76d4b5579ebeb200a41854e9b6bbaa1d20bafb473d1
SSDEEP 768:5rOrAAt9tu4wjf82PdrHdDQ7cRAPUWzXPoms4pTl:50Dt41dC7cRbS5
TLSH
T191F23951B7ED033BEAEF1F7CA4F095521772F6B2A836EB4D119442A94C32F010A617A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

42010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Serilog.Sinks.File/obj/Release/net8.0/Serilog.Sinks.File.pdb

Serilog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 539f5d60cbc83535dd9ebb1d370d627413903b47f09d0ecdf82a4fe6ad8b979e
MD5 3a6b71c2a8f4c8c8636333466ad3af29
SHA1 0e115996f5c629e78fab85e230c14b8059d0b9a2
SHA512 1c27f38289257d85e9869f92857ac746d76ade8ea6c6e417413b5f2331c037d91d56f2a780b063b74c56521805abefadd096e32c81030f36c6068d16025ad72f
SSDEEP 3072:8odxwj5WkwlaYlWEhoKKivxtfIxt3bwk2abzOvsS6vVbryMc7fXMSxfyi:8o7wj5WkwlPhoKKivxtfKtLp2abGC10e
TLSH
T1D0F35A26B3EC4A76E6EE6A34B0F491002771F517D82BF74A684D7AFD1D22B805E90317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

166650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Serilog/obj/Release/net8.0/Serilog.pdb

SharpSnmpLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 531dae11e4de61a882c203fad3126b7150b419a99e06444f6d257cca8f025c33
MD5 5999a21790a63877bf7efc7ef08c3eeb
SHA1 27cfd64b7d925cc8d8dc01ec0b61ba1143fca791
SHA512 f27ae4dad4479fa247242cef4ac881e01c9cbf6e90c8b2f87bda14714133bba41ab80ffe7230da3e92b2ee05e75de6d75d6683d5524a1ae42c73aa9bc6e065c0
SSDEEP 3072:Jj0v+fUQkTVoqK2bh89/jtkhoXX7q4NR5AyKo1gH5uoQ4YJK69wEaZ:JwcR2VoqKgYjt+erki
TLSH
T18CF35B7463E80F12EBBF577EE0745534CBF2A256292AFB4E1C48A0F81942B625D117B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

bd:6f:d2:0c:14:c5:3e:6c:1e:e5:0a:7e:86:c3:7b:11:8a:10:7b:90:7d:73:f0:b9:e5:25:d8:75:b0:32:03:53

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Yang Li,O=Yang Li,L=Toronto,ST=Ontario,C=CA

Chains

Apr 24, 2025

CN=Yang Li,O=Yang Li,L=Toronto,ST=Ontario,C=CA

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Yang Li,O=Yang Li,L=Toronto,ST=Ontario,C=CA

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Yang Li,O=Yang Li,L=Toronto,ST=Ontario,C=CA

Serial Number

05:f5:21:9a:4b:62:17:59:31:77:b0:dd:b9:2c:16:e0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 5, 2024 - Aug 4, 2027

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

163238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\lextm\source\repos\sharpsnmplib\SharpSnmpLib\obj\Release\net8.0\SharpSnmpLib.pdb

SuperSocket.ClientEngine.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b741fbefc8576f305df244918fa3d3bb167353b3fc44a2cb666ee5208ab95327
MD5 d0b4c02720d3eaf223665c31f3a5980d
SHA1 e92dbcb6ea2db9c745e0e566cfb001bba026129c
SHA512 61cb24a6d86b491b7ace554f3fcb33c20e308642540669ea04f271de1b5b45bfe51f730d8d02013f71cfe3ed571581ad319de9d470900acae7ebc833ffe09912
SSDEEP 768:tBoN0qD58Tbkn9DSZyBQAESH3S/aCGcjjJToUSrqvSKLAPs/yOrQV59L:tBvwFg/25sjVToDCAE/yOwP
TLSH
T1B523191063F8C326E76E1739B4B501150BBAF9423533EBA85DE621E97C93781592C7B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

54782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\WorkShop\SuperSocket.ClientEngine\SuperSocket.ClientEngine.Core\obj\Release\netstandard1.3\SuperSocket.ClientEngine.pdb

SuperSocket.ProtoBase.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7358c51501a2f69e41adac1984189cdf724a60ca702921471937f605560f5a6a
MD5 d015cd375e1937af272a7279cc68329e
SHA1 02f45f61f7d38f98a65408da7d3577137e9b1ac3
SHA512 0f66fb3fe9c3d744dfe91ae7315de98f2543c97ecc830561c272a0947f20c55ec76b563d9ab18d136d55800a3bdaf40c3b2125f47bbfbc90f1f62cf6c7e0b594
SSDEEP 768:D0q3YzRoz9RCkmVIZ9DkJ6+TvTHRB5T+5P7B1eFOASFanKXlq8GmXbh0:Db6Roz9ooZ6J6+TvTHRB5T+5P7B18RBB
TLSH
T1BAE23A1867D8D337DFEE0A3BF4F065858735E9A1B603EB679E48A8F93D13700190265A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

38654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\WorkShop\SuperSocket.ProtoBase\master\dotnet\SuperSocket.ProtoBase\obj\Release\netstandard1.1\SuperSocket.ProtoBase.pdb

Superpower.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cd8bb04f12efd37299e1f3fad280509392e0b1a6adca3b1cf1aedce234f8ef6f
MD5 e4a29063963f00c35077b2a850336eda
SHA1 c8597bed4aa27cfd03ced840dd047c5cdc732196
SHA512 45e145fc2880bbb419a7773d5311e75bf982279377e12d97eeb354adf5b3ecd233fe5abf0a0110236809dab7be8cb0dbe30e4e27a29f8eb57a852a462532a63f
SSDEEP 1536:dsIP8OCkKI8RsGViS+1NFjZSrQROEjTPJ49njH9YCeqZ2hPrQo:v87kKI86GVtUmQROEZSnjH+CUt
TLSH
T1EC73194437888D11D7BF1672E4B04B6B8B32D28BE9C1E70F7DCCA6E41425BD15918BAA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

81998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\superpower\src\Superpower\obj\Release\netstandard2.0\Superpower.pdb

System.CodeDom.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 531fa18ce541280068f598344c358dfcda0505867588ea8e675c6037c5fa1065
MD5 66156debde466df99c6a36c77643370d
SHA1 d1825d37817e9d7a74c081eb4047a2652a4e8ad8
SHA512 50bdb544e7b8a3f6ce70fe5e90a0cc643859dfcd9152759223627aa6bbf96a686ac04ad1413daac547c81776cef1b1fcfd2bf3de822b0232898ae923e8bdb917
SSDEEP 3072:tMKminLBDcR+s0sK1eW0d5PIlwbrebRYSH+lKAgh1gGQWWA9:tLBk0szhebCSKI7QC
TLSH
T1B8042A6437FC8376E7AE6274F028092146FCE44E7283DB5A8D8955F55E23740EE20B7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

05:95:f7:94:70:31:fd:3b:92:09:f0:65:b4:70:f3:0d:0b:4e:0a:92:37:ca:ae:3d:a0:90:60:75:0b:c4:2e:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

178622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.CodeDom/Release/net8.0/System.CodeDom.pdb

System.ComponentModel.Composition.Registration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 eacccce224ffab38d7f2f610d14315e8c40947aa5bc1d9ec378e8a75a152b002
MD5 c0cc38f9413168df7958eec1e5c76136
SHA1 cac1c053931a9d4351a71105658095a6450906ee
SHA512 d2ab7fcb4795daec82e7dbdaf64a3eaa0a0391ca2a9114e551df7b3bc8124dc8b02a72f3205ce1f95fc5739c84ff5335588ad2947eca6571352beec970848fef
SSDEEP 768:cBTTadmhY4gS3A5qoaZ4zrw1L4dTsd5hlkOLNsCkxgHkvnSjQtazPi/9zP:aTTVTxA5qoa+siWhCOckQcuzP
TLSH
T17F235D1323EC8356EEFB4F787270F8180B76EA655902E26C2A9DA17C0967340577277B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

4d:14:3e:44:83:f0:1b:88:51:79:35:f8:8f:27:66:61:a9:d0:d0:a0:5b:cf:d1:45:00:ce:89:ae:8c:de:8a:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

43954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ComponentModel.Composition.Registration/Release/net8.0/System.ComponentModel.Composition.Registration.pdb

System.ComponentModel.Composition.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c286559b2363f309c1705cb6bc1e03a7a43b408ad03737f4b01452565fda550a
MD5 3aca392b983423432efd361a53b0d6df
SHA1 950d70cf0fc0f86af7fb221718a25391dfc746ff
SHA512 5b9f5a4c655bb9f13d05ddabe50ffd44dfb2c7f7ae03356029a2421340db2246f6904c0b7d36ca316c9c463d511acaecbacf449f6952d8911fdf5f3e3a0297b6
SSDEEP 6144:YuRKpVyg9MOhCIdZOkZYN3CtC+ah2GaQ7:Y6KpVyg90IdZOkGN3v2/a
TLSH
T17A544B1133FC0726E6FF1FB9BAB4841446B6BD62791AE74D2449A1FC0A63BC48911B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

02:31:ba:3b:09:07:02:89:7d:f3:73:cd:9b:a0:e9:0f:82:c7:59:50:11:90:8a:04:1c:f7:9b:d9:8e:22:e7:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

286918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ComponentModel.Composition/Release/net8.0/System.ComponentModel.Composition.pdb

System.Configuration.ConfigurationManager.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 551847e49fa441838f36657858825f818d84d09e8cd7b1d853c7278238d2a7c3
MD5 b3838601465c505e12ae4248e91ecb46
SHA1 2653d5b3c1fb64c60db5a56aef2ca5946f208ca6
SHA512 e0768a03ef41f8117b696ae2a2ee52b1e62b5cfe6a9cfe35f946e317a769a1fe3601165bba0eda126b8e2eeb69f4fbb3d29cad901c13a91007e1a3f1dc1e4381
SSDEEP 12288:DK+vtmMbtze6Yhe0AQ+2/NVQ8GLa0Uh55T3lEC/IOPbZUNZ70drAfOsdV0Z8oApU:DK+vEf6ZCrdf
TLSH
T15894F52633F8472FF6EB0B35E43950145EF1FD9A2226D74E5995B09D0C27B808AA2377
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

2d:ba:b1:dd:9d:6a:3f:43:90:bf:f7:3d:2d:ee:df:c8:f8:bd:36:1d:b5:50:aa:58:36:60:f1:e6:5f:71:af:0a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

436418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Configuration.ConfigurationManager/Release/net8.0/System.Configuration.ConfigurationManager.pdb

System.Data.Odbc.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6be159bb419d0bea3bac7597a36ed678d36c7009cbd36ac8149c11764c73112a
MD5 82c2fc83be2137b106c3ede248887b39
SHA1 19ad2f3062f0dc92fb5a58cae962adb7549e357b
SHA512 2372e7118e084a2e2633b7497009344d649a3310933dd1dbfb3b0609391bbfba6df27585cacb7616f4ded7ee978f156d7b62872502655410424634ccf5c72000
SSDEEP 768:WoouuzRsq0SQNDx8lJeZVprKM1SABm4fHL9fFJJGHOCfY1i79zzv5LqsjQtavY9z:Woh7RV8STpV1S14/3GBfKiBxquQcvQz
TLSH
T11AA3A43436B473DFD9AB2533513F0216253E6E929622C1BA6E59003B672BE716373E1C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

f6:fa:3e:74:fc:ed:f2:ad:a6:05:e0:0e:bc:2a:e7:99:d6:ab:43:af:81:fa:ee:05:5e:d2:f7:75:8c:cf:93:9a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

95498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.Odbc/Release/net8.0/System.Data.Odbc.pdb

System.Data.OleDb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e1ff488efbf9f0de66d2fc31dd393125edb6ab908611fe6ceee23eb305519d58
MD5 e0d575c49c5707064c97988a5f8443f0
SHA1 f819edf663387163557724bf4447013718753158
SHA512 9c7a52dc5194af3924c2e105f343d2b839f6cfe306876b0d97a8e8e044682b53d54c270ae74bdd2aaaefbb00dfa878c5c375df1043cd5ba78bac0ecf85309aea
SSDEEP 3072:T8Ttw4wolq21eyiWzlprfCrbtYC/J7NQYsoq:T8gilIrbtYC/JBQYzq
TLSH
T1AFC3786437E4738EE9B71537716B0115A938A6D26A13CABE3E4C500B4B33D7213B3A6D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

fc:27:da:ae:ce:1f:d3:69:a4:18:0b:40:83:5f:b6:c9:48:30:47:75:75:72:38:fa:41:8a:1f:f4:32:a3:13:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

118310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.OleDb/Release/net8.0/System.Data.OleDb.pdb

System.Data.SqlClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 eb4c01207fb5882cbb29d285c8be55134b91d347d4221d522638d383e046c06a
MD5 2771cde8b7b391276bf7c47c62d2cc99
SHA1 e8059c0c87f1869492bd814191d30f6ba993c0a0
SHA512 cc5a145ffecb9478e99d104ef51ff95ac4441e0e80928a29da5143cc7fa4348662bf38864568e53b1376a8cda5a989c877501b4374115e343460bda044913011
SSDEEP 6144:rW39cgagW4RDk7697zNQAkGF60FhFoFmF8cjcsc4FEFbFgcbFmFiF6FhFuFBFuFn:x4jV60FhFoFmF8cjcsc4FEFbFgcbFmF5
TLSH
T1BA44A62037E033AEE6B72673B97A00159739E3D36502C56ABC5D009F4B73E7561B3A29
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

dc:22:e0:5c:11:0d:4c:49:2a:8d:d9:37:0d:b8:19:9a:76:02:93:8b:cc:60:57:31:dc:f8:ed:2e:c3:f3:af:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 26, 2023

