Aerotto-0.3.9.zip
- SHA256 715b2d7ad2e4666975390232f939a8d419ccfc1711caae995e129ae6394210aa
Overview
overview
6Static
static
3Aerotto.exe
windows10-2004-x64
6Aerotto.exe
windows11-ltsc_2024-x64
6CTrue.FsConnect.dll
windows10-2004-x64
1CTrue.FsConnect.dll
windows11-ltsc_2024-x64
1Microsoft....ct.dll
windows10-2004-x64
1Microsoft....ct.dll
windows11-ltsc_2024-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-ltsc_2024-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....ms.dll
windows11-ltsc_2024-x64
1Microsoft....pf.dll
windows10-2004-x64
1Microsoft....pf.dll
windows11-ltsc_2024-x64
1Serilog.dll
windows10-2004-x64
1Serilog.dll
windows11-ltsc_2024-x64
1SimConnect.dll
windows10-2004-x64
1SimConnect.dll
windows11-ltsc_2024-x64
1WebView2Loader.dll
windows10-2004-x64
1runtimes\w...er.dll
windows10-2004-x64
1ui\index.html
windows10-2004-x64
3ui\index.html
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Aerotto.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Aerotto.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
CTrue.FsConnect.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
CTrue.FsConnect.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Microsoft.FlightSimulator.SimConnect.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Microsoft.FlightSimulator.SimConnect.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Serilog.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Serilog.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
SimConnect.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
SimConnect.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
WebView2Loader.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
runtimes\win-x64\native\WebView2Loader.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
ui\index.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral20
Sample
ui\index.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
General
- Target Aerotto-0.3.9.zip
- Size 647KB
- Sample260928-ref23abb35
- SHA256 715b2d7ad2e4666975390232f939a8d419ccfc1711caae995e129ae6394210aa
- MD5 af6cff691b515530b319d5bbdd3f1217
- SHA1 b3a3d97b842e5b0d48697877fc22b8aef321829f
- SHA512 0b1240f1a5a3fff63bc8e3675d3de4c960159184f0efd2716b38af2fce4099c7b06e6f52e1c342a161f4dcc378bfb8302d4236e91459ccf80e73c45cc0130d63
- SSDEEP 12288:OB+NX0aVfPHvrDjMB+1HLvPf4RPJcGbw54v+q:O4NEaZXgUtvPf4RPJea2q
- TLSH T1AFE42370A22C9A83B24D9C3E0595CFF5A15493115730E249027D8AD9ACDDECAEC9E8FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/Aerotto.exe unpack001/CTrue.FsConnect.dll unpack001/Microsoft.FlightSimulator.SimConnect.dll unpack001/Serilog.dll unpack001/SimConnect.dll
File Explorer
-
Aerotto-0.3.9.zip.zip 647KB
-
Aerotto.exe.exe 159KB
-
Aerotto.exe.config.xml 174B
-
CTrue.FsConnect.dll.dll 220KB
-
Microsoft.FlightSimulator.SimConnect.dll.dll 149KB
-
Microsoft.Web.WebView2.Core.dll.dll 681KB
-
Microsoft.Web.WebView2.WinForms.dll.dll 37KB
-
Microsoft.Web.WebView2.Wpf.dll.dll 84KB
-
Serilog.dll.dll 123KB
-
SimConnect.dll.dll 65KB
-
WebView2Loader.dll.dll 159KB
-
aircraft\AeroL39Albatros.json3KB
