Install-Chess - Play and Learn Online-GooglePlayGames[.]exe

resource
unpack001/brandedinstallerlib.dll
unpack001/brandedinstallerlib.protos.dll
unpack001/costura.dll
unpack001/crashreport.dll
unpack001/feedback.dll
unpack001/gateway.dll
unpack001/installerphenotype.dll
unpack001/installertools.dll
unpack001/ipc.dll
unpack001/metrics.dll
unpack001/metrics.protos.dll
unpack001/microsoft.windowsapicodepack.dll
unpack001/microsoft.windowsapicodepack.shell.dll
unpack001/microsoft.windowsapicodepack.shellextensions.dll
unpack001/observables.dll
unpack001/omahainteg.dll
unpack001/protobufutils.dll
unpack001/shared.protos.dll
unpack001/utils.dll
unpack001/wpfutils.dll

Install-Chess - Play and Learn Online-GooglePlayGames.exe

SHA256 180455ed8cab0a5f4f6c27dc45ad71ca0782d5d4bd9ee6a27a675c8eb7fdb1d6
MD5 ad176126dbf7e0a2f154a3da0e9e707a
SHA1 6900ec18ac07f049c5924f274b0469d2f806d77c
SHA512 65651aac5fbec8483d34d31c132beea597ac143f4bc073bda9bbb0cd44193f8c06e143001f52db937514086c9ae63dcf5e6940314adc0a2f52dbeaee59cdce33
SSDEEP 393216:fVUj4kSMiohxJdVJiuDygN+tT0yBUF+eOFLXBpbbSnW0uXhVwNdqcn5C7midi+zh:fVqvn+uWqF2VwNrn5Dstb4tcRGY
TLSH
T14997CF03BAA190B8D08B9031E27F53756E327C965B3196DF718CBD182F79BE01A39365
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

6a:64:15:e1:82:6a:4e:f1:49:8b:f0:2b:11:a3:4a:33:00:8c:17:24:d0:c0:9f:4e:8b:5f:7b:f8:7f:e0:67:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Aug 22, 2026

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 8, 2024 - Apr 10, 2027

Subject

CN=Dummy certificate

Serial Number

01

Issuer

CN=Unknown issuer

Key Usages

KeyUsageCertSign

Ext Key Usages

Timespan

Jan 1, 2013 - Apr 1, 2013

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

T:\src\piper\google3\play\games\battlestar\installer\ProdBrandedInstaller\obj\x64\Release\net48\ProdBrandedInstaller.pdb

brandedinstallerlib.dll

SHA256 930c22f3f60ad3d460d67e81257f86f129efba479e43098198439d1a2633c6e2
MD5 ad11efa02101af049a120432ccf870e4
SHA1 e87bfc88c41cd92342322568f4f8c12b689f337d
SHA512 12293ed678643e935bad953127f66a4ea3018d5d7bad280acd38a99e6f104aea0fc7c1fd924881f6005fd65cc1fb9d0498ab8a3b8c73a47f8eb96bc61e02c40f
SSDEEP 49152:+EiYkSkYItYYIrQYezRY3n6Ya9DYY9uYkIjYg74DJDEaaXgEevGxBXjcuDl8SehL:+n
TLSH
T131752A41ABFD4A28F5F3AB35BD7A75324976BC20AD12D26E1508034D29B1B64CDB1B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

brandedinstallerlib.pdb

SHA256 e02a67d0b6294df88f54b75d705f8845b32045095799d15c0169c8f301cda6f9
MD5 0a05e62faea0c8cfd6585396debcdeea
SHA1 6d926d53429ac339bd1d8cf988f1b89a481314ae
SHA512 679ba13f1aaffaf7c61c4efa2b4664db27b11c2bfd04ced3d86a266cd65002e11eb16f148d109ecb81ff9433b938d2d62dac5476a11abd9e16c605430725181e
SSDEEP 768:uACDI2Ih7m9M7x0uCzeCVPmTbBam90RGLVHkoK7qs9aN1WbbVBD3S4sGN:pXS8gmEGmoKGs9u1q24X
TLSH
T1DF531927E3949A37C0105537056B835A7BBCC201A6095B27A3D7BB34FCAE76E0E77264
MD5 SHA1 SHA512 SSDEEP TLSH

brandedinstallerlib.protos.dll

SHA256 ad3a20787ce66b94251535e78215b601d44d3deefa9bc9f657657be283aad9b2
MD5 8c91813bcf3855b3337a0d468ce9dbbe
SHA1 962e8f6c775aab9639acd773118881d48a20da09
SHA512 13d341161ece29b2771f30dfee2382f7f37a606c0e8aed31b17b43ae7b4e8d024bcb3712d95d4024132f5b2c88889a8edf1e20f1c22d747fc21290627782bebc
SSDEEP 1536:MXGcgbvRj1UqNeQcQvW8qp60F4gjNYDPy6EkTxz2u6jLnjkFOyzizuwqZKNLU:MXngb0TpTFiZtzAj03X0NA
TLSH
T106D3D81E6DEC913CDB6F6A38F8D428978FA4A2173510DB7B89D0D2974503788ED8247B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

BrandedInstallerLib.Protos\obj\x64\Release\net48\BrandedInstallerLib.Protos.pdb

brandedinstallerlib.protos.pdb

SHA256 02d50705236cc35e56c3517f00f079f572d88aa218c7c773e3283f24da277238
MD5 e2c4933c61a6f749d2b0fce5526dfe08
SHA1 8b0599a9a9912d04b4dd2800c8aa06e4016bd8bc
SHA512 df74125587cdaaedb8b27b26d2e4a7e7166a05ec1e8a96e61b7f5280095e505c98474c4826e17862b3eb7e23cc5b753615cbef47be8aecc0d8be235931d8b372
SSDEEP 768:KspzXsxT71nU8PCGSvRGLVHkoe2kVN84ttQiwsGiL4VTDJPm3:XpzXA1n7SJGmoe9zQieiL4V43
TLSH
T1E23364E7D6564A3AC400253D297943772B7F01065B098F2793E8F278AD997390B2FEB4
MD5 SHA1 SHA512 SSDEEP TLSH

costura.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7fa146704d6681e2280fc34535239b03f6fcbae46e2af191702f43894ac286cb
MD5 3a79254089a401e72ae63232f05da838
SHA1 1e776d573062d1c9c757a8781ddce5bda78f62b7
SHA512 63fa42945139f421ce4079e0aa6c7c17ba9667449b1b2693ce5b0ea4c493b407b162728f7f292466907a9e172cff724c67180b4d27e91266b667da7441cc8bd0
SSDEEP 48:6I+lni2qJfjVRPGwzC94MhTN0v5ETrj2H4CAWk1qyFVqZ2IbS4S:yg7KS5EKYtWpZ2VB
TLSH
T1B4919610C7A8477BE9BB4BB66CA313494275FA51DD37DB1F1A8162161C123140A31F72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\CI_WS\Ws\195354\Source\Costura_Fody\src\Costura\obj\Release\netstandard1.0\Costura.pdb

costura.pdb

SHA256 4baa725d931b974ee5756d839085cce8736e1f99d405529f825ffa2d6770f2d4
MD5 bd588e0bff281d077d8da9122307adfb
SHA1 9d79504de51e115db26ed0175610fef704182cdd
SHA512 b510c635838383f69b22e4eb93de8f93871b12eac6bc5e113bcc4c02a8c6dbbd35417eb3205a17e139825777b2ac4e21715693c6e96b799d59ec50e25d3fa2bb
TLSH
T1F35173776F44C691ED9881B25013D648363046127612EE7AE6E12705CCBFDF8077297B
MD5 SHA1 SHA512 TLSH

crashreport.dll

SHA256 90d4c0dc73cb51fd7209084f6cfdbd43e4cb04dd4ca031cd59acc0fdb327981e
MD5 f1524bd9a21abac7eb3d5d2a847433ec
SHA1 393c5ad279b489095ec1a3a1f4222fba09d69e37
SHA512 b9b74a2e30e61ada47fac1ccddd30fc3810753ed48fc742dbafa39f5d6f502d1d06354ba40c30e4b5e9aaeca6a080e7d06160822653b208013eccd2d58316283
SSDEEP 384:inhlUdJIXSHudOuvl7xO0louJgIVXd2YeVB60XfWnK1:Jc9dOuvwuJvXd2X60L
TLSH
T113920A1257FC823AE9FE0B7AAC7142650971BD477823D36E1B4865CE1C3BB404A613B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