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

263542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.SqlClient/netcoreapp2.1-Release/System.Data.SqlClient.pdb

System.Diagnostics.DiagnosticSource.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 db468b6cbe25529c1e6716dc2773ba0ac28a7c64fcd04bf7c3735723613da132
MD5 1c1a06799041ec433f6d4aca7e563f13
SHA1 d44296373cd9c67b475cf46c494c9c2c7db9b91c
SHA512 f1754032a0fcb11e2553cf43b5e57c25c3270f7589e33a330f273f774dffcd046ddcd5da97ab7585894351dd24e4056ad2f283fd1c03f9eb0bc447563dd00044
SSDEEP 3072:6CJykOakcPSFwL0mpHWSFKz6AyUJv2vGQawG:dykl6FwIVz6CvvQax
TLSH
T1D8048C20B3DC97A6DFEF2B75F06044950F72EA57B113E7496F84A8DD0A13BC06A12267
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

20:83:df:f1:fd:72:86:f0:15:71:13:c8:b1:91:9b:fc:ff:19:fa:ee:fe:03:03:e9:28:4d:ff:7f:58:a8:37:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

167918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.DiagnosticSource/Release/net8.0/System.Diagnostics.DiagnosticSource.pdb

System.Diagnostics.EventLog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7b08af43a79421834112a693c6df1f8cc50de36fcc3c8fecb30186645f7ffff7
MD5 5616c5dae00e50daf385fa9e4ac7a815
SHA1 5b4ab54a63013b3ede6ddb0d392f19a6f3607b22
SHA512 43b0393690dcc301c1740538cf1fb216273372213cd2f4ea468aecce56a6e70d7598d0848d05d61a5e58807ffce632b257fcec807c9c0222d5d472dcd4af1f88
SSDEEP 768:ADQ3nDeK8ZHS9R9cMmaHlfir0TFqgWpGfmAXOaYfBjQta+px9z:ADQt8VS9RKb4ibgWpLfVQc+Jz
TLSH
T18A3308D19F94432CD9E67A33B67382AD063496E62D12C74E3A0B710D3A1EFC847E1799
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

fc:34:d1:a0:26:e3:b4:0e:3c:6b:c6:9e:8c:52:0c:c1:c7:9b:d5:c7:ec:1b:48:9e:9a:47:a5:e0:0e:fb:63:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.EventLog/Release/net8.0/System.Diagnostics.EventLog.pdb

System.Diagnostics.PerformanceCounter.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ac4b2c4ded52c79f3101829eafcf8a378c0db2c2cb790e181081142a78734c40
MD5 688e5c7e7a1466876974daf4cbf1ca76
SHA1 08802fec99d25003388289400e179f9bcff4e289
SHA512 ace5ca7da1a602e88109d190d92cf5a8ec5137baedd6e0acb3f98e0a14674108883d528e97d189b0265c0ccac54ab6e7e8933d3d89133e9aa9dbd91ee8bf145d
SSDEEP 768:7SfXQPsYcjx7t95Z+X6mDZC6rnMwnnkaOajQtaWD+9z5PM:m/QPit9qqmDZrk8QcWWz5PM
TLSH
T19333D709D3F9411DF9F74A7475B080320A39FBD26E11CD0E69A960582697FD0DAB2B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ae:12:0e:59:fb:50:f4:98:29:ce:ed:cf:72:37:66:73:89:02:e5:bf:70:46:e4:96:b6:a8:b1:c8:22:8f:41:17

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.PerformanceCounter/Release/net8.0/System.Diagnostics.PerformanceCounter.pdb

System.DirectoryServices.AccountManagement.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f7d003c1aceb5e7748dae77e7e776ab26132fe523244d20df22ad2549e1e4f33
MD5 baa38faa243926e69a21f30ee77d531a
SHA1 a2681c98cdc7a1ba16aa089872e09045d0b212fa
SHA512 211be8fcc1c749793b62bbc22f1ba44a8df53aa4c43f31b40cfd85d62d56215f2a6624416628ad37b1d22b99e2e4b3f8aea9eb04e2370a8b18a233e72c510f06
SSDEEP 1536:5lJHGR5CZAq1Pu2FPLsRbbHsMw44O4bniR6bfoZOoj1+QcB9zq:RGR5C2q15dhj5MZO++Q6e
TLSH
T14F63B4502BF8061CF6F74BB0F6B553248B36BAE62992D55E241E410D1C7BF808772B6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

85:d4:ae:1e:4c:5a:ea:c1:05:6e:19:b6:86:e7:01:db:d8:e9:f5:0d:37:4a:86:ec:ab:3e:6a:6a:0f:1e:85:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

63310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.DirectoryServices.AccountManagement/Release/net8.0/System.DirectoryServices.AccountManagement.pdb

System.DirectoryServices.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 95be8e47d709e5404a002c093d61cfd9eea45b497eeedf9cd647b3a581418b53
MD5 7beccc0ea4d6879db7fd2f35fecde40e
SHA1 f2899dbea8473849f5a6218c7b62f811912ea3d9
SHA512 4b98fe1889a2aa4246532fea3a293ad74d649924a26a60f91daaf7500fbd424adfaf5c44087998762d1210fbbb3fd5d1ae1637936bd858ed2455c1f4c4de6149
SSDEEP 1536:oHE3pFj1GY7xascPtUDNQa5YYpPMQcxz9:okr1GY7x21UDNXpPMQwh
TLSH
T18063F83166E65B2DE9D71570B7A7C3288731F2DA2F03865E381A510E145BFC0A3A37E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

87:fb:ab:0f:ad:c8:3c:b1:b0:f5:11:45:93:79:ec:b4:40:a8:dc:60:71:a8:45:71:79:54:1d:6b:fa:4a:86:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

67554

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0/System.DirectoryServices.Protocols.pdb

System.DirectoryServices.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5238b49d829460e71607ccc125a16c341dad5fb0033a085200d5459fbebe5690
MD5 af69ef3ce4d0ded524540f0c92047c2c
SHA1 7594a75e566a8a443e8220fe25490d9b1ab86c19
SHA512 020c45699b4c55acc388159fdd79aa836dead6d29c20b59b1aa1b9c24b82d652920d85e58d1a94f980675869136e00da434c40e0dd59f3c0c0a4ec6f944daecc
SSDEEP 3072:iXGpAxqWrGcqgP9b5pz6NjkU9hh2hNHbfvyQ9NM9:dbxcB9DzPvbf6Q9N+
TLSH
T1C9C381016BE4C75CE9DB1F31B164562C0A30ABD53D35C6686D4B023DD87AFE08FA26A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

65:82:f7:e3:cb:04:29:da:85:59:f1:8b:33:6f:a4:05:9d:9c:f8:b2:31:cc:65:57:99:f5:3d:03:98:93:f3:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

123658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.DirectoryServices/Release/net8.0/System.DirectoryServices.pdb

System.Drawing.Common.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e684279c9ba9d31cdcf7464dda0c38236225f42a28bf065302d4f5e882d65b7a
MD5 39fd4574d0c333e4d2644b38f6400eb7
SHA1 59b421a2ecf82ab8a56be5cbfa6188edbb58a6d2
SHA512 d01253656d6cda3f88a36426143ebbb9066722420ee055480834a426eeb9cce4f251238567252d046759fda8cfba3f19db5b38f11bf692bd47b4f0cdaa34a197
SSDEEP 6144:Gg2JrZYn1AFXnpMpEBamX4pwBN2/KxB2mGzQ2ihESSGsi+ULCikEMDSJcXpETuqc:GXIBwESJ2pUuq89Fmy7QU5E
TLSH
T118A46B0037A85E1FDA9F0B79E0620F244A72C91AA28BF7CB6AD6D53D5CC37549E112D3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

20:44:3a:50:ab:e9:17:25:58:86:eb:b0:4b:69:5f:cc:28:95:6f:08:1c:6f:11:6d:40:d5:2e:8c:50:06:21:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 16, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

468866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Drawing.Common/Release/net8.0/System.Drawing.Common.pdb

System.Formats.Asn1.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 03c3c660a65f9537cc0561c4f4475e34073bac6a342c28ea16052614c00e99a9
MD5 d0f98ad97a729cecec0d7e266c33a537
SHA1 43f8764b10c13bc8ab9d3e80fa560ddbe35035d0
SHA512 f79513f3ca6a1b86da476ab61579a3e545fd3771bee2b960ccefc7109d4dda9fb7fd75120612d08e31d937ac7ecc217a1906822f2b5b154749d0d2428dbd6d6c
SSDEEP 1536:6d6ao832Gr2NXDjVkdfkWqlNXgvvuG4krZAuZcw4SZV/WeUlQeor5QcTzYVG:k6AGGKNXdZ/FgXuG4krZAuZ7ZV/WFOrL
TLSH
T143934C0CA7E8C322F5AE5774D0F1C1268636B1ABD792DB1D09CD54686A03BD20987DBF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ba:fb:ce:8c:de:f0:9b:ae:b9:6e:8f:d7:4b:43:39:f1:a2:ab:ca:e5:ed:c8:db:02:cd:5e:06:05:69:d7:2b:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

90750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Formats.Asn1/Release/net8.0/System.Formats.Asn1.pdb

System.IO.Packaging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 777132bc0028e550c7eea920aa11d3a123a626cf513e4e86f9502cf7c949f41e
MD5 b362051e45370529cce637d8d33ea199
SHA1 941a98a9516894c12f866e1006f9027ae8b94e5f
SHA512 ef2afbf2322947dee358fc84ca6ce73fb06be6d26a4ff268ce8b7dc2062d1c0f45d2f90c6b6eeb6533b3ca435124766322f2fb8c25963e7db311d74afc518de2
SSDEEP 3072:AhFLxn3nEdIhAGE3XFFA6IxUSaXoHWLUQUsoM:A3l3nEdIhGovaYtQUzM
TLSH
T19FF3085133FC060EE7FF1B75F9B461218B7ABA52693AD75D184060DD08A2B80CA72B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

f9:17:b6:43:58:52:a3:46:5e:63:45:e3:03:40:73:50:f8:b6:af:8d:72:2b:7c:1e:cf:bb:b3:8d:cb:58:f0:dd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

152134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.Packaging/Release/net8.0/System.IO.Packaging.pdb

System.IO.Pipelines.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 54ff443a64d5aa8f4cf8373dd0638013f786dc6df3a6ea5ee12cf9773bb2e29f
MD5 7c7f6d18db5b10e03404a6ee6412c9a1
SHA1 cbb45618adc0543045c5b8395391eeae3faf6a82
SHA512 d730f4d031d95d9fa5a0a8627e7268f713770a978ce44a3957f81e37c832eb2e7cf166e07fa5d223c2dc7ee751559c889dcd83ed31dae0692df33a8d228bab15
SSDEEP 1536:VcXU2Qn3G7yknXerqXVR2wLLCC4bgN0xmR9ewEWTvzIkC94RyQccM5zp:0GMvRWC4bgN0xmR9ewEWTbIkC94RyQ+t
TLSH
T1E2735C6953EC8717EBCF0ABDA1B191130FF2EA516913EB4E988CB89914C77D006252F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

53:33:f5:b1:87:6c:e5:b4:c1:eb:5c:dd:d6:29:9c:2c:95:66:6b:37:ac:a2:55:1f:c3:58:e9:24:1c:d7:fa:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

72606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.Pipelines/Release/net8.0/System.IO.Pipelines.pdb

System.IO.Ports.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f36d00c2c7de92f9d6459c51367f7d3c60d61bb6eda2a3c0d2c33a24b1ff192c
MD5 ed401d56bfea18df1776ee4bdb542113
SHA1 bed44e75afa702ff0a39b8a86a62579c2ba5cda1
SHA512 8c4da7edbb7cb06ea0ce0f02170e02b2ced0fa284c86bf1999e5a3c17badd7fd195f697d7db82f414a1e92f4882ba655981de7b5d252f4d1973cfcfb8f1b274d
SSDEEP 768:bPzSZiAAR6pBzP+4Cgn19f8IjQtaU9zuEHY:yZRAReBzW4n1yKQc8zbY
TLSH
T1C0F22A4677F4116EFAFB1E7065B186394B31FEF63A03C64F1466A00D1A6ABC04761F2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

42:dd:c9:e2:9d:88:e7:03:a6:53:c3:36:63:9d:9a:5a:43:8d:4c:b4:d9:2d:6d:53:94:a7:fe:7f:d1:15:4b:90

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

31142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.Ports/Release/net8.0/System.IO.Ports.pdb

System.IdentityModel.Tokens.Jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5167194a5ea5d75599b6455c8fd92174da8ad38eb56edd5f4d5967865a05d275
MD5 ada5361a0f20b2ff6c76a7457248e382
SHA1 9a94e58c5421e4134869a13a2e03c0ee97557b9c
SHA512 f9225f38262acbee7fdef2e9517bae3103f13801ebd834a360f87861552ff5f583800271cbdf479a3d84ca12ca01440c3f54cdd8505ed5a9c5f5fa689419dca3
SSDEEP 1536:ix32TY/TT2KGFyukeN9XNEgfpXaXr0iMJgBGILkDzVZl0+88niFF2G5m5bwoPtJ9:MWEukeN9XNEgfpXaXr0iMJgBGILkDzVr
TLSH
T10693B4543BFD8209F2FBAF3D68B05011497ABE4A9D30D74D19A0A68E4877F808D60B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d9:17:1c:7a:58:ec:89:46:d4:43:8c:f7:f6:08:9a:25:cf:f9:80:ce:68:d9:d9:64:7b:90:88:e1:09:f9:72:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 12, 2022 - May 11, 2023

