sheetagent | b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0

resource	yara_rule
sample	family_sheetagent

resource
b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0
unpack001/google.apis.auth.dll
unpack001/google.apis.auth.platformservices.dll
unpack001/google.apis.core.dll
unpack001/google.apis.dll
unpack001/google.apis.platformservices.dll
unpack001/google.apis.sheets.v4.dll

b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0
MD5 3d06209ab0e61492e7f5d92d253cea7d
SHA1 cfdb95a0280177579197793d68ad504c05964d9f
SHA512 87ea7b9be5cdecb27560744cc278d06d297eab372d579dc81e8fe5f0a82b11e2f32427d2e762f43f3184e86266535fe705d8efbdd5d74b503a9b8748f73f19aa
SSDEEP 12288:9Ms9dFmeY5EOhP5ymHl/fFs0Y1kL0HvPoR1GytQQu0bnCPhguGNvcRO:95NY5TL5Hl/fFs0YeLCvPoGyO22J
TLSH
T118D4236873EDCA46E27BBF735CB072868FB5B61EA915E31A24B0606A0582F41C551F33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

639662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\brain2\Desktop\Sheet2\Sheet\obj\Debug\MicrosoftSyncService.pdb

google.apis.auth.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9600bf413a96add491f00be83ae926c3a8f47dd3e8fcfe1016b415771fe3efb4
MD5 8ffa40203e9abc3457820b52dec074f6
SHA1 0b29fa06f5d84535d271f27ec0d5452dfb85793a
SHA512 f8825f934c44ff86437bf59dbfcab472ca7b6c9b22de2a7a0ef03ce6405307fe784c20e3e31484d13a14b12b86e3efcdabe8ede024c1019758b1f689fed4f14a
SSDEEP 3072:6psOaCjiQBTqRQ1S28Rvd7RWe9EtjPRy5TH0ou4hpi8m1UHXfWAQb1lSGFur:6ba3bjRWe9Etjpy5K0idKwh
TLSH
T10514391213FC4B15F6BF9B35E9B04161CA76F606F8EAD38D0A48A1ED2922B51D9C0737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

211934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Apiary\2022-12-01.12-06-01\Src\Support\Google.Apis.Auth\obj\Release\net45\Google.Apis.Auth.pdb

google.apis.auth.pdb

SHA256 6ed632d677fc45ade72748e9faef77ef2edf7266f300cabff72414afd4188ad0
MD5 494e4ffa631701cbc78ab71cfb80531b
SHA1 65bf30eba884624057b2e62d7be08d6ba155f642
SHA512 a0c16ec038375bb127a823175a3d9ff47ed28dd905c88efd29c4a92760a177694e1687ec822b6c56f01344e69d23e6d46fecd8fb27d13e1e018eeb7e5c6e9df1
SSDEEP 1536:nnLkdj63oNaq1aeco7NqBgxdCLyESTDmq:nIOYaacHNSWq
TLSH
T12643B40ED2C84F1ECEB168F55A670365D378C908F949CB53A29CB26A28977D09F471BC
MD5 SHA1 SHA512 SSDEEP TLSH

Detects SheetAgent RAT

apt apt36 transparent_tribe

google.apis.auth.platformservices.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c9e9af68fdb006c32a241887cbff5e028073e18dbe430634692f343171336ef
MD5 fbe9f6576d72217a755cfdd72a4d1d9b
SHA1 a2a9c25701dc24bff425d84b5672fd6cfe9d8fde
SHA512 6e370e58627ee1ff57b5c82f404de53bb7bee14275eeb163144a3b207aaee562096715616fa6cbf4b599a44f3aec7ccd9f93e300566baf5bc76555aa46a3a3f7
SSDEEP 48:6I+l93YoLl5jJ9DMPGM3mPoILybtPeu5hD+bDItvyDt7DlitDdND0d:S+oLl/9wUfLybtmM6bVtMBL
TLSH
T188B17422A3F44337EAB68773FEB353810778F611CE57971E19C06216ACA29144A25F35
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10570