CrashReport\obj\x64\Release\net48\CrashReport.pdb

crashreport.pdb

SHA256 068cad239057b28c190fe18d0134fac76cda59a007b176a819a0a9056e1ffad6
MD5 95044ce3da912e30f07dfb92749bf0c5
SHA1 d9b56844632f42af12481679506395a3c836dea9
SHA512 f77538d041856db0a20cf63b7ff3b72d6e1e79c9d825f775512666ac8405828e6c0512fe505e9a7e11d5846874b3b50aca8053db6e3ef856cacb6cab872cd665
SSDEEP 384:tnhs4RspHp9Cs+hPTaNrjLOMv+eiMiPH0WH7OwcflowKcwPQR:tnhs4RsRvRGLVHkofA
TLSH
T1D9420B7763489B65C56216765522C18F3A7C42012B49FF3EF2E47D14ECAFB8B03B22A5
MD5 SHA1 SHA512 SSDEEP TLSH

feedback.dll

SHA256 53279b0e3aed6b7a9493c45ca04c21310b55b3a0e7c15dfd182081c752eee552
MD5 a5bc5cb6e3cc5200cbea20ce6527a5b9
SHA1 13d031b253888498fb752609e7d365138fccd5c1
SHA512 0e3334502c83065c2a04ceebfd8408871c9ffe7b10b821936343f5bdc5bf56eefb51f155cc6efd1e17497034ee6853f416fb39bc9b2f009f9681953597a437b7
SSDEEP 6144:omSoxpK5z9P8pg4MxE6KllfmERVZR/W21Zi5dDF2VmzJhL/ydlJSjFJvmNGCMC/a:omS3AyLFjF9vLT5JLpK
TLSH
T1A0A4B61193F8472AF4B39BB6BDB35395162ABD22D932C35E0844566F2C52FD44F22B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

feedback.pdb

SHA256 7799746886c629a914955513e015131d8fb1859e10349876708436b3d259ab71
MD5 02fb690c4e80f830138649b7af4af501
SHA1 93b302d44215ba42a6ca8dc52c295a64f96aa039
SHA512 33efba40e31bcd0d483a02b739443455b2ce58accfca8b4bba30e81b50f60634e75b5ae0b019874e798fa5ae6dcebb133354b79196bed11e8f7b60de8d7790c2
SSDEEP 384:mkCwujqDp/+NRK4JixgVnfIMnm3s0Po+I4elHp9CwQ+hPTaNrjLOMv+eiMiPH0Wr:lBuWd/+erxcIMnm3s0Pov4el90RGLVHv
TLSH
T14BB2B477974C8621C9251576142A835B3FBD87406B097F3AF1E4BE20ECAF71B1BB21A1
MD5 SHA1 SHA512 SSDEEP TLSH

gateway.dll

SHA256 67d6e56b6758ecf0860903617ea8aeadfec6199fe0c9e6899e27e5e97bccdf69
MD5 be77a672a48176c6e0a07e962052a3ef
SHA1 72c40daca4dfaa1f60524eb325b7775bfee57f67
SHA512 86a144966c29d17b0a9fe3fca3222809458409f14cf8e2c35a26abc886ab38b21900c1b9a94406d7b60cf89659dccabfe95e850b8fe1d7a91b504c4ab08ad730
SSDEEP 6144:DQ1tbA6oNgbycwnX6Xa+OgxalLI2TPdUqHFxsYI4A:c1gNncrOwCU0FG
TLSH
T1C284D71C2CEC6928E25F9BBB6AE078558B74F6233308D66F48416EAF0C43755CD851BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Gateway\obj\x64\Release\net48\Gateway.pdb

gateway.pdb

SHA256 888b71d0979e3353af9f0ecf4f78e986333a801da125457b5b3eeac545b2e510
MD5 7a0f7da1df1752db5614818794e11b61
SHA1 d8e62945f68e83fd6b0144fe1862af851254d537
SHA512 b9b4239fc81487a6237cf3acd2c9bf0df8175eb546ab0d9d0d9ff5064843477434755879f7165b561e1aab876c5d88c680beb52b83024727c0b439563eb1e85b
SSDEEP 3072:jgzcUYWf7IgWl5nQsLnd4VGzB/x3UPaPCKRr3:URrIgWlnLyGXak3
TLSH
T1C0D394AACDD8813DC461213F29BD83625B7D040A9B854B1793DCF274ADDA7B8021F7B9
MD5 SHA1 SHA512 SSDEEP TLSH

google.protobuf.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3b1b4190ce28b3bb4c6e7b96e7cf2f64195cf919a2756ab9f7a688bb3dc726aa
MD5 a6b9e35811777dfa3f4d84b1d31c8d22
SHA1 eeea4b1fc42483f422db7830fe1194a4a4c2de90
SHA512 cb120bdd7ae347875a230b0404f599d34f53ccd5747735ece0899ee6315f2022aae9973bb15438f1a2888e0f5ff263e2d6ad26c14920bdff491e97cd0a34f5c6
SSDEEP 6144:y9W2BJlrusq+60xm5zB5LEbbXtS6c4vPySuCjM9N+9zD2oLqyaLgi7EIqObK0qH:mWMqt0xrYSu2M9N+9fzmL6Bq2H
TLSH
T1B0B44B2826EC4128E6AF5B31F9E0A825F6FDF517711CE76E605062F98983B10FE41277
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

8d:44:6f:7d:3a:7b:08:25:35:9e:68:3b:6f:b0:4f:0b:31:9c:50:09:3f:9e:05:cb:c4:e4:6f:7d:01:96:ee:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jan 12, 2026