-
aircraft\AirTractorAT802.json1KB
-
aircraft\AirbusA320neo.json4KB
-
aircraft\Boeing737Max8.json3KB
-
aircraft\BoeingFA18ESuperHornet.json5KB
-
aircraft\Cessna152.json686B
-
aircraft\Cessna172.json657B
-
aircraft\CessnaCitationCJ4.json2KB
-
aircraft\EdgleyOptica.json2KB
-
runtimes\win-x64\native\WebView2Loader.dll.dll 159KB
-
ui\index.html.html .js 19KB
Aerotto.exe
- SHA256 637cf4de701e2abe086c2afc3ec72088b7457e697058ffdec3103b29b12ddf78
- MD5 87b33295451568f0290cd45784e9ad9b
- SHA1 2ea0c787ec32e3aa937eb9d663ce2c6fbc9d827a
- SHA512 e4297a1a7a2e8da061b09f1116ad934228f0078deec42606db7c9aa5312b4183191e1b24b2b49941b3ebb366a4e6648b180f65ddd20466161ce8b269a65ee2b2
- SSDEEP 3072:AUKtuS8fYpBmstgWXFAPYJIcsASkSnPN6jF79oNv:AUKtuS8fo5mMCPYqcstkoPNUC
- TLSH T112F36C2C73F80606FABF6B7678B14A118776F947983ED39E0D8494DE0A227C28911777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\brian\MSFS-AutoPilot\MSFS.AutoPilot\obj\Release\net48\Aerotto.pdb
Name
.text
Size
157KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Aerotto.exe.config
- SHA256 051099983b896673909e01a1f631b6652abb88da95c9f06f3efef4be033091fa
- MD5 2a2df45a07478a1c77d5834c21f3d7fd
- SHA1 f949e331f0d75ba38d33a072f74e2327c870d916
- SHA512 1a6dd48f92ea6b68ee23b86ba297cd1559f795946ecda17ade68aea3dda188869bba380e3ea3472e08993f4ae574c528b34c3e25503ee6119fd4f998835e09d7
- TLSH T101C08C1940E8BD278D328F27A352C926EBB0B2A6A064080CF02FA9670B3108D8247326
- MD5 SHA1 SHA512 TLSH
CTrue.FsConnect.dll
- SHA256 f5d77384c7c902b690090c04320eaea1a954466c934ffb8fd8a61df0cc425517
- MD5 5135233e2fedc4495473fad608b56c76
- SHA1 e1a46a6b171d9c7a53eb6fa1f8613eec8a64b339
- SHA512 1c236039d25916f396fcfa62e2afa8025e489734aadf0c80bbc2987873a1f358e7fc93b36b80a2c343ea2b1e5c651835cafd76fb0061b1f78e4f6ee692b46bfa
- SSDEEP 6144:e1ktxN6I/3E3NAK9nQWTyKJlO2V155/y:e14Nn/4NAK9QyF
- TLSH T19824A22171F8302BF916BAF19FDEC258C76AF6E9437386AF201921CBC1959425F127B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\repo\ctrue\FsConnect\src\CTrue.FsConnect\obj\Debug\net461\CTrue.FsConnect.pdb
Name
.text
Size
218KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Microsoft.FlightSimulator.SimConnect.dll
- IMPHASH b288947d73e409e3ff9ace6a70af20cd
- SHA256 1936c86e2e2867a8841a8dc7343ab0f5bb82818f17c47ac80b660115b413d266
- MD5 c180eb6d9697c8ca543216a796d0b0da
- SHA1 081a73d46dbeea3d10701732ebccd634fb4c67c8
- SHA512 5cfe0d1e70a1201a9d56b90b75772727255a5eac1bd26707de98aea3bffe5bfca1cacd371b5fb6f89236b55c4bf9f2cc8e486141d39fcc29d5172a52c951a6af
- SSDEEP 3072:qwXpaSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSh1467Uj51cOOGRW/n0:qID1475aOOT0
- TLSH T1C2E34B1507602027EB8F13355471BA065135FD87FB4BA3872B60DBBAA923389A5372F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
37153
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\RobotCompil\KittyHawkSDK_Colored\SRC\KittyHawk\Output_Binaries\x64\Release\Microsoft.FlightSimulator.SimConnect\Microsoft.FlightSimulator.SimConnect.pdb
kernel32
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
Sleep
vcruntime140