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b5:ad:1a:df:d7:85:70:6d:13:00:01:00:00:01:b5

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

85558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net6.0/System.IdentityModel.Tokens.Jwt.pdb

System.Management.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d4994c984eaf4b06c065ec1f7b9ebe3c7014f192ac3af45721249e7521325429
MD5 f19c3c7f710f18d90218a51923a79136
SHA1 84545e5b1648793e0be6403a61329ba640542338
SHA512 730e607632090f611938e006a910d950e36f2cfd1593dfbdafa2153f71612d0294394dbeda6dd76e59401a764f3204662c1294fdad3e11f1170f6c43f76ef9a6
SSDEEP 768:NV/2DXm3gh3nb3Wm/IyTVESthoQDn3kiSLJKdbDRjQtamnio9zWE2:H/UXmEnb3Oev2QDn3xS9yHFQcjgzx2
TLSH
T1F373A311EBE88779CBE70671B47083746F74B6C72D22DA0F291B221D187AFC04B65E66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

24:b7:bb:4f:ef:a3:de:4b:4b:ea:96:63:8c:1a:61:b5:cc:66:a2:7d:f7:23:87:79:01:b8:f3:46:1d:a6:68:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

67714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Management/Release/net8.0/System.Management.pdb

System.Private.ServiceModel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d1f4c9564aee3cb1c38cb7c3057e88bff5ded9b20e928209f1d3284776b49ff
MD5 421b94236c6acc9562f8e704ca4c9f89
SHA1 dae26707c30d63264e2b522c0ef7fc8887526358
SHA512 9fc69fc306ac500e8b7b85c7e306a4c614da465361963848df076354e824416b59819f3763c91718cc7ff6f62e692c7e35cf8bc32055376be23811c380171d35
SSDEEP 49152:NkAeDiJOyBLPWjEcWCdK0AeQTxbM5oJGJuh+QR8Cz:ciJOytPHv
TLSH
T16FC56C41B7E88F19E1BF1B38A4711001A7F5FD466B03E39E5254E6AE6CA37408E62773
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ca:4d:50:dd:8f:47:7c:fe:e8:31:0d:32:89:5e:2f:f4:cc:05:09:96:13:52:47:cf:79:c5:0f:00:09:2a:f1:ba

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

2681282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Private.ServiceModel/Release/netstandard2.0/System.Private.ServiceModel.pdb

System.Private.Windows.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d756825a5b96af4b40f30d4567707ff1a8b5e9051b668d91a37f246e736726f5
MD5 b2e08e638bf52fef4782dcfbe014315d
SHA1 6bc574e1aadf4e75ea4760237e421f25dfa8ec4b
SHA512 0e23ca0a1978adee7ffb2f8d8945f71c91934605d6d195128656a01da87beef98ac9707f36fde975caa5ab21e9c959809002bbe929ffc09b01e8190f792c6005
SSDEEP 12288:5pIbbvnzBjfo3BjlbqB2hva3Lit7D9hRNTEh9W/s:E3vNo3TNaOVhhTTc1
TLSH
T18705D350F67FBBADFD4859B0B43115C648B6508BA1CAFEB883C9EC90C572A9B0D144F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

1b:7d:7b:d8:bc:f2:b1:40:ca:6d:fb:f9:ff:82:ae:6d:b9:cc:6a:4c:2f:e9:06:79:94:3b:b8:30:c0:71:07:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 16, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

849774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Private.Windows.Core/Release/net8.0/System.Private.Windows.Core.pdb

System.Reactive.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 626b01d9a0a19edaf345f2fb1cbf549d4f8cb725c06ea7898133f0bcd65449c3
MD5 810c6e76e943152e55ef5dc33f6ab15e
SHA1 0ae64001f1f1a105d372be3d2416612cf48cff4a
SHA512 105324876071b6112a927368f142e395f06a3a9128af2e02165f6cde8f77f64db0d0be5e3a4629a1fabd20854e876f667f590171c09b25437c886456ca661490
SSDEEP 12288:bYb3Bh0aYks6/Pd2YwUj9inv7X9aIsCIBRmPbE3:KBPPd2Ywq8oFBR8E3
TLSH
T13D55F91EBF4BA955C4FEC6B3103729623B72E897C3539753106DD6B02C81B2CBD486A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

4a:18:76:b2:de:60:4a:a5:b6:1c:48:eb:be:c0:f8:78:1d:f1:fa:5b:87:28:89:0c:8e:77:ab:9b:5a:ba:57:54

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=Washington,C=US

Chains

May 21, 2024

SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=Washington,C=US

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Serial Number

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 27, 2018 - Apr 27, 2028

Subject

SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=Washington,C=US

Serial Number

0b:95:63:98:10:99:08:cb:58:44:18:8e:80:b2:f3:2c

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 26, 2021 - Jun 22, 2024

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

1339362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Rx.NET/Source/src/System.Reactive/obj/Release/net6.0/System.Reactive.pdb

System.Reflection.Context.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e8b06f9b99bc441493136ee8ced2b078e6d9489b94f1c7f752e43d5c525bfcef
MD5 795864c655a963d0a49c0744dbd962b2
SHA1 0d9d18c4fa62d9a7261c103ea7048daa25724acf
SHA512 1b9b821bc1fa40762c212432722a72b7cc78f7bb732065268bca7823587c3beda18167f966aebb9ddaa1628e6676d526e4b6cae89fdf9a04c8eade6098a92680
SSDEEP 1536:23l4q9SGcezhEpn8T73cAPsYW4ZPyoG00Qc3kzH:c4q9SWzhEJ8TgAPjZ6ov0Qhr
TLSH
T13383283DA368CA6FEBEF4179F224481157B1C6563123FF1D6A84ED8A0847BC12722277
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

05:f1:40:ee:25:67:4e:86:ea:a7:00:91:87:c0:fb:03:fb:06:3e:10:80:e6:b3:da:a8:bb:e8:89:97:7a:96:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

78102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Reflection.Context/Release/net8.0/System.Reflection.Context.pdb

System.Runtime.Caching.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5535bbd96421712089d1aafa980facf4617bb17db66c02651bdb1ede217849a2
MD5 e71cbe3b855beb9a59ddebd5f150a71d
SHA1 a8e49f5ae20566c3c8321f72c878d5ef0603279b
SHA512 5a6405bf94d198cff37b557da4a1d6822eab172dbeef52d07c3eb44842a56ec0064f7346700c00739eff307d244e9bf7221831ad7b92e5a33e87af03225f593e
SSDEEP 1536:VrJDH1zgbkXUZFm6FYFY5eOWRd73fyzlQN3XT8bvrFAFGi0c003Xjpyfox8jJSLF:V/zgbCUZFm6FYFY5eOWRd73fyzlQN3XZ
TLSH
T134936C64279C865BE6FF96BEB0B451630FB5E796A402F38E8C5870BC0547BC04B6127B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

72:f8:85:b0:d1:ee:9d:04:e7:81:57:b1:e2:92:9f:38:34:85:b6:99:93:de:e6:6b:8e:04:a7:d2:b9:ea:7d:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

83710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Caching/Release/net8.0/System.Runtime.Caching.pdb

System.Security.Cryptography.Pkcs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 caa14729797cf815a408f0df8606b26be03c6520834293f803217ddedf84de09
MD5 b2e6f373bfdbd922eaba8448c97dbf4a
SHA1 493940a85dc1d0cc0576217febe4b60a8e776060
SHA512 564aa5b02b1b6b3f99d0e301e20b03f6deb0399af0367541c6f8bde79866963438d189157478255bc25dfaa9083dbdd69e90c915453c8cf75a43f561394fc6d7
SSDEEP 3072:5IlpoEZcUKDQoL46Y5pEiWMKV4GZMrybUeFk1XkxcEOur73krZjnJIQJ2Kr/3aEl:o0Vi5KVYIk1UxcE2JI/KrfdrCQSm
TLSH
T1FB44181877F48369F5FF0B34D2B054254E39F9879863E31C188A69EE6523B809A10F7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

bf:2d:ec:47:ad:ea:01:71:8f:58:69:42:f3:f9:b6:a9:52:1c:74:72:4c:04:38:a4:e2:5b:77:47:ea:4c:21:fa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

258310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Pkcs/Release/net8.0/System.Security.Cryptography.Pkcs.pdb

System.Security.Cryptography.ProtectedData.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 21ca9f4741b08886aae8c28ee656c89bf7cea140ad2334df1782099dc26ce92c
MD5 300d62aa211482e62f55dbaf666bb7c8
SHA1 2c1a77cb861e6454eefe3155cd8b83eddbf63069
SHA512 75a3d9defe8c554ce89a80140c221fc61abf0365e6b9e7dbcfd7f28ecb1b1d7dc3b12b63fae8855c1c3646d8aeb1c874b09e2a1dfac1196047dd6806d419109e
SSDEEP 768:9iw9pjvXYwx7FVx7YvcT+CxqBchujQtaHFg9z2:9iwLjYAFXflxHhQQcHqz2
TLSH
T1CF035B11A3A8277AEE574474BC72E44ABC389386C412FF3EC5C9B14415B2B859B317BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

01:f6:fb:07:0f:ab:25:1f:c2:c2:b0:02:72:23:aa:76:1c:14:8e:4d:11:4f:f7:ad:f6:aa:f4:b9:6e:66:50:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

32222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.ProtectedData/Release/net8.0/System.Security.Cryptography.ProtectedData.pdb

System.Security.Cryptography.Xml.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 36beb61f7e44e6e62522366d89d16295172cebbd30fc756544e7647b91f08567
MD5 164ed94540896347931a4069cde9df7e
SHA1 ee79018d5784aedc7dc74cab9628c449eac602e9
SHA512 e2746f493661b47946e84acae463b10d0e9e32c1e8a7dd5778114c26f51a71451152348b4e23ad4a5e087a2a91a6939ef7be68d16ad6ef24b043fc71a3d3ba34
SSDEEP 6144:nyKioPdFDy0H1xwoqv/HCrnguEHd8bO59Qy:yKioPfyQrgv
TLSH
T18014082577F8460CFBFB4B38E5B060215AB9FE572862DB1D1E9121ED0872B80C621B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

e1:05:6d:04:66:7d:c9:e1:b0:49:7c:36:df:ff:75:cb:d2:75:d8:6e:2f:a8:db:0a:43:06:a2:b1:cb:7b:28:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

189666

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Xml/Release/net8.0/System.Security.Cryptography.Xml.pdb

System.Security.Permissions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8a4f58a4a63072a26facb578faf5e976e047286c9e333fae744f6cec3cab892f
MD5 d6148d33eeef47e2b200b3fb40719ce8
SHA1 88324fc29d47a2513bfc690190dce10c25ff2493
SHA512 1f1e91ebae4127c5c15399147de92bf6f0c31e2c7232fe15d23750b8a903480a5d62401587ec7d438028485d1cd70cbea32a5f7c9fb2cdb911f7fe357ade550f
SSDEEP 1536:aQKCqHNruvu2cfy3X9tlzoGlGNwDkp4BIPLFvTbUB2VxbX1wQci9zwj:gH9uhcfkNtlPGN8Q4BIP1Y2lwQzMj
TLSH
T143B3F759E3FC5B3AF9B6AA75B0B441210339F6493422E77D471C9A9E2A237C05E24337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d9:f1:01:4c:0e:33:e9:19:0d:7e:b6:46:b8:dc:5d:e9:ad:2a:05:48:f5:5d:68:7e:d2:c1:6b:ca:cc:ba:03:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

111006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Permissions/Release/net8.0/System.Security.Permissions.pdb

System.ServiceModel.Duplex.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 68dcd35d5217363479092725783898ec387f2d2882504ac0337ed8f924f9d600
MD5 18d1ed6e2481abb5d32653529cb58f48
SHA1 0849a413f47e9826a3cb1dfbc04404fa8862014d
SHA512 4edad33dc7c19d9e09600bf95018605b5134721a10dd09340a3bc058e16e6fc22b308bfe0d09436b96b8150de2bef58a88924538888c772b6b647e59f9f714b4
SSDEEP 192:tZT7xHHqW3OWjeWvcuyjS7HnhWgN7aIWh+h+Il+jX01k9z3AZCwnW1:b5HHqW3OW77HRN7DEjR9zYCwnW1
TLSH
T1B06229A1C7AC8303ED975EB092B9D9433E3C67D35E10855B1292E5252CA3789DB31B3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6d:54:f0:10:14:09:df:c2:09:e7:17:f2:de:3b:1a:ae:75:00:0e:53:78:ec:43:10:b7:fe:f6:f8:a2:aa:e6:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

10562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Duplex.Facade/Release/net6.0/System.ServiceModel.Duplex.pdb

System.ServiceModel.Http.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0c62df23979a5dca0d42e80734be3aca4123c21ed5b838cc2c6a13abd9592fe6
MD5 3de8d3d316f332fdba6bf21e249134c3
SHA1 6c9e89a91f68b1128f1c3875aa681164a53c6c15
SHA512 9c1c7a25187d170778c1c73700e65dba735eb648abadbdba5a9f7e4ea427e7b3483ae5566d188b8cce5d10108d54fe23ed8db0c1d446ef79333b703969b13304
SSDEEP 192:MkGgrixlsebWR+WGeWvcuyjS7HnhWgN7aIWhtECh+Il+jX01k9z3AZC7rM:myolsebWR+WA7HRN7e5EjR9zYC7rM
TLSH
T1D0724AA1D7AC4603FCD76E70A3FAD5437D3D27D24A20962A1253E41A18977C8EB3076E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