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 8, 2024 - Apr 10, 2027

Minor OS version

0

Major OS version

4

Entry point

492054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/csharp/src/Google.Protobuf/obj/Release/net45/Google.Protobuf.pdb

google.protobuf.pdb

SHA256 d9e3f39c85150a45223c0cc89676e579d7a6697dfab2281f65bba46c29e4f5ff
MD5 06a6432b8ccf73ef388678fc72fa1655
SHA1 6f743fd81d01dc7ebbc3ee663278f7e06593da87
SHA512 23e09f3566524ad2c6e3f4507f5bae88fd8f8591a7e0dc5a544e316f6d818d847a7e1639fe99dd0f6bb6678108dbd131bf721c8e2e3bed1e7bc8eb292964da06
SSDEEP 3072:eOdlh5zJfCuVn3t1MqEoVhumACDU6qrH5wdIsGgs:ddfFJl91MqEmum7EJso
TLSH
T12804C69BA988C23ECF9D243D156A06227779C00ADA418B07779CEF7C6C97B78059367C
MD5 SHA1 SHA512 SSDEEP TLSH

grpc.core.api.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d13ba6360fa73140cda545afab6f21d6576475f9644cd153c182dde6aede8f80
MD5 2fce7cf52f2cef8d660a4dda509f2eed
SHA1 9585cbf4e077087a878111eedf9621707d252c54
SHA512 c58788087b5514b4b13fe89fdf6a6dfd5f909ca1ca8067620b10b63e3be420f369f97bcfb3672439b3a5339dd4587b1143d7d507de38a1680fb47cb503c329b3
SSDEEP 1536:5iI8m/ZUzZeXt+0O/QLHEhq6S+WqVs5w8yDYGtZQN7uPxic:5WICM7OdFVs5zyDYGtyN+xic
TLSH
T15F434B25C3DC4A3BDFAF46F8F89421651771F7147883E3AB154CA0E91993B94CBA432A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

35:6e:24:e6:34:7c:9a:52:64:76:af:b8:1a:51:37:66:7b:6c:c2:fd:80:29:5e:93:c5:57:d3:72:f7:ce:5e:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Chains

Jan 11, 2023

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Serial Number

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 2, 2021 - Jul 10, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

55362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/var/local/git/grpc/src/csharp/Grpc.Core.Api/obj/Release/net45/Grpc.Core.Api.pdb

grpc.core.api.pdb

SHA256 820db50b00a7a68ffad439dcf0b40c3239db6c9b9dd52c430f66a0a71866c23b
MD5 6871f845867fb3a061779c9d50241032
SHA1 06206a364038efbd0c88c88a3018184d368ef3e1
SHA512 4abf20f67213cd7d10dfeb6a6e67cebc02dc6cc0c79cc723f25c07c6a5aac90e115f0b09313b880ef61c3154fc4ea56f572df9bbdb5d94ce90f95230c118bebd
SSDEEP 384:t2/59tu/YjoBD2SZ9GfsRayZ7aw7XQYzA3rRIaPNn5JrTlpdJ/aa58ye2:U/5uAjQ2SZAsRxZOwXiLr58ye2
TLSH
T15192A59BD3488B1DE581957709338B0803348606DAD58B2BA9D87B64CCDB73D1F7B2B8
MD5 SHA1 SHA512 SSDEEP TLSH

grpc.core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 aa99e6ad71c01997c154be1f0f6e5402266f787422cf67d66c5d59f63d26131f
MD5 6155b91228d88a0cfff0e8f32942e772
SHA1 b855c00124ff8048dd278f3ada5a3392576aa5d6
SHA512 4e6a0c07c09845072ebe16aa7087b572358800e6ff1691b2a2e6f56c60ebddb29eb9cdd4412dc78a8b9738e2d14b76b6c72373dbc7cd444b972e6320a818a728
SSDEEP 6144:VrJLcdXl5xFcQyCmnMENW1H/M8f9Z5mNplX4XmRrcMFADwYCuMsligT/Q5MSg:VrJLcd15XafWN/vZ4NLqmRrctb65MB
TLSH
T168A4AFC40B990D41E46FA2BAD5231302CEF4E157E5F7F3DA0ADB50DDE1137029AA879A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

28:46:96:ad:01:45:73:c2:cd:31:fb:ce:43:93:f8:99:cd:d5:dc:c9:c5:37:b2:8f:39:26:5f:94:cf:4f:f7:6e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Chains

Jan 11, 2023

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Serial Number

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 2, 2021 - Jul 10, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

480834

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/var/local/git/grpc/src/csharp/Grpc.Core/obj/Release/net45/Grpc.Core.pdb

grpc.core.pdb

SHA256 f079d75403722a0c750af9b4c5972349bb01dba436463ad318dec80e3816cb45
MD5 7c47e786f70be16341877b3f07ed25b6
SHA1 57ffd1da8907e8f1307641eafa3834b12b484cdb
SHA512 2c14d1c10fd0ce677724d43cebfe52640f517938c01a189185fc371188851674ca9754b956b3723f0cdde12b0bdc79b9505514513a3ba2d9575ae1f51226e7dc
SSDEEP 1536:80P4ieUC51gWxVCzR96OzzdZBw4rz8Ww5C:ciXjzhHdZu4rz8W/
TLSH
T11953B66783448A0BDA556B3B40B7573E3334C60197878F0772AC677ADC967280E6F2AC
MD5 SHA1 SHA512 SSDEEP TLSH

grpc_csharp_ext.x64.dll

IMPHASH ddc1242eabc6dfe5e51e45049088122c
SHA256 4151229b6e31dae91d459be70655417dd18e6b0869c9a72fef08a5bb28d980b8
MD5 865c7d285d665fe4d9fb672b111dd54d
SHA1 c3e83e7a8402f0de75a49d5dcc71dd131e9b2cab
SHA512 9be1ca48abfbcfb0964b25613e62ef75a5603876e84dd317d5946a96e1ffc64e219366b4635582d4c455212580e6b94a5de54e5fff6523792abfa2bcf0e18a1e
SSDEEP 98304:T90rvru1gfhuxb58gzjuq8/bx72QJg/+gqms:T9Mvru1+hux/uPTcQK/Zjs
TLSH
T106D64A2A76A88095E176C17DCACBCA9BE6B270044F3157CF5895435E1F33FE849BA231
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

15:26:4a:81:2f:cd:98:50:de:42:d3:7f:d5:f1:fe:2a:c2:12:f0:d5:ba:56:6c:05:a0:de:1b:19:d9:73:c0:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Chains

Jan 11, 2023

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Serial Number

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 2, 2021 - Jul 10, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

48041

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

T:\altsrc\github\grpc\workspace_csharp_ext_windows_x64\cmake\build\x64\grpc_csharp_ext.pdb

advapi32

RegGetValueA RegCloseKey RegEnumKeyExA RegOpenKeyExA RegQueryValueExA SystemFunction036

ws2_32

inet_ntop WSAStartup WSACleanup htons htonl ntohl ntohs inet_pton getservbyname getservbyport send recvfrom recv ioctlsocket connect __WSAFDIsSet gethostname WSARecv WSASend WSARecvFrom WSAConnect WSASetLastError setsockopt listen getsockname getpeername freeaddrinfo getaddrinfo WSAGetOverlappedResult WSASocketA WSAIoctl WSAGetLastError socket closesocket bind getsockopt