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Apiary\2022-12-01.12-06-01\Src\Support\Google.Apis.Auth.PlatformServices\obj\Release\net45\Google.Apis.Auth.PlatformServices.pdb

google.apis.core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 663d5e11a2b820e9f08804de3c865345a42d0a98609d8cf09d55c481aeac0956
MD5 0009907056b67d18d6633754f34d95d1
SHA1 02e9aa541ff0b83a9c9e245e6488bd85160ee0f6
SHA512 5e5030e57225d0ed02339dda08d5b0bad10164bc01dcd9fb729a5557eabdaeaa19364a35f9527251b19a73d74bd9abeb9e265cf16dd98b612d4c8c52e4191bf6
SSDEEP 1536:sCEZ3B4/YpgzLyMNdQup+nxHbakHI4jKqq8:sFB42eGMNdzCxHbakHI4jKq
TLSH
T15E734A1153EC8B47EBFFAAB8B87042210772B5467426EBAF4E4CB7CD19637408A50763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

84230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Apiary\2022-12-01.12-06-01\Src\Support\Google.Apis.Core\obj\Release\net45\Google.Apis.Core.pdb

google.apis.core.pdb

SHA256 a88fec0faba8ea8039cbe3ecb5d1fb6744f6e7b3db6ecc6737ea584746a5c8ea
MD5 a7162e3b4d099d98db7d81296ac36e6e
SHA1 d2c0395c06425ca3ad27b15a432a29e4233c9b80
SHA512 487f2be121fa0452418879fec9773e1184509262e3f9308a9b45432dfbf85b281c55c4ae2b2d1f4c5b566a912a6d8d014ecce88a896db6e7ba243695ff574c45
SSDEEP 384:YVem/OwamROXGcXAt9AZ7+QYSsodp6ANcDiVb8fjVEoLdTVpOVJ1cV:YlaONaEAZ7Ono+iifjVEoLLpOBcV
TLSH
T1C4B2F84FE2878B2BC77261F6A12397257730D548EA0A0FD322AD73669D95B001F572EC
MD5 SHA1 SHA512 SSDEEP TLSH

Detects SheetAgent RAT

apt apt36 transparent_tribe

google.apis.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d9598fc44214f169e856a9698d7c8e901ea61ac4fe4ce7a01e68a356f004cdd5
MD5 95ef411f4c11a5a6fc94fd9c1df9901d
SHA1 546a1230ede76eb88a31490061bd7021e554af50
SHA512 1a731295ff986853325f6a6f3adbb230fd6698b78f2c5c53324fbd08d12e7b079dc777ad6dde6cfe78044a35797cdcafb3d4f285b8c62d91202b92f0cf84ca7c
SSDEEP 1536:7mngQSeHow97wf8H2civmmb5V4VvKL+CQyHrrCj+:6nYNf0dIp5W4L+CQY
TLSH
T1AE834D1123ECCB37D6AF9A7EB43096614B79D507E836F39E5D8895DE28533804A843B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

86726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Apiary\2022-12-01.12-06-01\Src\Support\Google.Apis\obj\Release\net45\Google.Apis.pdb

google.apis.pdb

SHA256 96396e12be4aa6dc5dc58122cfeb91b7d6076fd990fe55b85c8248d0c3711ecc
MD5 13c9ae41f22c3560000639a35093be47
SHA1 3d5fed1ae904e14e8fe9ddc5915615faf9cb15ca
SHA512 80deb0434c5efd0d7ff9ab41f1eb5d3a1f76f56906beff153b8cb783dfc38276c61b07cd6b017e12ee951a779556a02e17ac423139063820ce6562ccc83f672d
SSDEEP 384:epjAoQ3hNQZxi2yK3lZ76QYQhyPDprrLLFCqkwCYLT/:eWoGNQTi2yK3lZ7yfVLLFCqHC+
TLSH
T17BA2F75AA2A44B4FC66092FA566347617334C114AB4B4F2353D8B3FCAC99B280ED72DD
MD5 SHA1 SHA512 SSDEEP TLSH

Detects SheetAgent RAT

apt apt36 transparent_tribe

google.apis.platformservices.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4042ca01d6394ea93d5bef1251f924e10df7927bb98870ca9793036fa6876218
MD5 766d828d3d3c4a6934854a3585a2f067
SHA1 dbcfa66b97a6e4f0a6a56965b5160bb2a2094410
SHA512 c3fa8b911fd431f41a69efc8270508349e44718b525c3c20148a5d0a14e5498ba604192f6469ffcda190c5133df3afdaae212855a3ffca75652fd9a241f2ab7f
SSDEEP 48:60+lQzobWNlTqUgJlpQAMH5LybtPigJv3cStdDRt2yD7CDjactDVmNDed:uKlNlTSJl+NLybt6YsStRIBBVc
TLSH
T15E913F16A3F807A7F87B5772AEB312810774F612DD536B2F1980570A9C629204B66B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Apiary\2022-12-01.12-06-01\Src\Support\Google.Apis.PlatformServices\obj\Release\net45\Google.Apis.PlatformServices.pdb

google.apis.sheets.v4.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 96b6e9ef7ac9be813f0cbebf9a4f2124b45283170cd791dcd67016469864918e
MD5 71638612d7d1f9d1e8c34f86ba5feddd
SHA1 ce3c812ab9ec8601d13ba96ca21d62e4b13427e0
SHA512 b863992fcde3a37e4f4a4184fed5fbd710e0c8f7d125128463917cccaa041157377dabbd4254a0959ef080ebfee1e5601aea447adcc48bbc461e5141335fc507
SSDEEP 6144:p1Qh29W+KsLM0hEyo/r/z5jxWguN8kTI:bc+KGM0hEy4WguZI
TLSH
T151248225D62583B1DA7A1D3374A1760B0326E1877364AAF5FF70EC8F361BB6260059B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

225210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Apiary\2023-01-05.08-00-01\Src\Generated\Google.Apis.Sheets.v4\obj\Release\net45\Google.Apis.Sheets.v4.pdb

google.apis.sheets.v4.pdb

SHA256 ee99735981a359f569d101b63a9ba53952baebd55a99320b15819ad31ce4ae08
MD5 212a46445a010f5f0438dde8b5665ad6
SHA1 66ef545dc102a5e3d99ae9a3bcba096e0d24bcaa
SHA512 60f87ea2d5d46b6348abc161ecababa0e637d73fe791d6456e41ba59cc8709bd47a9d62ad01d417f48765ad5fa7e2bf737c139c7527267a97329c173361c8661
SSDEEP 1536:sEMUdn1CW2SuePJsGuO7OTH84Ym3IC7HPKu:sEDNVuNcY7vKu
TLSH
T1CD73FE0FBB815B1DC7358432666B83F15379D158FE885B2352A9B1382C925EA4F872FC
MD5 SHA1 SHA512 SSDEEP TLSH

Detects SheetAgent RAT

apt apt36 transparent_tribe

newtonsoft.json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c5c83bbc1741be6ff4c490c0aee34c162945423ec577c646538b2d21ce13199e
MD5 715a1fbee4665e99e859eda667fe8034
SHA1 e13c6e4210043c4976dcdc447ea2b32854f70cc6
SHA512 bf9744ccb20f8205b2de39dbe79d34497b4d5c19b353d0f95e87ea7ef7fa1784aea87e10efcef11e4c90451eaa47a379204eb0533aa3018e378dd3511ce0e8ad
SSDEEP 12288:WBARJBRZl/j1TbQ7n5WLm4k0X57ZYrgNHgK9C1BSjRlXP36RMGy1NqTU+:WBA/ZTvQD0XY0AJBSjRlXP36RMG7
TLSH
T112E4284123F88F2BE19F7B35B4704A1947FAF91796B5E78F5908D9A51C43B818E803A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Detects SheetAgent RAT

apt apt36 transparent_tribe

Digest

3a:57:8c:7c:68:8b:18:66:50:3e:ca:01:8e:c9:25:ce:98:4d:c3:92:f9:6d:09:57:64:2e:4c:79:0e:24:5a:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 24, 2022

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

704522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0

mscoree

dotnet

google.apis.auth.dll

mscoree

dotnet

google.apis.auth.pdb

google.apis.auth.platformservices.dll

mscoree

dotnet

google.apis.core.dll

mscoree

dotnet

google.apis.core.pdb

google.apis.dll

mscoree

dotnet

google.apis.pdb

google.apis.platformservices.dll

mscoree

dotnet

google.apis.sheets.v4.dll

mscoree

dotnet

google.apis.sheets.v4.pdb

newtonsoft.json.dll

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

b928e523b51187b932e48a65d36ce3d0c39ee9d409d493b90f98cf3d1e0e73b0

mscoree

dotnet

google.apis.auth.dll

mscoree

dotnet

google.apis.auth.pdb

google.apis.auth.platformservices.dll

mscoree

dotnet

google.apis.core.dll

mscoree

dotnet

google.apis.core.pdb

google.apis.dll

mscoree

dotnet

google.apis.pdb

google.apis.platformservices.dll

mscoree

dotnet

google.apis.sheets.v4.dll

mscoree

dotnet

google.apis.sheets.v4.pdb

newtonsoft.json.dll

mscoree

dotnet