__std_exception_destroy
__std_exception_copy
__FrameUnwindFilter
__C_specific_handler
_CxxThrowException
__current_exception_context
__std_type_info_destroy_list
__current_exception
memset
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
abort
_initterm_e
_register_onexit_function
_seh_filter_dll
simconnect
SimConnect_AddFacilityDataDefinitionFilter
SimConnect_SetInputEvent
SimConnect_Text
SimConnect_SetClientData
SimConnect_SetDataOnSimObject
SimConnect_CallDispatch
SimConnect_AICreateSimulatedObject
SimConnect_AICreateNonATCAircraft
SimConnect_InsertString
SimConnect_RequestJetwayData
SimConnect_RequestResponseTimes
SimConnect_ClearAllFacilityDataDefinitionFilters
SimConnect_EnumerateInputEventParams
SimConnect_UnsubscribeInputEvent
SimConnect_SubscribeInputEvent
SimConnect_GetInputEvent
SimConnect_EnumerateInputEvents
SimConnect_MapInputEventToClientEvent_EX1
SimConnect_Open
SimConnect_Close
SimConnect_GetLastSentPacketID
SimConnect_MapClientEventToSimEvent
SimConnect_TransmitClientEvent
SimConnect_SetSystemEventState
SimConnect_AddClientEventToNotificationGroup
SimConnect_RemoveClientEvent
SimConnect_SetNotificationGroupPriority
SimConnect_ClearNotificationGroup
SimConnect_RequestNotificationGroup
SimConnect_AddToDataDefinition
SimConnect_ClearDataDefinition
SimConnect_RequestDataOnSimObject
SimConnect_RequestDataOnSimObjectType
SimConnect_MapInputEventToClientEvent
SimConnect_SetInputGroupPriority
SimConnect_RemoveInputEvent
SimConnect_ClearInputGroup
SimConnect_SetInputGroupState
SimConnect_RequestReservedKey
SimConnect_SubscribeToSystemEvent
SimConnect_UnsubscribeFromSystemEvent
SimConnect_WeatherRequestInterpolatedObservation
SimConnect_WeatherRequestObservationAtStation
SimConnect_WeatherRequestObservationAtNearestStation
SimConnect_WeatherCreateStation
SimConnect_WeatherRemoveStation
SimConnect_WeatherSetObservation
SimConnect_WeatherSetModeServer
SimConnect_WeatherSetModeTheme
SimConnect_WeatherSetModeGlobal
SimConnect_WeatherSetModeCustom
SimConnect_WeatherSetDynamicUpdateRate
SimConnect_WeatherRequestCloudState
SimConnect_WeatherCreateThermal
SimConnect_WeatherRemoveThermal
SimConnect_AICreateParkedATCAircraft
SimConnect_AICreateEnrouteATCAircraft
SimConnect_AIReleaseControl
SimConnect_AIRemoveObject
SimConnect_AISetAircraftFlightPlan
SimConnect_ExecuteMissionAction
SimConnect_CompleteCustomMissionAction
SimConnect_CameraSetRelative6DOF
SimConnect_MenuAddItem
SimConnect_MenuDeleteItem
SimConnect_MenuAddSubItem
SimConnect_MenuDeleteSubItem
SimConnect_RequestSystemState
SimConnect_SetSystemState
SimConnect_MapClientDataNameToID
SimConnect_CreateClientData
SimConnect_AddToClientDataDefinition
SimConnect_ClearClientDataDefinition
SimConnect_RequestClientData
SimConnect_FlightLoad
SimConnect_FlightSave
SimConnect_FlightPlanLoad
SimConnect_SubscribeToFacilities
SimConnect_UnsubscribeToFacilities
SimConnect_RequestFacilitiesList
SimConnect_TransmitClientEvent_EX1
SimConnect_AddToFacilityDefinition
SimConnect_RequestFacilityData
SimConnect_SubscribeToFacilities_EX1
SimConnect_UnsubscribeToFacilities_EX1
SimConnect_RequestFacilitiesList_EX1