kernel32

UnregisterWaitEx QueryDepthSList InterlockedPopEntrySList ReleaseSemaphore SetProcessAffinityMask VirtualProtect GetVersionExW GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetThreadPriority SetThreadPriority SwitchToThread SignalObjectAndWait CreateTimerQueue OutputDebugStringW SetEndOfFile HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW CloseHandle CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus FreeLibrary GetProcAddress WaitForMultipleObjectsEx GetVersionExA GetLastError ExpandEnvironmentStringsA GetWindowsDirectoryA SetLastError GetTickCount ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared QueryPerformanceCounter QueryPerformanceFrequency Sleep GetCurrentThreadId SetEvent WaitForSingleObject CreateEventA CreateThread GetCurrentProcessorNumber GetSystemInfo LocalFree FormatMessageA GetEnvironmentVariableA SetEnvironmentVariableA InitializeSRWLock InitializeConditionVariable WakeConditionVariable SleepConditionVariableSRW GetModuleHandleA GetCurrentProcess VirtualAlloc VirtualFree GetLogicalProcessorInformation InitOnceExecuteOnce TlsAlloc TlsGetValue TlsSetValue RtlVirtualUnwind FindFirstFileExW FindClose SetStdHandle GetFullPathNameW GetCurrentDirectoryW SetCurrentDirectoryW EnumSystemLocalesW GetUserDefaultLCID LoadLibraryW IsValidLocale EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW FormatMessageW WideCharToMultiByte RtlPcToFileHeader EncodePointer DecodePointer RaiseException DuplicateHandle GetCurrentThread GetExitCodeThread GetNativeSystemInfo TryEnterCriticalSection InitializeCriticalSectionAndSpinCount TlsFree MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlUnwindEx LoadLibraryExW InterlockedPushEntrySList InterlockedFlushSList ReadFile GetTimeZoneInformation CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitProcess GetModuleHandleExW WriteFile GetConsoleCP GetConsoleMode SetFilePointerEx ReadConsoleW GetModuleFileNameW HeapFree HeapAlloc ExitThread ResumeThread FreeLibraryAndExitThread HeapReAlloc SetConsoleCtrlHandler GetStdHandle FlushFileBuffers GetDateFormatW GetTimeFormatW RtlCaptureStackBackTrace

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

dbghelp

SymFromAddr SymSetOptions SymInitialize

gprsharp_convert_clock_type gprsharp_free gprsharp_inf_future gprsharp_inf_past gprsharp_now gprsharp_sizeof_timespec grpcsharp_auth_context_peer_identity_property_name grpcsharp_auth_context_property_iterator grpcsharp_auth_context_release grpcsharp_auth_property_iterator_next grpcsharp_batch_context_create grpcsharp_batch_context_destroy grpcsharp_batch_context_recv_close_on_server_cancelled grpcsharp_batch_context_recv_initial_metadata grpcsharp_batch_context_recv_message_length grpcsharp_batch_context_recv_message_next_slice_peek grpcsharp_batch_context_recv_status_on_client_details grpcsharp_batch_context_recv_status_on_client_error_string grpcsharp_batch_context_recv_status_on_client_status grpcsharp_batch_context_recv_status_on_client_trailing_metadata grpcsharp_batch_context_reset grpcsharp_call_auth_context grpcsharp_call_cancel grpcsharp_call_cancel_with_status grpcsharp_call_credentials_release grpcsharp_call_destroy grpcsharp_call_get_peer grpcsharp_call_recv_initial_metadata grpcsharp_call_recv_message grpcsharp_call_send_close_from_client grpcsharp_call_send_initial_metadata grpcsharp_call_send_message grpcsharp_call_send_status_from_server grpcsharp_call_set_credentials grpcsharp_call_start_client_streaming grpcsharp_call_start_duplex_streaming grpcsharp_call_start_server_streaming grpcsharp_call_start_serverside grpcsharp_call_start_unary grpcsharp_channel_args_create grpcsharp_channel_args_destroy grpcsharp_channel_args_set_integer grpcsharp_channel_args_set_string grpcsharp_channel_check_connectivity_state grpcsharp_channel_create_call grpcsharp_channel_credentials_release grpcsharp_channel_destroy grpcsharp_channel_get_target grpcsharp_channel_watch_connectivity_state grpcsharp_completion_queue_create_async grpcsharp_completion_queue_create_sync grpcsharp_completion_queue_destroy grpcsharp_completion_queue_next grpcsharp_completion_queue_pluck grpcsharp_completion_queue_shutdown grpcsharp_composite_call_credentials_create grpcsharp_composite_channel_credentials_create grpcsharp_init grpcsharp_insecure_channel_create grpcsharp_metadata_array_add grpcsharp_metadata_array_count grpcsharp_metadata_array_create grpcsharp_metadata_array_destroy_full grpcsharp_metadata_array_get_key grpcsharp_metadata_array_get_value grpcsharp_metadata_credentials_create_from_plugin grpcsharp_metadata_credentials_notify_from_plugin grpcsharp_native_callback_dispatcher_init grpcsharp_override_default_ssl_roots grpcsharp_redirect_log grpcsharp_request_call_context_call grpcsharp_request_call_context_create grpcsharp_request_call_context_deadline grpcsharp_request_call_context_destroy grpcsharp_request_call_context_host grpcsharp_request_call_context_method grpcsharp_request_call_context_request_metadata grpcsharp_request_call_context_reset grpcsharp_secure_channel_create grpcsharp_server_add_insecure_http2_port grpcsharp_server_add_secure_http2_port grpcsharp_server_cancel_all_calls grpcsharp_server_create grpcsharp_server_credentials_release grpcsharp_server_destroy grpcsharp_server_register_completion_queue grpcsharp_server_request_call grpcsharp_server_shutdown_and_notify_callback grpcsharp_server_start grpcsharp_shutdown grpcsharp_sizeof_grpc_event grpcsharp_slice_buffer_adjust_tail_space grpcsharp_slice_buffer_create grpcsharp_slice_buffer_destroy grpcsharp_slice_buffer_reset_and_unref grpcsharp_slice_buffer_slice_count grpcsharp_slice_buffer_slice_peek grpcsharp_ssl_credentials_create grpcsharp_ssl_server_credentials_create grpcsharp_test_call_start_unary_echo grpcsharp_test_callback grpcsharp_test_nop grpcsharp_test_override_method grpcsharp_version_string

Name

.text

Size

8.6MB

Virtual Size

8.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

150KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

476KB

Virtual Size

476KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

283B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

installerphenotype.dll

SHA256 374c42abea9c87c1447ae695e612e24e995cf175cf50946078270ff2ecbba06a
MD5 0656e55b10d564dcae3b1def0b6b1147
SHA1 798f7bd2d0d26f14d5cfc0c030e71a56ed17bcd6
SHA512 023e958e48ff0cfbf7910717e96824cb139806377c8dd7b9e219ea723c64fc12656f114f2b1e9d036aa4ca9536bd9b91338ae124b519fc8f1bb07a18501e77e1
SSDEEP 768:X6NFNSH7WVnY++QHKA0/2qlQvJheZ74YV:XPHsnYMslQvJh84YV
TLSH
T170D22988AEED513BDAAF2B34BCE115910AB0B1177462FFBF5A0051A60B437C8C991777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