78:93:d1:f7:26:4c:0d:93:ba:fd:ea:f8:fa:38:2a:bc:26:0e:27:75:43:99:fb:00:25:97:9d:28:93:68:8e:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

11418

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Http.Facade/Release/net6.0/System.ServiceModel.Http.pdb

System.ServiceModel.NetTcp.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7cb705c35a0ac50774d4d93a8f536f797caa228a431c3decdbda14c7dc51c049
MD5 68ca730fb0dfb61df805c71dd545e10a
SHA1 a63265e88db2bf1cc3b2a4130edc192da424e384
SHA512 c45b62296bc3056139f651f86260952beaf2a2420740e971e999d301305f7c5062b8747fbeb203f7961a48841805bea061b07a1f5f15bc05234e3098b025d02e
SSDEEP 192:8/eqztLPx7cZaHWXWW0eWvcuyjS7HnhWgN7aIWh+ACFaqDu0K9X01k9z3A2yifSZ:JAtd71WXWWe7HRN7vACFYj9R9zVO
TLSH
T1DF624A96C7AC4207EDAB1EB056B5C9433E3C27C25911952B12A6E91928D73C8EB3077E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

c1:77:fa:c6:a4:1e:74:1a:db:b2:3f:4d:7d:4f:40:59:70:aa:ea:f2:c5:f8:eb:4e:fd:83:e0:17:53:49:a7:66

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

10826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.NetTcp.Facade/Release/net6.0/System.ServiceModel.NetTcp.pdb

System.ServiceModel.Primitives.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 396d27f853e4e3dcca6a48cccfef9cc2ff6034e9a91007c002e444c05f10738f
MD5 b64d33749b5a768e8e8de6a99c78bb64
SHA1 dac074c496110233a253c698232f61aa05d92525
SHA512 8814e2411e6c6472f7b34d1fa10fd8bcb4ff14d2eb3d431c5aaac5c6d3b1b7e7399b773ebe773cd4f5119a2e2eba30fced1dd8113aca43eff69b1cd823ba49f4
SSDEEP 384:LjHL/+FpWgGoCYeNyPy4WDEW5l7HRN784l8R9z34Wqe:LjHz+CECDNykF84lQ9zoWqe
TLSH
T149A23A91DB88DF1ED8CF9772A9A7E8472BF617C0283157AA5298D6471CD2BC0D73130A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

8d:32:08:22:bd:46:52:a5:11:de:d5:82:99:49:bb:61:40:bd:37:23:2d:de:8e:90:0a:30:63:44:30:9b:02:18

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

18026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Primitives.Facade/Release/net6.0/System.ServiceModel.Primitives.pdb

System.ServiceModel.Security.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 22c85e3a89c6bc7954a290808ff38881aa424907e0653fbc0bcc775c880204fe
MD5 1a2e952124fe28b84c337185a2271d07
SHA1 7ef813b73a37703d80b46abf44273e68a7636330
SHA512 ca6508c5ac8aba4cce99d1baebac1853d525fc463845d983afe99399229a48abc3e6211d1890113006b782012be0273b31eddada10a001d193f50f7d4e79bad8
SSDEEP 384:CIiGF8A89dLhMW1gW/7HRN7vOCFYj9R9zVgN:piGKrX1xvtYj/9zC
TLSH
T172723985C78C4723FC9A2F30A2BAD9177EB967C22912812B5795E5452C837CCE7303E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

97:0a:a5:01:a7:e9:b5:84:25:5f:18:f5:f2:19:eb:96:aa:d4:eb:9a:31:2b:83:7e:4a:d5:56:10:75:2d:d0:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

12654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Security.Facade/Release/net6.0/System.ServiceModel.Security.pdb

System.ServiceModel.Syndication.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a126e902513be87abd516559bd6ab357aa6150754cc8a7b90be8c689b3ea685e
MD5 9bf0f092dca24f4ba221edef2d3d7a0f
SHA1 e82581c496d491035deeb537a3e88e7c483591c8
SHA512 4711a01e117ab173dc82e5baa6d403c1cc66cee4b504e106ff0be06482cdf63db5d4c0b769c3edd08a085ebf2cdcd6b46b178f24fa4d5b454b4500896a88ef23
SSDEEP 1536:ESUWeZyOFl2ujnqlbJ7U9JwthlKNxUKgqW25O+wqscLBJs4r9QQcdQz:ESUWjIZnqr76mth4NCr0scLBjr9QQj
TLSH
T11DC34C28339C471BD7BFA2BCF570504986F4E35B2413EB4E4D94B4A918A7BC0B221D6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

b7:0b:85:70:4c:45:7c:6a:36:2f:8f:ef:b3:25:57:d2:d0:72:bf:98:a7:ba:91:48:11:69:ee:b2:39:05:08:5a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

115970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Syndication/Release/net8.0/System.ServiceModel.Syndication.pdb

System.ServiceModel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4abfc874b36be6de244f3c54ac807229ed6435d4e15184f652a9ee48254b449f
MD5 468aeb5217a0ab468746bb6a697983d7
SHA1 8fcb32e6172bccdc2b9884bf7e92bd41fc8bde7b
SHA512 f821ec8ac0c39705cd99c62e5d8e8f3fb7fe28fa9ab80d134c5b4b6c0e5270d8fd9957f78986dbd272fba7768fc1c11ff6a57a6539dffc5f6b850255390eca6f
SSDEEP 384:3vvglJDNfBt2rDs//wn1AE6WE4W67HRN7BCFYj9R9zVD9D:3vIllpqvS/w1oc2Yj/9zLD
TLSH
T14EB219D1D6884F62CCCF57B0FDB7D0462BF75BC268326326519A985A28C7BC49B3134A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

2c:92:e2:d6:0b:8c:7c:ea:33:56:56:5f:86:3c:5e:cf:88:92:92:5a:21:ea:4a:9b:ce:38:1f:8d:2c:40:3b:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

20138

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceModel.Shim/Release/netstandard2.0/System.ServiceModel.pdb

System.ServiceProcess.ServiceController.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0978e54d55c7a1d18b131936e8437a4be13eecb83bd3cac95aeb1487c50bf997
MD5 17e41706a21155f4a6f14450f062bbee
SHA1 22f61712192a2e6788f0cc81c070f19c7d6549f3
SHA512 dde69058d98e2eb97cb8127706e26e4fc79718b114e37428649c5a660d210662bfbcca82cdd7cd01921febbb2f9a59e70b3a7e24b0d7d2c99f3f74afec9c3a45
SSDEEP 768:v+ikccy/ENTb7NNiYN92D1NlmBjQta89z0Z:v0cZElb7NNiYN0aVQc0z+
TLSH
T148E2296597F807B9DEE70EB0A8B2C3650E3277C70D05D71F24A9A0081AEBFD447B1629
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

c8:3c:80:db:3e:9f:8b:18:d8:df:7e:e8:dd:5a:53:23:09:0e:fb:9e:5b:71:e2:d8:4c:8a:21:65:e7:61:4b:db

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

28278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceProcess.ServiceController/Release/net8.0/System.ServiceProcess.ServiceController.pdb

System.Speech.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 55d68a8036321990cd03c9c837eb3ad3be855887dbf1df734321a12a115a89ee
MD5 630a4b8c61e1534e6de62a192a4e5b08
SHA1 7402b9476e5c7f0fa2a75190fb760e5bff20e065
SHA512 3a506d5ad5f19f35ed6d55e359fe519c3307b3e10971f9f3758c9e8947b1133c9586396914b3d1e4702913021c3c15a1e530b3605f0e7ab8c603cc5c5acf5631
SSDEEP 3072:IygrtNNYwJUpDvW84D2iKRAONJbCc/3j6c/OpRqjAkk9Ds1X5+Xgr39Iy+jfQpSA:IxZbspDvW8M2iKtzvPSQP
TLSH
T1B86481493BF90249ECB6463C64DE45353B39BD9A3A13C40F0756B53E38A3B44E2E19A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

80:53:c6:20:3b:f4:2b:c8:c8:d0:c7:9f:ad:d8:73:00:97:25:13:04:a5:00:63:b2:96:f5:2c:03:39:a3:5d:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

303822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Speech/Release/net8.0/System.Speech.pdb

System.Text.Encoding.CodePages.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 88e6a289a609ec03c2b5cdca68e1bf94928ade3b285682b59ac5db8cb02c7947
MD5 43bcc5b0eae4d33fac1b6f1049632c2d
SHA1 08d33cdf2c5849b1fe38fb9bb2ba4addaa256590
SHA512 95546c8fdfd1bb0c9438c87c664d2ae85eaa7d030a67344115f5984f3e41ce9e3ea06bfca74a137e3d3bb00a282ce3fbe71a8e4e5f92aa169dea402e9e6f3282
SSDEEP 12288:3Q7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rtpX:C9km6k/IwRYbiBeKGC0R
TLSH
T1C1F4AEA096B59B17F9BBCD3197F13013DAF6AC567E02483BB952530684D3BF019C4A2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ce:64:01:0d:1e:d9:f0:0f:46:8a:e9:61:fa:44:82:e9:af:5d:53:1c:a3:09:60:e4:26:e2:21:16:97:08:62:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

735518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encoding.CodePages/Release/net8.0/System.Text.Encoding.CodePages.pdb

System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b2ce8fa6cdf16a0df544c0560857551a0b4e87a73a12ec5625e399eb3c890d3e
MD5 9879c1cc2cbb7101aa6f189448c90c51
SHA1 54d4b3b5646af3cbf13a6a70c866bb6f5269cb67
SHA512 a24873644dce1a955b5bc2c1311d90aa0f64d008c38a245bc668320138c2cf60b4593c4020f4b5cd5de752bd04ec995a8b5594cac33b43b42fca4a6c347de90b
SSDEEP 1536:7SLlE1mZD00tqhmtB7WW5kvxgsMy4gOE3P6LQcrYz:+E4JVc8FOlMRgz3P6LQR
TLSH
T19C635B10B7C8D629D75E06341CE08071ABB8AFDB4126A6C72C847E4E17B37C8AB1D1DB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d4:68:04:ff:0d:a5:1f:ba:1b:d4:f7:53:91:a6:e0:f0:3b:8b:ed:3b:f1:5f:13:a4:32:32:ba:cd:3e:09:70:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

65038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encodings.Web/Release/net8.0/System.Text.Encodings.Web.pdb

System.Text.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f152a01acf7dc4239313908d2e6315eb4bcf67f95d45f64eec1bbfeb04b923f6
MD5 1461946aba2f5dc4f13b89122706049b
SHA1 6fb8de06940665f9120e5e102cc76cdddc059e6e
SHA512 f2e528df308cb9e07ca5e2eb572f3944adafeb97463dc6c1f05d267b49cbecfc44386392832357f00bda882a7de72332a1375f975e1c2276bb8851ea5762bbcb
SSDEEP 12288:0v6T7sdHBPuvlJfxNFW9Q2lHAcCGA3oEhGxwEkn7qqfHFUl6/v:0yT7sTPuvlJfxaQ2lHAcCvoEoiHUw
TLSH
T1F6D48C11FBDC9F2BE5DF0336B0714010ABB6E56AA79AEB4B945090F92C43F846D417A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

1a:af:c8:47:1d:8c:7e:68:84:63:54:0e:b4:25:a3:98:b5:48:32:b3:81:2f:a9:da:7b:d9:eb:2b:92:33:bb:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

637726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Json/Release/net8.0/System.Text.Json.pdb

System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c70e487dac272b8012dcdb458dbc2796f3ed017386f940828e5764815e05c252
MD5 ca216b43955074e72f0803b44489a3aa
SHA1 50fb0534853ada19b89d5455a8b6cf3ad99065b0
SHA512 587dfb3a04be402896c33a2a2091745b133f1655d6f90633e6ebc173685f6c925a6061e1185f8164fc0206847ce8fd45c5aba74a4c10be94a90abef8de16774d
SSDEEP 768:ihFdElflmlElHlEl3lEl21qwbTcTf87GXjQtaOQZs49zeH:i+wbTchzQcywzW
TLSH
T113E2E912B7F8022AEDF74A70B5B187755A31B6E24D02C65E3456B02919ABFC0CF62737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

66:76:66:57:b0:01:35:5d:d6:7b:9b:ea:8d:f4:61:df:d8:34:60:eb:15:29:0f:63:c2:23:c5:27:4b:be:a0:b2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

26574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0/System.Threading.AccessControl.pdb

System.Web.Services.Description.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 265e4817c56d07bc8fedf8e90578b53e6d7324899ee54aff7ef02099dbdad6e6
MD5 e2af84e8345bcfd86e3de7bf07f85dbf
SHA1 e440b9a309e5215a474cb891cd02f6bfc03b7a77
SHA512 dcb8864469df0980e898baa33ce01188c4f6ed0511e212f085674c30cb8070eaa1b6161584808847cc5ffbaf1f001486bc39c8d8a9bf6a5f65aafa8cb7c81c44
SSDEEP 3072:NJureGHKh4csNY8CRGGZ0dZj4ikMLIcm1wLCEkW3f6sAt22wzF/DVYtusEox5I6O:NJyMNwLpp5WYoEdPt
TLSH
T1E58420427BFB0D04D17E6F6BA53220915A7BBC1E1CB5E1AD24AEA04C96D3E01D463B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6c:49:58:bb:64:d8:26:0f:61:6d:84:8f:80:d0:2c:67:e4:e0:c2:86:b3:54:a6:2e:96:80:e1:56:5e:b3:67:06

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 16, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

