SmoothWizard_SETUP_EN[.]exe

resource
unpack001/microsoft.windowsapicodepack.core.dll
unpack001/microsoft.windowsapicodepack.extendedlinguisticservices.dll
unpack001/microsoft.windowsapicodepack.sensors.dll
unpack001/microsoft.windowsapicodepack.shell.dll
unpack001/microsoft.windowsapicodepack.shellextensions.dll

SmoothWizard_SETUP_EN.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 61643b7be91d774a37e0503015b18f4634d0338446c9b23876d95fcf635c4ffa
MD5 870229358892c0ce4e3f38a8d83eb3ff
SHA1 36f1c596c16045fe4a94bb3dc719294169349556
SHA512 22384e633fe5563d12eca7d9d011ae5cd62ae00d68dcbb6471ba7fafd0bde0a3a85efae97fb0d59bd43ca3bad58c216600be527eb8ec0af175ccaa74eb10484f
SSDEEP 49152:rS/SNSmTRSTFS/mSQSGa9SADz+ITQLDSbbSkjSES1S+SGSrGRSyUWWSTP/MSoH0f:TTQ1alz+ITQL8ghUWt/FsZW8zEv
TLSH
T1B1261A0DBA17E34ED5465E74EEB1C3F46765BE30FE59824BF0C63AA8F4BB2A50850244
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

14:fb:dc:48:2d:ca:7c:cc:eb:57:1a:79:05:03:81:9a:2d:7e:5e:2d:a2:67:69:4e:09:cc:ec:6c:89:fd:98:f9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=524191477,CN=SkullMedia Artur Spychalski,O=SkullMedia Artur Spychalski,POSTALCODE=83-200,STREET=Pułkownika Dąbka 39,L=Starogard Gdański,ST=pomorskie,C=PL,1.3.6.1.4.1.311.60.2.1.3=#1302504c,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Aug 7, 2026

SERIALNUMBER=524191477,CN=SkullMedia Artur Spychalski,O=SkullMedia Artur Spychalski,POSTALCODE=83-200,STREET=Pułkownika Dąbka 39,L=Starogard Gdański,ST=pomorskie,C=PL,1.3.6.1.4.1.311.60.2.1.3=#1302504c,2.5.4.15=#130f427573696e65737320456e74697479

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

SERIALNUMBER=524191477,CN=SkullMedia Artur Spychalski,O=SkullMedia Artur Spychalski,POSTALCODE=83-200,STREET=Pułkownika Dąbka 39,L=Starogard Gdański,ST=pomorskie,C=PL,1.3.6.1.4.1.311.60.2.1.3=#1302504c,2.5.4.15=#130f427573696e65737320456e74697479

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Subject

CN=Certum Timestamp 2026,O=Asseco Data Systems S.A.,C=PL

Serial Number

28:f0:77:c1:1c:36:bd:fe:5f:74:32:47:70:27:2e:03

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 11, 2026 - Feb 27, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

SERIALNUMBER=524191477,CN=SkullMedia Artur Spychalski,O=SkullMedia Artur Spychalski,POSTALCODE=83-200,STREET=Pułkownika Dąbka 39,L=Starogard Gdański,ST=pomorskie,C=PL,1.3.6.1.4.1.311.60.2.1.3=#1302504c,2.5.4.15=#130f427573696e65737320456e74697479

Serial Number

18:53:9d:e2:23:51:d0:d7:ea:f0:91:96:ef:26:98:73

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 28, 2024 - Nov 28, 2026

Minor OS version

0

Major OS version

4

Entry point

4607550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Skull\source\repos\smoothwizard\SmoothWizard_SETUP\obj\Release\EN\SmoothWizard_SETUP_EN.pdb

microsoft.bcl.asyncinterfaces.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
MD5 ff34978b62d5e0be84a895d9c30f99ae
SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28
SSDEEP 384:cOJWqnwCBbNAP0VES2j0cX6dAl+NWpVzrdcoquWeP/WxR5kHRN7dDFcYR9zPrf8O:culwCBhdVv2wK5fdcUtFFn9zT8pY
TLSH
T14FC27C1A935C1317CEAF2EB4E570D9422935E78A2C22EB3E1588F2950D97345EB31738
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

73:a6:36:c1:dd:b5:ab:95:84:54:f7:d7:ec:c4:a1:7e:22:c6:c0:c4:77:c8:31:52:a6:11:c8:6c:c8:6e:03:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:d2:21:24:31:4a:58:bf:2d:11:00:01:00:00:01:d2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 25, 2023 - Feb 1, 2024