InstallerPhenotype\obj\x64\Release\net48\InstallerPhenotype.pdb

installerphenotype.pdb

SHA256 331ff015361a39d098f2dce2fd372027a402366d6c1c4ccb3bc1562ad8726d06
MD5 804e8baea0fada1358a337d2c07cb14f
SHA1 b871c2210e02b23ad9745d942f55fdfeadc360e0
SHA512 963a09bcfcbb0564b2332a012711810380493ed33c336d54819831d11066e35d30cc1a483f9dcc7b21a3410e0770dc9df1e10f067af2bd9e21a65145eb147255
SSDEEP 384:H+tm/cxOHp9Cs+hPTaNrjLOMv+eiMiPH0WH7Owcflo9/mx3ZLS:H+U/cevRGLVHkoQFS
TLSH
T1AC622FB747488239C1A5163E5465838F2B7C06015F48AF7EE2B87934EC9F75B03BA175
MD5 SHA1 SHA512 SSDEEP TLSH

installertools.dll

SHA256 872432eb3fe7e81fda4703892677566933dbf269b33bc4b33a5b23a4dd4646f3
MD5 d3bb0ab042673b34754b72eb8b26da90
SHA1 5b7f3e1c3eef9dc886f6439a29795c09e53993df
SHA512 ce65ea860f9ad69210fe378df272e0834a9078eb706d5e51d972462884c46989c39ab0efe4884a4c450035218ce0e5ea1c2979393122392a2066fccf62d7cd5f
SSDEEP 1536:CEo0w/8E0x8LWMIQK9HO8VERzn3AIowHLEY8OuJj5oXUtVwNmGyJteF4TM:CEot/8E0+LtK9HgN3NoILEYmeXUtVwNd
TLSH
T14B7328504BFA4136D0ABB6743DFC6917CE32A6266628F32F1484139F2553B818D52BB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

InstallerTools\obj\x64\Release\net48\InstallerTools.pdb

installertools.pdb

SHA256 b132b42d26dd5f6d743b565a74eb776b1098d14d65a8b751b55f3d7fc42b06f9
MD5 8a6af131580bd0e1b8aff1afbca20548
SHA1 922790376a805710f027f9da607a4c91790c1712
SHA512 648303efeda7d9d95bdb788e73214cb9e2c9e42845ff0565d7e20db539d166405a49e7496cea686efcb92bd960865b4c68ddbe90b7f43b8b85844dea9499cb1a
SSDEEP 384:pst7fA5NbdTImHzoBY0PFHp9Cs+hPTaNrjLOMv+eiMiPH0WH7OwcflowHwcDTg4w:i74vbdTDo/PFvRGLVHkoL0vtFPQF
TLSH
T14D92837787488725C516163A45A9C28F7B7CC2015B0ABF3AA2F47A34EDDF76B03B2161
MD5 SHA1 SHA512 SSDEEP TLSH

ipc.dll

SHA256 59bd7d1f6f0f00811cea4a5cc17c2486d8823878d776a5eda44cd35b89475c1a
MD5 2ae77efbfa597fc440270f107706373b
SHA1 dc669b755ac25db31934efbf24aae2e4099b875c
SHA512 d21dc96a2fc9f8c83d338489e91384dee894b5164ea10b6d9ccf05426f0b5e2167c1034cac8f37b44b7c515cf7fedb7a2be027cadb74af7e3823bdff1c3d4be3
SSDEEP 768:kidznYvW1m8AUkV50AjiWZL2CcMUza0UKpYbWpn5kI7+P0axb/e2evoOFLqZ9r+w:6j8AUkV50IiW92CcDzJ5leJxb/jevoK4
TLSH
T12A230805B3DC8B23E6BF6FBE69B16A174772FA066422F74F148CA1E81C527804D60753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Ipc\obj\x64\Release\net48\Ipc.pdb

ipc.pdb

SHA256 4f62f60254d8ff380b42f4f6e311486fdfedaf2122a52722a1f2b6f51d5c4c44
MD5 97c2513fb34922f71ccbaf7effc62754
SHA1 8220dc4728ad091a62393ec49bc0a1a351d6f08d
SHA512 1337834f8721d9826345e7013482ad1f8750ff8a74535033babccc256bb49fd49bffe7c889e114a2b6fd6ed7f464cc6df22d9d6282b0925cbbc0066aa5dc9e68
SSDEEP 384:WpXw2Wi2eaMHGvECnHp9Cs+hPTaNrjLOMv+eiMiPH0WH7OwcfloYcCsIBK9qRWa:iXw2RPHGvpLvRGLVHkoQBxRWa
TLSH
T1E592807B97488724C01515794929C74F2BBD86012B09BF7AF2E4BE28FC9F71B17B6160
MD5 SHA1 SHA512 SSDEEP TLSH

metrics.dll

SHA256 742954d3726d367c2e4791bb8a0035e493d16ebd153de7d76e5f3c6ff81c943e
MD5 107ec9e7c2346fd5ab0f4bee4eddbd5a
SHA1 f3a453ad01b74bc02928654121abaebaef22fd11
SHA512 f96ead19972ec8fdc20126177370471e1f081ee5fd1617ac7a181efc1639eebd291ccaefee452a33957aae7332643d75ed898baf1ce9dae625861ab5d979fc12
SSDEEP 768:REoRaqRiLrFdpW/5555tIdboofLkeu5MunCej2AJZ3kLCRwi2gcsOgF:RBALrt45555tAU
TLSH
T10ED2D849A3FC8A15E9FD0B367EB54A414FB1B9AA2476C30D16DD8CEE0E73B941E50312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Metrics\obj\x64\Release\net48\Metrics.pdb

metrics.pdb

SHA256 c3070de3382779f2baf2eeff338d0e0a592f751e9e5a5cf6929e9a0fa80130c2
MD5 e2a02007cdf80864f3ae567df9e13e55
SHA1 797186ba5fda15e5dc51e3c0a13a70cf623cfa77
SHA512 600d1560d22c43ad7138bfd0dc80b66a6d4945b8905302f7c5bc52f7e107ac75242e6f1b52ac1605debb7a5380e8fc9500bdbe5160e21f54cadea6bd18cd8668
SSDEEP 384:5a6citM0zxeaeehCww6TYSpwJtEASHp9Cs+hPTaNrjLOMv+eiMiPH0WH7OwcfloZ:5tZVz1eehCww6TYSpwJtEAcvRGLVHkoZ
TLSH
T10A624E379B088B61C4250576142AC38F2BBC87515A48BF7DF1E83E54FD9F68B1BB2660
MD5 SHA1 SHA512 SSDEEP TLSH

metrics.protos.dll

SHA256 e59584a334ff3ab944073e9dcbea08d6485553dcc0a30adddd61f868965e2285
MD5 367a9aed74d28789d5bf4ed3227429b7
SHA1 250c4bd4de9271d80d83d040e9cc42cedd2dc7c6
SHA512 4a5261db8849b460b204518af1628efcde08a80d9ebce693e85fab04144ec35a63d5714d1ae05da40890383141438cfc59691d2ff09c15e6c40abbce5302738d
SSDEEP 12288:yKTkS/0F8kCwg44d1Z8/0xO3X0/hLxo5w2k1bZopcsHY5:yKTkvfikdHp5w2k1bZKY
TLSH
T1A225D7307FAD903DE59BE7326DD96916AAA0A22621076B2F714113CB8DC3F409D521FF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Metrics.Protos\obj\x64\Release\net48\Metrics.Protos.pdb

metrics.protos.pdb

SHA256 65af0e351e29833bfc92d17caff53d0ac1d222dddd87a563feaa863a1ebaef9d
MD5 71d30b221f20a46d1f692aff1e9a275c
SHA1 d7f176b44d0a90b00c9de4118cc2c7fc6e8c7232
SHA512 3a5dd826dbf96b082410a446f71c6020e6bc449386af2ae392d6285af3f5ab69ac074e4d91d396edf3b9176f55bbe2a1c62a8bab0dee9f8bcfa1c11f4f158e25
SSDEEP 3072:AJcNFDL4GsgOM9/W+KlpTNTkAYJ9V0HRyavU9pj5Z29rWemE8wLKi4w:sa3VOMZxcpmA50VNZ4arEj
TLSH
T11F3461899D2976FCC915303D69BA03124BB5501B9B82875723ACF1F77C6ABB8132E374
MD5 SHA1 SHA512 SSDEEP TLSH

microsoft.bcl.asyncinterfaces.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 295af2142d9214f3fd84eafe4778dca119be7e0229f14b6ba8d5269c2f1e2e78
MD5 48efe61d6ca3054309907b532d576d2a
SHA1 f36403aabb16540c93fb35245ec0b4e435628aae
SHA512 778e7c4675d8fde9e083230213d2efa19aa6924fe892ed74fa1ea2ec16743bb14b99b51856e75eaef632d57be7f36dd1bc7ce39a7c2b0435b2f3211bb19836a3
SSDEEP 384:O/9b512C4dABe070VJI0Ftdalemxxf34wqsWeb/WjR/uPHRN7Y5slu6o:O/f1IDjV9UPPpWRMkT
TLSH
T189A26B11D7AC4317EEAB3FB19679D1062E34E7D6A821E32E108CE2652CD73859731739
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