380086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Web.Services.Description/Release/netstandard2.0/System.Web.Services.Description.pdb

System.Windows.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5ffbd68107dc5b42bc0a4f76e4d5e571b696fede28dc306c2b61d1ed56b4577b
MD5 c2586d287ce3a77f1571bb412885e2e0
SHA1 844ac136f3201fa458ba8016c35910e976b00270
SHA512 c1776ba02bb62ba7bdf2eb0298e091605d59830df08addb48938cd53a0f6732bcc1c078d0a8882656040b8609fb5ab89fd9d47329aacd716fa994dede45af92d
SSDEEP 768:KD33333333re09kBZ2d9G34ijQtaCCY9z:KelBQd9G34UQcCCQz
TLSH
T1B3C26B65A7F48336EEFB4E31AAF6D5011F38A3D51A02CA1F248AE1085EB37C44772325
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ac:19:cb:5f:62:a8:43:8e:6e:76:2b:05:99:4f:d7:54:41:13:dc:b8:3d:ce:e5:b5:eb:b4:55:2d:9f:10:dd:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

22354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Windows.Extensions/Release/net8.0/System.Windows.Extensions.pdb

TopShelf.ServiceInstaller.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cfd1797986ea2949c42cd0a615070331f13dda1a1f5eb2c764dc6a2ff05f2f2d
MD5 b3937103930c424754ad0b28ed50e47c
SHA1 46d748467c046791bb77db3bc3f0c348d92339d1
SHA512 1aa3990152a8f150b51f7f3c275fb9c5f8f7e85eff24034e47655146ff70bab873a67a7f997546fac4b8feb751a79757502b6409dad5124a92d0a89c859fd669
SSDEEP 1536:aQriJzOxZxWZhjj7YrWK5dTuw67tlnxRtCknChoQGdio:aBIxUhj3YrWK5NmjBnC+Qy
TLSH
T1F373C540B7E80678F5F70B75BE37505289B5BD952D22EA1D16EA004D06B2EC8DAF2373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

78490

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\topshelf\src\TopShelf.ServiceInstaller\obj\Release\netstandard2.0\TopShelf.ServiceInstaller.pdb

Topshelf.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b4a6f3c582cb4c5200b75ac202db86e0de40b7ddc82b80c8382a0328730368e7
MD5 246257ee3f5893b2a3fd9305c315440b
SHA1 14468c1e216b87da961cdab01a8c6ad9df667770
SHA512 a10d1780f74d93678f5cc3c4e76cfc8dd81ba6277e29b2864c31ede4a97698617305f7d84bab8ae87bb50ac22b76bfe6da69024da6a754be4ac36c6f4b039f2a
SSDEEP 3072:QovXyPYhIOMc2HA3MoJi8+m3QoBiERzntLbkkJAOg3A7x5WUjvmPAhwHKPzbxFfB:QdYhIiptP1FU7UjePAhwHyn
TLSH
T1E0144C0027EC0722D5FF1BF5B8B014418FB5E917F5A9EB9E1A98B4E50A93740DA613B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

198970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\topshelf\src\Topshelf\obj\Release\netstandard2.0\Topshelf.pdb

WebSocket4Net.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bbaf622cc3f4b512c6c131ab7ccad2db6b0662c03367afc10f1aab3deff5efcb
MD5 4ce1bfb17e847feb3e7ecf1cc33df731
SHA1 3e48d0f7f5cd8a618d2f32c6aa08cff0c3c61c49
SHA512 1e2723f0c10720d0491e0efe1ed7d123db94ae8eaa8f3c82771502bb10fd0392096578ae360ca308735ce319d37efead6713d12c8b24cb8209280f5e470c5da8
SSDEEP 1536:MoNIglS4xUF/NWN2MPilIlLIoSBlNcIguQM1:MMIh4yNlINIoSWIguV
TLSH
T1E5535C2A77ECC663C7EE1A75F030422107F6A5097E13EF5F6E44B8AA2C637814924767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

69994

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\WorkShop\WebSocket4Net\dotnet\WebSocket4Net\obj\Release\netstandard1.3\WebSocket4Net.pdb

config/loggingconfig.json

SHA256 a5a8a9327bc7a6de5781a210b0842b9d986b71a73af9da1a01029c754a3c14cf
MD5 d537d425a27f44d67291ef858d54cc77
SHA1 4d17f5c7f83c261510b81d7b855d93d42f9f525f
SHA512 8cc5874fbb7cf86016278096a78e2eefa41a6bbbf9dd3620e430a53114679e33444fd6d09db0855ebb68b63c32f72944af3a14b166ee15dac7d36d46ff2dbfc6
SSDEEP 384:VQ4SE/YJVjlXjbjvjAjcjsjfjLj+j8jSjBj3j+jBjYjKjgjzjejPjEDVtDVhDVGv:JYbBX/j8A4DHSwOtzqN0Osn6bUDnGk23
TLSH
T149A214A7B30C51EF93D45748B078ABC4AE3CE2FB165498B9F08E683487B8E1055B7359
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

mainicon.ico

SHA256 d32f7ffb0d25b72b8b5fbc766b2b7103857b734da3ee017da51e692d5d90c76a
MD5 cc337b7ec114db5c18e3859d4f617e61
SHA1 7ab78112cd9bc9303e751c293cb7db00fda1b86f
SHA512 8be33f231c8c79605e8229e3e45bcf9b8e228a76a776937d476c0eced50460a8ed95f28b7de302555f5c00a7186f3f62067c6cc655e9fb1bf5645a8840472ed0
SSDEEP 1536:cBPFMvvEXNI2zZ9pfWrHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHX:oPFMvvExah1plNtkwEY+gR3
TLSH
T1D0B31E52BEC0F39AEDE42A71D84523F801D76CDDF974040BA4D17E6A73B2463D22E646
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bf4ae82472ef8ca5a3fd0d6bb1e989bfabf23452048f7be19328e193f346a849
MD5 f65fdbdab541ff7187b9750b64c58875
SHA1 91e25817fefafa23c3c269ec1e8a2a9ed1b9c2cc
SHA512 7d9d76821397a0973d7b5d5384dac30238a668d3f9cdcf569ab0cafc1ddf9c40b975a5c6b16501348104cde44473ed08da978a9cb591d8ba746c7a355d0a15d6
SSDEEP 1536:QjLlmhEsZjUoc7Rf12PeyH/Mv37ecQcfzY:imhEsZju16/237ecQi0
TLSH
T153634A11F7C8E65AD75E06311CE080709BB4AFDB5526A6C32C853A5E1BB33C87B191EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

1a:56:fc:9e:6d:c1:75:40:3a:8c:f7:39:5b:04:29:4d:db:d7:ed:43:1a:b7:c0:c2:1c:b2:99:50:95:d9:31:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

65198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encodings.Web/Release/net8.0-browser/System.Text.Encodings.Web.pdb

runtimes/win-arm/native/e_sqlite3.dll

IMPHASH 3e84a347e40b7c8d3afb1930770a68ef
SHA256 b49944bc69bc5bf7f013bf7c52ed554b66c8a7029dbe07ba7ec377af30bbb079
MD5 53f7434458d412edc470793c3dd9f031
SHA1 cd382079f8a2894a7ecf40513e6b34858103fc39
SHA512 d7827bea25452ba943a6efa39ea0775320cc3a0b8a49544af58b5b5453e87e801d89812a5ef7f4744239189afc36769f749ce1c9bf0a17e72e72ff77453929a3
SSDEEP 24576:DbQ+kGrw4T8CL0hnvJf/H+KRG2TNdZaSC0dUYU6:hkkXL0hvJbRhdZQ0dt
TLSH
T1D345C083BFD5FB22D54E62F97217D6C94FDCF82530F9B1094B259CA87A1B9708A72204
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

6

Entry point

970209

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\arm\e_sqlite3.pdb

kernel32

FlushFileBuffers GetTickCount QueryPerformanceCounter MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime WideCharToMultiByte FreeLibrary SystemTimeToFileTime GetProcessHeap GetCurrentProcessId GetFileSize LockFileEx LocalFree GetProcAddress UnlockFile HeapDestroy HeapCompact HeapAlloc LoadLibraryW GetSystemInfo CloseHandle HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetLastError GetDiskFreeSpaceA FormatMessageW GetTempPathA Sleep MultiByteToWideChar HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW CreateFileW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile GetFullPathNameW HeapFree HeapCreate ReadFile AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId InitializeSListHead GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent RtlUnwindEx InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx RtlLookupFunctionEntry EncodePointer RtlPcToFileHeader CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetCurrentProcess ExitProcess TerminateProcess GetModuleFileNameW GetTimeZoneInformation InitializeCriticalSectionAndSpinCount LoadLibraryExW CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStdHandle GetFileType GetStringTypeW SetStdHandle GetConsoleOutputCP GetConsoleMode SetFilePointerEx WriteConsoleW

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_autovacuum_pages sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_changes64 sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_filename sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_data_count sqlite3_data_directory sqlite3_database_file_object sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_name sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_deserialize sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_error_offset sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_filename_database sqlite3_filename_journal sqlite3_filename_wal sqlite3_finalize sqlite3_free sqlite3_free_filename sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_clientdata sqlite3_get_table sqlite3_global_recover sqlite3_hard_heap_limit64 sqlite3_initialize sqlite3_interrupt sqlite3_is_interrupted sqlite3_key sqlite3_key_v2 sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_msize sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_rekey sqlite3_rekey_v2 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_serialize sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_clientdata sqlite3_set_last_insert_rowid sqlite3_shutdown sqlite3_sleep sqlite3_snapshot_cmp sqlite3_snapshot_free sqlite3_snapshot_get sqlite3_snapshot_open sqlite3_snapshot_recover sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_explain sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_total_changes64 sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_txn_state sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_key sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_dup sqlite3_value_encoding sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_distinct sqlite3_vtab_in sqlite3_vtab_in_first sqlite3_vtab_in_next sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtab_rhs_value sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug

runtimes/win-arm64/native/e_sqlite3.dll

SHA256 12f60e382478c7e666de26a020e532d302476c85da315c08aaedafec745f4107
MD5 1794a96816c2ce44dee0347d297dcbfc
SHA1 6ed8dbe4e788e11674b5b0aaa56ce72d9d56094c
SHA512 282378fe891318f4cd7482a07dec915591af2fca14440e18248bd51664abc605e12c1115064a7533e1b4e277d06e7d12c36ad9a008e6efd8c5b3314797019add
SSDEEP 24576:lPtPcLYiA6NSdl2Yqwqc909vqE2UvIh3+pZ2Lgs:ltuA4jc909iLUmaZh
TLSH
T14C759E51FA0E6C52E3C7E3BCDE968F60301BB674C43588A6A163418CEC95FD4D5F62A2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

runtimes/win-arm64/native/sni.dll

SHA256 ef18458c4dcb93f6b4eac07e1589cf3450bf878f2dd623f5d34f6a0f1b16e57a
MD5 167136d7a81bcc85acf4930aa7ac835f
SHA1 1e70240cc820796e78d77b1219291eee2fb6dbe0
SHA512 2c084142e09ae1b850f8550a55142fbbf996f3dfb122bbcad4fffc11a6fdc5417d623683f383c4ac4a35e46ea0d441d82588231093f179ff4601cc598a1c8896
SSDEEP 3072:qr+JSpYKCkNH8TTTwSLTVgK1Th33HwfkoN:q6ZoHgPwSLSKhHZoN
TLSH
T1270419456EDC6842E1E2EB34D9A64F61613FB6B4CB36460EB132437D9DA77E0CE60212
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

runtimes/win-x64/native/e_sqlite3.dll

IMPHASH 468b7ea364b9b1f19deb0c29f9bb7e76
SHA256 39923cfdad272169c217406a60214ffe9bd6c1b3bd396a3eff94b781bd8d3376
MD5 796c0d4607433e747075a0a675a23bdf
SHA1 426841da35a580d9b280d2fd9eaf546859da9cf7
SHA512 fc75873361c7c162166c9e6527246a8da59ecc4b6e83642bdd3a00c4f4a0289d4da025c8a5d38af8be1c2e8c9d8d5efd2f1d1f2e7c6e355932d80a739d8dfa31
SSDEEP 24576:4OduSG8dN8tpBWQCCA5hF2pQwtqjnU43qCtWuj60dshJEZwLB8vOCmFZ3J:4OpG8dN8BCTcpQiOUn0WCshTLyo
TLSH
T187856D4BA2B900ACD86782B8C917570BE7F1B4052764ABDB1590C6652F23FF61F7A334
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

1342560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\x64\e_sqlite3.pdb

kernel32

FlushFileBuffers GetTickCount QueryPerformanceCounter MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime WideCharToMultiByte FreeLibrary SystemTimeToFileTime GetProcessHeap GetCurrentProcessId GetFileSize LockFileEx LocalFree GetProcAddress UnlockFile HeapDestroy HeapCompact HeapAlloc LoadLibraryW GetSystemInfo CloseHandle HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetLastError GetDiskFreeSpaceA FormatMessageW GetTempPathA Sleep MultiByteToWideChar HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW CreateFileW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile GetFullPathNameW HeapFree HeapCreate ReadFile AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RtlPcToFileHeader CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetTimeZoneInformation FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStdHandle GetFileType GetStringTypeW SetStdHandle GetConsoleOutputCP GetConsoleMode SetFilePointerEx