SimConnect_RequestFacilityData_EX1
SimConnect_EnumerateControllers
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
108KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=27412,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=22, id=261, version=30034,
count=7, id=260, version=30034,
count=2, id=259, version=30034,
count=2, id=257, version=30148,
count=130, id=1, productName=Unmarked objects,
count=4, id=261, version=30148,
count=1, id=255, version=30148,
count=1, id=151,
count=1, id=258, version=30148,
Microsoft.Web.WebView2.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e6f54c8ce208e3797c427d01ad671b47cb25abc85604753d6ec2546d0ffef550
- MD5 76a346cf8ff55b0516151470cb441a73
- SHA1 b1fd2a9dc354da2f34e4ade7bf3c4fd02b12ec09
- SHA512 ba5450ad79215d1a3423f5ed624a8ff188b5227d322e612a6eb4e089200cc8b4bf92e2e7c02f22ba1c5400375b476ffe5f0252666a60ed784b538150aab97e0a
- SSDEEP 12288:iJ4dCXzRKX4EcJupbSRi461R1VcrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIG:iJ4dCXzRKX4EcJAD1RrQ2
- TLSH T136E4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
18:7b:3a:07:b0:42:7d:5a:86:0e:fb:7a:7a:e0:02:6d:03:bd:5a:9c:03:c8:db:ac:c1:16:a7:cb:92:9f:57:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1e:a3:ac:a4:6e:39:6f:7c:49:00:01:00:00:02:1e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
694098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
670KB
Virtual Size
669KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cc3d2937c350a4f5e20399855bcab4fe695a395308feb2ed67394faa6a1ae849
- MD5 256624e11fef500d49e0f421138884dc
- SHA1 155e5a0e2d501e6aa4069d8662a757a7a9fa9066
- SHA512 a2d1a7d9bebc6455e0e9ec76a08b8f5c97752d4129c00eb8383a8cc7767a9dc8803d81f5c751f1ed5f3c3787c5e63fc715dfd1323584a1274b32f5d954d92681
- SSDEEP 768:yLQNb2vIYymJ22Mss+5ZQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxi:yob2vLbZQ+ZDgcEST3p4JjrjaeFSUyaG
- TLSH T12F033B4087ECC517E6EB5FB8A9B491610BBABEC37DA2D3980D84B1D90C73BD055113AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
18:f5:3d:0d:88:6b:11:bd:0e:70:b4:35:01:fb:e5:cd:af:40:65:01:b5:d8:07:62:50:33:6c:38:dc:28:ad:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:22:41:d2:f6:aa:ff:c8:b5:ff:00:01:00:00:02:22
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
34142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6942b85a3388ece45febde5584d2bfc035d84315f2dd5a4a47913f01a0193800
- MD5 d7c1d5858f1c30d46d29961f4439ec65
- SHA1 66f6759abdf1d2ddaf6c77e7314229fca5ab5a30
- SHA512 a2f65fba6e550ca441504c485bc3f17969c58fbfbeedb0a32c5c150ceb259ef96380b92aa848cbd27bffd5198776e161e20cdd197e7c52512d2f3160bb7730d3
- SSDEEP 1536:9yT7jn5/DNHD3XAhdx5WKhE8sYvDHfy7yEW31bfc4JAyr4YeUquHVxU0uRBpqUuE:9SjnpZmW+E8DDHfyy31bfc4JAyr4YeUs
- TLSH T10F836D4113BC4423C6FF5ABD68A452990F79EE43BE61E7C939C4B6E80DA33D016427A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:46:52:31:d0:60:ca:88:83:26:9c:fa:34:fe:59:f5:e2:f2:df:b7:6d:f1:3e:4d:92:9f:00:ec:98:77:66:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:23:4f:d9:60:24:53:cf:fe:2b:00:01:00:00:02:23
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