82:11:ea:7c:5c:6c:f6:d8:98:91:57:78:8d:42:43:17:c8:8e:9d:92:b0:d0:16:ba:2e:c7:fd:02:5e:79:f7:5b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

17838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/net461-Release/Microsoft.Bcl.AsyncInterfaces.pdb

microsoft.windowsapicodepack.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 21e140dcafa3e251373a712423bb111570737e95e4dcfb6f56868d7086af7686
MD5 5d7da47c86475dd23094ce4bbb6c9001
SHA1 af31272c451996c8eea7b2e56a79b8088c606c3b
SHA512 cd193963d9c5a5959a8ec2503224079c806804d049ed927d654fe241113af2514d24fabf05489801ae283578f384224ecd1fb887a96123b19c70be0600e36faa
SSDEEP 3072:ApN+OsJcYnyhiV6WPCeC0ImL6HKgqYw3Flih:Ap0OsPnt6WPCeUHxZ
TLSH
T1E8B3392577F8162AF9FF1BBCE4719120CB71B9826A13E72E0F94716E08A3740D858767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

119678

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\projects\Windows API Code Pack 1.1\source\WindowsAPICodePack-NuGet\Core\obj\Debug\Microsoft.WindowsAPICodePack.pdb

microsoft.windowsapicodepack.pdb

SHA256 93d4566f27122cdab36dba72444953ea79f1b1734a11fe0da4e916c27a1f3651
MD5 26ade834468a8fef7f147ddb21541ff7
SHA1 ab71a15477c254d2fb760e61a9ecfc8b49555fe7
SHA512 dd78e0cfe456fe1d9313b4ac74d1370ff5efbe86a10762c308fd974908ae3dd5ef8d543998f12ee7718bdab21426d2f45ec8c14f3f0909472803878a15b2c739
SSDEEP 3072:zfWHbWxHWFEdMCW/Xf/L4ALtDCZ7nUxlu/:z8WFMNkQtGnUx
TLSH
T193448263BBA4C632C496C93C6ADB0F2E537CE1C9978357AF4698B06C7DD235A1C86350
MD5 SHA1 SHA512 SSDEEP TLSH

microsoft.windowsapicodepack.shell.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6ea25be49a4e96c43c20bc29eb1ced078f4e0bcec4673ce722271c77bc2fa121
MD5 f6a0bdf17dbfdc16cec93537731571d4
SHA1 22ef1d17448c01f9d06eddc0a4ace8827699a877
SHA512 c665512ac8cd86b93b2f60061cc6101222709112a6f10b18bed76e94aaf6730aaef100c10bd28b71ee96c704f3576ff0641b13af618e1f3d4c2515109771789a
SSDEEP 6144:PpXcF836yvCI++R1yjRbcq/9NlKCuAg496KqMbwFkguan+W86b8c3v6n9c6KwZE4:PPVCbbcC9P96K3wFvuI49Mmn
TLSH
T17AC429247BF5951EF09E977CE1AB162297B0D311F103DB1F0AC026AA1CE37514D89AAF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

593246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\projects\Windows API Code Pack 1.1\source\WindowsAPICodePack-NuGet\Shell\obj\Debug\Microsoft.WindowsAPICodePack.Shell.pdb

microsoft.windowsapicodepack.shell.pdb

SHA256 6eaa6468666ecf851ca10ed8ab61c22cc2e2e5aa4be899c4f060d4b2386e22aa
MD5 cfaeb739e73a9cbcb43482cada6110f4
SHA1 3e4374d22287863c6b3015fbfb525d721b92d55f
SHA512 c8dbcdc55fbb7f48a5aeffc3f3ad64566f8740baf4fd14a9ec4a1f680d97aaaa214a057df9819f64d9c87e2bf8285b53276c81225f62b1cdbd3276ed3bd79462
SSDEEP 12288:+3HfrHhIlIAVBlyekhcmQZAtnNqWPcq/89KRF3i5pFyKp:+XFIl/tyekhcVGrqWUq/89KRF3i5pF5
TLSH
T1387541937B91C631C496C93C66EB0F2E6378E2D88B4257BF578DA02CBDC335A1D85264
MD5 SHA1 SHA512 SSDEEP TLSH

microsoft.windowsapicodepack.shellextensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c21bc4847ac3c75db64b5f7afeb0fcb0e22ba436b7db80692523b4810b046d22
MD5 7f616473bc928975d2d8e9897e41d1e3
SHA1 6b665bf91c0de499b3c94ea94be1e9c44aab0abc
SHA512 d7ebd31e30fc266fc2ca8d4e9f6d3ff2c595cd4f8d2cf60cfd662db2902e8f262f805da0236110979a563a09c08f7908cf66e327761c2e075580c0fd47466d02
SSDEEP 384:3fSzdiw/AuYKDW/SSg5qGhei0kLmmZXLVyRohwhxrqwmzSgaVAap944G/NW2TslW:vI/ARK1Sg5nZXLVyRohe4zFABkMk7
TLSH
T1CB031A0457FD8637D4BE4678FCB2051047F0F543ED43EFAF4B94A19929A73A4C891AA2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

44078

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\projects\Windows API Code Pack 1.1\source\WindowsAPICodePack-NuGet\ShellExtensions\obj\Debug\Microsoft.WindowsAPICodePack.ShellExtensions.pdb

microsoft.windowsapicodepack.shellextensions.pdb

SHA256 5063907c80d2c9c213e4aea4e87edcdb6a84e665a18169eee3615ba75f898e9d
MD5 e3cb1ba8979f22cff9ba6279ff9979c0
SHA1 569f77faa0af367e69d4aeaaa5856cbe9b818c56
SHA512 102af11572fcf006e9176b53f01a180cac5da54e5282090f8fa6d0cd1faa900c8eb806a63a8422f91007a89f6b3c1e0c89278a2eaa9b8feaa4af11b835dc2419
SSDEEP 768:akevjx+XXUpqs3h+b0a5z50tcrdr9+fIKhwE:arEOT+b0ab0+rdrmhwE
TLSH
T187732E47BFA5CA32C46AC538AA9B0F6D5778ED949B825B8F5399B01C7CF334A1C81350
MD5 SHA1 SHA512 SSDEEP TLSH

microsoft.xaml.behaviors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2ee6a286cd255d180bac4a5cdb97c5f27de2be6b3beb3451f8d77bc94fa59538
MD5 17ce3e7564d93ad1e96f82044f4ecffd
SHA1 f6e9dd67bf6f156c3a8c4ad8e05df8945eef8e9a
SHA512 9b21e6e451b67931b09a32a09f979b009a2e8298deaf53bd29dd39c985996a83d56d7de910c80471fef8e8b30276d646e59237d6f7523178d7829037e51456a8
SSDEEP 3072:7r8zYnrXNHgxAVop9i8eC1dtcLgEEjn5rCyjYJ:v8zYnbNgxAVop9ZEf
TLSH
T1A2E35C6653FC8A29D7FF1A35E4B451208235F743B963D78D5E8492AE04E3782B6112F3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c2:20:c6:c8:dd:79:a1:b3:a4:69:93:aa:80:a9:3e:bb:a5:4d:a5:8d:bf:f2:24:ff:0d:f5:c9:bc:cb:40:ce:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 9, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