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_autovacuum_pages sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_changes64 sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_filename sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_data_count sqlite3_data_directory sqlite3_database_file_object sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_name sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_deserialize sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_error_offset sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_filename_database sqlite3_filename_journal sqlite3_filename_wal sqlite3_finalize sqlite3_free sqlite3_free_filename sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_clientdata sqlite3_get_table sqlite3_global_recover sqlite3_hard_heap_limit64 sqlite3_initialize sqlite3_interrupt sqlite3_is_interrupted sqlite3_key sqlite3_key_v2 sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_msize sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_rekey sqlite3_rekey_v2 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_serialize sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_clientdata sqlite3_set_last_insert_rowid sqlite3_shutdown sqlite3_sleep sqlite3_snapshot_cmp sqlite3_snapshot_free sqlite3_snapshot_get sqlite3_snapshot_open sqlite3_snapshot_recover sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_explain sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_total_changes64 sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_txn_state sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_key sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_dup sqlite3_value_encoding sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_distinct sqlite3_vtab_in sqlite3_vtab_in_first sqlite3_vtab_in_next sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtab_rhs_value sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

223KB

Virtual Size

222KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

runtimes/win-x64/native/sni.dll

IMPHASH 832da7315b462f507eb516997ac7ce0e
SHA256 68705c4ef9ab818f2956a78e05f3fefce501a1448793b073b46110beb49b47d6
MD5 7f1799b65b98450a19e4d049e9d3e70d
SHA1 ec80c5a33374423a9e986c383a36a97da70a3584
SHA512 8d67297c5cded487c88fcaad5a36e80926dad8f1863e38f397751056f51258ac7b5a9e5c09c01bba7a224f38fb2ee719586faf0ba81516e05a19649eb09e7b78
SSDEEP 3072:zGaHqhU3X+sWqpyojzXVgO/U9SS2PCKPZteYlbLUrHeUJcJnWMROkIvNHc:znHSK+svytSS2PzbeYlbLk0n+Hc
TLSH
T196F35B167BB840B6E5B69234C5A74A56FB72B8511F3183CF03A9836D1F237D1AE39321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

NSIS installer

installer

Digest

28:2a:bb:72:6d:64:2a:1e:fe:22:24:a7:64:bd:f7:d2:72:da:aa:d5:9b:23:ec:90:5c:0c:ad:a6:34:97:ec:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

93:fd:9e:aa:3f:3e:c0:86:43:a3:2d:e3:4f:97:a9:bc:dd:22:e1:ba

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c9:64:4d:16:db:1a:7d:b3:15:00:00:00:00:00:c9

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:a1:a5:fd:b9:ee:a7:fc:9e:9d:00:00:00:00:00:a1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

6

Entry point

84976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\410\s\bin\obj\Windows_NT.x64.Release\Native\sni\Release\sni.pdb

kernel32

SetEvent CreateSemaphoreA SetLastError GetQueuedCompletionStatus Sleep FileTimeToSystemTime GetSystemDirectoryA CreateThread SystemTimeToTzSpecificLocalTime GetSystemTimeAsFileTime InitializeSListHead CreateIoCompletionPort GetComputerNameA TlsSetValue FormatMessageW TlsAlloc TlsGetValue TlsFree WaitForMultipleObjects SetHandleInformation LoadLibraryExW InitializeCriticalSectionAndSpinCount ReleaseSemaphore MultiByteToWideChar GetComputerNameExA WideCharToMultiByte CompareStringA LCMapStringA SetFileCompletionNotificationModes GetTickCount GetOverlappedResult CreateFileA DisconnectNamedPipe WaitForSingleObject PeekNamedPipe WriteFile GetCurrentProcess WaitNamedPipeA SetNamedPipeHandleState ReadFile QueryDepthSList InterlockedPopEntrySList CreateEventA InterlockedPushEntrySList RaiseException RtlPcToFileHeader RtlUnwindEx IsDebuggerPresent GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess EncodePointer SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FreeLibrary DeleteCriticalSection GetProcAddress CloseHandle LoadLibraryA InterlockedFlushSList GetLastError PostQueuedCompletionStatus InitializeCriticalSection LeaveCriticalSection EnterCriticalSection

user32

CharNextExA

advapi32

RegCloseKey ImpersonateNamedPipeClient CryptDestroyKey CryptReleaseContext IsTokenRestricted RegQueryValueExA RegQueryInfoKeyA RegOpenKeyExA RegEnumKeyExA RevertToSelf

rpcrt4

UuidCreate

ws2_32

shutdown getpeername WSASend connect WSAEnumProtocolsW WSARecv WSAPoll getnameinfo ntohs WSAIoctl getsockname bind WSAGetLastError setsockopt sendto freeaddrinfo htons htonl recv socket WSAStartup WSAStringToAddressW select closesocket __WSAFDIsSet WSACleanup getaddrinfo

api-ms-win-crt-string-l1-1-0

_stricmp _wcsnicmp strncmp _stricmp_l strcpy_s _strnicmp_l strcmp wcsncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

_atoi_l atoi

api-ms-win-crt-multibyte-l1-1-0

_mbsspn _mbschr _mbsnbicmp_l

api-ms-win-crt-runtime-l1-1-0

abort _cexit terminate _initterm _initterm_e _crt_atexit _execute_onexit_table _register_onexit_function _invalid_parameter_noinfo _errno _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll

api-ms-win-crt-heap-l1-1-0

_callnewh _calloc_base free _free_base malloc

runtimes/win-x86/native/e_sqlite3.dll

IMPHASH ed858e32b0c7e4857fdea00b95d3a9b0
SHA256 6e1ad918b7922918ba40df624138680a8dee76bc616bd5770d5d4c659714e975
MD5 cb6a1936fb33135b4de911a52694f495
SHA1 1d70002b499da92f9371d5b819080a06c19ccb6f
SHA512 d6a9f393e6e1e6e9c87d96a0a0cd72e27a2a07f91a6391707cf4534364b203d21e0956c5042e1b93d1fe2dbe82963923820778fd2ebdcb8a6f663fc7e7439dbd
SSDEEP 24576:NxMam/Zm6C+Kk4JZVS908vr864aqcHhyNnFWxmnZTCDcnF1oxBA6MWngsiGJNMm4:TU6pVStvr864zmmngD81yBA9siGJNVUD
TLSH
T118659FC3F680C035F5D912B283EA1FF55C291324172A64E782D5A8E59D209E3B77FB1A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

1138736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\cb\cb\cb\bld\bin\e_sqlite3\win\v142\plain\x86\e_sqlite3.pdb

kernel32

FlushFileBuffers GetTickCount QueryPerformanceCounter MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime WideCharToMultiByte FreeLibrary SystemTimeToFileTime GetProcessHeap GetCurrentProcessId GetFileSize LockFileEx LocalFree GetProcAddress UnlockFile HeapDestroy HeapCompact HeapAlloc LoadLibraryW GetSystemInfo CloseHandle HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetLastError GetDiskFreeSpaceA FormatMessageW GetTempPathA Sleep MultiByteToWideChar HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW CreateFileW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile GetFullPathNameW HeapFree HeapCreate ReadFile AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetTimeZoneInformation CompareStringW LCMapStringW DecodePointer FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStdHandle GetFileType GetStringTypeW SetStdHandle GetConsoleOutputCP GetConsoleMode SetFilePointerEx WriteConsoleW

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_autovacuum_pages sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_changes64 sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_filename sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_data_count sqlite3_data_directory sqlite3_database_file_object sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_name sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_deserialize sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_error_offset sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_filename_database sqlite3_filename_journal sqlite3_filename_wal sqlite3_finalize sqlite3_free sqlite3_free_filename sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_clientdata sqlite3_get_table sqlite3_global_recover sqlite3_hard_heap_limit64 sqlite3_initialize sqlite3_interrupt sqlite3_is_interrupted sqlite3_key sqlite3_key_v2 sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_msize sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_rekey sqlite3_rekey_v2 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_serialize sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_clientdata sqlite3_set_last_insert_rowid sqlite3_shutdown sqlite3_sleep sqlite3_snapshot_cmp sqlite3_snapshot_free sqlite3_snapshot_get sqlite3_snapshot_open sqlite3_snapshot_recover sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_explain sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_total_changes64 sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_txn_state sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_key sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_dup sqlite3_value_encoding sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_distinct sqlite3_vtab_in sqlite3_vtab_in_first sqlite3_vtab_in_next sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtab_rhs_value sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug

runtimes/win-x86/native/sni.dll

IMPHASH 00f5001ebf137746556043a7c9155eca
SHA256 1446d6b26da49a5a9f366972f89f4e236f916955f31ddc38ebb96217c1cace9c
MD5 c62a83f20bc23aeface70ec13003c4c5
SHA1 35553cfcdcbeccdc49710e68aec495c16880f0bd
SHA512 4dda44fd5b538f5da9e8cb46a3ab1bdc14b43425b9a61249eccc925d986af7b8b3548db9490238f14807909ecf479415117141ddb344119438a59f97e894ea37
SSDEEP 3072:H3SGhrfrdqCn3bctzdGRX18u5e++dowahamD5/f+vHPoW:H3SGhbBqCnmzERyiepSUm9moW
TLSH
T155D36C0179A48032E1F7163E057AA952657B7AB08F705ACF3BB04AED29743D1AB31373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

be:e0:1f:b9:15:bc:e5:77:a2:a0:e3:dd:41:4e:59:93:c8:28:3b:1c:91:bd:9d:1c:42:fa:96:2c:4e:9a:f0:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

a4:da:98:d6:cc:38:31:14:3a:60:44:18:10:f5:a7:26:00:cf:81:f1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 12, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:a2:4c:8e:1d:da:a9:21:7c:84:00:00:00:00:00:a2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

6

Entry point

70512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\A\_work\410\s\bin\obj\Windows_NT.x86.Release\Native\sni\Release\sni.pdb

kernel32

SetEvent CreateSemaphoreA SetLastError GetQueuedCompletionStatus Sleep FileTimeToSystemTime GetSystemDirectoryA CreateThread SystemTimeToTzSpecificLocalTime GetSystemTimeAsFileTime InitializeSListHead CreateIoCompletionPort GetComputerNameA TlsSetValue FormatMessageW TlsAlloc WaitForMultipleObjects TlsFree SetHandleInformation LoadLibraryExW InitializeCriticalSectionAndSpinCount ReleaseSemaphore MultiByteToWideChar GetComputerNameExA WideCharToMultiByte CompareStringA LCMapStringA SetFileCompletionNotificationModes GetTickCount GetOverlappedResult CreateFileA DisconnectNamedPipe WaitForSingleObject PeekNamedPipe WriteFile GetCurrentProcess WaitNamedPipeA SetNamedPipeHandleState ReadFile QueryDepthSList InterlockedPopEntrySList CreateEventA InterlockedPushEntrySList RtlUnwind RaiseException IsDebuggerPresent GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter EncodePointer IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter FreeLibrary DeleteCriticalSection GetProcAddress CloseHandle LoadLibraryA InterlockedFlushSList GetLastError PostQueuedCompletionStatus InitializeCriticalSection LeaveCriticalSection TlsGetValue EnterCriticalSection

user32

CharNextExA

advapi32

RegCloseKey ImpersonateNamedPipeClient CryptDestroyKey CryptReleaseContext IsTokenRestricted RegQueryValueExA RegQueryInfoKeyA RegOpenKeyExA RegEnumKeyExA RevertToSelf

rpcrt4

UuidCreate

ws2_32

WSAIoctl WSASend getpeername getsockname ntohs shutdown bind WSARecv WSAPoll getnameinfo WSACleanup __WSAFDIsSet closesocket select WSAEnumProtocolsW connect WSAGetLastError setsockopt sendto freeaddrinfo htons htonl socket WSAStartup getaddrinfo WSAStringToAddressW recv

api-ms-win-crt-string-l1-1-0

_wcsnicmp _stricmp strcpy_s strncmp _stricmp_l wcsncpy_s _strnicmp_l

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

_atoi_l atoi

api-ms-win-crt-multibyte-l1-1-0

_mbsnbicmp_l _mbschr _mbsspn

api-ms-win-crt-runtime-l1-1-0

_cexit abort _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment terminate _invalid_parameter_noinfo _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _errno

api-ms-win-crt-heap-l1-1-0

_calloc_base _callnewh free malloc _free_base

runtimes/win/lib/net6.0/System.Security.Cryptography.Pkcs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 23a2e05ad41585f6b2dd20e0be9df18a7a49ad7616df721c5ac56c4f34616672
MD5 f66018d83e28b08deed28458bc0ac0a6
SHA1 68dc4981cd7d6c945fa1856d68831c8603e95bbc
SHA512 28d0deae7751b6ba237311c6a60e7ed8ce94fd1b61a1719539f44b18db052e49c42521a713638c3ca1a3b024b20e43644a6628f13923513a2d2e8df8bfb12d4a
SSDEEP 6144:RcD78QQFVycu8TZ1X1keOBSd/2rsBKFYjyMxzXzx5p0s9aO6J/:5bJlyMxXxAs9/a
TLSH
T13E544A28B7E08B6EF6DE1774D07144604B39D986D953FB480889ACFA7523B01EE14B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ad:ba:6f:15:0d:b7:fb:29:b0:51:b3:e0:cb:a8:57:b9:8b:75:bf:97:58:7d:2b:ae:84:8f:ba:f6:d2:6a:1b:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