82374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Serilog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a26a473af5eb7a00196e275c86d773f36e1d4caef566f97f1df7e07e20b1670
- MD5 0aa45a8a1cd24cd2b589e4aad925f35d
- SHA1 0dc29954c4c2ffea4c33af0e56ce84158849b81e
- SHA512 7a865b16633c09bdecda34fdf15c62db4f04f2fb8db0abf57563aea51de67daf9eca0c08f053f551937a0c3c7987a53de2454ecb13139a193291633df7262981
- SSDEEP 3072:XfwtSQoXux2ogH8I/eXXXXXPXXXXXHXXXXXTaXXXXX14N0QXVsABFkNfM+HFukRb:PwtSQoXux2M3XXXXXPXXXXXHXXXXX2Xh
- TLSH T15BC35C26A3FC4AA1D3EE1671A47506404B71F99B3567EF4E3F5C35F92C123084A28BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
131618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Serilog/obj/Release/net46/Serilog.pdb
mscoree
_CorDllMain
Name
.text
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SimConnect.dll
- IMPHASH 7cff56eb5fe2a9d8526d12ac89a7af0e
- SHA256 1b9db770e95d1a883038f0f52898fcb1f34eadf659f7ec23be9d0b50b47fa125
- MD5 2ef276db30a3109d2667bdeebeb85160
- SHA1 9e0268057f21b588dfde58aa687c5d1f6a48fbc4
- SHA512 ac6ddab7a9f9366e03bafd91f6a2b67404c43e828a4c19c0be69682b73b057b6f03a0dc875c8ecd4768f3bf466a36b259d04286551447ab0342661f83c5af00b
- SSDEEP 768:92twaTLdgzFHONG4fyN8TZvB7Y0EoDWKNsTc4kFmku5J8s1jRUejvCGYK/f:92twyLpvmCB7u5V9b8gj+hpK/
- TLSH T14C630A86BE6444A1E1FBE23D9915A212E3B0758203584FCF67648D2E1B377DE8E3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
48332
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\RobotCompil\KittyHawkSDK_Colored\SRC\KittyHawk\Output_Binaries\x64\Release\SimConnect\SimConnect.pdb
ws2_32
shutdown
WSAStartup
WSACleanup
WSAGetLastError
WSARecv
getsockopt
getaddrinfo
freeaddrinfo
connect
closesocket
setsockopt
socket
WSASend
shlwapi
PathCombineA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
user32
PostMessageA
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
TerminateProcess
InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceFrequency
IsDebuggerPresent
GetCurrentProcess
QueryPerformanceCounter
ReadFile
WriteFile
CloseHandle
GetLastError
CancelIo
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
GetCurrentDirectoryA
CreateFileA
SetEvent
Sleep
GetCurrentProcessId
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
lstrcmpiA
GetPrivateProfileStringA
GetPrivateProfileSectionA
WaitNamedPipeA
BindIoCompletionCallback
shell32
SHGetFolderPathA
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
memmove
memset
__std_exception_copy
__std_exception_destroy
memcpy
memcmp
__C_specific_handler
__std_type_info_destroy_list
_CxxThrowException
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
api-ms-win-crt-convert-l1-1-0
atoi
SimConnect_AICreateEnrouteATCAircraft
SimConnect_AICreateNonATCAircraft
SimConnect_AICreateParkedATCAircraft
SimConnect_AICreateSimulatedObject
SimConnect_AIReleaseControl
SimConnect_AIRemoveObject
SimConnect_AISetAircraftFlightPlan
SimConnect_AddClientEventToNotificationGroup
SimConnect_AddFacilityDataDefinitionFilter
SimConnect_AddToClientDataDefinition
SimConnect_AddToDataDefinition
SimConnect_AddToFacilityDefinition
