AssetsEditor.7z
- SHA256 48dc0c2e973404de6fd387b84dc1d3a46bf6ff703b34c8e0621479bbcbaf4ad7
Password
8
Overview
overview
3Static
static
3AssetsEdit...or.exe
windows10-2004-x64
1AssetsEdit...or.exe
windows11-ltsc_2024-x64
1AssetsEdit...or.exe
windows10-2004-x64
3AssetsEdit...or.exe
windows11-ltsc_2024-x64
1AssetsEdit...uf.dll
windows10-2004-x64
1AssetsEdit...uf.dll
windows11-ltsc_2024-x64
1AssetsEdit...rs.dll
windows10-2004-x64
1AssetsEdit...rs.dll
windows11-ltsc_2024-x64
1AssetsEdit...pf.dll
windows10-2004-x64
1AssetsEdit...pf.dll
windows11-ltsc_2024-x64
1AssetsEdit...ts.dll
windows10-2004-x64
1AssetsEdit...ts.dll
windows11-ltsc_2024-x64
1AssetsEdit...rs.dll
windows10-2004-x64
1AssetsEdit...rs.dll
windows11-ltsc_2024-x64
1AssetsEdit...on.dll
windows10-2004-x64
1AssetsEdit...on.dll
windows11-ltsc_2024-x64
1AssetsEdit...ip.dll
windows10-2004-x64
1AssetsEdit...ip.dll
windows11-ltsc_2024-x64
1AssetsEdit...on.dll
windows10-2004-x64
1AssetsEdit...on.dll
windows11-ltsc_2024-x64
1AssetsEdit...T5.dll
windows10-2004-x64
1AssetsEdit...T5.dll
windows11-ltsc_2024-x64
1AssetsEdit...T5.dll
windows10-2004-x64
1AssetsEdit...T5.dll
windows11-ltsc_2024-x64
1AssetsEdit...T5.dll
windows10-2004-x64
1AssetsEdit...T5.dll
windows11-ltsc_2024-x64
1AssetsEdit...T5.dll
windows10-2004-x64
1AssetsEdit...T5.dll
windows11-ltsc_2024-x64
1AssetsEdit...T5.dll
windows10-2004-x64
1AssetsEdit...T5.dll
windows11-ltsc_2024-x64
1AssetsEdit...ts.dll
windows10-2004-x64
1AssetsEdit...ts.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AssetsEditor/Assets Editor.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
AssetsEditor/Assets Editor.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
AssetsEditor/Assets Editor.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
AssetsEditor/Assets Editor.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
AssetsEditor/Google.Protobuf.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
AssetsEditor/Google.Protobuf.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
AssetsEditor/MaterialDesignColors.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
AssetsEditor/MaterialDesignColors.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
AssetsEditor/MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
AssetsEditor/MaterialDesignThemes.Wpf.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
AssetsEditor/Microsoft.Win32.SystemEvents.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
AssetsEditor/Microsoft.Win32.SystemEvents.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
AssetsEditor/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
AssetsEditor/Microsoft.Xaml.Behaviors.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
AssetsEditor/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
AssetsEditor/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
AssetsEditor/SevenZip.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
AssetsEditor/SevenZip.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
AssetsEditor/System.Drawing.Common.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
AssetsEditor/System.Drawing.Common.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.NET5.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.NET5.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Aero.NET5.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Aero.NET5.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Metro.NET5.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Metro.NET5.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.VS2010.NET5.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.VS2010.NET5.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
AssetsEditor/Xceed.Wpf.Toolkit.NET5.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