141622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net462\Microsoft.Xaml.Behaviors.pdb

microsoft.xaml.behaviors.pdb

SHA256 90703707fa383d60f00b104f107a5448d5cc4e4afb64d7db494c0ec3d1e813dc
MD5 19d1503d88d0c06045ec346f10074225
SHA1 638bfae7e669203edd62264bfd0cfc7608616cf2
SHA512 fa8cee1df2246a891839a8aba4a59cbbb51c21694318506c05f738025580d1e15aa47381972f278fbce015dba1398a45544f0fcf53932307dda0bafe8639d157
SSDEEP 6144:IaW1eQIbt/UHcniHIdmOp8KtSckD9FIdYKtSckD:9gbOps
TLSH
T1F9A4B223BF44C633D91A94385ADB4F0D123CE2CD5B83AB4F6B85B11C6EE23996D47294
MD5 SHA1 SHA512 SSDEEP TLSH

newtonsoft.json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
MD5 195ffb7167db3219b217c4fd439eedd6
SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
TLSH
T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 8, 2023

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Serial Number

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 15, 2021 - Jan 14, 2046

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Serial Number

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2021 - Jul 14, 2031

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 13, 2021 - Oct 29, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

704578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

observables.dll

SHA256 64f3292a15fe68accbaadeef4af0d5f9fc400b46ecd527fafda9fa323e0bfdff
MD5 eb1b9d9481b4df79e0e0bbc8a43e230c
SHA1 62db5c7a47fd21f4aa0019fca6da7c3a045beae3
SHA512 3468cec52735762b1159b4a16c1b0451511fcb587671bec6ffef44b95e95fc474e18f0cc2bc9c7c6767e68c2084a8ec6c4663909aa761eb792f8cd2482f24a66
SSDEEP 1536:8+dHzBn8sLJgf/GTJMpOMcqGHmopuJvJ4Fvr7cUYLnb/h9Tt:vddn8sOONxx7chnb/J
TLSH
T1EA735C00F3EC6A16E5FF9B3FA97411414F36EB4AE063D39D19CCAAA91C833468C65752
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Observables\obj\x64\Release\net48\Observables.pdb

observables.pdb

SHA256 684d35fc704dc6d5876f349a2c7a0d04e8d016d1a8e7331a96ab1226b6905de7
MD5 b945de5395bab87a11cdd6f5738adbd8
SHA1 96007560aa7a4db33f764e1929a7e5916865ec00
SHA512 ce6ec0fb4434c9e77a598e0d5f7226ec3bf88bec1f1eab8197888920fbf426296d94292040b74a06fd2e0b65be7060ba53c58f1d6923f09287237eb23da5ef0d
SSDEEP 384:KQwNqcXNTQT+15w+k+g7PSccN/uahUHp9Cs+hPTaNrjLOMv+eiMiPH0WH7OwcflB:KVqgNY+EKNrhqvRGLVHkoa6InvLM6
TLSH
T13AC2D7378B48972AC561157A442A838F37BC87016B456F7EB2E47B25BC9E70B0F76150
MD5 SHA1 SHA512 SSDEEP TLSH

omahainteg.dll

SHA256 a4f8320eb93de358c74dcb8bc86e3a9add01deab25d44141ef557311deae664a
MD5 86d0eb3c4cbe0cca89e31de7826c0042
SHA1 127df91bb39f3b95cf277322c6734e4f03973f58
SHA512 80cd1036b22b57ececbe715c1ec8a064285d9e391fbeecefb0c379318bd9cdb1a2e6c60f36952e4d2fbdf289a03a5e8feb0622fc923230c9aca0d6f271b43744
SSDEEP 384:kH8lyauDd2fB6AKQgaPICjjeqTP0oQ7ztr8/bLvfWNE7jNPUAAEMkf:O8ly9DdfAK1Y70fgb7
TLSH
T12F925C0AB3FCC33BDD9987BD6493085002B3E5567413CB596EBC72A79E127208A11BB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

OmahaInteg\obj\x64\Release\net48\OmahaInteg.pdb

omahainteg.pdb

SHA256 d1bdaa663b2059ce52826f48f44658e76ed2a302aa74222a3c6cc28cd22fe7b3
MD5 d86fc9eda1ee3645a3ef1bf2dddf6129
SHA1 0007f3e709eadb945e58ed421590a25b0b647fd5
SHA512 e7c4e90f1e3da2169bc9349ef887bcf008a462cbf862f3c3222d87b2e80a6c1404381bf355d61a1f8c182b9c2729ac55b559f5225fe0ecd628d085ef09f2a810
SSDEEP 192:nITWAe6XWfYLIEeMzdnTnGgl6kp9VWSm01apboaCHV:nI6rvGdTHpp9VWc1apboaq
TLSH
T138E1D727F344877BC05D103E5817835963F0C101AA16AF6E62A87A25FDEE3C9097A37E
MD5 SHA1 SHA512 SSDEEP TLSH

protobufutils.dll

SHA256 e2c4737fa34eb8f49cf41de6db1919310f46d3e4b4a7b057b6ba347936ff773e
MD5 23a030279165e06a27e9dcce1630ecdb
SHA1 8ee9e67cb8854aeba141714715a16f907262b798
SHA512 3f5212d181bbe80fcdb782b70bd7d98adfed94a0cbee12ee82e624f12aea3a0e071f57b1247d23e6599e504a61e45158523d286d687a18f767019437a65d1375
SSDEEP 384:xqxeTX9OelSp1vLZMqZUpZa/639Zo+VZLSnvzKlmv:xqIL9Owod5Wa
TLSH
T15772E809B3EC8731E6FE1F796CB151440BF4BA53F821E78D19D862EE0822A114A7177E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ProtobufUtils\obj\x64\Release\net48\ProtobufUtils.pdb

protobufutils.pdb

SHA256 02204bb400b74c08085e7e6e59e6b42868e9ad2e113752c44dedaff479eda2bb
MD5 c6fab4a513ff417ae8818b4414bdefc4
SHA1 2125a6bca5d33546802011741805261ba914863b
SHA512 3794bfdf3e836af91a7048ea08b35bb8f0788cc4587ef3027bad647045b6d7a1c6df7806ac271f4c537f04e34d66d697a6a6a1596ecc0d985c1fec26fdf8bdc2
SSDEEP 192:4tbJMu7Jinv6XJ9Hp9Cs+hPTaNrjLOMv+cNiMiu/iwI0WH7OwcflC3GPVsjftK:4nRJiAHp9Cs+hPTaNrjLOMv+eiMiPH01
TLSH
T1C532D577A3489B60C02519765922C28F3BBC86112A48BF7DF2F93954FD9F74B03B21A5
MD5 SHA1 SHA512 SSDEEP TLSH