SimConnect_CallDispatch
SimConnect_CameraSetRelative6DOF
SimConnect_ClearAllFacilityDataDefinitionFilters
SimConnect_ClearClientDataDefinition
SimConnect_ClearDataDefinition
SimConnect_ClearInputGroup
SimConnect_ClearNotificationGroup
SimConnect_Close
SimConnect_CompleteCustomMissionAction
SimConnect_CreateClientData
SimConnect_EnumerateControllers
SimConnect_EnumerateInputEventParams
SimConnect_EnumerateInputEvents
SimConnect_ExecuteAction
SimConnect_ExecuteMissionAction
SimConnect_FlightLoad
SimConnect_FlightPlanLoad
SimConnect_FlightSave
SimConnect_GetInputEvent
SimConnect_GetLastSentPacketID
SimConnect_GetNextDispatch
SimConnect_InsertString
SimConnect_MapClientDataNameToID
SimConnect_MapClientEventToSimEvent
SimConnect_MapInputEventToClientEvent
SimConnect_MapInputEventToClientEvent_EX1
SimConnect_MenuAddItem
SimConnect_MenuAddSubItem
SimConnect_MenuDeleteItem
SimConnect_MenuDeleteSubItem
SimConnect_Open
SimConnect_RemoveClientEvent
SimConnect_RemoveInputEvent
SimConnect_RequestClientData
SimConnect_RequestDataOnSimObject
SimConnect_RequestDataOnSimObjectType
SimConnect_RequestFacilitiesList
SimConnect_RequestFacilitiesList_EX1
SimConnect_RequestFacilityData
SimConnect_RequestFacilityData_EX1
SimConnect_RequestJetwayData
SimConnect_RequestNotificationGroup
SimConnect_RequestReservedKey
SimConnect_RequestResponseTimes
SimConnect_RequestSystemState
SimConnect_RetrieveString
SimConnect_SetClientData
SimConnect_SetDataOnSimObject
SimConnect_SetInputEvent
SimConnect_SetInputGroupPriority
SimConnect_SetInputGroupState
SimConnect_SetNotificationGroupPriority
SimConnect_SetSystemEventState
SimConnect_SetSystemState
SimConnect_SubscribeInputEvent
SimConnect_SubscribeToFacilities
SimConnect_SubscribeToFacilities_EX1
SimConnect_SubscribeToSystemEvent
SimConnect_Text
SimConnect_TransmitClientEvent
SimConnect_TransmitClientEvent_EX1
SimConnect_UnsubscribeFromSystemEvent
SimConnect_UnsubscribeInputEvent
SimConnect_UnsubscribeToFacilities
SimConnect_UnsubscribeToFacilities_EX1
SimConnect_WeatherCreateStation
SimConnect_WeatherCreateThermal
SimConnect_WeatherRemoveStation
SimConnect_WeatherRemoveThermal
SimConnect_WeatherRequestCloudState
SimConnect_WeatherRequestInterpolatedObservation
SimConnect_WeatherRequestObservationAtNearestStation
SimConnect_WeatherRequestObservationAtStation
SimConnect_WeatherSetDynamicUpdateRate
SimConnect_WeatherSetModeCustom
SimConnect_WeatherSetModeGlobal
SimConnect_WeatherSetModeServer
SimConnect_WeatherSetModeTheme
SimConnect_WeatherSetObservation
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=30034,
count=20, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=13, id=257, version=27412,
count=95, id=1, productName=Unmarked objects,
count=4, id=261, version=30148,
count=1, id=256, version=30148,
count=1, id=255, version=30148,
count=1, id=258, version=30148,
WebView2Loader.dll
- IMPHASH 1d9cc3b38dfd9bed2be6d6bf0e209d61
- SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
- MD5 0243cb84351c92ddea3fc0334f3a52ae
- SHA1 d80c01c98f0ed8af1be111abefcbbf6c9f3938bf