AssetsEditor/Xceed.Wpf.Toolkit.NET5.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
AssetsEditor/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
AssetsEditor/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target AssetsEditor.7z
- Size 3.0MB
- Sample260812-bl376swdrf
- SHA256 48dc0c2e973404de6fd387b84dc1d3a46bf6ff703b34c8e0621479bbcbaf4ad7
- MD5 64c7fcd11f580584b9d509f8921cca9c
- SHA1 e63d1cea533c4bb49fcd21a6b62d9a53a2701c6f
- SHA512 68ed1ed6a6a2ed832851b248477becad0b484f022ea6529bbc69f15bc440d90a9e8d1034c0e0d892c3ae11e41c808695784111d4a71d02f414eaa70bcb775360
- SSDEEP 49152:JDzF3LUZwVKlBzMFdUglu8skHgqKGlhQz7ickpRASH52bPUO2emAP228QUVrd/:JDbVKlGdUlEHfPjQ3I/At8Je7rwd/
- TLSH T11EE533554EB349F6D0172054B0A61BC2867A65BA2D6820CF3DF4F8ACA1BB009CD97F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/AssetsEditor/Assets Editor.dll unpack001/AssetsEditor/Assets Editor.exe unpack001/AssetsEditor/MaterialDesignColors.dll unpack001/AssetsEditor/MaterialDesignThemes.Wpf.dll unpack001/AssetsEditor/SevenZip.dll unpack001/AssetsEditor/Xceed.Wpf.AvalonDock.NET5.dll unpack001/AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Aero.NET5.dll unpack001/AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Metro.NET5.dll unpack001/AssetsEditor/Xceed.Wpf.AvalonDock.Themes.VS2010.NET5.dll unpack001/AssetsEditor/Xceed.Wpf.Toolkit.NET5.dll
File Explorer
-
AssetsEditor.7z.7z 3.0MB
-
AssetsEditor/Assets Editor.deps.json8KB
-
AssetsEditor/Assets Editor.dll.exe 553KB
-
AssetsEditor/Assets Editor.exe.exe 282KB
-
AssetsEditor/Assets Editor.runtimeconfig.json372B
-
AssetsEditor/Google.Protobuf.dll.dll 399KB
-
AssetsEditor/MaterialDesignColors.dll.dll 296KB
-
AssetsEditor/MaterialDesignThemes.Wpf.dll.dll 9.1MB
-
AssetsEditor/Microsoft.Win32.SystemEvents.dll.dll 27KB
-
AssetsEditor/Microsoft.Xaml.Behaviors.dll.dll 141KB
-
AssetsEditor/Newtonsoft.Json.dll.dll 695KB
-
AssetsEditor/SevenZip.dll.dll 49KB
-
AssetsEditor/System.Drawing.Common.dll.dll 170KB
-
AssetsEditor/Xceed.Wpf.AvalonDock.NET5.dll.dll 448KB
-
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Aero.NET5.dll.dll 85KB
-
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Metro.NET5.dll.dll 78KB
-
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.VS2010.NET5.dll.dll 83KB
-
AssetsEditor/Xceed.Wpf.Toolkit.NET5.dll.dll 1.2MB
-
AssetsEditor/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll.dll 55KB
-
AssetsEditor/runtimes/win/lib/net6.0/System.Drawing.Common.dll.dll 499KB
AssetsEditor/Assets Editor.deps.json
- SHA256 2f3105c6b9dacbe811b076aed2ceea316bef80ad3ad59a5091191f00ed07a133
- MD5 006920f70c2f557c6fe21f0d6aa6b80e
- SHA1 c9d5fdd3c443529734ebcca9f9c7a4143f7f5292
- SHA512 fa999bf77ffb377d4cc8456e809555434e54c5c644880d5bd7934015773fceb4259f52e28e4b33f83c327ad3f536ddeecf4ed21a8cd7dfb05b0ab70c5e38135a
- SSDEEP 96:Y7qen6cmAyX2Co9NfMclbZBaQFIDeQTCDGamaxWg1w1XEXO9FgZwX:Y2v6tMcDulCIKE
- TLSH T18A02CE25C8500DAB057AAFE624760682F626436FB108198E78BC365CDF77F6BA1D4F34
- MD5 SHA1 SHA512 SSDEEP TLSH
AssetsEditor/Assets Editor.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 de03609f807d42f03575285bd2d3edc7e59b8929393ef60776a04c07d73d382a
- MD5 9f9eb31e7f230bf0f15bb3d1b6793edd
- SHA1 865f569ac11b4b57721f3736c0f858fdac450ff0
- SHA512 ad093aeca55ece8658a0ba600e3e841fe8f8a36249544e808a08aef2e8cdc56e446123f1ce3f6e7c4ad08f7247d5e5904c10b47b4e5e6969f46734369d1ff0f6
- SSDEEP 6144:86ko8kUwIv6Hl3gaGjGG6q5cNV9+qT1pehXx0ghRnNLX8TtUs/0JQhLSfAR:8LnkU2gaGjK1pwh3TNLXYUscJQ1
- TLSH T127C44AF463BC4614D13F873195904540CAF24706ED18EB6F8E5178EAFBA278A4BA3D63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8
Minor OS version
0
Major OS version
4
Entry point