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

21458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb

microsoft.extensions.dependencyinjection.abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 19edd4f5e69a4589dc314909b5854a22f89c4b9ab040591771397b2cb1a17ba6
MD5 a4e538008c7b51a399e093d06fb2221d
SHA1 be912df83f49eadd957ea17a0e72467a941c5bc2
SHA512 132f8848b9d6d5bea0bb7a186911b6ae1a1f34e26ec2dac291252bf6bb43bb39d952f1f5f4ded9180937837193b0d90d1ed919a63e25544891c3fac1876a9a65
SSDEEP 768:Ar85NhSBuU1jGHAOeQVGVfueReYmXzXtqjKwRKPfnlHrMrDFIwFClNf9zo7H:ii1aVPu3w0PfnlLMrZIsivz6
TLSH
T10D534A1473FC8767CBEE467564B28300DB34698B2222E72F259EB08518C7BCA57917F6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

3b:64:b4:ea:29:61:6e:de:7f:31:7b:cc:60:79:8a:12:a5:5e:80:2f:c6:82:9f:73:56:a6:47:81:f1:cd:5f:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 17, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

58134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/Release/net462/Microsoft.Extensions.DependencyInjection.Abstractions.pdb

microsoft.extensions.dependencyinjection.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e969e314ce9398a34710e93e5f77668efe2f85b08f8c9729f98eba786c32c2a2
MD5 a973b15eb913fb38776a4434206fa752
SHA1 f090b568176c57d9005f469a9f6317bda3b00415
SHA512 a4569ca9a69c9744f877ea173e02643f8644734a0cf3f1af393f523115b9edd178cd08fcf00193729fcb33665f8caa704f87d4527afee319e264ab0765b795a9
SSDEEP 1536:Hk/4OTrnPdm6t2nnnEFrCPWl9LaOwG7kdE4yueQOitz2:HEnAa2nnnEuWHmOwG7kd5+QO+y
TLSH
T131A36B3863FC8B3AD6EB0978947545100BB9E6CB3502F31D1E94A46D19A7FC60B31767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a3:1e:2c:0a:d1:c5:d3:e5:ec:53:65:b5:5e:cb:e1:ed:68:45:39:1a:e1:e6:72:cb:4b:41:fb:33:72:f2:d5:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 17, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:551A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:01:d1:45:59:98:10:cc:42:4f:00:01:00:00:02:01

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

92718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/Release/net462/Microsoft.Extensions.DependencyInjection.pdb

microsoft.windowsapicodepack.core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aceb424b6b2abbc0560a49e130e3d5f6f8d2cb93bdc2bb5275b9a6f9a36c2cb5
MD5 eedf18c51bace77a2c564e10935d0184
SHA1 4c69d015b5710116553041d38f4a8844ed3d97f6
SHA512 126e73e49aba4bc3e744cd9b3c088c40a20bad610a453f897925712050e6b99c7674f5173cf80aafb0be61dcb7862e529eef34b633a8f81b1d9de63a1bcbc17a
SSDEEP 3072:7VlA8k2xIIKNvtCNyKdaf3vPzzxrliS/i6:71k26IKNvtCwUaff
TLSH
T1FFA36B61B3F8865DD6FF0F79F5720120CBB2BA063A07DB9E698825CE55A27C04661733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

108594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Z:\Development\Krypton\Windows-API-CodePack-NET\Source\Current\Windows API CodePack\Components\Core\obj\Release\net472\Microsoft.WindowsAPICodePack.Core.pdb

microsoft.windowsapicodepack.extendedlinguisticservices.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9c8c40e3e75ca3611c7e2d748ff107e5ee87d58db7e84f6cbeb194dea33cbd59
MD5 6269efc2d3fe9e751752484482f95ccd
SHA1 3ba524c43132f2d48910230b0727670c12310956
SHA512 7ec0c5fc5b4ff981b2ba1993db03e6fcaeb691c158ff791241669e770fc62b6419cbb2b1f2fcf4ff90bed9391c4bd4c7a0b2484fde506ece5b8c55ea1d1076af
SSDEEP 384:rodmIOm6v63LjWR4fHHE3UWhGWgqYePebfTHYRaBZ28MFXwTiQpLRdoLpzoqc8gH:rod/OtcLy4Y/gR84YR+ZVDptdsRhc8P
TLSH
T194C2194057F84636DFBE0BBAFCF3126206B0E156B511EF1D1A8858985DD3F590A21BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Z:\Development\Krypton\Windows-API-CodePack-NET\Source\Current\Windows API CodePack\Components\ExtendedLinguisticServices\obj\Release\net472\Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.pdb

microsoft.windowsapicodepack.sensors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5afebee09d0c6460a796aad4d1126ff667e2f522471326a7f3e3bc7537d02bcf
MD5 1d2fc6760566001adb36fadc1cec5918
SHA1 9bae01bd22af3753dc3be043155ee15db020bf03
SHA512 a4d9e81ca5862f1c6275a0eb471eed63936d48f4fc8c48acb0f75ea8b20d7f9d178024da87ed5a254a900b4337c6d047a53827efb6a165c045cf9ef8ee8a78a3
SSDEEP 768:PojqVComokoCo8ouo0oyoToogo7o9o7oBozolojoBobodofn+kJuOmOovtoIdvo4:zTV6yLti7oQtTryQgjJF/dunjOPf8JKY
TLSH
T1A923191973A86678C6FD8BB1BDAB801007F5E1136932FB9929987BAE5C53F0011D1B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

52326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Z:\Development\Krypton\Windows-API-CodePack-NET\Source\Current\Windows API CodePack\Components\Sensors\obj\Release\net472\Microsoft.WindowsAPICodePack.Sensors.pdb

microsoft.windowsapicodepack.shell.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8f4098a823033755323a82291549666b1690171ef0812bb82311e86bb6f1bf72
MD5 5f79ff43272469cd88c90d15ea255075
SHA1 dcba0a4ac1e268129e485ee2ef4065b42812d4b3
SHA512 8289f0b60cf6d9d97cba993467eec12398a7f69b2c80ff588019f9b368b4d36c117c3667c06abff372fe7ba2d2f5175f76c2fafc4f65a79fd642fc58e84455b4
SSDEEP 6144:sD5xMUVeoAHGa1yXlQNXnA6hnbPSPXgKfZJ9N/sJkD9xP8qHRUIMgfytE547HpY/:sPNAH7BNXnA6tSb1sWJA7J+
TLSH
T127C44A3137AC011AD1EE1A79DAE26D3B4E77FA8A21B9DF0E459016FC1DF17020E18997
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

579086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Z:\Development\Krypton\Windows-API-CodePack-NET\Source\Current\Windows API CodePack\Components\Shell\obj\Release\net472\Microsoft.WindowsAPICodePack.Shell.pdb

microsoft.windowsapicodepack.shellextensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 428736db69a29008ea4ee8209520762b7922bd22437fa7c662dfb9f004d95829
MD5 5e5d26fb09eff9cdaeade75cbd0fd888
SHA1 686bd554bb505462ca7fb1d5c3d18a9671b8f3a1
SHA512 79af316f375e4882f80bcaf30d756d39671fa6df1d72859f8c7e7fb40ae2cb6377ea08c6aca4c590623bd3870375452425691773018ff4edcf2da94b6495c991
SSDEEP 384:12XvShfFck7t8YjYD7xQpuvbUSVUpvnUm4FHH0h9PgheLqg2lVNxANfUglVewhZ+:8XScktjpuQSVwvnmH0DnLFR/+NQ0
TLSH
T134F21A0097F9823AD5BF4638BDB246600BB5FD06B612EF5F0D81A5AD6CB3B8049517F2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

41478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Z:\Development\Krypton\Windows-API-CodePack-NET\Source\Current\Windows API CodePack\Components\ShellExtensions\obj\Release\net472\Microsoft.WindowsAPICodePack.ShellExtensions.pdb

system.threading.tasks.extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 af4e13ef418fd89b432de20cd1dfb7fa10a7179c8dd049c9856316e50c5949ca
MD5 0fff41795a1107691ec1e5054211c04a
SHA1 3439da9b7918fa0c17836acbe1fa4e05c40119ec
SHA512 1333847b76025af23a4a4dd421707732078673c96dcdb726a38b477c51606395002574fbcdbf224fd0ae5b80e8da8b2f02dd4972d88f31c36c3dcbf595510e90
SSDEEP 384:F7PVBSE/ug12sib05JCw0p8CUQefpnQKwU3RymGWuXWJwnHRN7rpGR9z04RI:9PV0iug12TY+bUKmGfXrY9z1
TLSH
T15FC28D6183B85113CF6F8E77D2A9CC175F74A3466A02E7391AECF2D40C5338A8A31275
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

16:d8:01:cf:fd:de:8b:33:89:18:e1:8b:1f:5e:60:e2:48:88:65:aa:1b:f1:2d:69:fc:ae:73:d7:f9:1a:25:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 3, 2025

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:04:3f:15:d3:a3:69:9e:ef:89:cc:00:00:00:00:04:3f

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 19, 2024 - Nov 12, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:2D1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:fd:73:f9:68:5a:cd:0c:61:ed:00:01:00:00:01:fd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

22842

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Threading.Tasks.Extensions/Release/net462/System.Threading.Tasks.Extensions.pdb