- SHA512 74314c87eed82b1c9415462be3259a6626599047a18821cadc73c0c0c62cbd54948d6311ad4de9955fc2d4f2098ccb17aebeee8929ac2741bafc38ceb51a9585
- SSDEEP 3072:d94EUQHTN8gVEeemaXpNbVf7W5AOVU9dPTwnhrEtJe6ub9VY/3A:3dzeDZNbbVf7W+cnhEtJC3H
- TLSH T194F35C57B3E500BBE1B7C234C9634A56E776B8115B609AEF03A4427A1F13BD0AE3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
77:28:d0:57:a2:4b:5e:a5:f7:75:de:a8:49:f9:33:4a:fe:99:43:b0:c9:af:7c:06:c7:59:14:08:7e:7a:73:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:25:80:c7:37:c6:cd:aa:77:49:00:01:00:00:02:25
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
22288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
aircraft\AeroL39Albatros.json
- SHA256 943fed957ae35f922d8ca8d3f010bab6050e2296f99d701267cb9c0691019c69
- MD5 0eafa704b75c5347683c49629b347490
- SHA1 9e7de659a5bc3a687fa67041c703fca33044e3dc
- SHA512 ea5f339b99d562a8bc0b148c4d5fea7974aa05a5d71b893dd7877e0a999cce000cc5688d63d792ee50b3f0ed0740d3d1b96ece2f5f188f8669f4861cd86b9536
- TLSH T14281E96A52010036B9D1537BF75846936FD8EDA15916BCCAB90BA00D18CF07EEBFA242
- MD5 SHA1 SHA512 TLSH
aircraft\AirTractorAT802.json
- SHA256 dc7c2eb3ba3bdbe770b7386207b48897fe22d141cce85610e5918266dcde8c49
- MD5 2807047ab8a1ad3189754f058b07bb87
- SHA1 17d19d4fba8c55054cc93e21214cd5d2068cf138
- SHA512 ba59d62f7aca19675e7666cca91bef43a93f8d080fb8688d080253d6106bbc500f31e91657b87f7f339356bac4e011567ec79adbd75b9f27ef267a0352d2a93d
- TLSH T1B4215472D1001073B6C4B575E12107C3F389ED105549BC5BA85F660D2D9F076AFF6A4B
- MD5 SHA1 SHA512 TLSH
aircraft\AirbusA320neo.json
- SHA256 8e957570d5057d6ff3200fb5e6d0425d914f2baa0582318fd25c3444a76c6d8d
- MD5 7cffbdf3a91020508fec4b9b709e3f39
- SHA1 8d0994f2fde9928d311cc091836567940f100edc
- SHA512 829e544caf7f6f3377ede59d6393f2767a5bd4fc15e4c12ca42294996eacb51247858a1bc9b6d4ea908bfc33e461e152fa88640b7fec99ea5dc488e85dc67064
- SSDEEP 96:AGroMtWBHa8QKAWr1DmM2YjGLjHvuof0g1Nb8ntXmnb4qJr:AF3NRQKD5y0C/R1NuI
- TLSH T1E5A1962F2304027638C557B6720C6BC2BBB68E7516067C65A05FD11C368F9789EF69C3
- MD5 SHA1 SHA512 SSDEEP TLSH
aircraft\Boeing737Max8.json
- SHA256 2bc534017181879c2fc5fa08e552348b4becb52d0b9e230aba87b6e945d12b48
- MD5 7751ad1bb95b707059aa4b1abf935b96
- SHA1 bf166b2ea494538ecc8bb7413277cfb337a6081e
- SHA512 54887a7562803550c2d589fcd2d72ccc4d50d39605e0245f68e8ba58d784b9580a5f50eeeda5f60942776e644c63a754966f5ac11c5918622057ffba91cc276f
- TLSH T14E61A53F620011373EC152B7B74C8693679AAF661A43BC98541B910C298F1B94FF9A46
- MD5 SHA1 SHA512 TLSH
aircraft\BoeingFA18ESuperHornet.json
- SHA256 80a4ee1e1d3641d83b3a4fb0be9cad0f375f45cd2ec0ae2704136d64b944c831
- MD5 01c22e8996e9073a7447856cabf75ff7
- SHA1 591cf89f99a12cb7c3c8b20677108d1427f48f93
- SHA512 5896b9e2e76b74f1f696b5f5fe36a448fc4c801cddf779c4f790646432143f664845afdb9d4a47eac116cddc4886a8c3ff48345a606fc57af164121262ed2d36
- SSDEEP 96:qbjglGC91IHlEPrudP5gfCZHb6N9jfHTYIMhp9ycZ/mzbFU1mJ6VMw2R3X6OiUx:qbjw74lRR5gqZHuNJfHEThCQgZU1mJ6s
- TLSH T15CB1A67A228005BB3DE10677F60855C36F8F99742606FCD5A54BF10E25CE4BCA7F9582
- MD5 SHA1 SHA512 SSDEEP TLSH
aircraft\Cessna152.json
- SHA256 7958762720ab7f92c8037c815cffd023dda0ce6749b1eb99b8dc6aee5b9e6278
- MD5 c1b97b27a4e214cd32680079cf77f01e
- SHA1 b44aef730b4bded48b4fe553316d6f8a2c20ff85
- SHA512 0fabfc9192eddac876c2ae7c27ed8ebd2e43dac67a29ab40e4394e338071d97456f6403ab6658775e13b488822f7b732990073a9be795a97e490ea6d58d359cc
- TLSH T1C601FE379400547624C8B5B85568438367C59F216812381F226F1F0E1DCE3713BF6B5B
- MD5 SHA1 SHA512 TLSH
aircraft\Cessna172.json
- SHA256 b093e7fe2603d8712b0c5f3bbd65da4f673abf5e36db4a23872448c4e276fc56
- MD5 eb3875576ccbf9ca8d07cc1b2538eaa5
- SHA1 86088ae2f286722bc814ea2cac334fbdbfae486a
- SHA512 1dfa306827072ad9a4cf285131e2cbe73470789f84589452e4d9b04655d6af9f1d61dde2b325363d1f6af2fa5f7b3bf859ff25315e91790868095cb913394cb2
- TLSH T1F2019E3650401462A4D8BB7624746743765CCF62B801380E315F0A0F188E271B7B1A07
- MD5 SHA1 SHA512 TLSH
aircraft\CessnaCitationCJ4.json
- SHA256 93614746d55d0f3ac76f1dc879d298ec9fcce64f283a2f11565bee0cf2f4b4a4
- MD5 ebbe51b5f2b5bd9c0567d0ec1175c11b
- SHA1 b620e27bf3ff546a107a31d51c5e4b0179c70fd1
- SHA512 897c15ea111ea518f6c3cec8b4b4de068b6ad64171a03c6f6e06d9cc3f8c621ae013871fb4314a60ddccc58668db1889e27211662c5d8ab55fd1a6514010569c
- TLSH T16451623B614010B6BCC696B676984383AF45EE3055023DBBB45B520E788F078DBB6D8B
- MD5 SHA1 SHA512 TLSH
aircraft\EdgleyOptica.json
- SHA256 63407acac917321222a83b10f059c9cbd2b6c31eee2a5ac93e88ae162ad22644
- MD5 5826b2cec418dc4521e4263fd4ee61bd
- SHA1 4f8027801e55e4681a2805c64252b562f3aa9b58
- SHA512 ca172c32c3591ed5c1e4315ed7affec19e1ed43e6b39a01e8c43e16fdb4298b927fddfa0cbee58c581318383bb958c963186c27346ab89918aca632e35610249
- TLSH T14A419529904125773DF226B7B21C5A93B7C5CEA6162A3C57600F1B0C2C8C079E2BF9DB
- MD5 SHA1 SHA512 TLSH
runtimes\win-x64\native\WebView2Loader.dll
- IMPHASH 1d9cc3b38dfd9bed2be6d6bf0e209d61
- SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
- MD5 0243cb84351c92ddea3fc0334f3a52ae
- SHA1 d80c01c98f0ed8af1be111abefcbbf6c9f3938bf
- SHA512 74314c87eed82b1c9415462be3259a6626599047a18821cadc73c0c0c62cbd54948d6311ad4de9955fc2d4f2098ccb17aebeee8929ac2741bafc38ceb51a9585
- SSDEEP 3072:d94EUQHTN8gVEeemaXpNbVf7W5AOVU9dPTwnhrEtJe6ub9VY/3A:3dzeDZNbbVf7W+cnhEtJC3H
- TLSH T194F35C57B3E500BBE1B7C234C9634A56E776B8115B609AEF03A4427A1F13BD0AE3D760
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
77:28:d0:57:a2:4b:5e:a5:f7:75:de:a8:49:f9:33:4a:fe:99:43:b0:c9:af:7c:06:c7:59:14:08:7e:7a:73:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:25:80:c7:37:c6:cd:aa:77:49:00:01:00:00:02:25
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
22288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ui\index.html
- SHA256 fbfb66ab0611543da026eeb62b9b77a487389dce1269c8f176f426b3add8444b
- MD5 a7a7c83c5135c1960bd54563ff74d7ac
- SHA1 ec407a7b87fc30c076c1fc9963985466852f72cd
- SHA512 83c15fcc7c208e1683045729a12e9c71d242dd2cae9440bb43c6a54db35ae44ebe5fecc188783d14803c251d60d6169beee604289422b94fd548a55ddd12db8e
- SSDEEP 384:iGBdjGwiU5kpnV2sFMiMHWqubgpFH1hVgUXcqbTgwm0M:nBdjGy+pnV2sF7FIFH1hWacqb8wmb
- TLSH T17192D932A2B83037523381E636F6731AB77681039343C96439AC05544FCEAE5D9FF5AA
- MD5 SHA1 SHA512 SSDEEP TLSH