431686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
O:\OpenTibia\Server-Stuff\Tools1\Assets-Editor\Assets Editor\obj\Release\net6.0-windows\Assets Editor.pdb
mscoree
_CorExeMain
Name
.text
Size
414KB
Virtual Size
413KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Assets Editor.exe
- IMPHASH 6dbf27f4c70fe2c8ed3e0122ba75d641
- SHA256 8e4d962894f942ad8c9a86ea6931e3c15278319d68eab6e57690b1b049cdcb74
- MD5 8f77490d9c1b21d4f8bd2f1e539247ed
- SHA1 7eb45135665302c5b5fbe581057e2631aedf1e78
- SHA512 6a2906aac9f95eeeb7a03478d708e543a006b85b5b9b0e40b6bdf02b1ba00cdf4112ea61c73075d875a109ba5446d4a6ab6e098f713241a0b44e6b68612fce66
- SSDEEP 3072:QwLEVbLoEZljy9611VBzEkjqr15MX7aSJAiGmD64QHYMQbFWtFCUI3Pzbac/bH:QRXy9611VBzwU2SqiGmD0JQ8Lgac/
- TLSH T18954F5CA639900A8D176E73885928901E2773C151F2572DF035026F9FF76AEC9FA9E13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8
Minor OS version
0
Major OS version
6
Entry point
81232
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_exit
__p___argc
_initterm_e
_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
__p___wargv
_seh_filter_exe
_register_onexit_function
_cexit
terminate
_errno
exit
abort
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
setvbuf
fflush
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
fputwc
fputws
__p__commode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
setlocale
___lc_locale_name_func
localeconv
_unlock_locales
_lock_locales
___mb_cur_max_func
_configthreadlocale
__pctype_func
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=77, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=162, id=1, productName=Unmarked objects,
count=10, id=265, version=30140,
count=1, id=258, version=30140,
AssetsEditor/Assets Editor.runtimeconfig.json
- SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
- MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
- SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
- SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998
- TLSH T1CEE02C7BCA10ACB315F52BBAC02AC282FE20232B00004D2A35FC180C2F3AAB30012F49
- MD5 SHA1 SHA512 TLSH
AssetsEditor/Google.Protobuf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f3ecc89fa4f71e05c6736528bcf707657439a8c98d6660a52c3b2f0d5d463f3
- MD5 b11f43b10b3e564502be5dfc93bbe754
- SHA1 32f0b1e5ef4e4294f3aa99df3948f56bcf74da27
- SHA512 172d8b40a3a95883d16e6c6d27fa49e2135417373c65361a5310253d7a3dfdcae985e0d5a245cb88e4072ce9a01e4178a86ea43a1ac445d7010ea3c0e77976cf
- SSDEEP 6144:Yvkn20mk+FJmgZT+eumdG+E5Ms0ibR9wFg0I8w9P5fCGH8iWZASeSU:YvJk+nXfuMs08wLclrMZAFV
- TLSH T14D943AA02AEC173CEBAF7B32E4B4941557F1FC02B199D7AE5580A5E64D63740AC8027F
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
8
Digest
64:b1:c7:02:ca:5c:03:33:f2:81:f1:b5:9e:6d:6e:f1:03:0a:d5:1c:ef:5d:49:19:d8:a8:8b:d6:cf:4c:f5:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
Chains
Jul 26, 2022
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
Serial Number
0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 2, 2021 - Jul 10, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 9, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
404182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/csharp/src/Google.Protobuf/obj/Release/net50/Google.Protobuf.pdb
mscoree
_CorDllMain
Name
.text
Size
387KB
Virtual Size
386KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/MaterialDesignColors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5445ad0a687fa61bda02cd45baac1cfbbad31b6b56529eb9cf47510bae84625
- MD5 6070d2f982e115825fa959bcce076736
- SHA1 7dc275af8286f343b2d4a7ddd5bb1b0100e2452b
- SHA512 7a65dccaf2c4c2ca83b21ac5580b738fb69e3033908515a267a6028c6996ee06e4bf34502cfb3e5c5432d53d12a161bc9445c417d7cd251c1c25792f5a324a2f
- SSDEEP 1536:K7CxEa6JpuYy9kzN4RUB/yCURKR19I4xRU7fKoVxbzQ3V:Rwp4RUB/pVg7fKoVxbGV
- TLSH T11054825D1250E0FEC913567A4838359523637A6BAB948F4AEEAF72BDCC1500B5F231F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8
Minor OS version
0
Major OS version
4
Entry point
308250
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignColors.Wpf\obj\Release\net6.0-windows\MaterialDesignColors.pdb
mscoree
_CorDllMain
Name
.text
Size
293KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/MaterialDesignThemes.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 26119c12ef6b50ad534faea76411af4eec9bc77ecfd2bb1e17c374b60e6f8856
- MD5 b40f2ba6b15f934af84327df0a9ee698
- SHA1 666de7ba77270790d72fdf56702539ca085ff959
- SHA512 02cb24be8f5f464e9de3961eeb93a0da177524cb1963e5487176c626886d817c26c1d18b20267dcc4feeb6b5b04b74d4c5aeb3d5701e572efa73da5b9ca3a051
- SSDEEP 98304:b3shRXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR23:b3shDnJ45/9iD54+V11bFv4z
- TLSH T1C7A6B62CDD05A727E2B7C164809E0A1BF1A2856AF53A5F0E70CB1B593247A433E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
8
Minor OS version
0
Major OS version
4
Entry point
9596562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignThemes.Wpf\obj\Release\net6.0-windows\MaterialDesignThemes.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
9.1MB
Virtual Size
9.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Microsoft.Win32.SystemEvents.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c83fc7699df053319a9e4e4230c8a4d733637a54880a6fff97e611fcffbdd98b
- MD5 79d6c2a9de95fd50eda86bdcdea58698
- SHA1 1c59bf7c4449865e1f76951f97f9130c2c69f80c
- SHA512 1165a4f651a79a3b40f1509ebccec8510e980c9f291f92d6bb05c2cf299d08adec8b0bcb3022b544548b31dbbc97aa9d1f60c795de660872af448f6f6f4fc2b9
- SSDEEP 384:rQCFD+Tb9XwR3OzrotqOnNhWr6JWsdiXvHRN78WjJKR9zjsVmP:rQ8CTb9G3PthPDdofVJm9zBP
- TLSH T1B7C24D23A7644A3ACDE70D705AA2E6065939D3C39D03E75F054EE8082E777CA6334B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
8
Digest
39:1d:20:6d:9c:c3:1e:00:b5:f6:e7:85:0d:36:f2:5b:af:bb:6c:15:30:bb:a1:65:53:5b:47:6b:3d:0b:53:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:E5A6-E27C-592E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:95:b7:fc:0d:d6:e3:37:31:25:00:01:00:00:01:95
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
22650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Win32.SystemEvents/Release/net6.0/Microsoft.Win32.SystemEvents.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Microsoft.Xaml.Behaviors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f782ad7adfdeeaa933183065aa7a0be9387abce6038e912455e78527b04adca
- MD5 72f8adb8af71cf55ae3fa13afc72e877
- SHA1 620b3c526997ae0d07171f14555ed22d58ee3639
- SHA512 c0d73400b9e55952c1a70b844bdf3fecdd8fc55e3a9920c7f9a30e8def372422dadb2bb716570769037bae98d930c6bd50226f3ba3c255b823edbd67bc429c63
- SSDEEP 3072:wXQg6pDJRt4vs+uWRx8kt1dLXTiGmad5rUj9yV:OQD1JRtiWfGTV
- TLSH T14CE35A6063FC8A1FD7EF1634E0B461148671EB9BB933DB5D5E8092AE049338266127F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
8
Digest
5d:b3:73:2f:6c:76:8d:3d:76:aa:56:0f:19:e3:12:f8:d6:1d:2d:a6:80:d7:6c:ba:6e:5e:ea:01:2c:f3:8b:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 18, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4a:a4:f7:31:c4:ff:22:a2:49:00:00:00:00:01:4a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
141778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net5.0-windows\Microsoft.Xaml.Behaviors.pdb
mscoree
_CorDllMain
Name
.text
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07
- MD5 adf3e3eecde20b7c9661e9c47106a14a
- SHA1 f3130f7fd4b414b5aec04eb87ed800eb84dd2154
- SHA512 6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b
- SSDEEP 12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF
- TLSH T165E45A2123E99B2BE0AF2775B032491647FAF542F6B7D78F5604D8AA1C43F558D82323
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
8
Digest
12:a2:f8:77:6a:5b:04:46:97:f9:ac:0c:85:0b:b9:3c:9d:a2:ac:a9:a3:72:91:5b:d9:ed:db:47:d0:c2:9e:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
705086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net6.0/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
681KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/SevenZip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6fa23eaaccb0fbcac09283f51021ca73a2b85435035de2964bee018e040c5a94
- MD5 4fe130df32c9f71c6082cc4abbaafa38
- SHA1 4e43f8ae1afd8614c90236198928ddcf1ed2b132
- SHA512 3346c170713854d9b5762358e2d5e61ae1130dfcc3c98eae7278f713a0cc0b3a7b51e4ada591dccc9e0d0d0850c984f58d9e2132889c9937c7d421c9cc06db85
- SSDEEP 1536:VKv2NJ5lFSTy5erYvPuGBBLBsE3LHxxSItZ:VKv2NJ5ves35DdZ
- TLSH T162331A095FDCCB13CA5E83FEE0E65A474BB1A0326A77D78AAC05A1E1180B3D045577EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\git-repo\git-hub\SevenZip\src\SevenZip\obj\Release\netstandard2.0\SevenZip.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/System.Drawing.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c712d9a59fadabea6b3039575bf05fa8c947deac11ca26920cb766c5677e6f20
- MD5 be22da1cad42253f0c6e21b74ddc69d9
- SHA1 32f82ce0511ce485ee65389ea3fce4fba2a9cdc2
- SHA512 0f8fdca2cfc8625dd2236b80e7c8dc0ef6954d4e40550c27eae0bd083f744859552dda37992c09c6e4cde779620da22aed36674a28f56112a2c9af46ff764978
- SSDEEP 3072:80pw3le5s9uIhPDUFnyzh8wE5O/skdGKzBiiC2UcPM:NasziPDUFih8vn
- TLSH T187045C015BA45309F9E6C5B1F7B442288A31BAC1AFF29EDD3D4E0ED8544AFC44356EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
07:70:5c:ee:46:25:63:e3:15:5a:c1:a0:23:05:b4:7f:a4:a1:cf:25:70:b0:b5:c8:61:27:ab:98:1d:7f:10:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
169246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Drawing.Common/Release/net6.0/System.Drawing.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
157KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Xceed.Wpf.AvalonDock.NET5.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a603001749ccd1c7e9c34383577a79683adc3707e3207492cf349612a9f4a85
- MD5 611564d41581ad00fc88f6dc0399eec1
- SHA1 e893fb15e7b6bf8b6fc1cb55486c63d209277d14
- SHA512 9be2b0a3745bc9f4167c26a92e3ba582b2e367910aacc6cb55f56d98d1f2cdaaa7332126ff7d77e5eb1f9d7a03ef1cee8f7761fc0bbae1e3e1f49de722fd13fe
- SSDEEP 6144:TsG9FFlrAiSBO65OcXwFXVzbc4YRnLBgnpymyXykfg6u9bksa6BBrdLXyESjzqs8:Rjr1mOcXwFXVzH8SptCVGTU1Xcf
- TLSH T151A45C4273B8852BC56E87B9E070491D86F0E587A3D1FF5F25F1AAA80CD7B808D452DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
464850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
446KB
Virtual Size
446KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Aero.NET5.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 573ab25cc4af13600658dddabd871dfb93ab9cb48f8c102f21655dc5e3b281cc
- MD5 ad12390c19b3b2744dbf71baf4d5dd30
- SHA1 cf2474d1602f13dc0cb278bd5e4fbdbf0bf5e9b4
- SHA512 f01cb3d63133015229157386c616bb4717f3ff5cd9f4a601d31ef032f587ebae3de46c4e9546624a74fbbde3a6c2172435af0532f571fa0948fa91e8656f1ad0
- SSDEEP 1536:IGJ/yox7dMEmjVWm+NdXYoAv/yCJ9y8ZthvlQiQaNtPTATK5wsx8NTNf8McZO0tr:3J/yox7dMEmjVWm+NdXYoAv/yCJ88Ztf
- TLSH T132833A91B16405B4C92F0FF821B2A688AE797EC166E09614348F3D4D5CFEF80C2E57A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.Metro.NET5.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de6d9d59e9733daee9812d666a67c42f900e3e5b6acb6aee8d9dc80f665d2810
- MD5 5a77200647a5099d8f5923d83f6f8089
- SHA1 1722cbc7b21f56b830b070f605b15c66c78921f4
- SHA512 b011afb173ba0290bb3c8a69386c2d03caf871fbdec0c35f26efe6e214078dc4c9a06acc915b8e11bfb9554afa14f8053256de54fb0d3a44ce351a59dac467e3
- SSDEEP 1536:pP5oHNz9vFPPjJo0bsFMN+iGB52p6i5dmM2/p:d5oHNz9vFPPjy0brN+iGB5W1o
- TLSH T184730983B1950AF8C52E4FB524B29548E9393ED152E2AA15349F3D0D5CFDFC0C1A93AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Xceed.Wpf.AvalonDock.Themes.VS2010.NET5.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8a588011edd1423b4dbda894bcadaad2f41a1210e8eb263810b31620a3a84ac
- MD5 481a92c3e00eb34b3c41a2b7a0b40012
- SHA1 09679155745293f59f042a68a1d2e98de57085ef
- SHA512 5ee10387c5d23618ced92fe95f3759be2957a1cc194da3feaf936203403101dc80dde8830f1689f35e72b4ed415989344dfb91f55a1b4671c8c375f96d64f760
- SSDEEP 1536:BnpmzcesTEWSRnqS++gGeqG2PjJo0bsifs7wKD37niMogEwA8yhZ2Xk7utWfA3lw:ZpmzcesTEWSRnqS++gGeqG2Pjy0bjfsM
- TLSH T11983F8C2A1A115F8C92F0FF554B29588BA393ED152E16611749E3D0DACFEFC0C1A53AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/Xceed.Wpf.Toolkit.NET5.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5018c6023f2c14d2dc6a03aded84571e927ac346c8f8c4d33cdb3c5e1cdafc7f
- MD5 ac206a7cac07b6111254df3c563b272f
- SHA1 27c6acf87cf93c01fff0bb53430e0ecbe036eb97
- SHA512 511fa190afdbd1ffa9b6fbb88d620769413c45b5ff749904b2155e53266fd207ec96ca7e5008de2b4a2935a4a049df0bbe6be854344877d35204dc58306d43bd
- SSDEEP 24576:dSgxap+/7a/tPH4MKllgHz683UXvHqbnlvplvCyotY8OxOw1Tj/7G6i4:4gu+m/tPH4MKllgHz6I2vAlvplv/gw1f
- TLSH T13D453A50A364842FC96F4BB490731024BE319D4F93E2C756A5A43B9D7CFBB1B4E40AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1233582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/runtimes/win/lib/net6.0/Microsoft.Win32.SystemEvents.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 906f2be5959c8b5eed6385362ae5dfbe982cec3dd303ca3e2aa44b102699aaf3
- MD5 86e139d290234bb43917cd5ca8c1944c
- SHA1 c2b91256cf00e550e0dc5fa86c7fbd91b58ed2f4
- SHA512 8e2b2dc7f7194956c9556e3cca81829656f1b79f608916a464d547b4fb42533b9adc1501820f335d38cd6623b57d35f9819582b03804e3166ae1a0375d169151
- SSDEEP 768:wpY/MhXvU7xw4IgpsbsjLQvRCkOYGxu9bTDv+jkrakxG6rbDtof1/M9zYb:wpuO49sbsjLQUM9v+j2TbKfxEzYb
- TLSH T1F3438D01D3880767C9EF0D77AE3357021E38D2C2D803FFBF95CAB54445A7B869A646A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5b:41:fd:0e:64:e4:6c:e5:e1:d5:08:22:19:5e:8b:a0:38:92:b2:ad:72:6a:c3:08:85:19:83:8a:13:ca:22:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:97:03:cf:59:9c:6b:89:78:3f:00:01:00:00:01:97
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
51966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Win32.SystemEvents/Release/net6.0-windows/Microsoft.Win32.SystemEvents.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AssetsEditor/runtimes/win/lib/net6.0/System.Drawing.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f595723054a9074923a4bbe0c92e30eb72c3b5f438e8be4918712bd9fa5b592
- MD5 02991bc8ebfd556c5eb06276b849d273
- SHA1 484fbf6e42f101486452909a4ba93b7345be9217
- SHA512 aeabb76e7f08b04b5a8b318267d32af609865ee89f852fc2a1199039071336d5c4bc1e7547353417126123212fa5c86dfe71503ec64c55ecb9cff4789f0cdbe4
- SSDEEP 6144:t3Czh+hKvL9cTy0hqJ9yGwcl4OyKERdws8xxbTbP4PvGXpfqmXy+JhLVfwX2x0He:tSVoSLy87syxD4XG5qmjb0jS
- TLSH T1F1B44A5433F15A0FC6AF1B35F07D09088634E619AA5FE71B0AE3D27C6D837929D4229B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
37:2a:60:72:50:70:b9:8b:d9:1a:db:77:b4:47:1f:0c:77:fc:4a:5e:00:92:95:d3:ff:f1:c1:1d:05:fe:d5:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:05:4d:62:0d:68:85:07:aa:33:00:00:00:00:03:05
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
505574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Drawing.Common/Release/net6.0-windows/System.Drawing.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
486KB
Virtual Size
485KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