284010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Pkcs/net6.0-windows-Release/System.Security.Cryptography.Pkcs.pdb

runtimes/win/lib/net8.0/Microsoft.Win32.Registry.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3a80e8ee338ed108567e87102d64c4835640fa0d45aeadf744f79733074f60f1
MD5 abfd9b562634348fb32881776a572036
SHA1 7007ca0d6e12460a6e9ceeb86a78d4495c96fb99
SHA512 8fec4a5d6f9a514edb1f00bd96ae9903e28bf4ed2f7fe712656b5ec3c361cc30b6eb9f4982e9cbde06822e018c3fc7e82bdbe21ad02fb6e91d9e9b75fd2d1ab3
SSDEEP 384:4JvuHEhLjvWFrrWbfLXmztvGHRN7wwGOrjR9zTXgx8b:4JvuHEwsjQtawwGOrF9zDgx8b
TLSH
T138923B22D7B84223EE7B0D306AF2E9552D3AA7D69C05D75E059AF20A19B33C4CB31735
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

dc:0a:c4:e5:ad:1a:27:81:9f:b0:78:23:8f:68:a1:7b:e1:1e:ea:e6:1a:7a:42:61:10:e9:0d:a7:5e:9b:a2:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

15394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Win32.Registry.AccessControl/Release/net8.0-windows/Microsoft.Win32.Registry.AccessControl.pdb

runtimes/win/lib/net8.0/Microsoft.Win32.SystemEvents.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b271c3a80baad2474b62355a4f8502be256044e3a225f99d4fbd15fef73223e1
MD5 d010d5244a91c79b855750c8b7b7f3f8
SHA1 a2cd30f33b173f60b18b8360747cbf9ec2566c56
SHA512 62d509e5560e9099a1263ea1f9bf200e7adbe0fa4cd63ffc1b539de01a4b93a97164546168bf43aecd84b6bbe05d38a4bef7bd8fc56fdeb4a38e960356d70884
SSDEEP 768:et+jMUTBJqHjH9Zi8hlT+SEOtKuI5rcgKycSDtCudQjQtaC49zGgJPD:e7UHqHjfi8OSEOtK5riyJDtNCQc/zJND
TLSH
T1D8436C10D398076BCAEE0C377D7646171938E2CED923FF7F918AA1544623FC65B28296
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

0a:ca:0e:6c:34:16:cd:15:e6:b0:0c:24:8a:42:ec:45:55:2d:9e:f3:b4:f7:18:d6:07:51:b6:ce:d0:a3:4f:37

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

54478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Win32.SystemEvents/Release/net8.0-windows/Microsoft.Win32.SystemEvents.pdb

runtimes/win/lib/net8.0/System.Data.Odbc.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 45a7738fdac54eeda56b8248a7f8232edbf007655595ff8aa2124841b8995553
MD5 aa55364b343e3de25b04c1e713021088
SHA1 34558fb6fe4f8abdb08e6a6f4e169a34d4a9318f
SHA512 d8d53c18100934be2c349ed743dcf45270526b0e9fdfe56b5fe524250038562a6c938597be105aa3798021f04ab7440f1319f6bd585f989d9d49e801dbc427ad
SSDEEP 6144:TPUXWPL7I96xzP82vCoi7Cynf7WwqEQpKOSmcoLaHduXGUQb3ISDpgPCSrQtg:TPUXWPL7I96xzP8SCoi7CynDWwqEqpSY
TLSH
T1CC543B2433F8278ED6EF2637507B00121A79BA56E236D3BD5D4450FE1A23F61A132B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

2b:7b:89:9b:a3:ab:dd:a1:79:34:0e:40:78:b3:bb:40:9f:25:1b:94:65:12:9b:70:d9:2a:3b:f4:0b:38:87:db

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

290702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.Odbc/Release/net8.0-windows/System.Data.Odbc.pdb

runtimes/win/lib/net8.0/System.Data.OleDb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4a3919c273b4917efb598b91cf917db775ca700d73e353a2b43f737469bf8d17
MD5 d24eb4ca7480a615396e3f4772df7236
SHA1 0b31530e710cd26cf1244745b09452f38da897aa
SHA512 b7a83288245ae24b725d7f42287765978de7057347c10d0e85b26617f6c0946c469212aad682b4fff9eefc4320935d38c406c1b9430cb00d2b555ba8caa2391e
SSDEEP 6144:M7EzL4Ynp9oFG41hOiOLbTulm9bnTmWcVFaZuMeiqt3rbtYC/JKQB:AGuuPqQ9bTgFYuUC/JKo
TLSH
T17F84492473F8664EE6BF2636A07A00168A39F642A763D76C3D48506E0F33B60557377B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d9:14:35:08:36:f3:46:74:48:40:bb:d2:0a:c5:38:eb:23:40:6c:96:d0:e8:5b:1f:e5:06:fd:57:3f:35:7c:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

382810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.OleDb/Release/net8.0-windows/System.Data.OleDb.pdb

runtimes/win/lib/net8.0/System.Diagnostics.EventLog.Messages.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 31fe0d825358d36300432281d78f807dd55d2023d24381cfc2e40320f80815b1
MD5 19b619254c629cd58d92c69d284e2d8d
SHA1 f7d6bea76d3381f6ca9454144334af0104e4d880
SHA512 894f0c5e98588f070e099625a5c9e6bc0282cf29cbc4ad44435b70168f1e777954713cf68c1f0b8956dd0eff87847513adf66de16ea79884fd342abfe43433ce
SSDEEP 192:6CirNmYjWaLlVmchOIEvYFHnhWgN7agWCeCGZBX01k9z3A3EL+8DQJQ:6pr4YfLXmztvGHRN7ZLGR9zyEL+BQ
TLSH
T1B205E5A68E388342CB4618707E99FBF63F3953871440A52645D5EA943D633B4AF242FD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

25:a4:09:2f:f5:14:7f:4a:81:a4:c5:16:3c:84:c1:6a:1a:e4:a0:ee:08:01:69:1c:88:b1:7f:0a:f4:3a:3a:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

10534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.EventLog.Messages/Release/netstandard2.0/System.Diagnostics.EventLog.Messages.pdb

runtimes/win/lib/net8.0/System.Diagnostics.EventLog.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cf6b15eb79bb4cfd2e375eeb14efba5deb5594aefc1a80c60c9ccb74bbca0d64
MD5 7445b22d7886a46ff93d2457f6ed7258
SHA1 58f0810cef45e9b9bcf688c2f0817218045a717c
SHA512 92a8edb1036ead267f5d1be6f9b6ac7d75aedbf780d902a6091b8532491e6bab2c006606e1ebce87ca7009c043f094a598d887f7e5caf7d49e6d3f78f123e957
SSDEEP 3072:KfKizhWKG5GTrXhcJPJ7K3FC1884kr+EIuVLgQ7Hpe6NQHFw:4bzvG5GM1x4kr1jAiQm
TLSH
T19B045A2173ED0B1EE7FF1B38F8B020158776B9966D3AE76D458458ED09637C08A207A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

df:5e:21:40:3e:7c:54:f4:1a:03:76:32:4b:e1:d1:2b:ca:3a:c0:32:65:cc:ca:fd:36:fd:d7:0a:a0:ea:ff:7d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

168694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.EventLog/Release/net8.0-windows/System.Diagnostics.EventLog.pdb

runtimes/win/lib/net8.0/System.Diagnostics.PerformanceCounter.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f230da853b3e2eaf4419b7ee82589d28e3d08d683152660821a50f92bd8e4d5c
MD5 173a381ca5720b99b6d0355dba029de9
SHA1 775241e42a90e6357979801948c0a37e0bb33cfa
SHA512 1c427e9e4002b4e4f18d833ee3d2e64768c332b6ff38f5805878d238b86beaa9396fbccb7e24185627c0ba15695fca08fe030a8d318db84d6dbdebae202b7c07
SSDEEP 3072:XkQ4G4iuoX9pbcaeBlpYN6Zhes8MUbHecMBHHAoG0tQFB:XD4m37uKN6Zh58FbFgHRQz
TLSH
T1C9D37E28F3EE0B1FEABF8B7C34B450114639B956AE02EB6D09D950E80653BD08951B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

a1:0e:b4:c7:46:12:4b:3b:5a:3e:30:c0:44:36:da:0f:78:13:23:b1:77:39:74:93:e1:75:f4:9a:ad:1d:a0:78

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

132282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Diagnostics.PerformanceCounter/Release/net8.0-windows/System.Diagnostics.PerformanceCounter.pdb

runtimes/win/lib/net8.0/System.DirectoryServices.AccountManagement.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 00757175ecc7d34ae633250a814c5c79aef4cd0667a5ad86c427a30d616b0c2c
MD5 375a4fc03c4678585c704b7fd25bdd11
SHA1 b623f7f70ed1fdc4368025143f913d07a09612c2
SHA512 d2506bd235ea2b4b8334013ca8d24f4e741d2fbfbb4e63d62e88c4f8a868544424dacf948f4c3e60fac225dab3e70063a34c113803d81ba6562d783cb27c1b2e
SSDEEP 6144:0ilY6nrEY4cdIg8lAsBdVscgAf7xjVx66aWIXnZGANEX3OusXgFD3IZsetknO/v2:0B19iOlN+TLOH3g5BA
TLSH
T184542A1437E80F0EEBFF67B6A5B010058B76F917A66ADB1D0C5390ED1872B86C921763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ed:90:8f:3c:ce:42:a0:25:48:1b:dd:25:79:61:5e:38:9d:69:88:fc:65:66:54:da:b8:93:df:e0:39:01:97:5f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

296022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.DirectoryServices.AccountManagement/Release/net8.0-windows/System.DirectoryServices.AccountManagement.pdb

runtimes/win/lib/net8.0/System.DirectoryServices.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ff785c527a794d68fc3e7093503092a7ce0a5237c89b8f5e6d3781a742cf1574
MD5 75a7966bfb4cca124050165ab1dff811
SHA1 6f258faa61769e59c913a9e641cbaf63cfdb4a12
SHA512 f81b6721422850cce1654d66df2950c0d236d90b27570aeace1f8d034276cbfefc45e1f34b61b3c3c456e0ba0f27c9c7d2f8cbbc6482f21c8940913fed38678b
SSDEEP 3072:FTeANxvlVlkagfFpQw8nZ4WZn+WT1IWunHDJIhE0O8Nn8phfQZ2:r4dCbhnIWudINBp0QE
TLSH
T170045A1077FC431EF6EF1730FAB551204B35B9866A7AEB2D0A4141EE44A3B80A762777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6f:12:87:f7:1c:4d:55:76:12:a1:5c:da:bc:dc:e9:d2:21:82:39:9b:be:c5:d0:1e:e5:75:8d:62:13:64:b9:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

172290

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.DirectoryServices.Protocols/Release/net8.0-windows/System.DirectoryServices.Protocols.pdb

runtimes/win/lib/net8.0/System.DirectoryServices.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 492c9c5e28b180613d939fb1e5e2610f3220af41fd5593dda5d3857133f4dc38
MD5 d758a5b1a0e1abfbafc8d59443af5e02
SHA1 5be79d94c79a993e4032c82b5c9508c92ab19c0d
SHA512 a6f380aa74c43d68f1fe72aba422c12b11cd806057e6967072078cfac6d135513bd2ee5c2814138d22c1f13172900471ef86d2fbd22e3ac38e42071b46feec2b
SSDEEP 6144:kJBZXxQsu8kBxZWCmhgXw75uUqwN3zn/f31E9az7d03gQR1ayPlz/Jc+LB6LbfxB:kJXxQ9B/XVXwGQbG9az7WgQXJc46XxB
TLSH
T103845C2037F8071EE6EF9779F471544487B1F986365AEB6C9D8051AE0C63BD08A72B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

65:f4:f5:b4:3c:7a:cc:fc:f7:53:90:c8:9f:12:26:3b:92:fe:37:f4:83:a4:30:63:f2:9c:ba:c2:15:6c:ff:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

400438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.DirectoryServices/Release/net8.0-windows/System.DirectoryServices.pdb

runtimes/win/lib/net8.0/System.IO.Ports.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 83f7f6e14a50a0092ea08216b5bd45a2c67c7a265ab8a6589578cbf54b17076c
MD5 17cc3008dd9f9f4a46ee67f490f586c3
SHA1 85cd9a64c13872d78152acf058838818b5ba8f1a
SHA512 959edd48fd5dae573ed937b135d5d9d181c1d717539b67ff9f7a563b9ebbb0dba6c5e1e1b2ff790fb6413c44380658b9406450e54f1a1bb6f8ee29ea3a70fb7b
SSDEEP 1536:fMP2agvgs0V/zPuwQn6pRO8Bz1l+A9TXOn1rzQc9zI/:fMZCgsszH53OeOnFzQAs/
TLSH
T171836C1473EC476BF7DF46B8627062260775B2F7B603E7EE049851AE0597BC04A40ABB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

0b:08:7f:4d:c6:c2:9d:29:2f:0a:61:23:8d:8e:54:3a:05:67:de:bd:cf:07:a1:34:50:a2:41:47:0c:4a:21:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

83274

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.IO.Ports/Release/net8.0-windows/System.IO.Ports.pdb

runtimes/win/lib/net8.0/System.Management.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6dee08f8cb8d859f65cd91366168b3583239dce525ca3c83df28fc231ee2098e
MD5 058b67952f25066cb40a783f6912ca57
SHA1 ad817b2000629e9e0fd37b2d401bad14b1f3ccd3
SHA512 ff86d1ca7770bb287f4609736cc61ba3ff57c8d9b47f53f196dc55eedb0ecb826abe0e938ef48a3e52561b0ab4b4ff00ab19242c9499becf6f2f18233d6cb8f8
SSDEEP 6144:nyj+butGieusJEYE1SF7c39iwjwmppwbHV/ZqPJko510iSxptULQk:n4+butGieusJE31Shd/kXyxpkt
TLSH
T19B64172023F88A44E8BF5FB5A0706060CFB5775B2A6EDB9C4D917CED19B2740856732B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

9d:08:dc:00:bc:75:b0:a2:95:90:50:0d:46:fa:6f:e9:a1:49:a3:82:6a:19:76:15:12:23:34:2f:43:0a:83:de

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

306882

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Management/Release/net8.0-windows/System.Management.pdb

runtimes/win/lib/net8.0/System.Runtime.Caching.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b715a51bb6ccee4790d1c73d48f0ee62724896edd8579dcdb15635ca0d14bb4e
MD5 0cee560d8f8a1734cff3b8052aea62b6
SHA1 65b5630dafd33d345f2dff21cdcae0201cfbf869
SHA512 1c39f15ba27217e5a8d2c5163145beda74b49ba524b611c0b1e4e429877e150027e6c7b4391637281087eb168b47805de3096d6a1e1624de7806311d395b1ceb
SSDEEP 1536:bMUizgbRivCF+NBbFb5G6WjOTb1+DojR3bcoUUr9q9imgAPP3boyLCO6RgNfW2/m:UzgbovCF+NBbFb5G6WjOTb1+DojR3bc6
TLSH
T1DA935B6417DC871BF9EF87BD7870E1521FB4A2AAA503F39E484974AC1453BD08B2126B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

d5:34:d1:89:45:9b:45:88:7b:2d:b2:1e:01:f7:3f:90:87:fa:15:d9:c9:11:33:3a:58:89:36:ed:40:24:35:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

86074

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Runtime.Caching/Release/net8.0-windows/System.Runtime.Caching.pdb

runtimes/win/lib/net8.0/System.Security.Cryptography.Pkcs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6a8437d92b1cbfe057e4c11db2d96f8f811661f74a85193f34f9746ec553f162
MD5 cafdc5d3c1516e9c62f8b7a5f0fd313a
SHA1 d1b5c516cf2cb5d8373793d5d5bd71117101b84a
SHA512 db3799521c98a89a7b80b707426d0355063e03b87c669962b55aa88e5ca1c21ac6afdd59bd1624d9a00e67268332c0bf327ad37df1d3571f2c09b8da2451b031
SSDEEP 6144:ihTwe3SW3JJMNTTi4H+4E1x1fxJSRb+QCyKrVId0sQDE:iO/HnE1x1fxk+iuVgd
TLSH
T19A644A2C77E44B2EF6EF5B7890B214244B3BF547E553B70C0886A8ED2A623419D50B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

ae:8a:00:ea:3d:03:16:8b:7c:62:03:10:bc:ef:22:33:3a:62:42:34:45:95:ed:78:e4:8b:b4:e8:52:cc:2e:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

312090

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Security.Cryptography.Pkcs/Release/net8.0-windows/System.Security.Cryptography.Pkcs.pdb

runtimes/win/lib/net8.0/System.ServiceProcess.ServiceController.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e95035bc993e93a458b11bc8208724e0e8b0cdf081387408e63d19542eab98c9
MD5 a61f91d5bc08e6540d7dbd24be55c8ca
SHA1 a7318133c81ae9151bdab27bec41e9077205c0c5
SHA512 f68fa59cf3d0949cfb7fa05a8598f78b1d025e78c71f1dce7c1793de7e4be8fecd17ae804b2139fd0275b665d9cd5505e1adf47e05ff580f94b14efc4997b5ec
SSDEEP 1536:XgSTcNhffVHJWYMqX/SNR1LXPFk+Z/78GGFvTbUzwi2N0KoQc/M5zQ:XgSUH22gfi+Z/78GoAwi2NZoQZM
TLSH
T19A93070073F8076AFAFB1B787CB2A56109367E96AA35F72D0184519D09E2BC48D31B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

54:1f:e2:59:ff:1d:bb:90:f0:0a:64:fe:3f:8d:4a:85:f9:82:65:4d:ce:1c:c0:70:94:88:75:39:e4:67:e2:d3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

84722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.ServiceProcess.ServiceController/Release/net8.0-windows/System.ServiceProcess.ServiceController.pdb

runtimes/win/lib/net8.0/System.Speech.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 27f20c017fe9fcf7e54f0618da9e784725ab960284092221ee919b0eaed39891
MD5 5a1e438d34c190d70fd2701ab698acc8
SHA1 278a8d2b07543d21c75549e55766f9e450ade539
SHA512 01f2a7fb70344840bb3870871b11837e7f753b943d77efa32ee815421a3e057c35a0f4e2eddec3d7b0ebb961b6856012ec6adf265ef34cc8514b2f8f7866498f
SSDEEP 6144:u7wGNJJKu7ZrTboD3pxi6Z78ewMkavncZ3VoFztiU4+3JMTBvPA6NQIM:YJ77uNxiy78ewMklVFQmBIga
TLSH
T188E4291A37E40617DCBA073CA0EA58357B75EC0A7623EB0F0385B57A3893B54ED506A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

84:e4:f5:11:ea:bc:2b:27:03:67:87:bd:bb:83:3d:6f:48:22:2d:1e:f2:b0:4e:f4:bc:bf:7f:18:ab:77:43:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

668902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Speech/Release/net8.0-windows/System.Speech.pdb

runtimes/win/lib/net8.0/System.Text.Encoding.CodePages.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f29b646c0d2dc8e17f9f67deb5a000dde95f3e3293774566b6a14e0636cdf1c
MD5 13cd194f0f17ac242f24afd2e1cea944
SHA1 10cce44aaa06eef51a155b0b1dcc2e70767e6482
SHA512 c6c6ca4830654a9f9bac19da3fb7afb1ee9d679f563d8c8499f54ff82e8936ec7a5f6369aa620a9e2dc9c947b86cb2fd0ecd7f986e5e56cd014d97a5aa9e8084
SSDEEP 12288:vJ87xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rtMcb:s9km6k/IwRYbiBeKGC0X
TLSH
T19AF4BEA096B55B17F9BBCE3097F13012DAF67C567E02883BB952630694D3BF019C4A27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

e7:e1:ba:93:32:2d:5b:e8:d7:9e:13:8f:79:b6:45:28:43:79:08:0e:bb:72:61:e6:7e:ba:3a:b4:fe:15:5a:dd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

737038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encoding.CodePages/Release/net8.0-windows/System.Text.Encoding.CodePages.pdb

runtimes/win/lib/net8.0/System.Threading.AccessControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 079c502aff1f4977f70bb661e762f106a857613826b8f2a00997bf86252ba82c
MD5 b58b9f30de070cd0b0d84c6a48d588d6
SHA1 98def51fcb7ce144b0a0f67198c9ff0c536bb515
SHA512 bc6c0f9f0cd97f45d27e0dd92af409c1603d03d601ccfb9624856c391fdf22391882e229d02ef7b6569546b6e63eb8e4dc5bea94c53711008b00031183d3bd19
SSDEEP 768:gyCo43wgxJ46O/tttEKDd9abMK/9cTWqDoPTfi7GzjQtaV9zA+X:7/1RZCM/9EPr/QcnzTX
TLSH
T1A3334B29B3E8033EEEAF0A31B971D0495931B6CA5E03F77F4595E01A1547B808FA2767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

70:9c:1a:f9:ca:85:bd:02:5b:39:87:01:14:26:38:38:7f:dd:d3:c5:13:55:af:82:b5:b4:f0:33:cc:c0:9d:37

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

47226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.AccessControl/Release/net8.0-windows/System.Threading.AccessControl.pdb

runtimes/win/lib/net8.0/System.Windows.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 df19ded51a8a67e7fa2e041485f6c739581d02cd55cc12d2bcd5dbc78049b127
MD5 7a8843ca0924a7d3e6aa0b687b1db383
SHA1 fff33fd59f91b575bdea9e42598811606ec8a0e6
SHA512 4357f84b1e70876dfe6b90a7636401771fe28130c9548b9c7cb436539c636195c220bf7780905a18c98aee3fcafe30ef4df29c4f4489f152037acb9260d1b070
SSDEEP 1536:4GfhBdz55H92Q8MGYqx5xwTFvTbUtGG5zQclzz:D/72Q8MGYkwNQrzQw
TLSH
T1A473E51163F8161AFAFB2F78BDF5A4214A79BD96A931E76D058441DD0DB3B808A30337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

06:73:1d:04:b8:27:60:8a:3f:3d:fc:8d:1d:9b:f4:33:92:71:07:08:e8:81:15:ab:5f:3d:b4:34:39:21:18:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 15, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

68714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Windows.Extensions/Release/net8.0-windows/System.Windows.Extensions.pdb

runtimes/win/lib/netcoreapp2.1/System.Data.SqlClient.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d3d8a8e35cb6cd2bac3bac85c2c3a7557aa82e6cec20b4945d147b7527342d99
MD5 e207a0bd4edee009303c850bc41f50ee
SHA1 8a3ef121642a6841a5958395f6ed1134df14f270
SHA512 a89dffa596591bc282c549f72aeb17551bf6e3e4c4d38d71e7f3531545661a6450140c6021e0240b168c3e48c232cb16ea49adc85530e1bdee2c4bcc0866ef5a
SSDEEP 24576:FSqIABpKyECe4H8tm3+tXQv1nY/BEd7Gp3:W+p+tXnC7Gp3
TLSH
T1DB257C2133E8761EE5BF1376A13614192BBAE506A303F39F3D44A16A5D93B604D733A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

e4:c2:ea:38:bf:26:b7:fb:0a:36:28:55:4b:7b:44:f0:ef:4a:68:93:de:c3:ac:3e:1e:a0:88:e8:48:c5:47:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 26, 2023

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

1016410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Data.SqlClient/netcoreapp2.1-Windows_NT-Release/System.Data.SqlClient.pdb

runtimes/win/lib/netcoreapp3.0/Microsoft.Win32.SystemEvents.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1d5bbfb227f20e866cf25f649a059b61c3f35336f69ebd19b8ede7b6e14a7414
MD5 ef50bd977976ed929fabeaf6c9241c45
SHA1 ad004278f0c66cf0086c1024ce46b04852de6eca
SHA512 5ed13debf26f120c80c09df572571b3bb05fcabee7b1c7d945d2d767b13a2fe1c5861cad4fa1fea1658357fb025f9237f7ae2de510db120cff6ef4041d5f6707
SSDEEP 768:zSXwygO6T53MF09ipSJkKFZGf9PTIG57raN8q8j76P5:zS596T53MoipSlZsVTIMvaN8Hj76P5
TLSH
T107336C41D38403A6D7EF0D733AF39B25A939E2C6A512EF2E014AE0584873FDD9768572
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

bb:f7:4c:37:b5:a1:24:1c:1b:ec:c6:dc:90:53:56:d7:41:0a:d6:d6:7b:6f:7c:34:bd:15:0d:39:a9:85:c3:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 15, 2019

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

46394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Win32.SystemEvents/netcoreapp3.0-Windows_NT-Release/Microsoft.Win32.SystemEvents.pdb

uninst.exe

IMPHASH 12082e77cfc7e34f96f21f95764c8ac3
SHA256 b0b8c36011f7ef17204959d65b3d1794764f51716424440a479a742835058ea9
MD5 08e0915bc84a968571373f892f73d289
SHA1 0bc52b5ace37f86c514accdd0b0d80a7f7eb4baf
SHA512 907ff1129d7240407d3bf0b99a635ee987dde4e7f710ab2c5f6ff9c6e7f3e62dd5200449ec47e1100290fa0059c235e7bb7cb6e9d75a60c83bba24112fdceaa2
SSDEEP 6144:XClhtCrRkwQ+J/v95/1pSF3tJMtBi3xwAx2gH4:mCdHnbSptJM+xwAPY
TLSH
T1A884AE42BEC0F35AEDE51A30D85167F412E7ACDCFA34014BA5917E5E7BB2123C62A247
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

29:27:96:4a:36:24:5f:b2:51:3f:32:58:a6:42:e8:71:36:82:f3:67:95:91:d4:ce:5e:75:b5:de:0c:06:f0:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Chains

Jul 27, 2026

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

81:4e:42:17:a1:29:7f:ed:5a:cc:d4:17:f8:91:ad:75

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2024 - Jul 28, 2038

Subject

CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US

Serial Number

79:a8:d3:fd:0e:e2:07:dd:2f:3e:5b:0f

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 7, 2026

Timespan

Jul 7, 2026 - Jul 8, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13733

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetShortPathNameA GetFullPathNameA MoveFileA GetLastError SetCurrentDirectoryA GetFileAttributesA SearchPathA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime CompareFileTime lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrcatA GetSystemDirectoryA CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetCommandLineA GetTempPathA GetProcAddress DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary MulDiv LoadLibraryExA GetModuleHandleA

user32

GetWindowRect EnableMenuItem GetSystemMenu ScreenToClient SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetAsyncKeyState IsDlgButtonChecked GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SystemParametersInfoA RegisterClassA EndDialog TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA wvsprintfA DispatchMessageA PeekMessageA EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA SetTimer OpenClipboard SetWindowTextA GetDC LoadImageA ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA SetClipboardData EmptyClipboard DestroyWindow ExitWindowsEx SetForegroundWindow PostQuitMessage CreateDialogParamA

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_Destroy ord17 ImageList_AddMasked

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

JOEKNAUERBAND_rmm_v2.5.0.68_oid3194489f-d085-4291-8d78-656ac55707f3_bidYSHwnSuiR0OuVI-TFmGn5g.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

$PLUGINSDIR/NSISdl.dll

kernel32

user32

advapi32

ws2_32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/UAC.dll

kernel32

user32

advapi32

shell32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsArray.dll

kernel32

user32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

$PLUGINSDIR/nsJSON.dll

wininet

kernel32

user32

generic

$PLUGINSDIR/processwork.dll

generic

$TEMP/Internal.RMM.TrayAppLauncher.exe

PE Signature issue

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic

$TEMP/RMM.TrayAppLauncher.exe