shared.protos.dll

SHA256 b4be9543633a6bd041046214d2bc3a624cc93a5976560b02588a6e03d104204a
MD5 f5c0632e455f3a343e86199cc0c519ec
SHA1 b905f40fd4be31a758e63add8710b06f77e59144
SHA512 0f86c86bbf13cd5dc6d08dfeb3e58aee1489103c8649df6d973eb5f95af46897b4de2c8f2411c02ed6f153be8edd17ff36fbc6dda3710df672685539d88b6252
SSDEEP 3072:vetmyStiKrbYZLUXCa2ZQrLVSn59Wx6rcc+/BV0wVfJB:veAySAobQLUSZZQrLViWxYcc+JV0+fJ
TLSH
T1C31408282DED9238E3AF4639BDC8285D8BF0E52B3105EBBF598066974D43785DD8017B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Shared.Protos\obj\x64\Release\net48\Shared.Protos.pdb

shared.protos.pdb

SHA256 7ec37228a3956ac23ec4c61d395a3d4cfdd5ebf5d013ada45083a8a06272ea41
MD5 c3adefaa5d34c46c2dea26b083aad80f
SHA1 cc2e4ff2c8f1cd02a54b3a83e5a9d3b4c9096d54
SHA512 45a5b1064005fb76d01fd77794ca726db20f064223711bafab88b151337f706c5364d93b05c85b671f8a2505f2d5707b3da7c3808dd155c9d8320bdabb9ddd33
SSDEEP 768:9C+KcYO3uy2G+XYkftmYh3PDdrLftBKzOzFIIx//33Ur4HKdxL3wToHPsn:c+kOAPcCr1LftBKzOznxH3UsH6L32oHI
TLSH
T1426361DAE8698B3ED441253D2DBC035A5B7D040ADB838757478CF239AC99B78071F6B4
MD5 SHA1 SHA512 SSDEEP TLSH

system.buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
MD5 ecdfe8ede869d2ccc6bf99981ea96400
SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
TLSH
T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

17218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb

system.memory.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8e76318e8b06692abf7dab1169d27d15557f7f0a34d36af6463eff0fe21213c7
MD5 6fb95a357a3f7e88ade5c1629e2801f8
SHA1 19bf79600b716523b5317b9a7b68760ae5d55741
SHA512 293d8c709bc68d2c980a0df423741ce06d05ff757077e63986d34cb6459f9623a024d12ef35a280f50d3d516d98abe193213b9ca71bfde2a9fe8753b1a6de2f0
SSDEEP 3072:IUGrszKKLBFa9DvrJGeesIf3afNs2AldfI:jBFd3/aFs2
TLSH
T136D37D6857C6DE56DB5FEC70E02062056631C52F5742BBEE1DC8B8F036923DA29093FA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

db:b0:3b:7a:83:84:ef:83:06:3f:da:91:51:13:f8:7d:32:fc:46:43:1c:0f:b6:cd:f7:db:87:4b:17:93:f7:da

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

136106

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb

system.numerics.vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
MD5 aaa2cbf14e06e9d3586d8a4ed455db33
SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
TLSH
T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ae:0e:d6:4e:96:89:db:00:f5:00:00:00:00:00:ae

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

103866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb

system.runtime.compilerservices.unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
MD5 c610e828b54001574d86dd2ed730e392
SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
TLSH
T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

14030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb

system.threading.tasks.extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
TLSH
T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

4

Entry point

22234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb

utils.dll

SHA256 56ac6a0a76df2ced6ba859c2c8fe2df4a917cd27aa3e7a3b83e533fbce3551bb
MD5 d9b0adb8c95a948d5d44ec08578a3c75
SHA1 d1bcf7e23796dc6e2725e5d22ad8b3611fca5992
SHA512 d2ec7913d6fd7054362b51ee8e83060433ccb64f6e5212d7c26e1e2f76436e71200cc373e41ebd2d2fd224a4980eb6b9c172520c32ca930d96f131a3c3e0c0e5
SSDEEP 3072:QcEHyQi38u9KXFnog5PTzy3xvsWYxInGQUWpYqBFXf4:QcEd9XFoR3xFGQdpZ
TLSH
T1E8F36C4463F84A16F6FF2B39E87046028BB1F50EA437E79F194899EE2563750E9113B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Utils\obj\x64\Release\net48\Utils.pdb

utils.pdb

SHA256 36ee317bd8884baec2dc5339de00f1bf21713b470709ee0dc8cc176dabff5816
MD5 3a88a291e2b2215aba8cc8b71f3a7fd4
SHA1 9d4d6e8a85c4f92e0cb6e0ca935321a1db0217e4
SHA512 d7c179f7c2fe4cfe00c684b24c1655a594c4862124e1e94483b95e334366cd32d8d582af8a6ec53e7bb3b8f716f5eed9e7430225c51f2444b2dc977c1add4039
SSDEEP 768:9LmCdJZmFF92mOWmTDoz+FmtUF2RGLVHkoTeoLjmf9lRo3aetePJOY:9LmykPAWysiFsi0GmoSfR9gY
TLSH
T183333A26C7094E39CD55153944DB824B27FCC2015B0AFF6BA1E4B724E8AF7EA0B73664
MD5 SHA1 SHA512 SSDEEP TLSH

wpfutils.dll

SHA256 78dc8969a43ec7bd47bbabc9326684d50cebc1a5f5db0c3c4a13a074a458431d
MD5 eec5e3ba71d30cf7846a8486f5ab09f6
SHA1 3a2fc42cdcd3b2cbc141d2efeb92bdecc99a2e94
SHA512 e8c46d8085d7abd647d74fc5ffff577634c4f0857b54c49e6cbf90a21aab00a0888edad135895bb0ae5cdc97328401228d0c0f4dbefddaab9d6bd4925a6b850d
SSDEEP 49152:970elFMCJ34YQlEHoEdSlnfg/6uRDo1yYWSMtsSf+evpAbVH+qWMVGSyhkL6qXSB:9dq66wP/6uJo1nWSO2h+DQGHqO
TLSH
T1D6265D02F3B397CEE6067E7CD262E3B155D6743685A9418DFFD11532E08EB908899AC3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WpfUtils\obj\x64\Release\net48\WpfUtils.pdb

wpfutils.pdb

SHA256 2eaff988c952250819d174130eeaa8bbdee9eb420afa82580f2fc7f1eef9ab1d
MD5 8b1a77b6b2b7904be3af4623f8c31325
SHA1 fb148c1bfb294c6ddd176a4fa9343f91d1ef4cd4
SHA512 29933328fd482ca18cb4a29e38efc60fd4595ec0fdaf8b70c3b9669bad5085c9fb4f76017f60b180381d6f20d676af60eaaab8d9dd9329e8494fd5bf8cc3c6bb
SSDEEP 384:nU8HiTbYIqXc78/dOjRKxVB/Hp9Cw6+hPTaNrjLOMv+eiMiPH0WH7OwcfloUiLg+:ZH02Xc7fITj9CRGLVHkoHi90tR
TLSH
T16E9271B7A3098625C16616364426C28F7B7D83116B49BF3AF1A93D01FD9F78B03F2295
MD5 SHA1 SHA512 SSDEEP TLSH

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer