KunoichiSekiren-0.1.0.7z
- SHA256 5cd181cdcd14f8056d50ab55d14e9a3abd50cd4fe21228762754056358177e65
Static task
static1
2 signatures
General
- Target KunoichiSekiren-0.1.0.7z
- Size 108.0MB
- Sample261002-2fpeyaxtbw
- SHA256 5cd181cdcd14f8056d50ab55d14e9a3abd50cd4fe21228762754056358177e65
- MD5 769094949efba72de118fbbcc58861b4
- SHA1 7c3356d7860232077b2f485fbd9a9db8336042f2
- SHA512 2d09ff23a216ba07d7f4cdc3cf7a1a48fd94c4fd4a83bf9798ba5bc41d5a3c2798423640ec232468249aa80d949cd16ca9ce60f82ff95a7ab039ec71a950917a
- SSDEEP 3145728:hUlaLBX8b/gozJj15xjSyqWVPgfO5nr7e0TuGZnmcyT7YcQC:hYKX8D5zJj15xjbPSfO5r3JmVYc3
- TLSH T1FD4833AB97AB40CEF0570D31FB64E55E6241CB830BE75D560CC9B0A3653FBED0A9025A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/KunoichiSekiren-0.1.0/UnityCrashHandler64.exe unpack001/KunoichiSekiren-0.1.0/UnityPlayer.dll unpack001/KunoichiSekiren-0.1.0/baselib.dll - Unsigned PE 241 IoCs
Checks for missing Authenticode signature.
resource unpack001/KunoichiSekiren-0.1.0/BepInEx/core/0Harmony.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.DotNet.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.PE.File.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.PE.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/AssetRipper.CIL.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/AssetRipper.Primitives.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Core.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Preloader.Core.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.Common.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Cpp2IL.Core.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Disarm.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Gee.External.Capstone.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Iced.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Common.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Generator.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.HarmonySupport.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Runtime.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/LibCpp2IL.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Mdb.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Pdb.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Rocks.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.Backports.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.ILHelpers.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.RuntimeDetour.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.Utils.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/SemanticVersioning.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/StableNameDotNet.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/WasmDisassembler.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/XUnity.Common.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/core/dobby.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/AllIn1SpriteShaderAssembly.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Assembly-CSharp-firstpass.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Assembly-CSharp.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/BehaviorDesigner.Runtime.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Cinemachine.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Coffee.UIEffect.R.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Coffee.UIEffect.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/DOTween.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/GameAnalytics.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppMono.Data.Sqlite.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppMono.Security.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Configuration.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Core.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Data.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Numerics.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Transactions.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Xml.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Il2Cppmscorlib.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Jint.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.Addressables.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.DOTween.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.Linq.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.TextMeshPro.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.2D.Animation.Runtime.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.2D.Tilemap.Extras.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Addressables.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Burst.Unsafe.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Burst.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.InputSystem.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.InternalAPIEngineBridge.001.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Mathematics.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipeline.Universal.ShaderLibrary.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipelines.Core.Runtime.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipelines.Universal.Runtime.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.ResourceManager.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.TextMeshPro.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Timeline.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AccessibilityModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AndroidJNIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AnimationModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AssetBundleModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AudioModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClothModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClusterInputModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClusterRendererModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.CoreModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.CrashReportingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.DSPGraphModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.DirectorModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GameCenterModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GridModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.HotReloadModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.IMGUIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ImageConversionModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.InputLegacyModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.InputModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.JSONSerializeModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.LocalizationModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ParticleSystemModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.PerformanceReportingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.Physics2DModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.PhysicsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ProfilerModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ScreenCaptureModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SharedInternalsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SpriteMaskModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SpriteShapeModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.StreamingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SubstanceModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SubsystemsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TLSModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TerrainModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TerrainPhysicsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextCoreFontEngineModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextCoreTextEngineModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextRenderingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TilemapModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UI.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIElementsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIElementsNativeModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UNETModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UmbraModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityAnalyticsCommonModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityAnalyticsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityConnectModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityCurlModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityTestProtocolModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestAssetBundleModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestAudioModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestTextureModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestWWWModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VFXModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VRModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VehiclesModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VideoModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VirtualTexturingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.WindModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.XRModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/UnityUIExtensions.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/XNode.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/interop/__Generated.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/ExIni.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BaiduTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BingTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BingTranslateLegitimate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/CustomTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/DeepLTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Common.ExtProtocol.Executor.exe unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Common.ExtProtocol.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/DeepLTranslate.ExtProtocol.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/GoogleTranslateCompat.ExtProtocol.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Http.ExtProtocol.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Lec.ExtProtocol.exe unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/XUnity.AutoTranslator.Plugin.ExtProtocol.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/ezTransXP.ExtProtocol.exe unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslateCompat.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslateLegitimate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/LecPowerTranslator15.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/LingoCloudTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/PapagoTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/WatsonTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/YandexTranslate.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/ezTransXP.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.BepInEx-IL2CPP.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.Core.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.ExtProtocol.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.ResourceRedirector/XUnity.ResourceRedirector.BepInEx-IL2CPP.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.ResourceRedirector/XUnity.ResourceRedirector.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AccessibilityModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AndroidJNIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AnimationModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AssetBundleModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AudioModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClothModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClusterInputModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClusterRendererModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.CoreModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.CrashReportingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.DSPGraphModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.DirectorModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GameCenterModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GridModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.HotReloadModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.IMGUIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ImageConversionModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.InputLegacyModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.InputModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.JSONSerializeModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.LocalizationModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ParticleSystemModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.PerformanceReportingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.Physics2DModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.PhysicsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ProfilerModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ScreenCaptureModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SharedInternalsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SpriteMaskModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SpriteShapeModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.StreamingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SubstanceModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SubsystemsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TLSModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TerrainModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TerrainPhysicsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextCoreFontEngineModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextCoreTextEngineModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextRenderingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TilemapModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIElementsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIElementsNativeModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UNETModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UmbraModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityAnalyticsCommonModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityAnalyticsModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityConnectModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityCurlModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityTestProtocolModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestAssetBundleModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestAudioModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestTextureModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestWWWModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VFXModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VRModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VehiclesModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VideoModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VirtualTexturingModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.WindModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.XRModule.dll unpack001/KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.dll unpack001/KunoichiSekiren-0.1.0/GameAssembly.dll unpack001/KunoichiSekiren-0.1.0/KunoichiSekiren.exe unpack001/KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Plugins/x86_64/lib_burst_generated.dll unpack001/KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Plugins/x86_64/sqlite3.dll unpack001/KunoichiSekiren-0.1.0/winhttp.dll
File Explorer
-
KunoichiSekiren-0.1.0.7z.7z 108.0MB
-
KunoichiSekiren-0.1.0/.doorstop_version5B
-
KunoichiSekiren-0.1.0/BepInEx/LogOutput.log3KB
-
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_AutoGeneratedTranslations.txt2KB
-
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_Postprocessors.txt3B
-
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_Preprocessors.txt3B
-
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_Substitutions.txt3B
-
KunoichiSekiren-0.1.0/BepInEx/cache/chainloader_typeloader.dat4KB
-
KunoichiSekiren-0.1.0/BepInEx/config/AutoTranslatorConfig.ini3KB
-
KunoichiSekiren-0.1.0/BepInEx/config/BepInEx.cfg7KB
-
KunoichiSekiren-0.1.0/BepInEx/config/gravydevsupreme.xunity.resourceredirector.cfg316B
-
KunoichiSekiren-0.1.0/BepInEx/core/0Harmony.dll.dll 258KB
-
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.DotNet.dll.dll 512KB
-
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.PE.File.dll.dll 38KB
-
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.PE.dll.dll 371KB
-
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.dll.dll 66KB
-
KunoichiSekiren-0.1.0/BepInEx/core/AssetRipper.CIL.dll.dll 27KB
-
KunoichiSekiren-0.1.0/BepInEx/core/AssetRipper.Primitives.dll.dll 28KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Core.dll.dll 132KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Core.xml.xml 88KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Preloader.Core.dll.dll 51KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Preloader.Core.xml.xml 16KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.Common.dll.dll 13KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.Common.xml.xml 1KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.dll.dll 77KB
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.dll.config456B
-
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.xml.xml 1KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Cpp2IL.Core.dll.dll 347KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Disarm.dll.dll 135KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Gee.External.Capstone.dll.dll 289KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Iced.dll.dll 1.8MB
-
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Common.dll.dll 40KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Generator.dll.dll 214KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.HarmonySupport.dll.dll 25KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Runtime.dll.dll 285KB
-
KunoichiSekiren-0.1.0/BepInEx/core/LibCpp2IL.dll.dll 278KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Mdb.dll.dll 38KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Pdb.dll.dll 87KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Rocks.dll.dll 24KB
-
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.dll.dll 348KB
-
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.Backports.dll.dll 28KB
-
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.ILHelpers.dll.dll 4KB
-
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.RuntimeDetour.dll.dll 110KB
-
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.Utils.dll.dll 188KB
-
KunoichiSekiren-0.1.0/BepInEx/core/SemanticVersioning.dll.dll 34KB
-
KunoichiSekiren-0.1.0/BepInEx/core/StableNameDotNet.dll.dll 27KB
-
KunoichiSekiren-0.1.0/BepInEx/core/WasmDisassembler.dll.dll 22KB
-
KunoichiSekiren-0.1.0/BepInEx/core/XUnity.Common.dll.dll 80KB
-
KunoichiSekiren-0.1.0/BepInEx/core/dobby.dll.dll 200KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/AllIn1SpriteShaderAssembly.dll.exe 65KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Assembly-CSharp-firstpass.dll.exe 141KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Assembly-CSharp.dll.exe 2.1MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/BehaviorDesigner.Runtime.dll.exe 270KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Cinemachine.dll.exe 722KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Coffee.UIEffect.R.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Coffee.UIEffect.dll.exe 319KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/DOTween.dll.exe 598KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/GameAnalytics.dll.exe 407KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppMono.Data.Sqlite.dll.exe 217KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppMono.Security.dll.exe 303KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Configuration.dll.exe 11KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Core.dll.exe 1.4MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Data.dll.exe 1.5MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Numerics.dll.exe 64KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Transactions.dll.exe 26KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Xml.dll.exe 2.6MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.dll.exe 2.3MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Il2Cppmscorlib.dll.exe 5.5MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Jint.dll.exe 669KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/MethodAddressToToken.db1.4MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/MethodXrefScanCache.db20.0MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.Addressables.dll.exe 26KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.DOTween.dll.exe 21KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.Linq.dll.exe 2.2MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.TextMeshPro.dll.exe 33KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.dll.exe 1.7MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.2D.Animation.Runtime.dll.exe 120KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.2D.Tilemap.Extras.dll.exe 70KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Addressables.dll.exe 327KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Burst.Unsafe.dll.exe 20KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Burst.dll.exe 1.4MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.InputSystem.dll.exe 2.6MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.InternalAPIEngineBridge.001.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Mathematics.dll.exe 2.1MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipeline.Universal.ShaderLibrary.dll.exe 5KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipelines.Core.Runtime.dll.exe 1.2MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipelines.Universal.Runtime.dll.exe 1.6MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.ResourceManager.dll.exe 357KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.TextMeshPro.dll.exe 866KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Timeline.dll.exe 377KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AIModule.dll.exe 55KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AccessibilityModule.dll.exe 3KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AndroidJNIModule.dll.exe 133KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AnimationModule.dll.exe 393KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AssetBundleModule.dll.exe 27KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AudioModule.dll.exe 148KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClothModule.dll.exe 19KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClusterInputModule.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClusterRendererModule.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.CoreModule.dll.exe 3.0MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.CrashReportingModule.dll.exe 4KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.DSPGraphModule.dll.exe 10KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.DirectorModule.dll.exe 24KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GIModule.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GameCenterModule.dll.exe 11KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GridModule.dll.exe 17KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.HotReloadModule.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.IMGUIModule.dll.exe 308KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ImageConversionModule.dll.exe 9KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.InputLegacyModule.dll.exe 47KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.InputModule.dll.exe 12KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.JSONSerializeModule.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.LocalizationModule.dll.exe 4KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ParticleSystemModule.dll.exe 181KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.PerformanceReportingModule.dll.exe 3KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.Physics2DModule.dll.exe 292KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.PhysicsModule.dll.exe 221KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ProfilerModule.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ScreenCaptureModule.dll.exe 5KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SharedInternalsModule.dll.exe 36KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SpriteMaskModule.dll.exe 10KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SpriteShapeModule.dll.exe 8KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.StreamingModule.dll.exe 4KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SubstanceModule.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SubsystemsModule.dll.exe 29KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TLSModule.dll.exe 5KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TerrainModule.dll.exe 111KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TerrainPhysicsModule.dll.exe 4KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextCoreFontEngineModule.dll.exe 96KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextCoreTextEngineModule.dll.exe 300KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextRenderingModule.dll.exe 60KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TilemapModule.dll.exe 87KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UI.dll.exe 784KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIElementsModule.dll.exe 2.6MB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIElementsNativeModule.dll.exe 131KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIModule.dll.exe 62KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UNETModule.dll.exe 69KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UmbraModule.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityAnalyticsCommonModule.dll.exe 3KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityAnalyticsModule.dll.exe 56KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityConnectModule.dll.exe 8KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityCurlModule.dll.exe 7KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityTestProtocolModule.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestAssetBundleModule.dll.exe 11KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestAudioModule.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestModule.dll.exe 68KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestTextureModule.dll.exe 4KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestWWWModule.dll.exe 7KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VFXModule.dll.exe 76KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VRModule.dll.exe 17KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VehiclesModule.dll.exe 10KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VideoModule.dll.exe 74KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VirtualTexturingModule.dll.exe 13KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.WindModule.dll.exe 6KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.XRModule.dll.exe 92KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.dll.exe 2KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/UnityUIExtensions.dll.exe 988KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/XNode.dll.exe 83KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/__Generated.dll.exe 4KB
-
KunoichiSekiren-0.1.0/BepInEx/interop/assembly-hash.txt32B
-
KunoichiSekiren-0.1.0/BepInEx/plugins/README (AutoTranslator).md154KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/ExIni.dll.dll 13KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BaiduTranslate.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BingTranslate.dll.dll 13KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BingTranslateLegitimate.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/CustomTranslate.dll.dll 6KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/DeepLTranslate.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Common.ExtProtocol.Executor.exe.exe 9KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Common.ExtProtocol.dll.dll 28KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/DeepLTranslate.ExtProtocol.dll.dll 24KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/GoogleTranslateCompat.ExtProtocol.dll.dll 12KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Http.ExtProtocol.dll.dll 14KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Lec.ExtProtocol.exe.exe 11KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Newtonsoft.Json.dll.dll 685KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/XUnity.AutoTranslator.Plugin.ExtProtocol.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/ezTransXP.ExtProtocol.exe.exe 10KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslate.dll.dll 25KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslateCompat.dll.dll 8KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslateLegitimate.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/LecPowerTranslator15.dll.dll 7KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/LingoCloudTranslate.dll.dll 8KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/PapagoTranslate.dll.dll 12KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/WatsonTranslate.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/YandexTranslate.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/ezTransXP.dll.dll 6KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.BepInEx-IL2CPP.dll.dll 7KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.Core.dll.dll 626KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.ExtProtocol.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.ResourceRedirector/XUnity.ResourceRedirector.BepInEx-IL2CPP.dll.dll 7KB
-
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.ResourceRedirector/XUnity.ResourceRedirector.dll.dll 64KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AIModule.dll.dll 45KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AccessibilityModule.dll.dll 12KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AndroidJNIModule.dll.dll 67KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AnimationModule.dll.dll 148KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AssetBundleModule.dll.dll 22KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AudioModule.dll.dll 58KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClothModule.dll.dll 15KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClusterInputModule.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClusterRendererModule.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.CoreModule.dll.dll 1.2MB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.CrashReportingModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.DSPGraphModule.dll.dll 18KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.DirectorModule.dll.dll 14KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GIModule.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GameCenterModule.dll.dll 28KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GridModule.dll.dll 14KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.HotReloadModule.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.IMGUIModule.dll.dll 158KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ImageConversionModule.dll.dll 13KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.InputLegacyModule.dll.dll 26KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.InputModule.dll.dll 12KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.JSONSerializeModule.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.LocalizationModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ParticleSystemModule.dll.dll 140KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.PerformanceReportingModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.Physics2DModule.dll.dll 120KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.PhysicsModule.dll.dll 101KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ProfilerModule.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ScreenCaptureModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SharedInternalsModule.dll.dll 21KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SpriteMaskModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SpriteShapeModule.dll.dll 14KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.StreamingModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SubstanceModule.dll.dll 14KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SubsystemsModule.dll.dll 23KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TLSModule.dll.dll 16KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TerrainModule.dll.dll 86KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TerrainPhysicsModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextCoreFontEngineModule.dll.dll 60KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextCoreTextEngineModule.dll.dll 182KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextRenderingModule.dll.dll 27KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TilemapModule.dll.dll 31KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIElementsModule.dll.dll 1.1MB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIElementsNativeModule.dll.dll 47KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIModule.dll.dll 25KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UNETModule.dll.dll 77KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UmbraModule.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityAnalyticsCommonModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityAnalyticsModule.dll.dll 33KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityConnectModule.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityCurlModule.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityTestProtocolModule.dll.dll 9KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestAssetBundleModule.dll.dll 12KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestAudioModule.dll.dll 12KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestModule.dll.dll 45KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestTextureModule.dll.dll 11KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestWWWModule.dll.dll 20KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VFXModule.dll.dll 43KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VRModule.dll.dll 15KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VehiclesModule.dll.dll 13KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VideoModule.dll.dll 29KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VirtualTexturingModule.dll.dll 23KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.WindModule.dll.dll 10KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.XRModule.dll.dll 58KB
-
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.dll.dll 99KB
-
KunoichiSekiren-0.1.0/GameAssembly.dll.dll 52.9MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren.exe.exe 638KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Plugins/x86_64/lib_burst_generated.dll.dll 168KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Plugins/x86_64/sqlite3.dll.dll 1.9MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Resources/unity default resources4.6MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Resources/unity_builtin_extra385KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/RuntimeInitializeOnLoads.json3KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/ScriptingAssemblies.json4KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/AddressablesLink/link.xml27KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/10fc854e30be554fb33fe683df820872_unitybuiltinshaders.bundle54KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/bullet_assets_all.bundle734KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/cg_assets_all.bundle23KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/character_assets_enemy.bundle3.8MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/character_assets_npc.bundle714KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/character_assets_player.bundle480KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/data_assets_all.bundle43KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/default_assets_all.bundle32.9MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/duplicateassetisolation_assets_all_a6e631a8ef51331daee957a35244244a.bundle3.2MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/effect_assets_all.bundle1.0MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/map_assets_all.bundle5.3MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/scene00_scenes_all.bundle1.7MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/scene_scenes_all.bundle2.3MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/sound_assets_all.bundle17.6MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/videos_assets_all.bundle4.0MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/catalog.json404KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/settings.json861B
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/playerdata.json164B
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/app.info29B
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/boot.config137B
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/globalgamemanagers240KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/globalgamemanagers.assets935KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/globalgamemanagers.assets.resS3.8MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Metadata/global-metadata.dat10.5MB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/Coffee.UIEffect.R.dll-resources.dat17B
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/Mono.Data.Sqlite.dll-resources.dat33KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/System.Data.dll-resources.dat91KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat329KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/level08KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/resources.assets395KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/resources.assets.resS11KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/sharedassets0.assets46KB
-
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/sharedassets0.assets.resS830KB
-
KunoichiSekiren-0.1.0/UnityCrashHandler64.exe.exe 1.1MB
-
KunoichiSekiren-0.1.0/UnityPlayer.dll.dll 28.1MB
-
KunoichiSekiren-0.1.0/baselib.dll.dll 395KB
-
KunoichiSekiren-0.1.0/doorstop_config.ini1KB
-
KunoichiSekiren-0.1.0/dotnet/.version49B
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Bcl.AsyncInterfaces.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.CSharp.dll.dll 1020KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.DiaSymReader.Native.amd64.dll.dll 1.7MB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.DependencyInjection.Abstractions.dll.dll 42KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.DependencyInjection.dll.dll 79KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Logging.Abstractions.dll.dll 60KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Logging.dll.dll 43KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Options.dll.dll 57KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Primitives.dll.dll 39KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.NETCore.App.deps.json32KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.NETCore.App.runtimeconfig.json159B
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.VisualBasic.Core.dll.dll 1.2MB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.VisualBasic.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Win32.Primitives.dll.dll 25KB
-
KunoichiSekiren-0.1.0/dotnet/Microsoft.Win32.Registry.dll.dll 85KB
-
KunoichiSekiren-0.1.0/dotnet/System.AppContext.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Buffers.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Collections.Concurrent.dll.dll 241KB
-
KunoichiSekiren-0.1.0/dotnet/System.Collections.Immutable.dll.dll 650KB
-
KunoichiSekiren-0.1.0/dotnet/System.Collections.NonGeneric.dll.dll 98KB
-
KunoichiSekiren-0.1.0/dotnet/System.Collections.Specialized.dll.dll 93KB
-
KunoichiSekiren-0.1.0/dotnet/System.Collections.dll.dll 258KB
-
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.Annotations.dll.dll 182KB
-
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.DataAnnotations.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.EventBasedAsync.dll.dll 37KB
-
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.Primitives.dll.dll 73KB
-
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.TypeConverter.dll.dll 727KB
-
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.dll.dll 18KB
-
KunoichiSekiren-0.1.0/dotnet/System.Configuration.dll.dll 19KB
-
KunoichiSekiren-0.1.0/dotnet/System.Console.dll.dll 153KB
-
KunoichiSekiren-0.1.0/dotnet/System.Core.dll.dll 23KB
-
KunoichiSekiren-0.1.0/dotnet/System.Data.Common.dll.dll 2.8MB
-
KunoichiSekiren-0.1.0/dotnet/System.Data.DataSetExtensions.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Data.dll.dll 25KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Contracts.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Debug.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.DiagnosticSource.dll.dll 371KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.FileVersionInfo.dll.dll 34KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Process.dll.dll 283KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.StackTrace.dll.dll 35KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.TextWriterTraceListener.dll.dll 59KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Tools.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.TraceSource.dll.dll 130KB
-
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Tracing.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Drawing.Primitives.dll.dll 127KB
-
KunoichiSekiren-0.1.0/dotnet/System.Drawing.dll.dll 20KB
-
KunoichiSekiren-0.1.0/dotnet/System.Dynamic.Runtime.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Formats.Asn1.dll.dll 192KB
-
KunoichiSekiren-0.1.0/dotnet/System.Globalization.Calendars.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Globalization.Extensions.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Globalization.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.Brotli.dll.dll 71KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.FileSystem.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.Native.dll.dll 803KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.ZipFile.dll.dll 38KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.dll.dll 260KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.AccessControl.dll.dll 91KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.DriveInfo.dll.dll 41KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.Primitives.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.Watcher.dll.dll 70KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.dll.dll 23KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.IsolatedStorage.dll.dll 81KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.MemoryMappedFiles.dll.dll 67KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Pipes.AccessControl.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.Pipes.dll.dll 133KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.UnmanagedMemoryStream.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.IO.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Linq.Expressions.dll.dll 3.7MB
-
KunoichiSekiren-0.1.0/dotnet/System.Linq.Parallel.dll.dll 829KB
-
KunoichiSekiren-0.1.0/dotnet/System.Linq.Queryable.dll.dll 223KB
-
KunoichiSekiren-0.1.0/dotnet/System.Linq.dll.dll 525KB
-
KunoichiSekiren-0.1.0/dotnet/System.Memory.dll.dll 169KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Http.Json.dll.dll 80KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Http.dll.dll 1.7MB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.HttpListener.dll.dll 624KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Mail.dll.dll 538KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.NameResolution.dll.dll 98KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.NetworkInformation.dll.dll 147KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Ping.dll.dll 77KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Primitives.dll.dll 209KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Quic.dll.dll 285KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Requests.dll.dll 340KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Security.dll.dll 666KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.ServicePoint.dll.dll 36KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.Sockets.dll.dll 494KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.WebClient.dll.dll 162KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.WebHeaderCollection.dll.dll 59KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.WebProxy.dll.dll 31KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.WebSockets.Client.dll.dll 74KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.WebSockets.dll.dll 177KB
-
KunoichiSekiren-0.1.0/dotnet/System.Net.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.Numerics.Vectors.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Numerics.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.ObjectModel.dll.dll 88KB
-
KunoichiSekiren-0.1.0/dotnet/System.Private.CoreLib.dll.dll 10.1MB
-
KunoichiSekiren-0.1.0/dotnet/System.Private.DataContractSerialization.dll.dll 2.0MB
-
KunoichiSekiren-0.1.0/dotnet/System.Private.Uri.dll.dll 246KB
-
KunoichiSekiren-0.1.0/dotnet/System.Private.Xml.Linq.dll.dll 395KB
-
KunoichiSekiren-0.1.0/dotnet/System.Private.Xml.dll.dll 8.1MB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.DispatchProxy.dll.dll 64KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Emit.ILGeneration.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Emit.Lightweight.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Emit.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Extensions.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Metadata.dll.dll 1.1MB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Primitives.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.TypeExtensions.dll.dll 32KB
-
KunoichiSekiren-0.1.0/dotnet/System.Reflection.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Resources.Reader.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Resources.ResourceManager.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Resources.Writer.dll.dll 44KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.CompilerServices.Unsafe.dll.dll 22KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.CompilerServices.VisualC.dll.dll 19KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Extensions.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Handles.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.InteropServices.RuntimeInformation.dll.dll 31KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.InteropServices.dll.dll 50KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Intrinsics.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Loader.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Numerics.dll.dll 216KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Formatters.dll.dll 314KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Json.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Primitives.dll.dll 28KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Xml.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.Runtime.dll.dll 41KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.AccessControl.dll.dll 210KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Claims.dll.dll 92KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Algorithms.dll.dll 786KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Cng.dll.dll 474KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Csp.dll.dll 185KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Encoding.dll.dll 91KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.OpenSsl.dll.dll 31KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Primitives.dll.dll 131KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.X509Certificates.dll.dll 475KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Principal.Windows.dll.dll 148KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.Principal.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.SecureString.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Security.dll.dll 18KB
-
KunoichiSekiren-0.1.0/dotnet/System.ServiceModel.Web.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.ServiceProcess.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Text.Encoding.CodePages.dll.dll 850KB
-
KunoichiSekiren-0.1.0/dotnet/System.Text.Encoding.Extensions.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Text.Encoding.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Text.Encodings.Web.dll.dll 128KB
-
KunoichiSekiren-0.1.0/dotnet/System.Text.Json.dll.dll 1.4MB
-
KunoichiSekiren-0.1.0/dotnet/System.Text.RegularExpressions.dll.dll 517KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Channels.dll.dll 122KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Overlapped.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.Dataflow.dll.dll 493KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.Extensions.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.Parallel.dll.dll 135KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Thread.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.ThreadPool.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.Timer.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Threading.dll.dll 78KB
-
KunoichiSekiren-0.1.0/dotnet/System.Transactions.Local.dll.dll 343KB
-
KunoichiSekiren-0.1.0/dotnet/System.Transactions.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.ValueTuple.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Web.HttpUtility.dll.dll 51KB
-
KunoichiSekiren-0.1.0/dotnet/System.Web.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Windows.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.Linq.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.ReaderWriter.dll.dll 21KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.Serialization.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.XDocument.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.XPath.XDocument.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.XPath.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.XmlDocument.dll.dll 15KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.XmlSerializer.dll.dll 17KB
-
KunoichiSekiren-0.1.0/dotnet/System.Xml.dll.dll 24KB
-
KunoichiSekiren-0.1.0/dotnet/System.dll.dll 49KB
-
KunoichiSekiren-0.1.0/dotnet/WindowsBase.dll.dll 16KB
-
KunoichiSekiren-0.1.0/dotnet/clretwrc.dll.dll 297KB
-
KunoichiSekiren-0.1.0/dotnet/clrjit.dll.dll 1.4MB
-
KunoichiSekiren-0.1.0/dotnet/coreclr.dll.dll 4.9MB
-
KunoichiSekiren-0.1.0/dotnet/dbgshim.dll.dll 137KB
-
KunoichiSekiren-0.1.0/dotnet/hostpolicy.dll.dll 383KB
-
KunoichiSekiren-0.1.0/dotnet/mscordaccore.dll.dll 1.3MB
-
KunoichiSekiren-0.1.0/dotnet/mscordaccore_amd64_amd64_6.0.722.32202.dll.dll 1.3MB
-
KunoichiSekiren-0.1.0/dotnet/mscordbi.dll.dll 1.2MB
-
KunoichiSekiren-0.1.0/dotnet/mscorlib.dll.dll 57KB
-
KunoichiSekiren-0.1.0/dotnet/mscorrc.dll.dll 143KB
-
KunoichiSekiren-0.1.0/dotnet/msquic.dll.dll 487KB
-
KunoichiSekiren-0.1.0/dotnet/netstandard.dll.dll 99KB
-
KunoichiSekiren-0.1.0/winhttp.dll.dll 25KB
KunoichiSekiren-0.1.0/.doorstop_version
- SHA256 2744735fee2ee237e29f592f88ab669dc8d478fca31e6da4caf9a4a1b3abb7f1
- MD5 c9e4dc50b8d6ed20385fdca95873b3a5
- SHA1 dcd56eaf2c48d9211abe80a49ca88a31709c7e78
- SHA512 80cbdcc7a0d4a5808e5f39ae0e53d7b7c8f5a2238ef303beacfca9fbf459d73f2ab7ea09e2c1d8c4f43c58f65cb4b7bdee5f41f76ae71432ca4f3e72fd697ce6
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/BepInEx/LogOutput.log
- SHA256 3c23e879b8a6ee3eaec8f48363b5a420aa55e3bca13a16840769e51231321bb0
- MD5 547f12d626166cce0f12cfd916f6d67e
- SHA1 4c7737654cae5a1b957c1d1552b5a16fb05b44f4
- SHA512 abb61cce17c34f56dc56a333fce17eded052d4358712fd6537a0551fe3ad2076e3d5c1ec0b9061fb8e02139d266606886bc808d1d6f4582c75c41e2e60a995d3
- TLSH T141811367C067C8A31F08A2CB79C131DCBE7D955EA6E0C560B24D515EE5FE1648B3E321
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_AutoGeneratedTranslations.txt
- SHA256 07eaef26ba91e68ce75c0b7d0c200e29c4ad30ce4ba4110f783f693120356439
- MD5 e149cb8817fc76853e0ea0316a1fd0ce
- SHA1 191e591de3fdac00fc1f4dff807f5e2d7f3de3ee
- SHA512 e1104e366d08d452ddd8e25a6f156f0ee35ba5bbe3642e6ed731aa7fb0129a26f99ef0e411feea5f90b57c9792ff4e5db20aee54d73f3a098fa9ef6814554a77
- TLSH T18E41956CA966D663B5E1A191F4D30B69B99B09B2F4192768502BF17F31C122DF0970B0
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_Postprocessors.txt
- SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
- MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
- SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
- SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_Preprocessors.txt
- SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
- MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
- SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
- SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/BepInEx/Translation/en/Text/_Substitutions.txt
- SHA256 f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
- MD5 ecaa88f7fa0bf610a5a26cf545dcd3aa
- SHA1 57218c316b6921e2cd61027a2387edc31a2d9471
- SHA512 37c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/BepInEx/cache/chainloader_typeloader.dat
- SHA256 016421c3e3329967226c73116d11d010e18139de27913cfe247c7143df1fdf37
- MD5 b185f692711b8edb18ecc37a80990634
- SHA1 f83bcbea6c0d6749ecd4f1a2195a9223242ce474
- SHA512 278f952f47d154de2a008537b009ab5a4a049d79c479bdf0667ab8b124d6068037d3da6a6cc516a8214dd6a0361ac8c7635d9cc3cd7f65c6785ce61a08f98c4c
- SSDEEP 96:lYWPv0iPIPmPeDuD/abVqrWXWONsrtGaizjJK4Sx/l6lmUtjWitjW2:uID+wWXxNLkHBlQ
- TLSH T164A1193F21A6E42EE47039672BC660CCF4CD4DCD9638EA353B644843BEE893C8799519
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/config/AutoTranslatorConfig.ini
- SHA256 5b4112e15df9bb145756ad8705d22b1798f9a717548357259b13ca0e6653c494
- MD5 1ffaf4225061ebf6b2eeed496928295f
- SHA1 4612e8d0c25a7e7c5274c175169031256777956d
- SHA512 fa3fc2ce1c9b90307c9c2739079454b53c3c16b4eac1d6f868a9c903c55b9bbd4c7cb35e9f13c2d9d65d230b2e41f0beaae90599c96aaed47d42dad64b877e0c
- TLSH T12471EE826A5F9161687BA3266E83E2E775A44C89447F0D7CB25E060F39C4C0C376EC7B
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/config/BepInEx.cfg
- SHA256 0bf55bbf98df453927380013db2221296c22f6477836f35715afd4ebf908a75f
- MD5 000aa3d7a2934cc5b113344793b49910
- SHA1 d4240e4b270e8458d8947ddcd0002ce3f442609c
- SHA512 7619f14d50a0e9297fbdc56897ebca352283e87fa2ff90f00ab0175cde4239f9a56bd775195b734cb5c3ec3aa61501e2a1b2307962ae9f95030270f626c07519
- SSDEEP 96:5XjeO9djntmuCFiL+vc+dxTyo3+2DgqtrtnUdxU36SU36lwCnL:r9Zt0UmmonDBUbU36SU36x
- TLSH T116E153717A8EF27F0B30508BA50AF1E5D628890CD3636974FC6D911D5241BDA83B37AE
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/config/gravydevsupreme.xunity.resourceredirector.cfg
- SHA256 9a89919f8b680e13db9f92a156a09151dbe8c14981c2bb795d92bda1c6fd75e6
- MD5 f1d9ddc5186af70d513d3794a46441e8
- SHA1 c047e3953579974f21857e4852c22e94a3c84cc1
- SHA512 99263e5d0e124693a97c0b25203b408dcc29b139289386967216497db71f38691a0e184fb25160a0e1a4afb9fecd62718c8788e8ae28608f70821cc0b58c0035
- TLSH T1C1E0CD553D5FE0794D70D45D5015F5A1A14FC50AD33F10B8F45631493875BBC879A98C
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/core/0Harmony.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c898933b52149e8bcf6722305c7e4d94add47c9e53b364096f91721624c0877
- MD5 0a17eae2bacbe3aa05d19ad6523ac839
- SHA1 644d44efaf3098b023e614626ef368c8b31fcf1c
- SHA512 621713d4d43fb5665b7aebde1f8ffe3f35fb59386333113acd3dd105508b30d23a3de5491255c63a171d01a891d4921936c836ec1ce33b69cb5df46728eaf99f
- SSDEEP 6144:4HIc1aaJECVksgWuUQOZ47q7aZ8uM0+S:4HLOik3UQOC7r
- TLSH T1C5443C8567FC8A28C3BF1BBAE47020644679D927F829FB4E04D8E4E51DC5B56D6203B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
269590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
255KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.DotNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b48913692a18004ce0822b442a20853ae94897a9d0c906d536ce5400c6171f69
- MD5 4a0fb090e57094139b2d74b5a8e78522
- SHA1 85c2db84514d4a4ab42a0cc5c4e5433a30e631a3
- SHA512 8c1d76d5f0e83fd11e2c4232584e1ba095b2b78b3c6ec56d44d9bfa897fe37e7e37180eb20e209d45d762b8cdf4581bab0f9e99beaa955dd1ca887bf6691e15c
- SSDEEP 12288:EuWRfqJliL1XajlAHGC4CjD/H8M/0v4OWWMtNyerJ:sCTiLkjlAHGajz/0M/yer
- TLSH T151B44B1233F8926AC4ED6379E472841856F0F80E736AEB9F0A58DAF91C43B665D01773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
529758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/src/obj/AsmResolver.DotNet/release_net6.0/AsmResolver.DotNet.pdb
mscoree
_CorDllMain
Name
.text
Size
509KB
Virtual Size
509KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.PE.File.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 558bc01679b61b13e358022d866c1b93d93742b07abc035e2c7cd7c4d97514fa
- MD5 125ae7c155b10ab6082f7d9b29425d19
- SHA1 afb6566940e6920fce9ee2326212d46d9958164b
- SHA512 cd52098ca29b2ec3e75914bd20385e1dbe154b54113b9d933656e1c9c2c4cc10d5fc13088e9b18b89fa938ee44e05ea096b973e619cd375d99b187db4db55924
- SSDEEP 768:7hFbGog6xVbsp6mbC9tYdPEXxkUjHkymimm/7v:7fjNSbC1BrHkympm/7v
- TLSH T17E03082063ACD33BCA9EC639E620811805F5D74F3246E79DDE98F0CA2E937C561625F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/src/obj/AsmResolver.PE.File/release_net6.0/AsmResolver.PE.File.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.PE.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50b8e2afda8d544b76fdbc0696294beeaceb04d8d3bf5ffe33fc0adebe88253a
- MD5 07a100c533cfe1b2086cfda9f0c6449b
- SHA1 3821ee16e0265d1fc9ee0360eb4d447919a6d330
- SHA512 0ef3afad38ab0e00270e50061e9b4ffe3dd90d516235b7a372ac4f5334d50f556c0ddc362ed23e0b2e5a14412511f842daefbd9e99863c7e4f6872de44ff52cf
- SSDEEP 6144:loNzoEE0IWHHnSfET9imFQB3J6VqReknQxxPPyDzs:9EnvH43J6qVnq
- TLSH T150845C1163FC662AF5EF6776F0B1446486B0B8562256EF1F8F8966AE4C137023C12F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
385654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/src/obj/AsmResolver.PE/release_net6.0/AsmResolver.PE.pdb
mscoree
_CorDllMain
Name
.text
Size
369KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/AsmResolver.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3d44bd689d2a7ae07159d8d89342a2ef690a4273a7a5a56aa5832d7fa3217976
- MD5 6deed7c6efd2ccdba44e29ade63f15cc
- SHA1 b03607245eb897123a236a31a96d99bfad4dc2ef
- SHA512 d1ace63223015cb455519a368478861f84ac44d26428341ed07e994578abd047ded541091f88dd448f941f5d419ae68603de6d46de84fd7b109cd0fe0a13d930
- SSDEEP 1536:iNIycNhCct7Xt/B+jMzmeP0ixZd/jSn2n:WInhCcpXZ/fDrd/jSn2
- TLSH T194634B3CA758CF37D7DE06BBF4A102054F70D2273653E74B9299E5ADA853B840A62327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/src/obj/AsmResolver/release_net6.0/AsmResolver.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/AssetRipper.CIL.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd8c2e660001b11f8c92885bec3d56611141595c23f3a3adef1cb8a95a7e9caa
- MD5 2dbf093aa982c08f0a6a72eceeaa8344
- SHA1 de22c05168ae67f3dad7c3de76725fab234bdbc9
- SHA512 4996c90aadf4eaef9b0ba5765d7c5cf87488ae00bd05528a70fb943e8dacd7342c4ea1a7c06d6e806532db1adba933e612ea2923c57151cf796f143b8f327b43
- SSDEEP 384:T84hUh3dSahaJ2rs5J8FQzoYEM1Rn+aor+iYOP4sIQdxv4PKwtbfWpQKtE:Tsh3bvs5JMQzoeRna55IQHsh
- TLSH T127C22935A715CF36CEFE8A7A6D6210919BBCE3016102DF032DE555DA4C8BB6A17213B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\repos\AssetRipper.CIL\AssetRipper.CIL\obj\Release\net6.0\AssetRipper.CIL.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/AssetRipper.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9802b9d85771985ae60780a945705d2da830bc6a3a0bcc4655a2e94a39b82d79
- MD5 6074760877519e771c4a9c6ce310b1a5
- SHA1 0b9bc2e16d37c1c61a403275c380d8c6ec2e9031
- SHA512 ebd8bc995d1d6bb9564baecf1827d1f809d06a2b0a99d7911dfec4fcab319af4368315965dc7075d3c568c84c134d4392744a035149ab4f8a951fd789540dbd0
- SSDEEP 384:n/oMh9wH2jV1ez2mE04MQYKwDhh+PqNFgFWCRDQUNpF2L+rR6Jn3x4Ib2YccxnAn:QuwH2bsx/4Wb2xabfEVJHdWu3+z8T
- TLSH T137D21904679C9732CF6E1A7A98F161105B74D28A7D63FF6B10C8A4A456573CC0C29BEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\repos\AssetRipper.Primitives\AssetRipper.Primitives\obj\Release\net6.0\AssetRipper.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 90b3676d3d6d0c19e7140203dbff3658fcc3a7e964452fa5eaa016a5743502cf
- MD5 a8f02c465b88c3ac212e6ef2b28644ca
- SHA1 1c38d9afc3509fdf7f607f3f143012796a0428a2
- SHA512 53317b647343ffd267e4dd2f56b8cb5e4c2301c2010edd356b31cd1dbf091eeb331869b5f4c1436e9500ed2782edbc86aa954dd0a83cdcac8ae98601d1e56f5f
- SSDEEP 1536:VSMs4G9IZMaCqcgEM1CB+YfSxK6uRAlEw7tBPRGl//h1Ak1/aMbx/YjT/i/sIik2:X1Gjqcy4IUSxLl5BPR2h/NYrIVa
- TLSH T1B7D38C2633E88B16D3FF1B7678F091260F71FA86E522F7CE4E8864AD591338195117B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
140474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BepInEx.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
129KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Core.xml
- SHA256 709d06982ded0e2aeb5b7aba5cb224331dea01102368fda37a7c5be88b65bb0e
- MD5 b3f26c81130f9df26344b2093448f141
- SHA1 dafe6aad5d8ce7ad4f44dc19e6f355d1d8ab3e29
- SHA512 730787a9e9bbaffb0b9d7e35ba4af08ac6046dd3350d51aa81038197fb0dcc25a06af6c2db9aec999eb2861988c0c417f8c5ea27e161242673f20e1d147089f1
- SSDEEP 768:fHJ9LEKl3qVxKAfqap+a3t+LGd12sLJXvwaUhmb7NINDCe:fpREKl3qVxGaf12IJXomb7NINDCe
- TLSH T1FE93FF39B7F4FE5208420562AD983980BF340DA3311A9679B1DD7D1B9F0ECD711BB6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Preloader.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a6251e5427470cfa5b673ced8b24e5cba7be024a82e8841a5ff7ec249fcc5e4
- MD5 04276a1e6abe14b5b686fa229440fbd5
- SHA1 e85be48311c24fd848d3f580450b553ae9db0ff5
- SHA512 c22a38941393b29fb05e82826435dbc523f1aab0bbc9f14d567ce411d054280dff974578a0ca77cf5b19376c82e341f6eeae8c6dc4e894019680e1ea0fb00103
- SSDEEP 768:CvdTBiFGfUYMSca7Pzjp8lkZoz/pMyEka2GbO3nw0c/i4jxz7fow76vK:CVgmTZI/3+zKWN97fv76vK
- TLSH T130335A1137EDC36AEAFD9F74BC70216602F9BE467832D20E5E85249E1977B804114FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58154
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BepInEx.Preloader.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Preloader.Core.xml
- SHA256 f7e68941a96a6bbb42237b428f0b38077ac139597ac24c7cbb51e661f51ae3f1
- MD5 e6c77437b282a3617afded8096571800
- SHA1 263bdbef16bb05af8c5a001c4160ec212c3781a0
- SHA512 19dcb590c4647b4e7bb56be8bbf4b17419a52bf022acc0c34f5ea97af1c953fdff17f95c2bde30aa168923c54cb8845ac3b0f7e26770da0706548ccfbb20217a
- SSDEEP 96:6mjWu3boToPN2MokDDGbPqKRIa8tjIcdJOjO+1xyIw+eOoOtfcDTtl3GvsluPDN1:6mjJ30To8MxDD+UaUcD1oRfDxMLKI
- TLSH T17F72DC7436E0D9510E810A85EE9E38C0BEBA0EB71063553A30CD6D9FEF55E8711AF8B1
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 574d73040b1bb1809b543505efc6f2dccbfc3302c84a22f1eed63ed3b5d731d5
- MD5 a867baa59c6e9febc98759a2d2361c5d
- SHA1 3d22965a8529e95bc8d5a4368ec7eaca4e60e9b1
- SHA512 3e3c48238673d89ebdfd515046df255028daad29bdff87e5ca13a8e25a73c345493da70aac2e4c6951fec5af4328d20f94207a84a70341d33fa996e544d7b4a1
- SSDEEP 192:NtLvhS97YxyLiqrbV2W9wc/wXrAO0cdfa+XJGfmUVkYvUJ3RN21:NtLhA0gdoaJ/crycc+5G+UVkxfN21
- TLSH T15D527D11AE89C377DE761777AC7AB6820BB1A7C5A857CF7E960CA2875C2128501E1B30
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BepInEx.Unity.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.Common.xml
- SHA256 d3164c64d07fffbd4e5a28dd4a7201d4971bf15f5d471fc919d4707009fc9114
- MD5 fa6f41a8095aa901a2b21d1450c51769
- SHA1 dc51c6e39f602964b12e6b9b0ee6a7766b3e6465
- SHA512 66570e494c28ef99378e496dd3733477efbf21cd470dc31e5999c33cdca7b105fc59c6e3c5ba5ec44974e55024ddc350dff7cc28eb8485a433149a3a48877445
- TLSH T10C213838A1F0DE670C026A421E2C3880BF674E675096423A764EFE1ABF54C572AEF164
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3503150b658543ef735a9f2d9964a5f42cd555b377f4f8ea39f77935c65d6d8c
- MD5 5eccfe508bcada272128a1d2e75a2717
- SHA1 c80528daee2fd7b82d74eae3b2422f185f81b9be
- SHA512 3ab275ea44bc87c03d44015a1d02f543ce770e475b94c4f2d9f8b1e8f148851b1f901369ebcc3b45a89f84b8175965af88364e26e4fc3ea4c9d97b465622997f
- SSDEEP 1536:y+Szy+j4HuIJB9EaL+BK94we5EO3cI0Zwfs:wzy+jJeB9EaL+Pnh8z
- TLSH T199736C11B3E89114F6BD6B7D3CB305140FBABE135422E65F1AC95DED89B22404EA37A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
84970
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
BepInEx.Unity.IL2CPP.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.dll.config
- SHA256 ea4436344d4cc4c29f3382655c99828ace3df659107cb2e6b985227027e48cd6
- MD5 76d7a066c78977dc5da916f9c5cfd84b
- SHA1 479fed379af9bac51c3074ac871f9afde28ed91f
- SHA512 56071bf329e51e6063d81c1bd55c636edcd6a0f194378b362bc8c637d64e713d896dee84ad1c71193b334d70bb0eac7e6f87d7f4bb09fdffac6c0daad2e8b17b
- TLSH T17CF02B5099E8EA62969106D33BA720545FEA1373259C018CF46DBDEA8F08945520A176
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/core/BepInEx.Unity.IL2CPP.xml
- SHA256 1dc768a64b78e9a409d3ea420e62e884c883ed488eecf204b71c2ef4e337ad31
- MD5 ab542884a56d1c85563210e30cd42202
- SHA1 ebbee898fdf592825f2bc3dd384f1b2529d9780f
- SHA512 43e82fdb6c265492fb2961a12c1793a0c258de3b6eff9bc3b6ee5a11d59f9a6907e9daa4357e2c7fd09aee8b6e48da85bbf7e81903852a39f74e049a44abe467
- TLSH T16931A535E5F0C9131C8032069F6A3884BA798C1BA6D3483931DD1EAEEF1B816496F1A5
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/BepInEx/core/Cpp2IL.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df0217a8a964c3b05a493fecce6651b624739cafa3683e5c67f1a1d8478bb4fb
- MD5 d8b81dfc563f51056d49a0a725d8bb42
- SHA1 cdb8e70aef6e43176d734943a587e2f209d937f0
- SHA512 c23545520c5486694440a39f1d5c2b2a2f579c865ef5b57ed25e0ce940fe945f53e1004aeade015cdd75f4a9800bfa4650ba471cb84b62c7bf8cb2a913b6abd9
- SSDEEP 6144:FiCAwHLvp2iPv1a2ncxDv2Fc8Xv3ixBGUuFIsK8DL1zj0d:g9wrx2iPv1a2nBcmfixVKX1zj
- TLSH T1A3744A1033F84379EAEF9BB9F8B4114407B1B867F47AE75D2498A8E80CA7754A910773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
360574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Cpp2IL.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
344KB
Virtual Size
344KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Disarm.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b371d0dfaa0631c81f898a567f750babfec5c361d8d2065e69be32e3a08e9c0
- MD5 a7fc6b6b8a1d0eccb20a7b4a83702ec6
- SHA1 41158bf112439786c5887b94a1899f6610fd37c1
- SHA512 649565ba38bee7d2f402df0912930fa9a63d64f0dcce7f8403e44f811373c259c085175653fbc96b8531e3c56e211107525e0ce88a177667033525b9a0bdc0b7
- SSDEEP 3072:FwYnyovJVbnC+lP6rWCBSwSLhUGMz+J68Ekvh:OgvJ51lMBSsGZE
- TLSH T12FD32A06BAF97537E8BD0F7604B350160BB679AA6B31E78D708CD0590920BC98C57FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
143798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Disarm.pdb
mscoree
_CorDllMain
Name
.text
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Gee.External.Capstone.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18f9cfbfd10b479143a46b3e417ccfce4a62d4c2770da9ed12d553a0b326302c
- MD5 e58b4ce725dfda194749a037fd778e5e
- SHA1 adad54dabb32678814f10c28176f55a8cd9a51ea
- SHA512 9e579f5f6ad15b646d7b956223e7d9bfcce5ab110a5f598840a64015077d8eedb5551cfe54bfdf59a65e64bb2da568ccebb635c11013472caac3e29977806d53
- SSDEEP 6144:r2+lRt6xWJtN2d0W1B0oOQxB0C931P7J1PpBZEU9:lt6CK0Mq8RXpsM
- TLSH T19A5496303EA45E2FDBEB033852AC4457056795091A196352E716F0AE5CEAB6B32CCFF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
300682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Jeremy\source\repos\Capstone.NET\Gee.External.Capstone\obj\Release\net6.0\Gee.External.Capstone.pdb
mscoree
_CorDllMain
Name
.text
Size
286KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Iced.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f058c01321b4cdfc9b9151879e88e59571c8d0ba176fbcf95bc936a8f3d073ed
- MD5 e1e3347e46e1777f93b5b2072bf12ccf
- SHA1 e8b5beca2777afbce30ce9216d228658b08512d4
- SHA512 4dfdc0037c61429369eca863a8ea17861ef69a70a74e3c15f39e1b409b420a884745a16dc60779279e362733da9b219ab4aa1eca56a804461ef8ff644cd47859
- SSDEEP 49152:VjmtTXJbStv4Bvh9qr5Wo0LKA3h1nrlDohXK5r32hQoKbRCU/832JY0XQ6mPzSsg:stTXJbStv4Bvh9qr5Wo0LKA3h1nrlDop
- TLSH T1D695B481EBFA8DF7EAB9A371E88913106020ECAE7F17D7676671A4710C477D016530EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1633642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/csharp/Intel/Iced/obj/Release/netstandard2.1/Iced.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f57b8f98c0272c42f739392576491cf14877d36c74e54e64f46a4557ca11044
- MD5 4f8c4c83735346b1961f78a3f6312eb9
- SHA1 41afe488de23cd3a668582b5865e5d8302266b34
- SHA512 922734a777fdf689a524a8299d3f18e389a8e025c7a82856f9ffa136eea79626667f16b4c57e5400bc0ba02d50b0f9dc030342150dec3f2cbb025265d6aa73e8
- SSDEEP 768:YrzLNIGm8S5LZGWpm1tTXUhO/2oTmvmV8/O6Gc:Y3LN90LZ3mj7UG24mv48/O6Gc
- TLSH T1BC135C0027ED4733DAEE0BBD6CF2640007BDE696F013FB5B58C8259A9CA37955A21367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46810
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Il2CppInterop.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Generator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5aabd8787901c6777f6286877e5f6231b3f853e0a8617f2cbac6928954cd3eb1
- MD5 1b0326a5cf8a4edc08fd80d25129eb2c
- SHA1 630d57f4bd382ade2683b8157653aa55d33fca26
- SHA512 8e59a1bb26a7f63e716bcb2672686bb7cdd6185f194432b5e4c15ffefafd9484b6faeec9318845229753e5566e6b3ccf3952d38efbfc0dc09a1380bcda015625
- SSDEEP 6144:qmJIjootjV4KCH5ohZEdw0RddhDheY2iwnbgXIOMeWt:0sotj0s0b2iwnk4OMn
- TLSH T11E246B6433FCCE62CABE0AB690B0106842F6E217C217D7AD4CD53CED2E6674157466BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
224758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Il2CppInterop.Generator.pdb
mscoree
_CorDllMain
Name
.text
Size
211KB
Virtual Size
211KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.HarmonySupport.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b9bde9b15c5d6e3d1144f49d7feb4fd83a6287f6746909c993f8a651dc9f3f74
- MD5 a04bd887786d2e01dae7d617168fbc41
- SHA1 9af2351bf5bedfede78c4b2aeabeccc07c33a41b
- SHA512 1f6d27455859cbf67198cbe67c65b11d0f327e86a58bd18cd912000b3fd36e5dfd68fb58b5524307db46b8014c8a530a9c2d3c188aca11f9be5c9d20a64000fb
- SSDEEP 384:XuJpibanWb7KdY6j5wd3cfOJ2xhXX+idMYvJv3QINwgovg4mGgXue1:QEaSKdYK5wifYAhrdMIJvVL6rVa1
- TLSH T124B26C22ABEEC722F1AE53B138F1265407F5A512A447EB490CD8A1FA6C637C05F25793
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Il2CppInterop.HarmonySupport.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Il2CppInterop.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14d2ee6cbe2af5d9448c72faa802c67dc1378192046bc348ea6709bd8909d00d
- MD5 c883370d2f1a25f0152e05df110be2d1
- SHA1 e01672c4ac81cecfcd20e91a2913141ac3b7b289
- SHA512 b1e5c12da8070d7944e4dcf9a86c3fc922741d23248d46b08e3b2269225f6ac562716b2197aaca72f4ebbbe0f63d0365ac492f9c9d08eb66bd76cc78498700fa
- SSDEEP 6144:tAP91D94vuMsnu7Vi/W9oh+WQGGoniNP/DIFgi:OPz6dscVmm5WQGGo8L2g
- TLSH T112545A0027D89E3AE76F163BA4B065184FB1B6436D31D39EBAA5C1EC9863744EE01773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
297150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Il2CppInterop.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
282KB
Virtual Size
282KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/LibCpp2IL.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f9bf8e432e9a914469a89c4827a4beb4672076b7d8ff504708241b4dcc295ef6
- MD5 79ca3869e2295432698911345ec89d79
- SHA1 b49748df9c563ce56f53785420dbe76356170575
- SHA512 c1c72722b87b250b6561a7f2af358432179950d7c5254a99226a2edb64a9c11988c2c9088c9ed8f8764456703bebe7e0b106e063550e43ac15e3803fb70b137b
- SSDEEP 6144:a5l3Nfz47wvEsJOSzZmJ19fLqBG3KYn5uGZjrfV:aWXscSzZmZWBG3zcGZjB
- TLSH T12D544A1473E89326F6FF0B7DE0B514150BB6B816B439EB0E29D990DE6C337509825BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
290226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
LibCpp2IL.pdb
mscoree
_CorDllMain
Name
.text
Size
275KB
Virtual Size
275KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 61637f9940e5e336571cbf945be0f36d6d6050e06288df0f0232d93b26f0bde7
- MD5 0c4ec4eb146bfe047755669c8060a967
- SHA1 f663cc3bc174a98a49893e0cf334b479b05e453d
- SHA512 478dba76de5b20906a31f2ff72a559779a262abe0265d475aa60d555d4f94f79887f237f393f256134be758d565aa46b30a39e81b23e1f3048fc80ab779405af
- SSDEEP 768:WrF3HuZyOt78PeWSTlNeyJOgfGNOV/DVxPVxaCCrHpTFuYL4oWp:WrFecOt78PeWCLOgfGkVzmpTDL4oWp
- TLSH T1FA0307087BAD962BC2AE56FEE4A126191BF1D53C6603FBAB4DC4B0F3BC437444112267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\symbols\mdb\obj\Release\netstandard2.0\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5249a04ad8fd7dfd47e4d0a620aed0f7eb6051e1ddec102c541ca3e12f6e2a8
- MD5 743102d277a8754dc74f7644e03a8956
- SHA1 31971747d45f995bc8d05c26c728df293a074db6
- SHA512 00bb76043a3a147b570e0421f768a2f2238954922c45c611d10d8fd4a1f8ba56da8a7b7377facfe54ff6dbee2d81be87c0d6e3de9e884625697ae478a82677e9
- SSDEEP 1536:QOTXdiVgzDKG2fNRck9FRcXRHr5vMALYKXNgJGsZ9ajr1vjCXev:TT0W2fjvm9uArWJGca31veXev
- TLSH T111937E29ABECA666E4DC72B724A709084BF0E165D143D71D9AC47EFC2C5BB121923393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 273292babd45f9f34de5054bd9cdfe1d859a7dbf6f4ad5974fe4ead70698ed5b
- MD5 fe8c2b2eef6e5e7284dc9b522a7be468
- SHA1 8779911266ea9bfea924aad33a7e1c7855f41857
- SHA512 b78f759568fa5ce77f87db6f02688493877ced8c9b289934c6adc95db5581d3ebc858092c650a47d5d7eb44c2dd2ed01a8491930acd8173d45f777285d0990ab
- SSDEEP 384:aWLOZBsQXmnFlPQnqc9H559krjuVXcVXD9PmROMLUBLMWG1UX8JvbrjEZ1O/pl+1:5aQHP+qcbkrjuROoUBBLXA/AS
- TLSH T177B239103B99CF3BD2FF867958D2532802B1C96A5603EB064DCC90EA9A5BF945341BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 769a59793d4b8885bbbfbc5aee8f57a0d4e34d275c56c60c03994309b87f67e9
- MD5 7c40214d60b54749a1a7f79ea6f62bac
- SHA1 a240d705b52fb1a78cceedab268db42cbeb47512
- SHA512 66a489988d15f1c651061656703b6fb03c4c6ebe82bcb0d48246c760e3764e4a7f2ad8d1653c90401fba6aa9974586d36256ad3a47e1112c1f38488a8818ab92
- SSDEEP 6144:NimznQ2nMpRAX2diEIn5o4gcuomZSFrIb:XnB2EELcu0Fr
- TLSH T1C6747D3527EC873BE69E537FE46A081A82F5D816738BEB8D18C8E9F51C43B5359011A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
360770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\src\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
346KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.Backports.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdd6e9f7bcdb98d2c002f63bfbe85ae80ea36261190a741e64283d769a6c6502
- MD5 d009a0eee9e89a221f6d17964f49d4c6
- SHA1 bf74932cae8f24f9fe826b221153df55db909dac
- SHA512 0884fe7150a6dec082b83f7412a1e62054ac7b6458af7847ee571d27debb99ef1f52a814ee9deebda9aa0319594bbceb74c0e00f418cf1f02b0115ea3f4fd149
- SSDEEP 384:7BTGpkWiNSXrJ7brWx3vyXaxs3NAUG7wVDjV7N4GmoE+MfAJNSEmQfn0G1CcQLry:1SSOXrJ7bqx36KxaNAOev3EJl1Cn
- TLSH T154D2FB10ABE88363DEEF4FB54CB502518AB2E9847873AB6F354DE0951852BCC65D3336
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/aaron/Documents/Source/MonoMod/artifacts/obj/MonoMod.Backports/release_net6.0/MonoMod.Backports.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.ILHelpers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0081403bdcef3340f78c7ccded0be6ae0507b397ee8b9980b44f01bf9f93aed1
- MD5 a68de8b168cb29db784562820c444242
- SHA1 61e349545c7a64d41219e83c775b0b4481cfd9c5
- SHA512 918662d9019ea306b061ef14e61bfa522d0d975309e3adade95f49607ca81d7d8de65669c2e688f90382579b2e2abfd25508a67907d9f316b596159b044f702a
- TLSH T1C1818336978563B2CE1E0B779E53BA805B76820505176B3A298DE717FC0636C1923E72
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
/home/aaron/Documents/Source/MonoMod/artifacts/obj/MonoMod.ILHelpers/release_net6.0/verpatched/MonoMod.ILHelpers.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.RuntimeDetour.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1b3d55f53cb9f9f2550daed4dfd300b247d71698a0ace82bc7b9ff38d563594f
- MD5 072a99da280025328a7b10d497e681a1
- SHA1 224cb53d276cc2ab6d37f95643d4c4a98b4a8023
- SHA512 a6de22aef11bd2e98220a97aa0ddce072d8c2ae1312a6c12a6f79c07d425353e719e2535d9bd4090194b42276f49792cac320620c46c04188d54d9720b9c397d
- SSDEEP 3072:UXhvUVCg3xzAoF+mSOc9E8zAv/JMUMBEt:UXVB2z1Y48zAvj
- TLSH T1D2B37C2A6BED4F1AC69E6B38B476114503B0F51BA5A3F36A2CCD56B718173906E007F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
118066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.RuntimeDetour\obj\Release\net5.0\MonoMod.RuntimeDetour.pdb
mscoree
_CorDllMain
Name
.text
Size
107KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/MonoMod.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72a5b4249985873d7ecb160cbbed7a1e6540a38ee7618c72c64b9cb068c1438a
- MD5 2bb9a27e10af1af5cbd179c41639f807
- SHA1 e4ea995232e06b7c19fbece6567f86607dca60c8
- SHA512 03b6a7187a57fb88fac962271563fcb300fb65c30c4578187964172b03fe184194b1a552a7f35c1f6be2c7dba256f67a23f2f20dc61a653ef2a259d4ef3107ca
- SSDEEP 3072:Kd9KixK825eueTeBecyVPOfJtrUpgd/F8uJmxaFeyaT9D:CwqOfJ1oK9
- TLSH T129143A2A63D8CE09C7BFE671B06022654232D113E503DB0FA4BCB1F529567AF96473E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
198566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\MonoMod.Utils\obj\Release\net5.0\MonoMod.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
186KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/SemanticVersioning.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5b57607225a0ebde049e93469f49e5b2d07a7d602a03864ce3a72ccf57103a2
- MD5 8098f0fb6f91907f58bd7b8c0d016a28
- SHA1 244aeb2629f59a43b75b16a2160b58e74bccb3ae
- SHA512 21a46aef103caf21592d4beb7fc1a03d41450693a74d875bf89140e67de9b2260e7ccf9eab53f259991b94f7240ed2e157483abbc857bade9b40446ce046329e
- SSDEEP 768:QQMQouH2XchcGltbZcS6XLL/iaV6JYbDmciZmYSYYYYYiPSeE/fz+GgRjja:QQMQv2XchcGlhgXLL/ZV6JYbDmAPSeq3
- TLSH T1F7F2D645ABCC5232DBEE0A39A4A2500507FBEA627932FF0F4C8C65C25F677484651BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\semver-net\src\SemanticVersioning\obj\Release\netstandard2.0\SemanticVersioning.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/StableNameDotNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b83b0b370b1b0c2b441216c47bdf4a0d2d7086dbe8b06ad6e00c9a762c3c3a36
- MD5 8e982083529532a9691846fc3ed4f7e4
- SHA1 afaa92ad830eb71be51e756b8ecc2675244a33b2
- SHA512 2c94d73db3672e4a177a95fe64b4ca66b229574e277d3e47749a04d0d55c2ca63d6187eda601686d55b6980ce1bf06662a7c9ce9234d1caf86f1c13e76911488
- SSDEEP 768:iOHIBAHYCl71RAKVRdx8MvFgr4Qo/niOCSYiiBXh:atCl7bJwMNgBoKOpY7R
- TLSH T1AFC26C10BFDC1337C77E4FB96962364407F5AA472E37CA2C7D9A60DA0463A441E21BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
StableNameDotNet.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/WasmDisassembler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aed1f0a3dcb3580a58c74f3f746b5f4bcc2dfaf1769b16d74b052af0992fd05
- MD5 1851586c6cf63c2d6eb4b2d9f67eda73
- SHA1 7afcc135e8e2fd429a31a8481ac89389d5b1529b
- SHA512 86c41d7d75a7b8bc1df26cb4d899746f89b6ac69db42ecd01241205b6ad0f49d05f4048d9cfd6402fe24dd75766e962f5a055c004f7f2aff5e4c49183322a659
- SSDEEP 384:d57oNhcmxArQ1HqPT0gfY2Lw/0HgjQ3sTikB5rfIJct348eGxd:lm+E1HqPTRY2FAjQ8eRcdd
- TLSH T152A25C07F7CC3A79D87E367598B222268BAD9B53BD03562B1D9C4067ED23A18C530BD0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WasmDisassembler.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/XUnity.Common.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fad0db43674914a40c2d6e84e54ac5bb5b8ddfd4ce52f56746b880ce08dfa77c
- MD5 50b412c0952b8611d34db8482e0ea81e
- SHA1 6dd25c1a80b1ed163fa8c4690dc3bc95247923ce
- SHA512 b6488c39fda70ae150fade7b92ea435ebad12a9c1e5551573fe796d36781394e9bdd01a70dc18a2db4062b9f44119c64136aacd15c610e61203d19d1cb635504
- SSDEEP 1536:O4rqYlKSRZFrRUAVjHbutBBLtYOFYTesZMPyqrGdunTPrU1yHUJKF+5NTc:rRZFrRUCytBBtYDTpWPyqCuTPrU1EUoP
- TLSH T18D83170533ED8724EAFF5B786874620947B1FE579812D38E4DC865AD2A72BC04A11FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
87758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\XUnity.Common\obj\Release\net6.0\XUnity.Common.pdb
mscoree
_CorDllMain
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/core/dobby.dll
- IMPHASH b73ef8f9e327916c840f0a07b25c0256
- SHA256 8015de7d867245a1095d13947a63763878e4cf5fd3d3089b63cc39200b055ded
- MD5 527e006b05f48fd3826d028d63085c33
- SHA1 849d96010ff3fad9ad7dbe76b277a29248bdbf4e
- SHA512 ba893a48c2ade7531481f8e6e32a302666326e2fb969a4b861b2cf4e44375cad85f46c7b07cb62efff3a83efdf353bf34a14efeaef45ac5521b70bf043d65eec
- SSDEEP 3072:v93pAOpxErbU3TVKU/rZfOggfz6GqQgo+Obn4OylzezVX6LX2z:9pbIbKVKU9fOgg7DGTg49LXq
- TLSH T11A14392B73AD006BD87EF13889535A4EE37274178710A78F23508669DF3B3955D3AB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
21836
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
CloseHandle
GetCurrentProcessId
OpenProcess
VirtualProtectEx
SetEndOfFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
ReadFile
ReadConsoleW
CreateFileW
HeapSize
HeapReAlloc
WriteConsoleW
DobbyBuildVersion
DobbyCommit
DobbyDestroy
DobbyHook
DobbyPrepare
dobby_disable_near_branch_trampoline
dobby_enable_near_branch_trampoline
Name
.text
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=145, id=261, version=30795,
count=10, id=260, version=30795,
count=1, id=253, version=31935,
count=37, id=261, version=31935,
count=15, id=260, version=31935,
count=9, id=259, version=31935,
count=3, id=257, version=30795,
count=97, id=1, productName=Unmarked objects,
count=3, id=260, version=32217,
count=45, id=261, version=32217,
count=1, id=256, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
KunoichiSekiren-0.1.0/BepInEx/interop/AllIn1SpriteShaderAssembly.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 178db3a087619f1e6c5c93a70b515b7a1fc49c3ed4ee17a4bff5ad6ca731e3c1
- MD5 75d0c2862299920d8a1249910721c350
- SHA1 ab76a873da112833fa58ef3b21bd5c2a874df3a6
- SHA512 c770dca5a7915e2b0f4677d746620298aff174a377cade6a5284ee912ac004b940fd69bcbaeabd65b206d39ab18804eb309619af481f2abcd78ebef75601b6e0
- SSDEEP 1536:gNaIGOKgehsz3BdwiUmdnJvmMk7UjG/FlU8U9lRZ6tLFY/wJkQlvuTZZanVzuhXC:e4qED4U
- TLSH T1B1532F013BD6C28FD71E2278A1E20634437878D3B84BCBB5CEC8BCA965567431B696D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
73264
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Assembly-CSharp-firstpass.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f83f682374f45d19c0a1c58a7d8a7f585a6f0c1d02881a029491368b3c37e394
- MD5 0c7235b1a7e5a5312016e67ceed3045a
- SHA1 c5a0b0822493a21d788e9f51ced4d1134f6c8ca6
- SHA512 099970a1defb8d45369155c7789788a496ce1f5f04b940a1aa96dc9115312c45c3bc1b5830a2ebc16b7f1413d4658633fd708e8581598d07899e44758f30d47e
- SSDEEP 1536:xbG6VH4/83xsI2kM2ft+YgGBPGIOJL6578iGhngWAapTDTDzDzDTDTgamPRHUB3Q:zNrtr9BxOV2Khge
- TLSH T175E372903BC7A71FCB2E61F8D4CB569053B0B0A7B88D4B629ECD7CE027213416755A9B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
151290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Assembly-CSharp.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 546c74df782fed4340a72dc0cd986b05314b706039dc4c4d58b6029982a86297
- MD5 4222e35eef6937378db1d974d4760d1b
- SHA1 8cc249116a1b2587581bc9cdd53a5e14894e671c
- SHA512 d723589c1febadc8bc3468787edeff666dd52df767fd8ba030e4c2795a4b92bffd494e1298b194056f8447e6d4491181142a5e91ff466b047360479eebd4a3ca
- SSDEEP 49152:LA/3DvvVhphLyJwRAnvu16kcYvjYhS9ubo+Q8jgnw7ehGi:C3jNlqe
- TLSH T1C6A584827BC29A4FD75D283C81F1090454F0A1C7B68EDAA14BC9E8B9F9563512BCF19F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2161492
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/BehaviorDesigner.Runtime.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 85a82c4d08150c9fb87c9678be732a8aed7edac1f2e98d74774a83eda4f9e5e3
- MD5 9a6cff634a5f62f213d92ad41daf0304
- SHA1 da383500a4a0281a1560b20de98218a83006df0e
- SHA512 caecba874fac6e5acd45fc8eaf0c43a3fb87fd3134c9d82a9e9e5b402c7b8fa3d8355bc30578212fa46eeb9abba80259393825797b2be976bdf964a53017178a
- SSDEEP 3072:y11I8AMistimV5xif0ALnx3CUhJCJi8FtYp1vzqqSie8acA1uk1IVJmV:a6BstimV7vmBCUhJC7Yp1vPSie8AR
- TLSH T19444A7002BC58B4FD60E54F882E516844AB1B1CBB98FE573DFCC7CA9251278267876E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
283376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
269KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Cinemachine.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 130ba21d804e87f3fe0f6e678e2ccd97aa2f0a4ea00126887f408964ebe0a697
- MD5 bf1ec4009b1858d9dedd614963c1ad70
- SHA1 9b16aee3c51374f8a2e6a610342f8f3c06556790
- SHA512 73e09fc296a47864c705d6dd00faeafe8c10aec07c8bc1f84d4e23d683f53e5e495ebb129b3edcd6dd8077df0dee9205cf6837f9844568178c2a97e7dee3d29f
- SSDEEP 12288:sFNs6/ThXnGnURlpW9vJhdjdNOCzGqNfAJJ:sFNs6/ThXGURlpWvpjpzGqZG
- TLSH T189F473413FD2818FD60D1A74A1E609444EF4B4877DCE9BA16FC86CA5AD213921FC92FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
746034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
721KB
Virtual Size
720KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Coffee.UIEffect.R.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b87a3d28f7bf8e84ce812d0438dfa9a4ab8a217c061e3b8abbc5c143a15c372c
- MD5 26d7d19663e8b406399d3194dee88a3d
- SHA1 9ce6dc6e38b87f40626484baede9e23f310b4dac
- SHA512 3b7e5125e62d0a908884773d7592bf1e955ca7cd01dff06d7d25c71f0b602f10f1db5fce8132ae93e737bb627bc5d5996f6650830f084120f1d5bdd79c545ac7
- TLSH T184514407A3C5DD73D15D4338D9EB8B9A3631D068A722969325A4103DECE77760E30B5D
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9344
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Coffee.UIEffect.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b14b226b4163282e652713d76874ed74101fb5467c12a00e47ba9f647559b995
- MD5 572e1454ad0f4d96b0f64ac5ce61405c
- SHA1 c92933596c6212cc9da5160d3286ac9dfc8be2b6
- SHA512 ff0cbf44cb43f9359abe280c6a3821f7af9649dabb06f386de0f0790eb302df6207648cbdab913fad4aac73b4a66e44ddb528ae0cb33997da3d2e5b459135c44
- SSDEEP 3072:aCOmjwoU85/KXzql3qwvmflLpZbnIej/KztfM4Sz8:bOH58BKeqtP5Iej/9
- TLSH T1686494022BD286CFD72FE1BC90E115514A71B4C7BDCEC5A2AFC96CA422527435B4B3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
333960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
318KB
Virtual Size
318KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/DOTween.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 78ae34f497e0f2dc8accabcba2709519711e3da87b39fc37ff2e88d08e66efa0
- MD5 f773e65ad420b19007906f3d8fde961b
- SHA1 181ec6f0e9ab0580cf7fbfbb8c26518354ea41e5
- SHA512 697cae0cdef5bede984477f3ae24c7b384ffdfce7380a382c72e21d67ce9325397abffeecc7d28035030c33f950e84a55b9e48d702ad54cabaf64a2abb8c2c51
- SSDEEP 6144:Df8SQN6kWC4TEcm5XW8Abee3OeTLlmhr7BHwJ/rx4Qca1bfkYuCFS02B:Df8SQN6zC4QThr7BHw9Fkk2B
- TLSH T147D4C7C03FD4854FC6DE5DB591E205C54AB4E8DAB48E6BEA5FCCACA02D203035B476DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
619642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
597KB
Virtual Size
597KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/GameAnalytics.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dd6159ce426f639b86f29b929b25ddc68729ca186bdcbcb00f37954b24d1c13b
- MD5 61523032dc6f7a95ca087082b026e303
- SHA1 41d427b40da79c2692a3e4bffa06d4cfff234c9d
- SHA512 4d15a601ff724332f3d30ef2c03add3660a13af903fe2c9e12311aa38a32618f20a80d436e2fca9c09da3bdaf272ad399c4cf06ebc762b11f868f6c0ba7f1b80
- SSDEEP 6144:Hqy8POACzC9KmOyTGXN0ly554KBXDuQd:HAOZOHxlyMG
- TLSH T16E94A4553BC1CA8FE23E54B882E316454AA1F8D3BC8F86B29FDC6C642C213525F592D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
423502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
406KB
Virtual Size
405KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppMono.Data.Sqlite.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b7eeba419da8e2d8a66ac2d802c99f2781824c3a512bd1ce240dbe80cf9e7742
- MD5 0b6d0b4fdf9620bc708714a3929c090c
- SHA1 94722ffbb9bca8b6e77d60de03cb79fb50c5c534
- SHA512 cfb64f10ec351eff4e045348507bfe10e4d1a348204657ee948f8ca032a7d99d166a2310d7da256130303718ae8009527d006067c54265e42caf277a7729ec62
- SSDEEP 1536:tvTlbmE4KQElRJKQJbPEdbIktAWSvR2yzoVVjH+p86V5sLLccBB0zBXKvgnMBmYU:XRsIktEZ2y8tJ5m+eVJ1kyE0Zsb28Pq
- TLSH T1942484803BE6468BD74DA8BD93E2190445B0A8C7F98FA671AFCCBC9435263416F55BC3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
229002
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
216KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppMono.Security.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7740946ca7fddedd0777595bc39e35b1a3ea00bee4e1e2e335d606960da0477c
- MD5 1a3f1e6178f73a23dbf62bf7f6a79b91
- SHA1 f65f32b7bd85eb4edd0e7bc221337b073a267e2f
- SHA512 ca454eb13e01f301faf7d133b7926075a96fed2a2d4975a09b38e5e12450f2886dc1f43febb011fe09077e5357321ef44af102d16f42468861086da59b9acba1
- SSDEEP 3072:6oMl94TnwfzI0zhL9i0vkloTC2WHShYMIYyuEmF89LzplMI7OxrK7T/w:6JP9aAzKPMIYyuEmF89J
- TLSH T1F564650437E1878FDBDD91B481D21AA486B0A4C3BACEC7A3BFCC6CE919117465B453DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
317882
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
302KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Configuration.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 84dba250fc37a47316a8070ca1c879939f9ff08fc69390659582cfaa4442ca15
- MD5 2e0fd20b4e2ee34c6be757861ccc2535
- SHA1 8104b8a1689a597805d1a458f38c2098bb5234d1
- SHA512 51b656633ea16fb8cc020eaadefebeb816eb043dad91073c2eb33ee8f46b47877cd07d3634772a80c6a1a5fc569df5ee2e37a94f027f915abafc30fda7fecb34
- SSDEEP 192:9wFHzgxTkxTqQCJcvVLv9up6i5W2i1uPyi1u1yWnWP2lPjZo1G1T1M1Y1s1oP+ZC:9CgxTkxrC2vhFuQ6NgKygsPS2djZ+khX
- TLSH T1E332B7413BD4CA5FC68F51BC91D32A94047064D9B48E8672EFFC7C65D8267422FAA38B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Core.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ffb7c01966edc21c942e4b19aae5f2c3571f061164963901c4729a0e69c0eb22
- MD5 851ede6c7e0d5d42df340e1c22d847bd
- SHA1 9090232899af6538ef259961b4beff11dfa6c468
- SHA512 739c1453dd4aeaaa0ac72a6dbc98e700df65f119fd928f4f743df37e0720e6df403b65ecf8a036b8fa59e3d3d33b4c3c1a22b11311b8a4e9f8b1666402f6c82b
- SSDEEP 12288:2zDsF10Isopag37fHX323RxK5dgiRvdRy8sFQgf6ClsFQgf6ClqiQVh4ddhdWyIo:vH7f2hxjGyqWX
- TLSH T1F46572513BD19E8FC74DA87842E9572190B0E4D3BE4EAB624FCC2CF926227412B5D3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1493642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Data.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 75c1a013d70221efacd36ae5b924c273a3dc5b6c6d4cf763d07dbcc8d67c2ac7
- MD5 24efd378b22a26a540092fcf17833a5d
- SHA1 8f084e697cb77cdeb259313ad1c36ae0eb9eb569
- SHA512 6b7a8d80aa93feb41452104a65298e2e03aa05727a662aa160caa25f22614898efb4a8ea51aa840e2867c43affd59be14f62f00b8a74cbcf5c8745dd1d8b0b3f
- SSDEEP 12288:0rvpCP3R3J43wK4k2KNv+gJqxI/6aj3TPnTaKtfoW:0rCBZ4VP26Agt
- TLSH T1B17564043BD48D8FC61D51B891E1166589B4A4D6FDCE9AA2DFCCBCE42522382379E3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1590226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Numerics.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5a2f9b4fd6609e71966862ddc01502d89de4314994c06c191196790fb1cc0d45
- MD5 714c208fb9ab6349f3a9bf8b8b711306
- SHA1 24fbd7cd55d487488fb013ae5796c199410dd50a
- SHA512 01196ed1fe777d5241b22a9fcce7b45e3922cd1681a466b5ca8108492c009fcb51b0e2fde9dba320577b49adfb8310f1e1e68ad2d17cfba2517ec185edcf4e34
- SSDEEP 1536:kP/Zb8oIZuo/La1VA/aCYhXkEBgbBuaayHEgBFYph/+mXdhR/pM5xoO0JGgUaOGz:joIZuo/tYhhGrj
- TLSH T10F5353403FE5860BC21D853881D62B8546F070DAE9CE7A76AFDCBC6462237432B697D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72240
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Transactions.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 98bdf5d80662dcceede81e42fe174a5070bca86e114f7a731f461cd3c73235f3
- MD5 00f8eb6ea96c9fd437b5867cd753357e
- SHA1 5da396099252b27c48f8ad49de034691480a20da
- SHA512 d4b2e57a0ef38b0a55172661744b70d4aeb24dfdba387a4aa109859b74fa9fb343147f5924fd2ad3ea2680f2fc9a598acfdca2af07f51cd76d27163c166d8e17
- SSDEEP 768:MX8JldJBVC1xJ6dsQ6tr40fuaAhtLTKwV3x+kBeW1tdRLB0Js5suIxIT8ky5X:MXMnJBIZVR40fuaAhtLTKw1x+kBeW1tk
- TLSH T1AFC2B7403BD1C60FC75F597C91E32A5441F16CC6784EDA619FCC6CAAA9133426BAA3CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34018
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.Xml.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 29289452365fc4db8b4722af0c560bad8a7d172ad61ade74bce7c5dd49f3f612
- MD5 4387b5078cda52d2ad70d305fca62adc
- SHA1 b2172bb11917832196a34cf72106aab0d851125e
- SHA512 467ece241d8247b4b62428ac402ffe681a795d3e72a07f71a6c58d5e185621465cc60e524902917206e2ce5cfeb0cfb3988b7e3c356258297bf561941bcdf5d3
- SSDEEP 24576:uqOT/yhVTHqdKBytqMxVuJ7XEcDSux2CM:zYS1q4aIF
- TLSH T1D5C585813BD1CB4FC72C6174C1F11A4195A2E4CEBA4EE9618FCCACB568953413B9DBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2708076
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2CppSystem.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 25e7af664e79e1876db52ed1b73cf6bfaa13f0349960366f8041208431797b09
- MD5 b073a0c19ea5e432b8c1268ef0122b54
- SHA1 9097846138d39614b4d2a151df0be8e9965388e1
- SHA512 daeb6dc0d8d0351f15d34b059d6fbde1956704a21454acddca504a547a807f0e76654bb8339b956beca8d65f5e263a53ee456010de5e1122ac116448960c699a
- SSDEEP 12288:sRKYTCHH/f1y2cSTYvu8/B0wN9r8Ek4u0Hqyi7Y1W+9V:sQYTCfs2cST2u8B8E8v7YT
- TLSH T1F0B596443BE0AD5FD75D20F8E1E616410EA074CFB68E85625FCDACAE76227433B59382
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2448314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Il2Cppmscorlib.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dd4fa335226409e6420fc24dd1ec49448d0462d25f746b8acd07100b0309d324
- MD5 64993f7911e8c91ad3dfbfecea84947c
- SHA1 da6b8272ace386a410e62f3f9a084e98d6848550
- SHA512 94214eda2d4d8e5d41894de3112c3b8d6db55c744cda4285c24fcd1e62578d75dac9788c2138801d945c46f211d2c9c4a69ef7d0961273aaccc2557e4ccc6a71
- SSDEEP 49152:wQOo4uHntC9WmXxexPdy2Cj/v5aniU9br2HhZjgx27HV:wXNqPUbl
- TLSH T1CC46601437C4868FD76C2574A1E116448AE0E8C7F98FDA629FD8ACF562327823F65387
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5766102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5.5MB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Jint.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 82915dc23776a7b25b7f62769b140acd29b50d9b876e6962713821a084fdd551
- MD5 e1d85f769c3060828489ee8365b96f0e
- SHA1 749682455a7e25180eb14e954953557200d33353
- SHA512 ce4c25e767c66e665e7d83950b3e408626cfa5cdee4b338c6302d60c4a4c720074cf0aab80257e47ec4e014c42f4b4ccc873d8b625081ee906c41efaab9bfd48
- SSDEEP 12288:3dYJjY3oUI0osIMYUYUHmJ/9qN+Fy98sqevcDaCsLb:tYXHFAqe1b
- TLSH T18CE4B60137D2865FC34D4674C1E21A448BA0B4C7B48E57A27FCCACD66A52783BF9A3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
692488
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
668KB
Virtual Size
668KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/MethodAddressToToken.db
- SHA256 a79274c829cd96d90f8b1ed35e21fe7ca942ea233c51e538b2d03711a88fceac
- MD5 6a5d9d7c70277e5727a719f9a78d0c95
- SHA1 f0e3006bce7eb34022136feb9f6964cb1f66cf13
- SHA512 c66aed9841ae568eeef724c13b271741eddfb6f0462039423acb23cebf93cc1e32ecaa6b56ee94ec4953d4cf04f42a9cea89747cc273dcc072eb0bb9fcff2a94
- SSDEEP 12288:S6wZ1vYqKtcJ2yMBhAWFL1qiHn9ociz7pVVwf9/rR4aEAOGyK4Ao2e/:UYqRJGNhzn9YpAfoxATq
- TLSH T1AB65647EADBC9AA6C014507EC97A16407373C8FD57438312E719A0BA6CF72548BEF648
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/interop/MethodXrefScanCache.db
- SHA256 a0a8a81d307ac6aa9916ce870a00f19ee3dbe77d45b5b1e02f3493ee2a4e25a9
- MD5 5bb39a663c94817c55d8279875438b00
- SHA1 dce07dcfb4035071c363911ffde53797c44e87c6
- SHA512 fe08b22031a9b985c8ed0ecc245aaf719b73e8206c1e6bef5c2d1871f31d13c0ab9569e0c639ccd1755b088e2dec6986f4f8b2c45079eef4070b5d05b0157a39
- SSDEEP 49152:vclIXmd0baRogKB3OJBcpoe9zIpaOlEB7hLb0s7Dc2uIWsRURLaiokuhIjJEmvas:EJBcpoemQzb0yTuIVmgiVEpmF6Jz0
- TLSH T197278165AF0A8981FC3A4539B979AB827771FC345D8957371370103A4CEB0E5AC3BB68
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.Addressables.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e15100f94a2d7504f7475633f0cbd3f28edc01d391e6ced005959c7757a75796
- MD5 90bcf990762313e3cf9f0f180d09879c
- SHA1 da647fd8e665a1aee24b46e2da91aba436ef1219
- SHA512 5de83c404c842ad9be021f07710ea0e1c2216a9d76e45d2e2829a9f7f5ea9deb2b89a47a4ba91de324c4de58d2961ec8e76a80dbf5667910ea3b6404eace23bc
- SSDEEP 768:cfnIvnsVcibukiv6ovLutHYFQ47sJIiL7lpmhUQoGiRlhGXALddnwuLzXoiTcMOP:cfnIvnsWibukizvLuRYFh7sGi/lpmhUq
- TLSH T191C2C500BBDA854FC71E1A3DC0D215424AF06897B94E9AA48FCC6C99DE133922BD57DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.DOTween.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 15464568d788804424511ca3f5e26acc9f40eb5ca1fabaf021bf906bfea864ca
- MD5 5e5a1f59580d8f68c2ff54b03aad44a6
- SHA1 ff044593b35432a919fcfd02b5f7f4275b9f7ace
- SHA512 30f81091d6e9e9f8e8f169173a4702fc578138767fdb05fadf4f3782acb0364b03e2e7bc3b5bddc8447572d5f3f8096c5aec8d58d7c0c1a8172c3fc8f834bfab
- SSDEEP 384:oTNTfyHxZMTieEKXZkuERkWCa4EoMLEQglwux51/gHrAKl7CERP2tN6xOUr:oTNTfKMTPkulLlEoMLEQ8wux51/gHrAY
- TLSH T1EAA2A4803BD6C10FCB1D02B98AE3264959B07596B54F9672EFC8ACA519323831BDD3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28500
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.Linq.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dca12f64b543d2cbaf463e550d22347a08454ee6af6de98d51f32e6053b8cee1
- MD5 be4b7865bf7bd37cdf73d1fbec64abbd
- SHA1 f508328271efeed898c241c51b40fd7c1ea1b0d5
- SHA512 b874a42ae4c30dacf1c7709fb707dfb6afd643a92a6fdbf2c31323dec711af20a8d208958e08694adf488e72ff60f1d25e2e3f5a66b404fbbd1de959349eea28
- SSDEEP 24576:HKHzs0HMPhBB0+a655NKeyR2iro29YKpRfuthjQ:qHzxHMPLZa65mnhR9YKpRfuf
- TLSH T19FB5C6E553D6AD4FC12DE03DC1EA6952F4B4E0A2BACEEA32919419F17426FC30F27185
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2359430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.TextMeshPro.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 bbf21280b7498dc3e8955a3f7800132b505958841318f94d6eb77dec39e059e6
- MD5 c1b38dbaf8eede5e2d845b2baadbef56
- SHA1 a58e6ce7e2cd758882cf01125ecb6aa8cdd138ae
- SHA512 85735af49bb64e7e2a5d40c529021b33e5af34be107fcbd2313a42477a3d35d6d0710e3c9ba29126f47e2a402d457e876a5f71b077295d785d462181a6b97b27
- SSDEEP 768:qdbpJhxof6M47TF631NEmx/Sf/nS0G9tMGW2bjAW206tlEaaBJtmEOQT7uQckpt9:qdbpJhWb41M1NEmx/Sf/nS0G9tMGW2bn
- TLSH T1F2F263913BE5550BC70EA57885E2698506B0F4D7AD4F4372AFCC6CE189323431BAABD3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UniTask.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b348c357b3e2d404a293334d343ddf90e00590d2d79a1f18d0951da8249df244
- MD5 c6746141ac3ecb085717cec793e4c4d4
- SHA1 b17da16a5260c6cf84d77d05ee55b2014f83bd44
- SHA512 56e729794adb1be80f02f067ab629c5e3b7432ee2fd67ced2a0b4aa325a3b2149145a0d2aca4e2293ffdba96aadd95238c6bea53399af64b78cad1600ceec76b
- SSDEEP 12288:Qo54uPQB42Ul24wd38IzLj8DRoAr3hpw/5VNnxnc:VX52U/s38IHADRnr3hZ
- TLSH T18185858037E1DE8FD76DA47C52E2192B54B0689FB9CF42725BCCDCA125233422B997C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1763758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.2D.Animation.Runtime.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 32046bf65799d2ae07ee3721b4894d17fd6f616e844612d37f7d316c53be43ce
- MD5 cac2a39860c09a801cb3f5a68048b340
- SHA1 debf42e6cc529b94a51e6034fb730b6d460e713f
- SHA512 e4e52a3960f8ee90e79cef4d91572515fb795ad5d4c8bdd01bdb69634312a36dca3880f557b698770e4600f19a4af5790515a912f60bfbae014c27120bc438c0
- SSDEEP 3072:6c7nGNQRDFO/WlT7pHJ585sf6FPxqcplK1tMq4:VDFOulT7dJ585sf6FPxq1L4
- TLSH T146C384403BC5C64FDB5D2978D0E6194545F160C6BC8F9AB2CFCCACA5AA123512BAC7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
129602
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.2D.Tilemap.Extras.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e32e3d5daf70c0558c27d42aed782521af1697ee4fb92a4d6696d2cacfc85971
- MD5 2df3d45dbae8389aec068219ce33389b
- SHA1 4b8e8f4535005bb4c4365c11eaa539c5ec41de83
- SHA512 07ceb376f1d954a687d0f9428aa806772bd364c1bc55b4916e70ee2709df22befdbfc5486568b8eba7fa32dea741c24ce9aad5b89b7e3dcc243f1ecd2ef874e9
- SSDEEP 1536:3A+qapxFXFAfaR6zkqLpOPKTgkHZR1DfIC7NrucO4uLBR0Nnq2cpmTDSkZTyWw0F:hXSfM
- TLSH T14063A6013BC6854FD34EA6BCA2E2460148B0A5C7BC4FAAF4CFDCA8A955163122F577D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
79010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Addressables.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c1f6a7a7bd492fa1ce1a648a9bbfaff2997e193d6905414b1aef14eb67b9f5e2
- MD5 66fddfa3a710e07826c5d8ac5b5f6d2d
- SHA1 326a57b2465eaad6dec7c9339fdbbbc789c6d2d8
- SHA512 6c49bc758107d1dc640e8bdb73a94307683dd7b328713fb4a817609574df57677898e51a0fd27968f3babba5b1dd1f53c35c14a3a6ce9fc6ce3c416d96dc4f50
- SSDEEP 6144:jlQLFCrwBEpCCZxrAiGXRl+BzZWuKoZV:jlQLFihFtg
- TLSH T1476493413BC0CA8FD27EA57882E1364909F494C7F99FD7A28FDC6C9928237421B46797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
342374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
326KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Burst.Unsafe.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c042afff24eaf95eef9fcdb98018c49eaaa7083cb844fee809f8c0f9d4a41714
- MD5 3d83f915154afea1e24a9e41a4809335
- SHA1 6b95907f0ea3527bf1f913550f606326ea0ef749
- SHA512 0077b6e6d0ddb50265f587429baf8fb7f39757cf71da55eb3df6f4a1ba8d5ccfe379fff620e35820c4eeb4715be113ba99eb90aa1bfcab94d21b9858f20cf949
- SSDEEP 384:W7f1zR6cPxqlNY6rWah3viNwWqnU3Y5ce:WjRRnpGY6zviNwWqnU38c
- TLSH T1FC9266186BAA8622C81F8B7444E121C3C6B4F15FAA0B96A3BDDD18E41F717115760BFF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Burst.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 65b88ed0e543397e79900d817ff8075df992b785da8a0c4fad22079864a17b7c
- MD5 47e2058005d2891d90790aad3f18a449
- SHA1 6c8fe2619e3891ec539aa7af96f7f41096970a6a
- SHA512 b662b89551f03f7ca1ee7f7161abf480ef92973c9e1a4adec2757489971464dba8345962d0042a5134095fb5e85a01ce31f702ba77fc27164f54ca1a14a77245
- SSDEEP 12288:XSEflP11cXevnvXTztpsCWWFYHoUjzntQkP5EoeFceccjFNgeF:TVfUjzeaWvzFvF
- TLSH T16F653F1437D48E8FEA2D15BD41C61E81C5E8AC96B8EE9AA77FC85C1136303C34F96687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1433466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.InputSystem.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0b345f1952619ef3cdf18bedf24a124e2f676ab652740ad6daf6048cd3161b30
- MD5 f0f3c286d2353e12bc6ea4e120410246
- SHA1 da1cacebd09ce65ae2d51d5eb52ad925688b7306
- SHA512 9276b49483001a8d0bf1833f986d4cec3a2486020c94ff8c604adef80d87dc674129087e63adce255697f1ec82923c14ac39241e35d8c047e7cdbb4424158d95
- SSDEEP 49152:vshi1/+vdwpYt0T2RDDK9OZiQDLd/aJWoc:ViLd/aM
- TLSH T1D6C5C9443BD69A4FD51D617892E1150145A0F8E7BA8F86A16FC8BCF937133A31F4ABC2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2729408
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.InternalAPIEngineBridge.001.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5eff6f76d247fb39f6351e055e7e384acc779365c0916abc16d6a15a637e1fd7
- MD5 f8afc3218ae2952792a67839336d76f7
- SHA1 1848ab559f26ffbe0a9dc48ad1667bdd64355593
- SHA512 2ebe44d38f353703ab29a4b6b6a2b4c1a996cd46031f4c6dc9a725c55de0c88f8f785647731e00f9fdfaf2c64f2d8962ed82443c7f151c53b229a99a41103e75
- SSDEEP 192:QawR8beOaOCTxOfWXjY7zqWli1a1O1mk:QaQSePr9OeXU7OGg4MX
- TLSH T12AD1BA503BD2D95FD61E223844F229C816B0A488D40E86B39FCC6C65B8337576F693EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13516
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Mathematics.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f1b6dd0bfed1b611ed9ce3d021a7efcb8b88b3169a3e07d63363c3b4b004281c
- MD5 9ced2caa09fed2a8f6f5a3655342691a
- SHA1 d1ac6bc16ef12c1eac619e25c44dfaf7e4e35bfd
- SHA512 929aec5aa5bbb3f401b63a197f62bff75819385f3ecb10619e0249a3f0d3bcc005245f37b5386cee5d24cb570d29bc509733a6a1eb52f3251a85b2038f9beb07
- SSDEEP 12288:jvJ+cM3VM8bqBgHWdnf5m1QviG7qon6GTWlaSBcudqqZ0DPcjqJo3uiChumST+eu:j5M3lif73zJ2fy4YsF
- TLSH T13DA5F28477A5474DFA3DBB7C50AB344193A0E49E694BCE437ED8A8792660302075BFE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2191894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipeline.Universal.ShaderLibrary.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d18a989a4a3f2c7dff021ff91cfb6f0ef6a657970459dcea2c115db0b3dccac8
- MD5 b39691545a99f44ecde4a89a80078229
- SHA1 4d088b91f4d41ad4f6a8c8b12cc4372bd86225c0
- SHA512 ed0cd83f81701967f79a4c5f0d99002761742ff36607e85b37672a465f8b61c65e2246b71faef6d1aec7290e458942dc13d7fda52c4a9510b476192945a52fba
- SSDEEP 96:M39tcS49mLql6BbYSS8uBHqAMo27q6EEnl3Cx/IHSr+LohODj:g9eSvO4Bbg8uBHqAMocEEnFCxggkj
- TLSH T145C19582D7DA81A2EC8E4F358CB7544C52B2A8938516CA8E939D14BCB4377010B57BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipelines.Core.Runtime.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a43590c094411df1288576d0c34138ed19150de10bbe724d3156a7ac65854895
- MD5 5d5ba95d9a1d98182a11f3a97588a1f8
- SHA1 caa36e1b25ab5d50f9472e421a79a2488c5160aa
- SHA512 99b96e286fbf641751fafd52ca423886d3f34a6773fdba88db03b89b2fe8545ef57d7732e3d900700f0e82863efb5f023b25d29927b4e53676941772d434734b
- SSDEEP 12288:N/zCbDfOngfgZ4Di1kPuR05s5SiYd05ZCrfOyp7k0va03De/jLz/+AEGNkMrc:hf5aD7k0y0zmLzBmMrc
- TLSH T10C45C5003BD3CEABD74E11B891E1958191B0A4C7FACF85A28FCC7DB558667422B4E7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1214962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.RenderPipelines.Universal.Runtime.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fa0cb1f285001607b39abd4f278f6be02daa617e84580b1356a30407726e4ea8
- MD5 b23895fef095b2763a908d744fb04931
- SHA1 7bd64dc18b012bf981f71c0bf3b74bde1449db25
- SHA512 4b8f9ce96ee35cb5d40d8cebfd8f82b64622ac5b40aca053a09e00bf0f8f78730e413596a0f2439c912cb4bc09eab667224c9a534962b38106a5f1838b394c51
- SSDEEP 12288:rRlfZpB7URbcxVHJkuiMw+A4zbz7TmyLAhNUE6xwuMQ5tg+F4:Flx7UhcxVKuiMXzbz7TmcLwuJO7
- TLSH T17685D6813BE18A4FD61D753491F1070446B1B68F7A8FCA468FC8ACB964A73419F0B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1711942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.ResourceManager.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ec59e888c58be859b294ff4ddf561d9ccd3bbed98b7add686ccd4a12a83f7108
- MD5 250d46a4d95e1fdcd2ca3d410d0d71bc
- SHA1 5e961514130d6f18a0f50ca4b17e8d1dcea6c2b9
- SHA512 6539f63086979d9c7a28ca5044d3ad8979f60ac38e34d5c2d42e0e8112d5aa351642ab6b5f0fdbe88b54d1b82da05e18d97d111a70ec6e9343161c3ca74540f5
- SSDEEP 6144:Ity7Bs4pe+LJtUsGPNjANx281my9V/vlvs:HBscx0
- TLSH T1737484513BC44A5BC6AD2B7C96E116C447B4A48BFC8ECE6A8FCEBCF025163416B052D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
372476
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
356KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.TextMeshPro.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ea7c9572195d4a25ce926b34a0011dae53f94f179bfa6c2f6e101782772d46c1
- MD5 c4dc6f97a6969f84f304031b6d66508e
- SHA1 12faf73d2f027ac5662d444eb634f8ba08313cc4
- SHA512 93642285b694a6cd4b68f8efd8814b70744d2ff972bcd45794dfb6b4de9a94b2e36d3caf0e8e94708753de98ad23807f817fe9d970b8f2956e84ad2ffedaaee6
- SSDEEP 6144:elmKdW5bJI8ZKqZRU8JFTN2yfqyYVIRgClNqFi35x/UdCLI3clw8wSbyrntbnH5y:els5NI+jv1Rs1g+Vl4O
- TLSH T15F15D5013FE18F2FD35E62B8B1D1415095A2F5C7BA8ECAA14FC86CB939167421B1A3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
893976
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
865KB
Virtual Size
865KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/Unity.Timeline.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b789da0d3559a91d66feaa71d6fcdf7edfc5e909108282144f0b66ac5cb0e797
- MD5 ee91315ef05fa4fdf5d3f44970306a1c
- SHA1 ea38fb9ac4c05e5eb0525b0cacaddf1fd97b317c
- SHA512 fa7055413f4c4decb77967d82ea6e160d5fd09ec013bc4f2f1df7e29dc4eb66e9c0e566c32fb178ca583c24e1ccc68fdc280563f37fe5115ee10af4b3ba142d2
- SSDEEP 6144:RKSHWtiUFz/AMiCxpsJ4Rd78H0Jde0Deyi:kSHoFzL1Rd7LD/i
- TLSH T13F84834237C0898FC70E59F8B1ED164056A1F8CBBD8E97A25FCCACA53C117417B5A2E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
392942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
376KB
Virtual Size
375KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AIModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9eea94a4f06ddfd9360760723c63857dcd9426ebc9d61277eb7f546afb8eef9c
- MD5 43fe25d979f3c9af5cfc1849d688a356
- SHA1 4a6dba743bc9ead23f31b53b1ca2482f3d9dc72a
- SHA512 9b95c1d009f91e8b2e4f00e10dc6bf0fd3109a2a3c6ec7daca36973a0e35d10ff7b5a7cfd7c0fc49981e3ddfc4f110c33dac6c811e7160d82552052d16b22de6
- SSDEEP 1536:y9UPkkEVjI+PqbAMQ+1L1+dYOD49Jtn6cIo0c4FDvDt+kx:Gsm5G1L1+dIV
- TLSH T16C439602BED0864DFCFE1BB650BB96068771F9C69606F3EE8585700E2992700CDF96B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63274
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AccessibilityModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1671d3027d15ce0d334bf79d1d2ea3524bc1bdbc8c17d35c6b912c00aeef23c7
- MD5 17a5a568b36147060589e2fd2d4f1d7f
- SHA1 6e02256f545e2db984d4c2a8e86e02d9b36b0c52
- SHA512 dd1c39c087dd406f1a0fc9846fd71a1cd26554fe3a3e5767d4fcdf4c8da3eef19d7ee4073a566cf280e6fd8964f76ae25ff7d1c40e563803fe5bdbe53145ed10
- TLSH T1BB71A42707D08433D5B92B3699B603482BB2E05467F3CB0E5680E03E7C773D468113AA
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AndroidJNIModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cd397d621a8f0606dbb09ef979564a47bc8be403d2570055163ab849c8f7771c
- MD5 632e512a9c4ca5e6a1e490cfc1032a24
- SHA1 afc8a5a1bf36a342b9c7150258271d6d351feeff
- SHA512 3dedd19d694f649e6ceb3140aa7d7f32a757806158d03fb0c9f261a18adeb5bd9fe44da8c126c84abd0732af8f0710e9cb04b8320a2254c0672f9597f2e56db1
- SSDEEP 3072:GEPkMQQQQQQQQQDvvvvvvvvvvqQshPvvvvvvvvvv8QQQQQQQQQ0Sa1GQVisWy50h:gGQV350Wh3dr66OZAT5X1g
- TLSH T1D1D3764037D44A4FE65D35BC46E31A8182B0A8DA680EC7B3AFCC6C9569327825F677D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
142998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
132KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AnimationModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 429f1255a19a7a48d0dabec7a5082acaa6fa784f764045fd655cd1cb06aae3a7
- MD5 7a3d823aac01e9c908acff1b82798a5a
- SHA1 b1b305b33ce7abc19bcf3b27d686908eb55e1891
- SHA512 0c389692b4efe3eefbc85f3786e5486fe331e18aa42736b9fbdcd5e618c55152d74e9f3146df5a0bbb5d2b0058b702be771a3296451bd0fc7d96be60f1179dd3
- SSDEEP 3072:xtT9ILTIkvthezQda/Qz8sZWA1RddFZBa+256EE069/fk56YUDjbLbTBp6FY1bL2:mgFTdjO0uxhGZuFaJsj/R7Od/cGMs/
- TLSH T10684B3807BD4464FD5EE0678D1EA16414AB0BC8AB88FCBAA6FC8784C1C653019F957F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
409684
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
392KB
Virtual Size
392KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AssetBundleModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 81bfd3fbb21e1e71e3192875f1cfc717ca48650ba8c71b576185f9da30925e58
- MD5 ec62dccf08d5b01316338a664dd46cce
- SHA1 3951e3d7cdf0cf496da09bcb9852bba85ef36a09
- SHA512 70dd675bd85a70cf4fa5f825c27aae6a5d305e9553254a18fdd560b6aadd9869750aef5862d4c54d5bcd48335be6876c8953feac042e7929b8df23502ad62dbc
- SSDEEP 768:mBeeI3yajl5suFOvf1CmNj6+Dyq6Hx6ghj7c:mw3yajsuAvf1lNj6+Dyq6Hx6ghj7c
- TLSH T15BC2D64137D6850AD5BD2FB9A8F641818631FA479D0BF26ECAC844CC7A67350CBA93F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35060
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.AudioModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 27bda1be7b41d664a515d2432ec9d5f9fd4c4c2944bbe0884b21e9829536140b
- MD5 b5878e2645bb671b4ffeccefd36b55cb
- SHA1 127ad78c118d041e1445b54ab26af7fd852107ae
- SHA512 049d3f456c8998e8325cd01e94c735b8b72cde59e9c01590a9682b226739d8992ede2ed9b4f525040479c20dcc3e1b3cdda71f7f3840091ed42b2f2d51a4c8f1
- SSDEEP 1536:450mZrRKPdxty4ZVL02D8hEgIDWBbFyxVKWch12q0GQqKHmt+anXHnH2H3ikw4sg:aJadxty4bL02YhTIDWBMrKWI4e
- TLSH T13EE3C9003BE5C98FE99F07F8A5F11A454670B883698ED67A5FC82CDE5922300AB557F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
158852
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
147KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClothModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f4780314ab24a8aab0918d8a17258cbada9550bc79bc9d6847dde8c2de71467c
- MD5 b65843094c2f20fb756bf5be94f38560
- SHA1 f5355b85344ba94e697e82c230451f0c7064b893
- SHA512 3434df3ed83414282aa94c81be071b1f53cd01754747612e5d50c36b5978ef5922421e08c9c447479e90f4144843dc3f000ee07125fdea55119d1c816a14906f
- SSDEEP 384:IyCR4z0lVQiY2FbMoX91S3ssQAnPLpj7hpKkC4iajrvp9P9VNSmedJFSYxVuThTi:IyCR4z0cwFb5jOh269vAuTlAQ
- TLSH T1EC921C413BD8CF4DE9FE2FB7787B25138571FB032602E7A99AA2108D2454744D8E97B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClusterInputModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4969d336c360269e0f406649211801b0e8799e36f1f234bdcee915a73696ffc9
- MD5 50591173ccc4eba27046e5c79c7b8dff
- SHA1 39db3f74212cf5a7560db4779cc737dc50acf24f
- SHA512 f11ba42e766ad14194b01e9060785a8da40872dae5695096002bef6b22c5edd17431cd5c4156c2d8ad15f896c0c4144dca44a07be55fb2c27a45f87e5bbe462c
- SSDEEP 96:oFjlMw62T1l/Ww32EF2rBSqEIdidbd+dRd0dtdH6Gd5/VyKd5zKd1/VyKd1zqQLK:M82plZ184qEqABMbmnH6EhVy4t4VVy4U
- TLSH T18BC10052BFC10911FAA96FBB647B0002C639FD375A42E7CE5146107E39627888B7A6B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13172
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ClusterRendererModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 38779fd0c9f4fc2a2fe5ff886a249c33fb6d8705113dd01983a04ce5fa34fce9
- MD5 7c628761c40d7f043a8a06fab5757e39
- SHA1 b8660bacc835a849af4508836867a5318bf3467a
- SHA512 a188857c28c9edaeeeb7882a1e94934e3ac4be75365bf3cde48929824bdd24e1c9c51fc5573b4099a711b7843471d3768a5698cdb5e96b87d795da09d934dc8d
- SSDEEP 192:wQxYNOZmOTyACdpyPmG8mkmL+mzmle+mkx1VXSJD:wKm1mkmSmzmlrmkx1VXSN
- TLSH T1DFD1132797FCC60EECFE07736DB640425D30FE576A02D38A665D109C24A768056EA3B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.CoreModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 36069f9b9695399e4caa0a8e838be14de9066ba9e2fa1a7ffc9f95932ebf1a14
- MD5 700b909525fadb6c111a6104331fcd8c
- SHA1 4c1d2c937c8d1b061bda8c131c049edee9682e90
- SHA512 6a030c9633b535af08e88b02310630ce50a16efe4e576cfa852955d70be2bdeedcb1a9cc94fdaa5552b15beaaba0b49b25ca79690bed149c101d62629157a7f9
- SSDEEP 24576:NOcdm+eC8WMq82MicGM6jdqfl3m+p6fbM7BpoFPt08pms+CrgSg24dVJaGfRFd:0+9foEuV
- TLSH T1A8E5DA403FE08E7FD65E11B851F2195386A1B5CAA94FC2A71FCC7CA818263416B9B7D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3191654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.CrashReportingModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c6e6228597770b9eed272727781ce0dce7e4d67d975a721d0df5fe5807019037
- MD5 a7a672a2ac4942e67f11a0df0e3d65a6
- SHA1 af2543db1f80427c56faca933997e209e5b7a6fe
- SHA512 da0ec492b4f367e74f6fa5adc128b3c153991fc68f93c89975e9af20277297a2000e2d521ae26fa7dda4b0edf6cddc4d6c7df24c531d97ff848aab17e9aca528
- SSDEEP 96:Eiw6O8ZAp7oNkwTuCmlmZ69Liweq2cDBKhh9FbNJ:o77p7oNkwTuCmlmZ69cJ
- TLSH T1B8913E42BBE41A35FCFF0BB668FB84454A72FD55A601DBEF0502202DA8317C0DA11BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11448
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.DSPGraphModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e39ac03a3efdf56d307d4db52f41065f285b3e132134e44f882f14c2361cdb5e
- MD5 ae150dd4a04616008c62d3c8a1d72679
- SHA1 7d37078e5d2ef9cd8c7a750da94cf94f41421032
- SHA512 6c8632d285a16d077bb409575283fdd2adbb5c6d32a206c1365e46518d93d868be28b64429d568d1077e5bd3cd25cf5014f4397efd30d1bff25a6fb356dfceb8
- SSDEEP 192:ES70v/2Vu2Vj/XUeqVbmhP9Z32tj/odjdQaMwiJX632whg5ilcvnrDhNH9vZIZ:j70v/2Vu2Vj/IZy
- TLSH T17F22102373DE2A54F5FE0AF2643308136E7DB9265242D38F1159024C5AEBB8864AD7B9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.DirectorModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 900defa970757e4b9dd6051a50590350ff8fc18d77d2d258625373c0b0aef15a
- MD5 c0f3564a82a2bca9cabefc779ee9a95b
- SHA1 47f83698112e5275a26845009c94b2358026a290
- SHA512 f78e86826c02fca5710e2143aa75fabaeb16914a9c1abe12ffe894fdb4fc44c2950f4ea717dfc0fdd0e3da301f83395b7e22778e50629164e2061c9eb43c184f
- SSDEEP 768:eLMNgksEBTNXo32c3Rtd1Z4mtF0zyn7QIcnWMKlhIJMjTDjhRNSjscgw8cVnTzjz:eBks4RXo32c3Rtd1Z4mtF0zyn7QIcnWS
- TLSH T112B251403FC6854FD74D44B896D25B90C4E064CAFA8F56B1EFCCED9468267212B663CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31924
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GIModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4de481e3a1293250cddbae430045e58cc3df140a9d5de2cdb09e0ebb20099f6f
- MD5 b718c43d3004032ebc6cae7f7ef35f21
- SHA1 459a6dea9d1a62d9a95ffa840e9868e71f7e5844
- SHA512 9a27a69ed25c90891a2f30ce928745dddefc88962a15f7d05889b5ff7776c444513c0c1afbd2851f0a22600d1e46c32adb23e0786309172e4191bf834c6e581e
- TLSH T14F41DC3717D604B3C11443798943838137F0D5607B228B6A2E966029FC51AA51E26B65
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1024B
Virtual Size
676B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GameCenterModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 de1dbeeef07ff43e98ed3003999f46e018b507a46163c060e4f1ed1387ade698
- MD5 1f2ad81519ad831acb73a08728770eff
- SHA1 cff44a5a92f6d7d0404c6af0562af26c8b45ccd8
- SHA512 5c8d278859eefc3a7e6bde46f641aeee558535e94c1321658fc7c61daf056c355c70e37aaa059b6f8ab4e48bb221b4d6a72c10a47f046de39e62f3add9a33f7a
- SSDEEP 192:U3Akv93HKz8fvjccb379Gva2N7pcKKFgwftNe3D57L7r8vg3D57LqtD:URdY8jci7vGmKKFgwfiDhr8vYDu
- TLSH T10E321117A3E28429DCED1772587303041B32B6D65923DA8A672C90C87F3DFA7512BB63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.GridModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c7c69366fc5250495fef027f532de4ad670a11f2af4d1961624d007fca33aae1
- MD5 6f5f9d7b492086005b393326eebc56f1
- SHA1 902be1c17622f04f2c1df2e84277286409e18914
- SHA512 ab17bab687e29d02fc9cb173d1b04196065dca2996b5e086f6b427e7eb2162d1b4b39c607c6ff0b83de2f6e970dcc105f013c1ec5d854831aaf04978773578f0
- SSDEEP 384:CltMpH7cyyrk3J/lQihB6EunMDwgjPJ3XtmpF8lYlxFznlhFJFZw0IwXrfjf:OtIyrk3duiVXtmpF8lYlxFznlhFJFi5W
- TLSH T118829340BFD2874FC7CD19B4D5E709C48670A4A96A8F9A618FCCCC593C223479BA9397
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24944
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.HotReloadModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2e4bd6897efa61291470e2895fce535640367d4c9b01696ed393c351e64fb482
- MD5 cdfb4139a3b8acbf4263595b9add162f
- SHA1 35ef45e9e5a79afe614cd6b94ee5f2c49fdba929
- SHA512 3ae109e68bef7fc875df1929b86cbd500ebbde75992d9ae9d4e1131a342629470b148003bbfb9a1f1763e7f5bcf105aa89dfced64767af25de3de0881ac4de76
- TLSH T18241103713E520B3C1980339CA5793D03BF0D1605B728B2D2F8A6029FC506A61E26756
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1024B
Virtual Size
692B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.IMGUIModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 040ba245d985b16610ef2db34662f3008a6606085bf26a261dbf5962aed5aefc
- MD5 fc58b8cc9b8a6ff87141c2a36d5429bb
- SHA1 9a4978ed0babb778992af7a88071ebccfd015769
- SHA512 3ae81e2b2536c3068ef42b198675afe0357912dbecaadbb107d0077a2c90b327aa659cf67c6f1427f8a8cf40841fca606593d95ca07e38dccf512a55e5a82016
- SSDEEP 3072:nD0PrvTKpmv82LoZqLoVphTjqOOytem7ibQFHLo+LXK5J7H:yDv0ZqLgphT9Omem7ib6RK5J7H
- TLSH T1F064D8103BD0C88FE66E157490E21A5046A0B8D6FCCFEBA2DFC8EC693522742A7557D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
322108
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
307KB
Virtual Size
306KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ImageConversionModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 20047b7a082a9bb854453b2f8850f8fcdfa2f0fb3e8a1fad714ea41c4bb4d84e
- MD5 89bfe3fdea8ec613c0580987dc8e2c5e
- SHA1 c2aeb3e8fb9dd6157dda1356518f33cea747b52e
- SHA512 a06df50590c40ec9fc75dcaf39d3f3d314374e39e02ff6dcceaacf3d59a5405f8b3ebef327db75ecda6231ded0519f0e34d07bb373dc5b23fc76fbc1a9724074
- SSDEEP 192:SiwnVfAckiMEG/omQpuLohdxTDeUUUN8Ti:UnVYctMVonpuLohdxT6UF
- TLSH T1811254162FEC545EFCBB1B7B1437C0409A30F8260A63F38E3948659832293D549B5BBE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16684
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.InputLegacyModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 908a4d1ecdccede219bd1f764a6aa50c80bb39473385365000ac71c4dba5ba12
- MD5 d2c38b2ac23346b8f8a8ff00f0ef5c22
- SHA1 41cbf274e043401d334cbf60e48fad35e72ae502
- SHA512 45270b8779ed9596b6f6bf899ddacafa6446ce4c57f0febd3440026461b31824af601d79d71837b02094f49c00a42dd919bc5963c52c28134a481fc1e00b752f
- SSDEEP 768:rl1JbDK/IkmKRRRRFDtDtDtXOJTllMYsK2sxiqzHb18YdslZJEY5M4D1h0/ivheT:rl1hDEuxiQHbaYds+YSG1h0/ivhetiSp
- TLSH T19523B5403BD0855FD6DE56B451F305028EB1F987990ED7B6AFC82C9821A23425FBA3E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.InputModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 77dbbaa3efccebae5f4248fdfa3d441a5fd5de28202b11b1e3aa731a9ab910b8
- MD5 4b7f401ac7906ed08093cc739b7a388d
- SHA1 e1eee50d922034944068d5c450e796b982addca3
- SHA512 d1342062882de9e85aa511947af946381d3e42201e05207298287a817beb0aa2066e85291727d068e1ba8209429b3d5141d5ddb826dcb7b182131e31ed536b9b
- SSDEEP 384:e0+4mVdNC6d7xRzKF+GF/EvnvTmIJUQl:e0Nmjc6d7TGF+GF/EvnvTmIJUQ
- TLSH T18B42A5503BD1CB4FD92D233846F71A8587B461C6A90E9666EFCC2CA878233531B1A7D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.JSONSerializeModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1c83a4b49a74ee8029bb1723ce8c6635aa6d012353ac07f9a302c3c1f2529b8e
- MD5 315539bda3f1bceccc654ff90c5632b4
- SHA1 30c0cfc0190363d268af327b8edc746bfc105dcf
- SHA512 d6ed4092532799cf964e38025eaf42c7dbd8393e319627416643cf9a1d7ef90af572fd0e80992a8cffcb526462bf955429d98aafa0f5d942e8460ed0f0be373c
- SSDEEP 192:Hpaei/jbQVLHh+WIxue58WaUmyzg/EdHKBa3GR:HUJr0btI0eCWaU1sMFo9
- TLSH T13AD1A4103FC6CE57CA5D117898F2258A85B0849AC60BD6739FCC9C78AA723435FA179B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.LocalizationModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 03fa89f9ba4d85ab40d6be86b81884ce2b173a7f1fa8c8cf57daeba30ef85a90
- MD5 e5e29f25fb20ac6b4ef26768873fbb06
- SHA1 ea5e75419871f9c359108e87b072a7459c567341
- SHA512 adb850458b7e0aac6ca1d027682a94321bf28438d7f720a782983ff9ad1e73f9649edaaf4a016d7106ec44eb76a86320ee1fe43ac55101a4b6ec594eb1bc71dc
- SSDEEP 96:oeSDY3l+S/AOcMI73UWrnQKE3bSUky126MrrVJI+MA4A4QxC:hAYVb/AOtIDUWrQKE3bAVJI+514QxC
- TLSH T147914443B7E9E415FCFE0FB25C7F54410AB3E9159B02E39B6544506C18227C46EAA3F5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11764
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ParticleSystemModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d966f05c59ed060a4e4c88cc528c4269c15e70f9a8ced9963e5666e32cdf4c9d
- MD5 865f591cfa8845050dfb65da718a324f
- SHA1 263030c800bd60ddad77e6df9dfc8d8c7764d448
- SHA512 36db085cdd52b8089abdbd1dd6dc431397db1bb8844d80c088d6f4e456c765edc39ab34c3bd6d6ceda12f965c36e23baabd5b647241df75b04f50a2825dab0b9
- SSDEEP 3072:+3ddXBSaNtnWHWsVnC0BWky448xcSeG/:+3zHGWsDBWky448xV
- TLSH T1AB04A6413BD4C94FCA9E21B8A8F62A5089B4F4C7FACE95B19FCC7CA85418701576A3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
180KB
Virtual Size
179KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.PerformanceReportingModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f008a6738d87c58f59607cf7ad5acd9da1e159af4d485d3b9a00395b69a54e86
- MD5 c840091050785ff0214907bb58b5ee0b
- SHA1 8c00bd26ad34aa7f77afe8af65a7db91a47847af
- SHA512 d5d9429455b9873180f8c96d5e44de54022e04fbdb4a2951f4d1e9ef0ee45788c11a5bd4b9459d99f20c6aea9ea92ca4ec369498d62871a1e3402bea2c812856
- TLSH T1C5513F0767CD5EAFE8EB073359B341026A30FE881B13DF9F1541502DB4266D05EA637A
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.Physics2DModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 35f1f3cb4963a8b2317456454ea6623a5b0907c434f66ce227d63591a3f131ce
- MD5 d1918e57bfaa67742631c8e913a515f9
- SHA1 22f4de0fea7f802ea8669f5b7435f99e45655de6
- SHA512 1569333919887c8d5a64b30585065153d7fba697b650d6cbc7be12c7e606df8def498e25bcfaba705ba76ae8d76597a572736c657d199ed7e787e9c277a8597c
- SSDEEP 6144:9v5y1vPT/+CfIRGcmCMMs3q6IeGoKOfrr2ws231ieSkgt2r8K7yPvCfCt6Xl4LWU:yPT/+CfIRGcmCMMs3q6IeGoKOfrr2wsU
- TLSH T1B154D64137D4894EE6FE16B490F199118970F8C6994EC7A46EC86C5C2A71340EBBEBF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
306646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
291KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.PhysicsModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 263c718843c2e94745714d8a29378e82073c1c1cd3d2c2b49fbb4212499a3a43
- MD5 e3890ffa6efc51fd2d101b3cdcc5241d
- SHA1 e313541d8f966870a36170dfcbd8a163ed6674c8
- SHA512 71198f4a3f71192d40688cd960e0d30d7fbf0d6de2be96b2704b74fd8bf9ba83850ff543858d13128a0d555080f8b5f0428fc47911c408fbff5e7bf8c38a627f
- SSDEEP 3072:CgnkJcSj2Tl3z1AYoQrX4c8XowgOTTzoVrPJF:tkJ/jKl3z1AYoe
- TLSH T18F24A6413FE0C65EE6ED5FB5E0F6050285B1F8879A4AD3A81BC9685D2530340EFA97E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
233348
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
220KB
Virtual Size
219KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ProfilerModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7ddb15860dd092dfd31d1cd9a4df95829b011a219f0bd1fdeee46e249b575785
- MD5 0f66f88f15588705130ceb3f3e34ded8
- SHA1 235228d73ff02ea1e7da075d31f01607c1c00a11
- SHA512 d85f6e7e18912669fc6c21190b64d528038c30382fd6bd79387ee9f4ad5eb0ce3987c7e3cfe825913e7b839d5c4388e384c26d8b5d887cf291caf406c2ce8854
- TLSH T1EB41D03703A810F3C5340335D447539037B0C15057735B492E89602DFC416A52E25B65
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9e02d71e1dac3f0df096ea1e31f4978acbca40d3b3ef451594f2a44af8fb4f14
- MD5 2c778bac776a73a1818a26b4a6a0a328
- SHA1 9fe2e02e8a5b3dc771ce9d8cf80f1bd168f1fc7e
- SHA512 93da0b53c686a7708a6a72008d9c8e04d2f5ec51b5f133e757bd23af1c6170479d3c7aafa0a792d5b450587e121f55c29c74da0c1e0b60dbecc007e296b7c59a
- TLSH T1FA41CE3B0BD504B3C018437A89A753D233F1D5515B728B292F86502EBC516A52F21F65
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1024B
Virtual Size
756B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.ScreenCaptureModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9535be85e666e80ac761895ef6ee415d9bf56ffe69f02765b096ce01429ac501
- MD5 894844e61ce9ff9954db797a90ac6cbd
- SHA1 1b07f58c60166901c07722a5c2cc928e9291fb12
- SHA512 5210813c1e9ccd73e9645257596c09e9083c265fcda8f6bfb47b7b5b4a45d5f1a4fa97a4d466546a99757b9f5b40b1f7aad6e3b08a38d7db6f71bd740245dfdb
- SSDEEP 96:pxA5gMjSkinLXQ32+riCUlSVe1Cg+hWR:XA59kXQdGCUX1Cg+hk
- TLSH T121B18534BBD59ABBED991773CCF3628C8530E448862AD7AB5688006CA4B77494F14396
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12072
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SharedInternalsModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 57fc3aa7386a420857fe18f12d569b70e64809c3e92b7f12a4fafb26ea393544
- MD5 b963b60b7d204008c275e38c2e1d18b2
- SHA1 8357ed2bf38fdd4bda645a52c64df6ecdafecc58
- SHA512 7dc606513ac0f6ce6a1d11f58d278ebf41d81a51aec17c1a9d79a57f3de99b2d3bdf9180725166724b9300ada72f67b1c9fb15171a8a987d36c3088cc3031666
- SSDEEP 768:0k2X6Lo0n9xCbzxePz6rU0tE791+x3I3BdRW9kVM0Uiv5uZq0UYRuxPF9y+vfEWq:sIPCCW4ZYu3BdRW9YHfaq0UYRuxPF9y7
- TLSH T1A0F296221BDA836BD6AE1270D0F257850771A4CB783BC26ADFCCA8A7591734237587D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44044
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SpriteMaskModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c45cf836cd965b133e7a88e3500beff5e4a579ffb85a0b756401b325e2bf4731
- MD5 57710d4099c163128d6c515b0c63ce36
- SHA1 8db01f7102e76b5e6fad8d055472295e04c70235
- SHA512 fa43fb94c8566295a11853df8c0daa4e729ab2e8667b9f47781c8a715d7792aef2dc6b3310aa121db5634ef62d77f6c1d65102ffd49120dc7fd6a231075ccd8b
- SSDEEP 192:AXoxlMZvC/gV1jgH0kEpARQql1qKV2x1V1J1V1B1V1pe11xlk1pmY31PBf1n9X/U:fv86sxgUkEpA2qHNoH7f7378b7k75lZE
- TLSH T16A223240BBD5879FDB5D10788AE22A4055E054C9F98EDD72AFCCFC9868123432F6539B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SpriteShapeModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 040912f2a753dd2c12707cc49f2b5073de64dfd922e0cbca97da440b9d744bd1
- MD5 b8c1eef0e655b9f668e9b6a7871f64b9
- SHA1 d78117fc3e2f17dda31fab873eb45f5fb3d1cd28
- SHA512 dee05e5c64af3c7f179b463c1ecc44729d0f62609cc16afd400bac148144d0a5b8804943c4561184dd880358cbde668d8c267145f0ea8641963040a5d614c2d2
- SSDEEP 192:v6dmFluL3iCnceKUpvbmItIIuRMwv3A7:ydmw35KU5mItIIp
- TLSH T1EA028641BBC88E15FDDF077AE4F385558670F6218308E38F2558D0DE68BB389986A7B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15404
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.StreamingModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9c3f28db0729d5b8f36d8a16749263c495c8392edd899f572cfc27bda09d6d86
- MD5 baa09749a37e5a36b2d4ec4dc5ca1b79
- SHA1 7cc208469eed65edc005774c5a58f68af6462906
- SHA512 d177d4d801ef854cce88cb8e0b08aca110609d2f657455c3e0b7de90ee28b42b00147a8e6d56e3d0dedaa5ca4f110e16348b60f03edd0cc39293b220e9814d82
- TLSH T12F810F0237E48A8EF8FD0B7E68B6466602B0EF560715F3AF1518604CE9323D45D69B71
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11032
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SubstanceModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f7306a3785dae07ce7d367046d687a87a88b8a2eacec5ac33074dd092a5dc7ba
- MD5 5e6ba061b90a0a9f33f14ec239e4c88a
- SHA1 1cb2323221508064b6edadcba3c8f0c40b92ebde
- SHA512 e67d9279746375c7e627e9fffd6b1f1e09a0d47d822747c0ad9a175923ec140671ba731571ffcef0db50d9010739137c4e9624384d60634ba262dfb926fdaad2
- SSDEEP 96:9i06f5U8hwTLrdrUcqUmwoqsSLad3LYiuD4lhofD625gka5bQb5ulvrGP1U:9uAd6UZoqdo3kFDTfDekaKbkk2
- TLSH T113D11F93A399D13DFD9F4A35B471032416A6E7E50573C20F538890BC1972BD60B96B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13692
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.SubsystemsModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 858da5f61542f0e8670fe9d5aa0a707b890585d5e0cb752fdcda6a7ff3064852
- MD5 7ff7e27813811e55d774056df2e25faa
- SHA1 61e18771d516ca7d1c384881176ace9681ffdee6
- SHA512 7d699a755baec9cf65481ca446b3162d2996c92e17d64bb606090aa00607505bb331673ea1726f537ddf189c9b1520608ad5f9ca24acee29b70ef475b19a9471
- SSDEEP 768:+pnaPRJUVS0cAs4T2iGmQnnBBvIABauafYWV92yFaCipRsFyOYQ:+taLf0bP2aQnBBQABauafYWV92yFaCif
- TLSH T103D2FA113FC2C14FD7AE4A7519B241404D70B283B90BEB5B8BE8589D58763D2AB786F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TLSModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4faa5c21d83fc0e1aaf1e44f637315477745a16008a5fbf5990450500c527e76
- MD5 d560eca6b6b305abce3931ad555bb1c2
- SHA1 622d7ff30c36df8d39e999ed9479f118ed100254
- SHA512 79c77f57a0dc06ebcb5dc66c77963ccb89c482ac90f7de1c37150a2be0a4d1b45d332cdbb50c15a5f1e9764d58246d0d653dfe04ee08a37aede5fcf415f7d3c6
- SSDEEP 96:plEDUoU81hivz0fnlXiyR2E4pASGb3XI/9ATPH1xcSER/YccFBVjd/T/hHLLu7No:ohLbWYIY88
- TLSH T122B1CF3387C370B6C95022F16DB24AF17A7C1A5B6523C13772FA85FC62D41396B2A1E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12104
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TerrainModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 041d63c791412cfa8be876cb8d674a726c406b5e4b6fac5d6f11c91f772532c0
- MD5 497aa872202d35894b0ebe50b73ece31
- SHA1 ee451ca12ec0e7aef72bc0d26007d0703c5c36cf
- SHA512 0dac300ac62c6a1658ed6e842903168608cd14f2f7f1695836ba7388897e7c27ec774181fee2d1448a4d0871ae4c0311db132bedf7a37b3ad33d74bcb44d9b0b
- SSDEEP 3072:z6vETN//Utin2KeOh+tRBAALlvsId+GW+86NKunhB6InbN6:zlWtin2KeOh+tR6ALI
- TLSH T16FB3D7023FE8CA4DF8FF1B7AA07145115130B9879416E3EE8E8464AC65B2710DDADBB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
120766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
110KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TerrainPhysicsModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5583b378b369df8be80ce86900c06a0f2242362b72448cca6cc4bfb709855442
- MD5 d4bb1139841eda316f3cb6bc4b7da259
- SHA1 d6561e245c16e03e5a0cfba950bae71f5e82920a
- SHA512 38d4779ed3237518c097a922dd3350ea634886d53a1d03b5a320c069ae69f4ea0f2f2bbf137684c2df971d849f5fa56cf2f333bae4fc50d14aaaa92f3a5f810e
- TLSH T12981650667C55A52ECDE2FBEA8B741D45970F92903B3E31F1258707EB8273884D713A5
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10810
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextCoreFontEngineModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e94be8da5fc66c157bc36a0c4798bb7672e06cb35a0a5f1f49273a28762b7dfe
- MD5 e629c0723951640f420eab81b0043ff5
- SHA1 4b374fdff4d9cc218ebe42f24b5e38042c897120
- SHA512 1b5cc08654a222d4abbe1a689f32d20c386a7a4550d1048012ef9f699007a34d2d93b6bfa0883694e427955afd30536e735a0d5fe344a1db02744343124bef61
- SSDEEP 1536:UuZ0jcWi0+pMNvwfLSnj9LJ88KQd8jK1yJJC10AemYA89S+PdEPHcNF71pWhy5y9:9HWi0+gvoLSn1ZxG/L2
- TLSH T111A3C5003BE3890FD29D537A99F31A0086B0F8D6A80EE79B9FC86C9825757411F59BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
105116
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextCoreTextEngineModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 148424e73af7d53ad2d3c29406bcf7faac8acaa465102c37a5dfd8e9c9253f26
- MD5 44908ee0169b9cfa4788f41db161df0d
- SHA1 c2217353c4636eafa7a33b627ab429d1db29e3f6
- SHA512 6990b48a5dea42633a1cf966228e45109a1d315ff11a6fb211de51c7ab9d2abb4b6a87e87a2c7a708d2afc8ed9c7e84439c3c447c20459cd2fbd2537b4bdd9be
- SSDEEP 6144:OPUzG4bun0Q2zmyXb1ILBrb5oRPenShvHsk5F62d4s3hNyoIZgpII7/:OPUzHbFTiyL1IsRMgpIU/
- TLSH T12A64A5012BC1E54FD71D1AB4E0F225104FB1B587FD4EDB938BC9A8A898163625BC52FE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
314214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
299KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TextRenderingModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6604b4922b35c8e5b1d81212b6059eb7287afa6e8c1752e412504279177813bf
- MD5 2c08000579666798b221ade07e9d1e1a
- SHA1 e0d0ee6c64de56a5b35fa331189ec48333657781
- SHA512 42c00bc7b74a1f80739c6f8afe31ae479ae788fbd5edd29ffb475f2ddc04b999e8826febb237cd56b16803c289692c9fdaa77d4252ee7d61f7d1a413ccb1bf9d
- SSDEEP 1536:SktsZstTZ5RrS2J+x9i1QODspGViViIrt7Ky09nfLHzHRmygFmHA4+kVNtIRPGFc:xtsZstTZ33J+j+M7f
- TLSH T1885350403FD2894FD68D167490F6964047B0B0CBB44EDBB79FCCAC5866633826B6A7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68256
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.TilemapModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ed39c2523a8cd41fcf2fbadccb1e76ca01ca211b6964bf37bd6d37e3afdee202
- MD5 c5a532ef3ade672ce1a0cc6ca466fb1f
- SHA1 26faf1e18e51ce065f901c4726a0b59919f27471
- SHA512 af4999b80aa65c6d4b646db198565d72948d2e02997b94a4294a5038d79ae8174a13be916e2db58030900cc11b004532d233c350a74961fe8209dd6eb827881e
- SSDEEP 1536:AkHnLmZEjMUBbeSMZYbEOnP2M37egx6PgL/EkMhvfYJhhSkFDYKnJ/okNOF99FFO:ZXBbeSMZYbEOnP2M37egx6Pq
- TLSH T1C493B8903BD5984FC20EB47881F32E0455F06AD6789F96B19FCCACA366217561FA63C3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
95820
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UI.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 19e6e017a8b85705efcd1c246043b10a5134dfca3305f7e0039bef79ee4d5cda
- MD5 e58550f2ef8082300e504c415710c2c7
- SHA1 3b33edac304c986988efc85b7ca67ec8e7687b21
- SHA512 21bc937a238dc4b5e7ae4f7b40b5c28a7895c1edf340c9fe17437af4acf06a46a31183d1c7552d0166adc16281d4375e880af16612f685284b187cd966cee3d9
- SSDEEP 6144:QsvNlwUX67u0ny367kBqyPQgGsIyb7fTtRTyR0pt76rGjwM0e1RUAB2yQ0nDDcvh:7p67hyOkBqydI8BgyXqY
- TLSH T12205850233E5DA4FD3EF25F8A1E116404AA4B486F9CF97615FCCADB936123415B8B2D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
810280
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
783KB
Virtual Size
783KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIElementsModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d7935e2f32b28298f6a1aeba0de32ec19563d7f5624259d9b0518c0938b719cd
- MD5 712f89c21f9848ebed03ee79ddbb58c3
- SHA1 0c596b3a134d07bbccf871826abc4bb087efea3f
- SHA512 1282a8db2ada2a22da0c2419bf233c71614b51e5de1f8b74d9797acc883117823afc7148332ffc7d3398d167bbe8fc91578b43a17d79b1c7711baa7cbde93329
- SSDEEP 24576:U9I5Bh3NRZZgiJ+aBUrN7cE/i9sIzYchjcv1Xya:4Ifh9RZZgiJqGzjjcv
- TLSH T152D5B8803BD8CA8FE65D10B8D1E65501C5F4A8CAB9CFD57A6FCCBCB4292174227897C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2770940
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIElementsNativeModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d5f7c410391ee98c39d164274bfc701fc21ff8975151b0d85485e5d5fb227b65
- MD5 7626e93a150f74583c009033efc92a05
- SHA1 ca186ae6101fb2aa5111a7c9e51470aa6b074191
- SHA512 f34bc0bb1c2616aed9c0877ca07eea0ee13935eebf0b998fbc59f07a352f067a3e9bcc0de23e9e0ac468318c410616418ff8b2e5f368c3c57847c442e01d1e60
- SSDEEP 1536:xoGQLWD7G/DpAvgU+DHb/C6piw0PmLoEIuddSTESHTyj3N5ueeaG6ABjL6zn3sFO:xuLCSESba6p8qAFf6fNaa
- TLSH T142D3D7103BD2C94FF6AE667850F20A8183B068D2B80E8BB2AFDC7C5574627415F697D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
141286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UIModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cf43a7d28298fe7a8151275e2c709a397c85eda2c26f61d5606941b262ee2acc
- MD5 756ba9895a08790085934336b21a21d9
- SHA1 af944b97f5b85adf9f53d685f00b29e4902f79be
- SHA512 78f5c4ff23b2e0c8fae77d61f92c984a1bbb43b329d9ab181b57ae5ad2c2814e4938330fce0f9ca3ec2be9150e9af675d2ab6895bc2544bf206517909b3b11f1
- SSDEEP 1536:Nr3kG7XHoGyYdlU48PnS0Tlb3v9iAXVwcoIDn5QPG3uNgM2IU17g60TpFE6shLTa:SGLoGy
- TLSH T1B15322503BD28A4FC75D517845E32E4085B068DAB4CE6AB2EFCCBC5965223433B5ABC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70228
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UNETModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4a166bd1aadf3f3ab8f31d960f95598f782ffc31dca264640038e1bf06cbd0eb
- MD5 5bb2f2da2c94abc6572f51181ae9e569
- SHA1 c8303403619238dd6300d0428a6b8ea91406e775
- SHA512 12a2411aa1ceb041db6034bb4e2e9618a5b39849b98484934bf9487f69cfd809a2024bd6a9135283635abd00186ae4cb8f43c8044085d03310c0a5f8b4327869
- SSDEEP 1536:53N2HvA6Tl00u77Oy6ESdZ2Ru6ov4spf:RN2PA6GF6ESdZ2Ru6ov5pf
- TLSH T16863930937F1099CF9FA1FBAB9BA90156330FD861306E7CE545204AD147A7908857BFB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
77372
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UmbraModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 32dc439c4c3249aa3140b138edd4c3f9d3333ff224848c123b0073dbea433e00
- MD5 971840324ed8237e2d8aaaba3c9b6be0
- SHA1 1d8dbf0369f1385df98a14ec39844ea6a339dfe4
- SHA512 0ca4bf0a54d46f343b862e604d7a9a97e00dadf39d9ae7ddb37edb057c38324f98b3be8de2cda39d0a65b5c59947b84237f6dfd649ebf2cbafc70ddbce0f7b1d
- TLSH T1554110370BD601B3C1294738C943939037F2D5A06B329B5E6FC9602EFC51BA61E2577A
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityAnalyticsCommonModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1a6245bec3930fd1ef39278dfbc45e7696ad8c3a1e5ad0c350eef892080f6c3e
- MD5 bd0e6d957d23bd734038e66afe644e95
- SHA1 a19eb5dae218cc5cb5279319e4f5fd5a7d2ecf90
- SHA512 1af404f8bd42d9fd9fbaf08d2cf3557d88d40295d2950d27983b7f469bd9e21da71d1745fabb8eb82ac3390172b05070554f5e122505cc9ff743e4db9867ca95
- TLSH T1D751312A63C87997D46B8731AAB243529FF4DE131B27D33B1200974C682AAD04D937B6
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityAnalyticsModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d8de25897d3e9da69811c2da5a7558587f5a1feb22a9ecffa3ae4dee288bff32
- MD5 3088d036b41cfd7e16003950cd75c31f
- SHA1 e7e05c96f142f0b1eb78c6382f0550f5ce273e54
- SHA512 c28513ad420a6963aa273de7803233b10155e7634237a5a68b8fe64fe13a0ea3da7668b215048b891ccc5377c7bb96a441dfd0044be69f7692690e996fb31db5
- SSDEEP 1536:gubizo47qMR1t1p8T6zQLdoPGGPUkG/VtQ5NExFq:xez7dn1p8T6ULdoPGGMkd
- TLSH T1DD43A40233E84B5CE9FE0F7A297544028770FD5B5947E3EE524968AC397B300C9A9BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityConnectModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0cc47f938516e4c0d8d9f949d1581e8750094fe359564165e70720087ee9b3ef
- MD5 e8c59d401ae56287bd05ae9b6e68e56c
- SHA1 6e9c4d986f74ca2d55dfb7717093631a8d99b5d7
- SHA512 e21e1f211dfc2fe07354c307740371f0d3b78c01d4316458054ca0248e4ff2237409f12cd304be38dd2f04612524b009055683ad9aa393d3d3d6b4f66d0014ec
- SSDEEP 192:4+0/HM50ThDLsLpqtS/tRUR1R0HoXghnDTtRyyb2+LRgj:4+0f11LsnH+
- TLSH T15F02EE5773C88E6EE5F80FBA613B41128970FD498F16E79E4089245E2950BC4CCEEAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityCurlModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7a26a97c25a0336ba86d8f8efaee05156016f564e39375d9d26e0aeff3e561d4
- MD5 49558edb92d0a090a99a6d0d1cea9bf0
- SHA1 cb5431608846feacb7fd02bc241d225ce7baece9
- SHA512 94189556f38d3b506fff6b77a17badc9461d3cd6cd426dcceaba8ee82014d71d4534e1ebae86f4882870a50f23cc0b00c1e82dde0649d4318ef41562782aa17d
- SSDEEP 96:2+ZQwQDqjcgZ+G/CYdAFnfQFUjLQV2nwhPjkZ5Ajanx40us:tZQiC2JyjkPh7kY2dus
- TLSH T1C8E13127EBDC8A19E6FF0AF72C67181282B7F1265205D75B454C809F7AE1380D8E9672
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14236
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityTestProtocolModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d4f7059d8f25541058490923f17c4c0924b1f914d7944fc6c219ffd9aa0e607d
- MD5 02eef79f8924b8e33fa4bc4048f1e07e
- SHA1 ec8670eba2fc417a50a35e6c876ac9dac4947158
- SHA512 96eb87d067058fbdf35dcecd6403b90dcca5f4b9a817d689c582e44ce44dc9ffdf055a474cfaa190d762914dd636703d69ff409fca2c8fb108af727dbb33518e
- TLSH T1F541DC370BD544B3C45947B9894B939037F1D26097364B2A3E95A02AFC606A50E2076A
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1024B
Virtual Size
708B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestAssetBundleModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 13b41c481a8bf5b1b77ad69cfd5b1d7b285a2aa1cf53f153f160e93883e563e9
- MD5 702afd9e847cce5bd9b10f326a1ca1ae
- SHA1 68d8008c79892857213a0ad5d1f5957925fa056e
- SHA512 c46386d35656c83d9e4717b84e9937313b08a47bde39aefc9108928f2fa397a5df9e22bd36282b5dfec2fe6b8831ffcf84f8d9c6583d5aea342942df27e03ccc
- SSDEEP 192:MlKmCU888AuMk73F2sTFQ8bf1d1HG5ZpexgPBP1L2/1z1w1Kr8IkYI1l1E1L6:MmoC7fq871HG53YYdatBmMnPera+
- TLSH T1E23272503BC4C14FD60D1BF485F91B4540A2658AA9AFDBB2AFCCB91478363530BA43EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestAudioModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d114ad1ccd445bfab295192ad1243ca3645760d1ebaecbd3c7ef9ee3935aef90
- MD5 bf5222fdfdea4f315e6348d1d97b2ca1
- SHA1 c5ab0ad9121131ca3edafca07de988647c32b702
- SHA512 f4a89eb5f9282f7fe2b7235a4e437e227939d26dd00297fcd4a6ab776d78eec2105d287f5109f79a2a0088c57b938cb9ff3c62f6380cfafdc56059541485c54e
- SSDEEP 96:4mj6mBaRmPx+BWCBNjXjRiTPQpsZa21M0OpBI0OwYJTD65vOHJbIYv71qf:Tj6iEO+dfiTPQpsZCVuDD65vOiGxqf
- TLSH T185D1741AB3E5C416FDFE0BB6BCB654890BB0FA1A5E21D39F5248509C6D727408D943B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ea30ac0df3e3f0283bdce237796d8c510084632367bfeafa5da2b8b9cc9ecbd0
- MD5 7a80e6d63fa8e20741f2a85f78efa07d
- SHA1 cae773c61b8433b5daf948611ca8aa78c4ce9880
- SHA512 d00d8239fb77ae337d68315ccda4f6a7352be845c4a560ca193cb66c5795a365365a9d970b6f2143a767140052d74e00e2aa750f2005e192b0b354c9aa482212
- SSDEEP 1536:GF8RcMTBL93NWrM5JsgoVQJPSFHR9Pb6WIaAViRo3ShlKAM9WT9ITEFuhll5xIOg:B+MtLXVJMVQBSF
- TLSH T19463C6013BD1854FD6AD467881FB764446707883B84FD6FAEFC86C6828223419B987EF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
76934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestTextureModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8026ec6777526b0200e8c0dd676f17320e8886440b5dcb06b5fd36aa6e02fe01
- MD5 2c2725e2b92371e1c2529472752cce17
- SHA1 14a7c8cb29fd1a9742b71b497e3ae95b35fdca39
- SHA512 77caaac040b7a597712f61dae87fe0e329bd020a5b982cbb03796b41ba4147cfe5de711b3f21cbfa5a009e6d90fb44dd0ead308c102e7fb5764a2310fcc7031a
- SSDEEP 96:HCAoD2NfodCNdU7jlqZQ6WnS2d5BRwjFxnuIYuA0M:idefIC7U7xqZQ6WnPfwZxnugA0M
- TLSH T13691C41757D1C81ADDAA03F2ACB6A2CA5B30F05A1622D3AF264C105C78F73D04D123BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.UnityWebRequestWWWModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1e9191b551cc96c4eb7c8ddadd118f5e26c559bde285e26665575f4ffe65af09
- MD5 124c5a7e3572f0cfcc592fada648e910
- SHA1 18871e9eee33e1cc790b47421c886901e2be3963
- SHA512 9ffa026938ec386fc8c7c3c70b96b9adb9953005986cef5022270a8fa6ff1c350d05b04f77cac81b1b1467391b79c839b0cafcd412db5afe84e5969424d9be5f
- SSDEEP 96:qkFUaYFVH2qkGYSYLHFcf9gZ/8gCqfuRQmFR2a4qCPI/evMvtFSVQJK:dRsGaed8gJfuRQmud4eEvtkVQJK
- TLSH T15BE1761B93F2C91ADC9D1BB1A0B903650772E309EE03DAE7654C9068F9BF764885378D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14154
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VFXModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 af31bce37feda9f700ba764cf206276c921955ea51ca597b1adc9f6bb149a470
- MD5 b453db1a6cf90ee78b15c6e9e342122d
- SHA1 05d4e934e16ecce68b07c3efff23f13f88639964
- SHA512 8a435b9fb0ddb6e27f9be304ba192fcc88a6f46f24787a8ef8a6b3956b4ccf624c85c0362981072564c9cc518d910b85de2f8d26694d7d5c2c1e65f4d717a1e6
- SSDEEP 1536:ID6BqRufnOmQj2Ufg3Bnkikd/Eu8jHO8ChLQ+6BF7BiI7wOWFUH47:sXAn8KUfgRkikdy
- TLSH T1AD73D8257AD08699FAEF4ABADCB755096730F5438806D3DE18C950AC57A3300CEBE376
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
84882
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VRModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 38afdb019178e1b6a56d231ccf9bd1eec8e3b983d1da408ed487d4e153af2cae
- MD5 c66edf1764104f802925715ee74bbe3c
- SHA1 c941f3ad07540209e70791d02d98d835ead3ca0d
- SHA512 d299f620138b81ecb2d917c8a964a83d6ee77ca30a7622c4b17548681487b96a9db2d9f9e3f70f58f27a7af0256038418c23c30fc3f3198ffa8aa1a73c7465c1
- SSDEEP 384:3lWJuhUU6hDKa3SsHHOVLuIGqC6hVO12rykCs0yAg2cPTTDvX0LlfIj:UJ1UADKa3SsHHOVLuIGqC6hVO12rzCAh
- TLSH T12C82C64237D5C60FD8EF5AB218F315824970BBC7990AC6AB6E88148D39A1B054FED7F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24916
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VehiclesModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7cfa8dcd20d93cd3a4a028173ec9c3d0847fcf0a26f0eff25f7de6d67053f161
- MD5 890d8895ae746ebff3ec2749ace4e2bf
- SHA1 ecde9a54825bfca230b487ae27f0bff92e212bfc
- SHA512 28ced3070ca788544790b0648a3326cfbc53273c80d6e9bfdefa5baeba98944c88df5fc628350f899e87ff814a61a57bc0a6728db5126d6be9f734e586a1a2d6
- SSDEEP 192:hx0xtNlFxuvTcuCKE3agr2jfzJV79tW6XvhygqDsYkIz1X1na:sxlzdFghgZA
- TLSH T19422EA0277D18EBDF8FA2FBABC3750665830FA026601F2CF6599804D2855388C9F97B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VideoModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 496a8f36ea103809559aedb949f0b87dc5d42405e48feccef5fdf572056f5916
- MD5 82a6d203d2f58f58ac8669895e138dae
- SHA1 796af3b01032bd0ee0f75a82c4aa89c8ddb7ba2f
- SHA512 5f1a30963d8d752749cf147aef9b4caeb87fe4f07c9db37033aaa005890096f695351879a39c476202a0cdf20d28866418b414c236fc8a22928f0198e1bdbb53
- SSDEEP 1536:rd3vgEsldBe37d7wulYGZVCXt5L1PlZ1BdZVxVlZqVZxTCDSDyzzTijojmzCTDDr:rNI5ldBsmulYr8
- TLSH T17673960137E5465FD2EE40FCACF31A4105B0BCE2758E82B96FCC6C9965623421B69BDB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.VirtualTexturingModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1064dd920225d4205fd549cd724b69f73e8173379aa4120dc89044cd3fb46ae8
- MD5 05abdb84e01ebe33f3e8ff6f8fafd3d5
- SHA1 8098ab5f62470635fc6784f5aad5f8294800da48
- SHA512 7d83ffd179f24c8398fd7bff5ca02fe81d872462722f88a04ffaa245b256392db634fdb7f11a69dce6f724b6fcccd877baa9e6a85cb4c0f64165239508be626c
- SSDEEP 384:WZGvnbMMnEDI0HLhG0Ai306BeImZByLKMq9z+IOsOXOBOrJ8p/uCDCy:EkbMMnQHhSmve4
- TLSH T1E2527505EFC14F5DFAEA5BB36CB292029AB2FE079711E78F5108148D2C75B808C98DB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.WindModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 04ed737ea9276f2c9ed0d31873cea8ff3aa5472c5785fc0676bc20a6d44c5ade
- MD5 ae3214424011efc8a83ad31987c2a7bc
- SHA1 56b9927b9ce6a23bfb574a663a0c4a78ad2ebe31
- SHA512 58e29e689c80f378e732a742dfd04ec54294a45dfc91adecd359b627f78b6a0c94fc31142c2483cd371cf20db526cfb1ff86a27626ac75b3057a919682613409
- SSDEEP 96:3jB88extp1BcWTIdfoheoglXI+3HUzfTnjf62Uk9tS32:1wpH+fohe9nXUzfTnjft9tS32
- TLSH T1E6C1E041B3E0CD7DEDEC0FB3B4BB91250961FE0AA699F3AF8581904D7952381E9642B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12828
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.XRModule.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 5625c1f2c505b2ac612980ce81f32019b242b9ded67d534dc612fa64b1221072
- MD5 79c1e49f9bd0a941fbe5f0aba0901187
- SHA1 e1cf0c516d18f3e0abe1f9c8d315833d6dc8b9ff
- SHA512 44f2ded45d1c84f2b99fe64d37667cdd2da1c2dc6a7ec630fe204b8e29914c4e80767c8efd8f650913efed52ba320d737c62f831448bcb88b9141173600dff7f
- SSDEEP 1536:T9plXr/+VoSpf7XRXiiXXXXAXXirXXXXTXFibNgEmslgkTbpqgzTDK1odFEbY19d:5Xj+VoSx7V9dVLrkU+
- TLSH T19B93F91137E0474FEAEE5675A4F354014B71F8CBB80BC39BAAD62C9D24623019E697F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
101320
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityEngine.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 573d64a2c85261e60651ec446cbe7840683916ddfab3f66f67cbe1c2b0b2528f
- MD5 4a20407f2f8c31e17b50825e1f63f387
- SHA1 17c66a542ab02a2ff72fd262d42989e4bcca4df8
- SHA512 9adace8daa23ab98d12152cd30ee5c6a2c9ff5820c23cd1e9fbcaae293639bfe59c85014afbb2f4e2a8d31aedf72fd072adc59c694feab69cdbf4565fc953ffd
- TLSH T18651AC3377C89133C54E077404A38B8413B09154C7B3CE8B6A69A52DFDE11E63AAA37A
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9522
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/UnityUIExtensions.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 942f76f71c84f1fff6bae458ce1f1b6a86270dd98f12ad746f6446a3d4777ad4
- MD5 3a57bbb470763018b7d3f63e703d0390
- SHA1 60db3e052157d121c20717e9b51215fefde1e045
- SHA512 bb82604bb8aee261d992217e410926f24fa53b059456b9838db1fb18534fd20797763a9bc8aff859073d9a89be33c43ed1ecae5ac7c17d3de73b19edf6253db2
- SSDEEP 24576:vHvp9wF+zMONNFDe4SnZwti8T/YxPToHaYJLbMU0d6jJXlZ3qePLYpQfXu0JY1ib:N2iOaVCwq/l10
- TLSH T1EC25A660BBC1C5CFC70D1178C2E1861856B066C6F6DFD6A19EC8BCB533D2B61AB492D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1018854
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
987KB
Virtual Size
986KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/XNode.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e4fb3fd2072732b6a1ed8040ef2de0fcff6864f5fb9c054f1b627a92c83dc9d7
- MD5 618ddbd503faa65ee8bdd4373758f117
- SHA1 0e34900eeefee30e42ce5966a2e92a238d45b39a
- SHA512 15e4ae65c977e69a778d51d20b1904bc216b3e8dce80590df57ad056e76a145341889620d93d82ccfc6759e89090f094b906265bf90dec08ae253e1a6df40cee
- SSDEEP 1536:FhdN9IPOP+PuPcEDSZfmrlnYkXU7D0agmlCdpBqnWEWPTW6C/miU15Q7R/PryBp/:zDSSn07CmUfxE
- TLSH T1F98363003BD5874FD72E317891F3654512B0A4CE798F9AB2DFCC6CA6A92338227596C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
92124
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/__Generated.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f972d02feba79ef7bb798a4004cc5c3137b98a0bd40103f2efd0318f42d5f319
- MD5 c07972d45f3ad7c783cd8de9a8393ba0
- SHA1 e27f17017a13bb669e60e0f40e40878cdcbe0284
- SHA512 61882ba18640b059f965dbac084b9f4cd249b17cbcf1e2b92579f5b972356126e577adcfdba484435abd7b610c39092b8d496b0f05facd6f548459425bfc823a
- TLSH T1AB81850237D9CA77D15F127688E362888731A4A86597E7975AC8A87DEC733010F62787
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/interop/assembly-hash.txt
- SHA256 300f45134c0ea59f39a2b6b64590cce3ad87995c23edae39420aa8eba7613555
- MD5 c4f3747d2c0306185423b8f999b32a02
- SHA1 07bca6805efda554d6ac41dbaa5ad0905dee6aa1
- SHA512 e5050148f883a27fc9354e4eceb51a01f10d9a90d95adb1a0e467874f5fdf47605f132521ca24db347abecdf6da08ac80aab8d57f0ea00be38cc13d29a9a9c8b
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/BepInEx/plugins/README (AutoTranslator).md
- SHA256 edfb4c8ff043a0a4c0baae1d5348cd88614ade6cedd4dc5c0ff0fd100010dd2f
- MD5 188c356a5fcd323496139e1a524e1d2a
- SHA1 e15a41534ecf1e2c6382745fb6449e4f35e78d46
- SHA512 17dfb65671cde591c3773aefdae612152d768119b68e200d3f5fa31846b0da3a491f6b29c1f3b9b5133d56bbea28856616a84e82e41d9adba84e268437de7573
- SSDEEP 1536:VXmVw4d0OotDclxRi5hzutuhGaY8yrR/870gTdZx0KtVbf5WhEyeVeI4w+8eMrB0:VX8CatuhGaY8uZxx8eMdPfKqtsIxRa
- TLSH T166F3C65733C59332083203A2634A71D9F329C56F9236C47975AD831D3FB69A8437BAE6
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/ExIni.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c073db2220667e6bbbfff64e13ed4f7e744af4b554c408f13ea80bfdffd859d0
- MD5 a18e11f7359e4a43993052dec5c712f9
- SHA1 b3172f6b1e7c4d0d111ca4bbc5008ace777d1487
- SHA512 4dff7545c06f865f4bec32d94b3065cf08a69dff0cd843473b0519e890043d3d24e9fa6a268e38eb144958f4c1a839c26a7dc4be2fe97aa202542df518acac45
- SSDEEP 192:eWqCcU4wagNgvvqyNSYyEpNSTtehottpuHeN+XLr9:CCcvzg+Lp4Wott6Lr9
- TLSH T1C6521A04A3C86636CF6B8679F6B7092546F1FB25A912EF4F0CE590E50C23B951B50B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
w:\Projects\ExIni\Source\obj\Git\ExIni.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BaiduTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0616b866ceb76382ff3f8eb4aa276c510e89a3f53dd84b06e07ceb7b05719b27
- MD5 28e423cf602035a3c413a84a4992a4bf
- SHA1 1de6badd769308550c2e285c819f8ebd9ea084f0
- SHA512 16b2d87e96b8c37bfeab2ef5ee98cc1307700cd4f310473abda18e6fb0717f817bae583af5effad6bb75bbda8b03d0e9de47f62fe4f998635b08ad02fb644bfa
- SSDEEP 192:1JNn9RB8s78zGgdJeZcJOL64pfjmibJHs7l9KtejhfmpSLloKbvCPccm8kMfhEH+:jNnPB778zGgdJeZcJOL64hJM7l0tejhY
- TLSH T16F32C91572E48366F9BB5B35FFF102903236EE555821DE2E1D89004ADCF27048EABF26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\BaiduTranslate\obj\Release\net35\BaiduTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BingTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f96fa025525f5809e823dd5c9e588bad790fc1b3824b24c6208f1979b6446044
- MD5 72c016028748ff761f8c6fb2c5c24ff2
- SHA1 48ac9574c9bfa45681aa932b416010d3b98f3655
- SHA512 da96ab4988ac1344ae5b10cfb49e2222403f689b239c7b80346446f1c56f38aee370ca2c13b542be26cfbdaaed9523af72ad97888b73a1cbe59a1ec45b4eb658
- SSDEEP 384:cFnGLOri6baNH07x+Iejhp293/GeVKsJ:chGLOriR90aomsJ
- TLSH T16052F81432F58706FDB6EBB6BEB322913035BD169825CA6F9C48148ED8B57414A53F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\BingTranslate\obj\Release\net35\BingTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/BingTranslateLegitimate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2692aa4a2576a4bd59501658a871cb6e627e2fd9d9dee28b0787b49b5b3b0254
- MD5 4e5a0117a111007763a723a6ab2a6ea5
- SHA1 f0addcf21e9f2e5a066ee5138e87676fb41bfae4
- SHA512 7834fe2a590f7edcecdbf4696cb970dbf60f57c8f211d665284d9ef1b385307a2f4c23de9836ab9765d827169a92afc423d2969d34c9722990f97b159361e10e
- SSDEEP 192:gOme2YDT6baN2mpfh8Q5c5m0OKuCQqIM:gBe2aT6baEmVnKflP
- TLSH T12E125011F3E5E60BF5BAD730EFB226517135BE185822CD2E1C48088F69757868AE6F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15178
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\BingTranslateLegitimate\obj\Release\net35\BingTranslateLegitimate.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/CustomTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdbd4b08f04a8beb2bf65281dcc8a66eff1591889f310e1ab7fece6383b144ed
- MD5 c1981c155330c6c9ca04c082ccc9bd84
- SHA1 f75e048f4ab95d23d394553dd4972147aa28f3e2
- SHA512 995a0614788cc8c2d1cd7f578e31b9adbe62ee753abac7b54c9381e06b7f525a048b7bb2fd23c309a9540a25636c0503871e71432c02edd421a550e8ee4e296a
- SSDEEP 96:hokBHvEA5R62h0khY0npm7DW3mamLXvGG5uhtIvAYr6sWm9Gh:jz5RLm0nQ7DWWamLXu2ubOEtV
- TLSH T161D18821A3F4461BFEBB5B72BBB51680B635FE508972CB2E1D46110D2CB26148B22F16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\CustomTranslate\obj\Release\net35\CustomTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/DeepLTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7ef74fa8356587e2f882bc207958bac37da6fcd8d8c2b9d70dab87130c666776
- MD5 5929446b00b4e64960c03e7f67d1fc3f
- SHA1 4aa8dd25a98212ecfbcb40095d28162adb3e4f1c
- SHA512 50fdf9fea9d1a3cf090cc12785fa35fad963948bb53b9cf1a523edddc656927af0759daf3729c515400b8b2e0c6dfe5a02363fc2710f3f079a8e36f565baa15e
- SSDEEP 192:gTIDKMwu9Yq0nwvBXCVRuzf3DBR77Wu9ajOCh6RP4EMXOd0iL:gTIDKvuLZiRuzfFRXgwRP4EMXOWiL
- TLSH T186127213BFE85219E97AFB30BB7136512679BD085436CE2D0D9B098D18327D78663F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\DeepLTranslate\obj\Release\net35\DeepLTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Common.ExtProtocol.Executor.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fc306eda4b564ff512459a860049c8b96533eed0d14a938b6bfa6f701f13c375
- MD5 b49dc8823e40e4bd0200f568c918d038
- SHA1 3309a93e8966f7a7c286d94338a8bfe086e51e2c
- SHA512 4d25cbcafc7e442c70f64a2a3f65e0bd8c301d7e270220c0f72026207e3395647e26ea3a561e2d2b467df1d5428879d0e0c6095ca9225b82cda1e1e98b5ba7cc
- SSDEEP 192:LVlNV19QPpvj+jJNhepe0JUEcQ255bZOLe9oUbwL:h7D9sMzC+EuOMw
- TLSH T16E120911D7F8CB2BF9BB17B4EAF2625066B8BB406836C65E3C4CA05B1D21705079237B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\Common.ExtProtocol.Executor\obj\Release\net45\Common.ExtProtocol.Executor.pdb
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Common.ExtProtocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a0c0046d8d9b015ff08ee1827648f0a29dbf89a7901abe5aae99b8b30cb2bf87
- MD5 cbd87c371cabdda9754190bfee3c4321
- SHA1 09e274f24bde0263325000de683ee761fb040627
- SHA512 51b059be27b86fca264d9862bb507bd4e0d4150cdf52a8d5167680d97f81204e50095f723db74f25e4bf9a149beaacb5b64a55ace11c95eba2055994da6c3bdd
- SSDEEP 384:orfevdfWV1XM9E0QOd6T07FFODIFHc9ia+F+XV0TlO5T9wDcrc83n1KEgiBwj72M:XvCm9HJiC0V0Tk5Tn7F2zJF3n
- TLSH T1ECD22A185FE9033BCBAD977C74F523650276C25E7313EBAA5E48E58A2C533440A817E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\Common.ExtProtocol\obj\Release\net45\Common.ExtProtocol.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/DeepLTranslate.ExtProtocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 033887d9307ead8a1c5ff6fbeef1d79d0cd1e9e944a0565a10a921e97f75bc7a
- MD5 ecf36e7e3957485b16f10101664a5e57
- SHA1 8ac15dea867ebf5069153213d8bc5145c3a7d201
- SHA512 cf2665f216a8d3d556b7307a988644e6bf6b6645d1eb6a20fadc6fc94ac00242948e17e561da4f6586713809dec4fd431374593f676fdb49900a278e25b59147
- SSDEEP 768:HW4PhmEyxKShk7+YsYSH2cgPYH8tfkfVfLfEfAf0a0Wd:twNk7+YstHBgPNfkfVfLfEfAfF0Wd
- TLSH T1BCB21918737D877AEB7A4BBEF671224442B5BE047821FF8D2D8C54CE1DA2B15460872B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DeepLTranslate.ExtProtocol.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/GoogleTranslateCompat.ExtProtocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0491f36bc316d25898e43fe405b78e3b7ab585436b07261e69242789cb70a405
- MD5 d70aa82ac1e0b405e1e5554cfc9b761c
- SHA1 bb93ea9a0d98f2b2b1e574ce7354008952a18d5c
- SHA512 15956ba2ecb961e8aedea99c9800febf6722489f7b28c68a78ec9009fbbfc7d62fe6657ca86e332951fc33d363ece643600029410cb87389478217c48ea40536
- SSDEEP 192:D42by3KaVRsp87F+Mnb0tl4q9NV4Opf6e0rSpEeW5F0XEx4QtkwZOTE:D4UwTVRzbbunNGOukEeW0yVtiTE
- TLSH T1BA420B1677F88315E5BF4ABDFB722790507AFF09A821CE2D2C4C508D1CE39094B56B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\GoogleTranslateCompat.ExtProtocol\obj\Release\net45\GoogleTranslateCompat.ExtProtocol.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Http.ExtProtocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3c293b5993be7bf6e749b07aba81d777f34270fb641804e129500c29b4bbfae
- MD5 a1f1d7ca63db0b5d004d8f27f06c20d8
- SHA1 3c0c321a2d2d4ae2e9af0dab6d1e95e7b464b0e8
- SHA512 17bc8d31ccafe5c059b5ebb81e084f75f2e972b112a8b3762ba135f901825e35845dbf046f43dd0023b78a0fdb071481676c335b0442b00a165e9dd8dcddaf76
- SSDEEP 192:s3pet2I19FBh5OZ3J7FcQJtmuTzuLiEy1yoBUhSmggSs1ONQi:s3pC319FBh5a3XcQ/iiEnoBUhSqU9
- TLSH T1B252191587B8832BDB7B47BDA9724B41A975D3057B21CF6F5F0CE08E2C923144A1076B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\Http.ExtProtocol\obj\Release\net45\Http.ExtProtocol.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Lec.ExtProtocol.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2db881e6e4ecd3aa137087136bcb3d1bbbb92e0b692997b385de32acb6c473b1
- MD5 4d85c7ea324825c5d4bd6258c1f57d59
- SHA1 8f7308f010fa5b270a00a3a722d8d21ee622900e
- SHA512 9750b3019f43faa44c24a109c169c0fc51fdff5004428aa865149461babddaa49ab0561fda5e68fd84707df04122487d2277f260d997ebb86b3e3f1c9fe81a05
- SSDEEP 192:TUM170fDyZMgDBCuFt9N6ogO0+6CkOn5n1e49tn+hs:YfDyZ/9LaC7Ptn+h
- TLSH T1BE32FA00A7D5872AF6FB173969B317802375FE499872D71F28DD414B1D63B288AA2733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\Lec.ExtProtocol\obj\x86\Release\net35\Lec.ExtProtocol.pdb
mscoree
_CorExeMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
675KB
Virtual Size
675KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/XUnity.AutoTranslator.Plugin.ExtProtocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 847346506bd9bcb2b3b33c492818ece1d62bde391122fafed005f12cc52d0f0b
- MD5 ea9aaf287da84b371de665bbbec9ed4c
- SHA1 c237e2aa62023b7da8ae5c0897d635404d13e01b
- SHA512 500bb6b385a85178023358373179e2756c26b52a2992136e1e0fbb0e3b7b87e537bc5f661b3c7304f8cca7b36da9308b00579fa460a532b59819dac833ae53dd
- SSDEEP 192:lYiJWpXJ5G1lEgORb6qJhT+aafu8WteooMk8E30:l9JSelEgOR3JhKanzBNk8E30
- TLSH T1B1221A313774832EFBBD0B70B8B1C255227DDA89E131CABB5D94A05F6C13B890520BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\XUnity.AutoTranslator.Plugin.ExtProtocol\obj\Release\net35\XUnity.AutoTranslator.Plugin.ExtProtocol.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/FullNET/ezTransXP.ExtProtocol.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b1cddb014e45f3065acbe1ee7eb42b6a87bed73579c58960057b9591bb6450de
- MD5 448cd9e26efdd49914273ebec38b9d1f
- SHA1 0a532446badeb115b84518b079891ff7c267d56f
- SHA512 5adc65c3f3e2806552202f167b3bebccf9b810529856e6975c597888296540a101bdb4c9784b4c749b0ea86d660faabbf0de93b634c48f8fa774d895e37c0de1
- SSDEEP 192:hP89KNnpS5eXgTviPTQ4OeRLCnlTpA+BHa:hPyKNnpS5eXcl4XyplBH
- TLSH T1BD22F81063E8C619FAF75B322AB613806675FD4AD933CB1F2C4E524E1C2375049E2772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\ezTransXP.ExtProtocol\obj\x86\Release\net35\ezTransXP.ExtProtocol.pdb
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3209bd2f9de7b52c10a3cf34fd8d037178db0ac542730d7ea45121b99e7dc808
- MD5 8e56f898c450db4aca14bf0de01ae8fc
- SHA1 cd03fc52c32517e9f005f1051ee8e03a710f59df
- SHA512 423bc25fdf92bccfc426aa4da3793cd5284e73de0e474bd68b1cefd911a459d0818d11000897e1eb1d53c8eb56e0d334f5db6fbc3958705809f4ef97dc5ca836
- SSDEEP 768:X7sXLNDMBsSTYhINNy7Co7jOUOvIN2Juky8c:Ls5ABs7ONy+o36dTc
- TLSH T1CDB2940172E89315E6BADB79EA702D952177BD6FD821C91C1E8C28C90D727CF8A53F12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\GoogleTranslate\obj\Release\net35\GoogleTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslateCompat.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b2171c66495e3abd2908880a41aa71353198f20a535b4e623e9903178322a8f
- MD5 85e5946bf457c297e640954c6fcfe467
- SHA1 33190a79efb11a276c3039a84f9dbf1360373e3d
- SHA512 5e60021b63e68067e5139fe9b4add348c28665f046ff5cd77cb21042a3299297fc518bf24f365774da2e3b0f656832d06cd8a98fbaf714194fa55e3175ad340f
- SSDEEP 192:3/WQrbxXNzpvlLhHDFrBndD5/1bxXNzpvlLTJPXNzpvlLP6OI4WXcCHs4T9OOO/w:PWQrbxXNzpvlLhHDFrBndD5/1bxXNzpU
- TLSH T163F1FB1173A4C31AE976C731EEAD2162723CBA1E9922FE2D4C4C8C0954317D796E3F11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\GoogleTranslateCompat\obj\Release\net35\GoogleTranslateCompat.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/GoogleTranslateLegitimate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 33adae65f7ad838f9939657e3936025a6e3cd238b2df8718418784be5d101bc4
- MD5 34a2e19ffea4ba4e3986b0b8c7945b1c
- SHA1 29ab57df41f73c95781feaf249935b83b3a357a9
- SHA512 e52b9d0bae8473700761bc6542b55d913051fdb89a0a1f28354b7533004deed9d3f50b708292a3241c25c076b8e0f2225512177e3e30dc988f2f73d67641325e
- SSDEEP 192:bDi6gQUH92McV5oVT6W6unQV8EmClsR9Z1O/xFNMHj:Pi6gQUd9cV6VT6W+3cuRMD
- TLSH T10612F82172B4C61AE9F6C731EFB26A50B225BD1DDD22C92C4D8D08495871FC6A6E3F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15266
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\GoogleTranslateLegitimate\obj\Release\net35\GoogleTranslateLegitimate.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/LecPowerTranslator15.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 10592609ce702c5243897c1b5b27f5c7a78fc340d92e0934b7bc23456c5a3f56
- MD5 76a2f690941c4c0ee92ad1b8449299a1
- SHA1 77449a5ab9a4d54c25df4b7217761b6fc694d79b
- SHA512 9a31f6773ad7970b90a0f21100609bc6f7bd077a76b940f2a68991d5f10417478455f331f3fb4e346a8fcb12b378ad54b6f3115ff8d618854886cb7081942e8c
- SSDEEP 96:30sd50c6iCcXHD9j0YFmHziymad9g+xADA0LfvAXrpsNIWv8:3EH+hcHu9ad9g8mFHi0t
- TLSH T1BEE1840153F8472AFABF6775BEF56641663A7D46DA33CA2E2846010E68326188760F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\LecPowerTranslator15\obj\Release\net35\LecPowerTranslator15.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/LingoCloudTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5eb8087a00e73f052ccfdf1732a49dab2c696c6fc0dc6673581eeabab139dd2a
- MD5 6925bee5eea30c0673cacf1098e12cc3
- SHA1 ade0972bb9610475fd856b533e13693181da28c6
- SHA512 bd992105b6806389147622cd240c25e90fbc04ea488c8b340c936387475040cfc09ba54b52f292137a0e0d80eb49d7f77c0240ac67568844daac9951cdc25c98
- SSDEEP 96:Psu/vHHpi2qaz9+3si8h6balyC76pfQ8pmdtckmhmxh+LEgykdfeJ6WuYtgyzvAO:NvnMazD6baGpfQ8Qd4hmxh+L0uYx06
- TLSH T197F1861663F4871AFEBB2771B6F613906239FE265D63CA2D0C44404D8CB26188B62F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13362
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\LingoCloudTranslate\obj\Release\net35\LingoCloudTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/PapagoTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c3632d111dc46ebfedf71faf207c06cd59a18923fc2548d12740f235d655e37
- MD5 4c6a7fb349f323c8e73cb07289dd5868
- SHA1 be4a52676d3d6699d890bb7a6ddbf3cb715c857c
- SHA512 920fe943e4980d432904d29d8281adac5b773f97416dbe2a0b2a38f5278d2a3d5f5a991ceecd73499706d342dc22f8981b3da16ab91c65516b7998b0f91d1bd2
- SSDEEP 384:z3aTG2TY3dXD6bafXrNAMejhDsQpmZxF:z3aTJYRDR/QsQpS3
- TLSH T1E042091573FC8716FABF6B79B9B112902278AF516521CE1E2D9C108A5CB37048F22B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\PapagoTranslate\obj\Release\net35\PapagoTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/WatsonTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8994339999613ec12e49add2a9d5e833a80bfa2914ac75b3d5858d1e3e2bd072
- MD5 1c3a94431f9582679ce3a64aaea0a7ec
- SHA1 66e6d2d7f1e29248ce442d0f24e8b7d67014a9ba
- SHA512 ca8f728e15eeebc0e5d2dcdba298ca9bc0b58e4709b89c85d2d9ef6d86dee5bf2352d8562c56ecc50599cb3a2a592c3bc000201a27c8779b67043e0301dea823
- SSDEEP 192:oN0BjcrQEvuM+GJfunccxLtv8GtTZnkfHM0VOXYgU:YHuM+Gmh1nkfHM2F
- TLSH T1E312760E73E1D615EDBBDB317A7127517136BD1A0922DE2F0E44064E8C7278286A3F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\WatsonTranslate\obj\Release\net35\WatsonTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/YandexTranslate.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56ab83b35139c9984fa0f8a369f6229f61df41d4079d82da45c4f6f0fa6b580e
- MD5 47c74d24b2d07bc2566e2d62be54fc58
- SHA1 943824a30696d1598a206eb0226793f5ccb8013a
- SHA512 92acbd69005c1d8c43d10619645c68ecb0ba1357c994b248b6fb4009e5dacf7241cc43a0536a66bc30c627e3abd20229f8999abcaf29d96976d197e639714876
- SSDEEP 192:VdvJre4Mhub6baBDfu8QxhRmUIuli3U1ZSiRwquqy:Vdxa4j6baBWfPlhPRZuqy
- TLSH T14E12FC11F2E6C217E9BAD731EEB14550B1297D6CA923C92F1E4D094D087E7C68AE3F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\YandexTranslate\obj\Release\net35\YandexTranslate.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/Translators/ezTransXP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 51623a017858465726793861e8b3b3c28d7e60368d2d44063350b77f640508f8
- MD5 3865782c4c2849cf4880297770867172
- SHA1 9728184e86786ecdfa2c4ae5f9d824bc90151baf
- SHA512 0e240854be892c32d2319907d2e3c3c8fc71ec551e4dcd3ceae3a6d6f77ee14b6a676d750464314eaa1ae82ac8a1526f630fe5dc08b6d121310bdabf06ebe817
- SSDEEP 96:qOzMYgii0i4KfiA2kjSY/mHVymhd9MUFdvAarE+D7Ef:CYgr74KfB8HV9hd9/LM
- TLSH T139C1A61253E8826BFE771732BEF6634075767F559E73CA2D284A010D6C6146447A2F31
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\Translators\ezTransXP\obj\Release\net35\ezTransXP.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.BepInEx-IL2CPP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bae27d6a74557c22d0db3e87eba0847a09fdecdff030efba7652d932ba3d40d2
- MD5 81c8f81804dbae2bee81371e8297a1d1
- SHA1 c8bbaf0a8bf830d428324dfc4df767aa3d502570
- SHA512 20badc2dc81428c0e2bd7e91982bdfa5b4e044a0f13dbd57c731aa3768953f71728e44ab7413aaa2e72c061c8a11df72ef41f1b8ef3958e8348ce2ac3d1d3f22
- SSDEEP 96:UtMyY9V+tU4jQvzwHkjCGpe8ZHocvAIBrViuuYKp6d:hbEQum9LISMpG
- TLSH T158E19526E3E0471BFEBA67B3A6F11285A779FF52DD63C73E6108500A5C654144B22F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\XUnity.AutoTranslator.Plugin.BepInEx-IL2CPP\obj\Release\net6.0\XUnity.AutoTranslator.Plugin.BepInEx-IL2CPP.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f3fdffae694135fb1d5a6753ed45645c08159693e29bf92444924525f55dc1a
- MD5 7fb3aabf6436f8baf2c94b9d1752f57f
- SHA1 58d10c5c1bc87b0c200dbed89d33578f5fef1d8e
- SHA512 e07f21357e88a894679f2f7b111344fccd89f069306ecb42a5c178b81162ef987612084f864c4b265ce8ddad782c5d17807298372412a38b946c683e8388f46e
- SSDEEP 12288:We0r3mzcCpwBqIvLpYdKTVr00eYqonHD2yFBPxYhtuvB0:Wvb8WL1Vr0YnHD2y/Px4uv
- TLSH T138D46A5823F8960BE5BF1BB5A4B0182497B1FD06EA76EB6FA504E5DE3C927448D00373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
646926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
XUnity.AutoTranslator.Plugin.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
624KB
Virtual Size
623KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.AutoTranslator/XUnity.AutoTranslator.Plugin.ExtProtocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 847346506bd9bcb2b3b33c492818ece1d62bde391122fafed005f12cc52d0f0b
- MD5 ea9aaf287da84b371de665bbbec9ed4c
- SHA1 c237e2aa62023b7da8ae5c0897d635404d13e01b
- SHA512 500bb6b385a85178023358373179e2756c26b52a2992136e1e0fbb0e3b7b87e537bc5f661b3c7304f8cca7b36da9308b00579fa460a532b59819dac833ae53dd
- SSDEEP 192:lYiJWpXJ5G1lEgORb6qJhT+aafu8WteooMk8E30:l9JSelEgOR3JhKanzBNk8E30
- TLSH T1B1221A313774832EFBBD0B70B8B1C255227DDA89E131CABB5D94A05F6C13B890520BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\XUnity.AutoTranslator.Plugin.ExtProtocol\obj\Release\net35\XUnity.AutoTranslator.Plugin.ExtProtocol.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.ResourceRedirector/XUnity.ResourceRedirector.BepInEx-IL2CPP.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5a0f5af9a304d11de3a381ba5d802ad90c6d1b91de840c562c14dab06464e20d
- MD5 10329df10a67d07021d761dddceacc22
- SHA1 a56d5c80801edfa546d087263ca12b7e108ab369
- SHA512 348dd7d81a75932f77f5cf3a6f0578f46fa989b5a67ccab86d12b1ddc064f0fb3ff95e579475e91049fd25a93ba6f1f60b7ef743a721e662e591f5655df045f5
- SSDEEP 96:RVzSx6xWMe1FvNuDcWk6tfP0USocv0guwujfpr7Q0QSh:P66x7O1NuALg1SoFRv
- TLSH T1E1E1953AE7E82336D8FA0B7698F126419A35F749A91BCB3F8A4521074D753148E22F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\XUnity.ResourceRedirector.BepInEx-IL2CPP\obj\Release\net6.0\XUnity.ResourceRedirector.BepInEx-IL2CPP.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/plugins/XUnity.ResourceRedirector/XUnity.ResourceRedirector.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f7f3fde2df40b17ad584b6789c2a76ce7aa3ee949f6a2b1c4cf300949c647db8
- MD5 c3c5757798bdd43c3dadea80b5518b9d
- SHA1 87320a2f39c647ace4fd3dc1c00879052d19dd77
- SHA512 741607c511c6a12a6fc30698ff506bd93a248bce1a9e1c39b6555fc0295363e1e85fc6d91069ab6b671c5bdb2c0fd7ebba55db579290cee0772649df2874df7e
- SSDEEP 1536:1wJJVrF7WiE4qYXNcI3mtx7kB5UxA3Hnh:6pKIm0UC3Hnh
- TLSH T1C753196063ED9165F3FE5FB4683012484BB1BE437832D79D9D04A6E52CB37A09A317B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SVN\XUnity.AutoTranslator\src\XUnity.ResourceRedirector\obj\Release\net6.0\XUnity.ResourceRedirector.pdb
mscoree
_CorDllMain
Name
.text
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e40d75aba117ee0827dd326d0966ec5398ad2117f09e3d5e9960fd100d6e6e8
- MD5 dfff5dad1e3d58d2042fc9e5ff1604d9
- SHA1 69e70e0768dc5e5f33c4f0bbad2cff2bd0de22ea
- SHA512 96516d2dc54a6983d496400a79e33a6916f860a54f03867313c86067556fc05bcdbd760d0c8f82c3adc218569d39fae84f6dc33b5ea7979732afd1664914e8f4
- SSDEEP 768:wyZT9xh4rXCBN8YrPCjcG4dE+/PRnIb2yv/Eq3zklXR8BrzqrUSAIJMpNwhl8thK:XfcXCBN8SPCjcG4dE+/pnVyXFGMrOoFY
- TLSH T16D23D5B8B7D0906FCD4D2BB6F06457603B70C1084653F799125F61782C3B3AEA932AE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AccessibilityModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2172f7f2029de803ae34d00786d6477e9d8d2fda3d189bb6b7d998b7c3c1cfd3
- MD5 dfcccdaf1e7a2810f031b4a477cdb4a1
- SHA1 80e576e4b8ce6254ab1329e8effe95a49ce0b49c
- SHA512 c2ae6c7ccc5abb156f0d42ed0522509c3e66826d5b39fc982690d79ea06d14b13d045dc825c6118c96b6cb4f6a6a6e956c53d1c3a04ffef5d506aadd01f8f2c7
- SSDEEP 384:RGx8oMJWfcyPdo0VbSgCSNwhl8taz2hjMXecjOu6:RGx81JWfXK0hSgBNwhl8thjMXehu6
- TLSH T157421EF17AC53657EC5A2F37943983803DA0C027DE76E2558ACE21A6B13E0ED7D217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AccessibilityModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AndroidJNIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f424d0c5f86dda3ed554b6618b648a1609eb130024dacb4656195cbecad71ff1
- MD5 f59cb22558744dd6af09653adf17a3ef
- SHA1 176e1b8f3d8b400a0c324fa9b6c31d8063aa0962
- SHA512 2db22547d052a20500543c538f60dfdda1f9bd3ef79306e09b345af80ef667d18fdae7643c0dfa9c054aca540c9c2ad7b8e108c7a9c4e947381c070c5fe8624e
- SSDEEP 1536:wLwJcFFWX6ImmRc3gQemNwhl8thjMXeh/:wsRX6ImmRc3gQjNwq
- TLSH T1FF63F9E8EBD97A01D82E0B3C24F502106731E8276577F716969460B83A3A3DE5D24FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
74702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AndroidJNIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AnimationModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1b6dcae0dbdd87d8601c1d8ac55378dad973fa926f657d5e2cc43e72e1f39e75
- MD5 587bd64b21cd553d82ff04bf785ec2e5
- SHA1 9afd7afff1630a139890f59616c5d7b80ab779e2
- SHA512 e0ce1ce8c18c1bb779f67ffc7fc60e7e83c2728c964cc3a0fc18f61c1e0974af14ef7ea3ebf253b78ec5bc84129d0769fbc5d2568a0c0e6a53eff47d31568c81
- SSDEEP 3072:bQnqfsx7mWvMTVzkjj0CCiMWnL432S9pE7wNwi:ixJmWv6Ij0fWnL432S9pE6w
- TLSH T1C0E308715FE0441ADDFE133AF06980012F39E4655127D3E92769A1B81CBB358EB23BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
157454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AnimationModule.pdb
mscoree
_CorDllMain
Name
.text
Size
146KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e616b5c1a6b513062f703c745d87c254c7403262dd739618f536db270dacb176
- MD5 35c22a3691f12ea6731fe89e68b51d0c
- SHA1 f4f068c64fd6967631de4f2a04eb7768965c39fa
- SHA512 be64102fec9d6e1b9b64892baa85feb1f4683f7810fba7eb68feb5856c96f8456dc60a86dcb6207ee067e428e50688ba4ec11100be60a6ac8df1b5e711e2a5e1
- SSDEEP 384:Q6DrO2wTYJXB2ERAK6WJNFHsTyVNwhl8taz2hjMXecjObM:Q7HkJMERrPGT0Nwhl8thjMXehI
- TLSH T19CA241B477D4605BED1A2F77983843402960D3178EA3E61A464D53A8783E2F8EF227E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AssetBundleModule.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.AudioModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7153e7c3ace5fc719a41b2ef1b33e8fd131eab8718e7a9932271996eb6a34a56
- MD5 2eac4668cc0104afddd9b72c81ab1f00
- SHA1 7df8394852096318b59702a4a1282e2f2cf62fbb
- SHA512 2dae5ea602fa04949128d3a24bf71164ab521d457c817a95b978e003552297630857b065bc4dc406448e685586d1ebb8d342b01ae44e709cdb46e47376516d57
- SSDEEP 1536:YpWhyZ6tt7t+2T5ZYt7Nwhl8thjMXehk:Ax0tt7M2T5e7NwL
- TLSH T1A14309B91BD0858ECCEA1FB1F47453811B31E0136A73D78A066A517C2D763A4EB32FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.AudioModule.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClothModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1f6af75b5628bffcb73e68e5b0d05f7959fdf166f644e0846a10b8df1fddfc26
- MD5 89935d98cfeb14f8b20ba660400fed34
- SHA1 e1d27f7524bd535cca92ffd076be1c21174bbf3c
- SHA512 b91fc58e9697f3fea1e2741082ffb0330ca1912571e3c1aa610e36c645cc50fec9041ff53d002c778b73e195ba619fee9a63cf5c3831b70661499fc279a768c2
- SSDEEP 384:dcpaQrAm/ub3ssQS4E8edJFRaKcx7xNwhl8taz2hjMXecjOY:dCaQr//a8hKwxNwhl8thjMXehY
- TLSH T1F26251F07684529BDC850F37E03953907EA0C817DE32DB540A6F62A8B87D1DE7E71AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ClothModule.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClusterInputModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b03eddaa1fc756ae4ed1a88901db6c8d4ec36bcd15642518dec361c0709bc879
- MD5 24aa65ac543737922746da32d42ff466
- SHA1 10c2423342a48cf317f9a8bd3faf2ca6b07175eb
- SHA512 58b6f4eeda6bbea6df806a6fc1e236bb2f357187d219fd4fd346370c9be16d4ebbfeb284579e799621c36b64fa9246d929b0f391222854a1b94f94c410a22f3c
- SSDEEP 192:2oT94ck8r7FUUqESGn5m/Nzkhl8txXUz2hjMXecjOb+SC7qC:204cr7FUNG5m/Nwhl8taz2hjMXecjObv
- TLSH T17F3286F176C8219BEC4A5F37903953813994C037CB72E355468F22A4B57E1EE7E22BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ClusterInputModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ClusterRendererModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3299fd721948a07409655a2d0f6fd4875df1a1a01ed6699501b26fa9616c290
- MD5 0c009d27b7fbbc502cf496b29f99521e
- SHA1 acce8b9d677843a0e39e243b02d31a46b0f30181
- SHA512 7dc181eec2f20c88b955c8d134ba05ebcf3d58df4122abb9058426fb86e0b8f9dd55b17d0ca5605f26d23f7c0b61d7057244b4d70a6333ff1773e53a1fc595fa
- SSDEEP 192:yg5eulpSkSkSZ/oso6vC6ZACdpyoNzkhl8txXUz2hjMXecjOGHaqH:d56QsoO7Nwhl8taz2hjMXecjOG6q
- TLSH T1CD32DFF57689129BEC4A5F33A87953833890C017CE72D255468E22B4B47E1EE7F22794
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ClusterRendererModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.CoreModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 833207b199b8363d18f22083e57b0e9ee28bbab1e2fa7cea2e37b542c860a23a
- MD5 c4ac452c67313bb0c1450293c7bfc4c4
- SHA1 1f025bee954e577083ba765e9e76a7373bd4c90e
- SHA512 43231be187e93003bafcb48a0ea4daf05b2adb9b68356aedda60527d61b20bb6c1f2d5e43e5a9da0f8ec3eab5c6e0d45ce9c8f2be20a2553723aeee9d37019e4
- SSDEEP 24576:JVjoH3JPRpsMwciFL72aHKfAnNfe+CUgAikXl:bjoH3JBiF/2a2Anh
- TLSH T162454B1077D4AE2ACE9B1B39E8710905B731F4910723F79A1264D37D2CA7388DE25BDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1267102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.CoreModule.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.CrashReportingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8806cacf8d4861528e930970d0ddf503b978161cb64b6e00dde9b07c87b6c245
- MD5 fe7a7ced4074025844b74a3f043eca8e
- SHA1 32d66d40c1f1120d32b476c8dbe5438208261b9e
- SHA512 3829992a40df529e01c39169442f13309db3b7306bf03183c2b290c38e8ec2e21271a7450fa4e0061108cbbf0d2128ff938c4f2b9c9118f1708f1c0a5ccbdd1a
- SSDEEP 96:OyC68sBWAfKcGBY1NzkitJMl8txXUz2hjMXRVaLcjObgwSul/qAI/:OQBhr7Nzkhl8txXUz2hjMXecjOCgZe
- TLSH T16D22AAF17688219BEC495F33907993803990C027CEF2D76D478E22A5B47D1EE7E217A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.CrashReportingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.DSPGraphModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9bf1b85edf0f473a9fb6b246e3e24cbe930bd1a0b003595366c02b909cc1a3aa
- MD5 c49183f5d7638f9f6f9eff89800dd4c3
- SHA1 6754a5756bfd1290fc7478594a408052c34903bd
- SHA512 cec2ab18bbf420bb4919dafb49afd447b82da82eae2a88bfd2e06acff4219da9ebcded26948795a7044a52d6b0837884728e2e939473b7b9a28baba37b2c8477
- SSDEEP 384:pI1N9VoB6uidG93NIH/INwhl8taz2hjMXecjO7:kN9iB6StNIfINwhl8thjMXeh7
- TLSH T1738251B676893157EC550F33A46D47417AB2C003CA33D319168E9264B8BF2ED7E237A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.DSPGraphModule.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.DirectorModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c5ffd5eff18779065bfacf393e96b625c0defef84fb5fb02d1db34043ea7490
- MD5 fd3377b0ec3b9443a310d6d99230df27
- SHA1 822247983244e55ec86b9f94eb8a8994d001b515
- SHA512 84cc28e2f696a2e84d2cb3e621c7a71fe4c865e2aec00ce036851828fd80938f848402a4b37b05b5dcd06dc1775d858c8f0fd4e22774c1478c479a15b1150e79
- SSDEEP 384:0c/quoQG6E4KwkkNwhl8taz2hjMXecjOJ:/quZmZPkNwhl8thjMXehJ
- TLSH T1CB5243F17AC4605BDC890F77D27543413A50C117DA73E768078E62B8B87E1EDBE22AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.DirectorModule.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cc591bcc3f90485b2a0fb2ab3962c5e8ba282d83575830ca5e133344bac7b245
- MD5 41bb4e0129779fed6fa0ef2406c81af3
- SHA1 d7871a55e98323c7f13b9cc208fa1d4758bd5e05
- SHA512 b5cfa23ff8461c9e8d1a14693284386c3a0f39352bd62f04de6c572687658800d7871193d0be32efab4da38d146bbefb2da32bb7dddb12356b80ad8138796c0a
- SSDEEP 192:GA6r4ZyoMpONzkhl8txXUz2hjMXecjO3Vj:GA6rn9ONwhl8taz2hjMXecjOF
- TLSH T141129DF136C525DBEC4A5F33943997813990C027CF72E7254A8E22A5B47D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.GIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GameCenterModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5bfd9d404e11fd63246659f989511c216b9229450acab14fe1c928dc0037cc9
- MD5 4376e11cb843d3e98a1b0a9984d067b9
- SHA1 7aa46d7f524887fbcfdc1480e012a1fce006a024
- SHA512 f76ad1353dc4e7de4dad3c13cdbba344ffc419313db11e8e18732ab1268188ef29a9950755e7e5ba04fb7134b6388432f78f3732850da7c4d9061068899bb96e
- SSDEEP 768:kB2KebjhK2eC4wHq/knjhD08P84Zz95KlEswxMYsNwhl8thjMXeh1:seZjZ0Yz95KPwOLNwhl8thjMXeh1
- TLSH T1F0D2947477E9212BECAA0F3F547502003EA4F1179A73E35E8B596098383B7A8AD31775
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.GameCenterModule.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.GridModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 826263b6f7c23c615ae4bb3f5461c094230b286cb4e5aac65802894ef28e58ab
- MD5 0b6dbf0b0424e7cd3ab2129fbe6d9c31
- SHA1 926bfb9569de725a4e3aa5724386d6e4f6b55a3e
- SHA512 2cb0ccd7d63a67f2b6c483a83c0a5f92d0196e3b568466be4b2b596822fdaf8859fb68ffd2ac7caa3452f1de6a2103a43c68ecf2018ebda9e305165875ae96d8
- SSDEEP 384:/SSVFpJuCvTUXxwNwhl8taz2hjMXecjOm:q8FpJ9LFNwhl8thjMXehm
- TLSH T1D7521FF1B6865657EC491F73D02983807964C02BCB32D7C8069EA2B5F47D1EEBE212E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.GridModule.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.HotReloadModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b9a262d8c93203246439116e5e9abfc726b21bf837919794bf3ddae6757a5167
- MD5 304284da603e4a8191bae8254fa6eaaa
- SHA1 3581d952593e9f144cf0ca14d9b1d3418d71d83c
- SHA512 ff7ac21a3d148003eb2ddf5d1cfaebc2143c05bf162ca82d564337328470b0dd09984a46cb4c81128ad34c7baf4b8620e74ee21f234a5c69ddaa740ec78dae55
- SSDEEP 192:jz6r4ZyoM8NNzkhl8txXUz2hjMXecjOGMn:jz6rn4NNwhl8taz2hjMXecjOB
- TLSH T16F128CF176C925DBEC4A5F73943997813990C027CFB2D725468E22A4B43D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.HotReloadModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.IMGUIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d043ce17ebfbc3c123e0c00f388776a230fdbd2bb5aff2bdea22976de17a8a5
- MD5 9ee129509c02cc96ccbdb561a18132cc
- SHA1 020ef473ed8f90ebcec9d1665e6f1f7a49518feb
- SHA512 f962c7c2724c96efacfc7bd267313bf5ea9eb89c5d743eac85479d83d9e2e410987f0d3684927c4eb217723aa18e36e4ada3e6f15a376ce1bb1a7f9673c8b172
- SSDEEP 3072:LonK58H0OkvXWTrWpUjqPXy3AlUEITRPepcyG+Nwa:LonK5U0pWTr7uPC3AyJNepcyrw
- TLSH T1F2F34B3D57D8966BCBAE077DE4A24101E3B0E176421BDB8B5594A0F83C6339AF811AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
168238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.IMGUIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
156KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ImageConversionModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b30fa188b5579c91bb2e4a6f2c4b25a2d994df8af50268f767ce2a4fac3dc5af
- MD5 958066798b8b7b730c347d2e24df23d1
- SHA1 ed1cc8c6766240d09f3d9d4c39a3479bd1fd495a
- SHA512 e690d8f98e0ac254579b69db464692ad3a74de0672769331fb713083f0a734ec8d932e056002ca449637993dfd7d307f71910eed6fe09c7bc5fde4caaf15777f
- SSDEEP 384:c+HZ+Tuqohdxp3qfbANwhl8taz2hjMXecjOD:BZOxohdxBqfbANwhl8thjMXehD
- TLSH T19052FFF57A886557EC491F3394F983913A94C01BCEB3E3151A8E22A4B47C1ED7E227E4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ImageConversionModule.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.InputLegacyModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5eefaab7d2740f19904018e3e03ac8b4259de8f371f1ff563a4ace19447f0392
- MD5 469e742aa00b8da458f95ab4d449d534
- SHA1 696ef02ef24d5a54c6f92c5a6f4165793b0078ce
- SHA512 54ffdeb8bead8d47fff45e7993287c7f94febb7a88f3e1ce9af05f6fc12818b387b0e1ce43fce463f57b5bb80449cc3d0a2d5699b1d15dc8c714c258bfe759b7
- SSDEEP 384:3CHbKpBpFLnMMfV8H1O7+x/u5W69i++gIw+l0osYwY04YVBDqq9yaBx0YVnwNwh6:yWjbh+VwF+I8OYCDPQNwhl8thjMXeht
- TLSH T174C2B5F57B88816BCD4A8F7AA8A503007A30C1479A63F354175D21A8793B2ED9F33BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.InputLegacyModule.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.InputModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7c42193eb90bc9b31eb1997f24c34d61327690f1d2c6e4cb44d4fe0e8c5829bc
- MD5 1128372fafd7a048e15af872b37d8a1c
- SHA1 3f0d0be2cb7d506ada696229210d53a5d5c90480
- SHA512 e36bcf74ac89b24f4a30b36522aea787498fb520f3c4b0148f5f54587eef026f798f05dbb15023ea34637c478dc3de80eef264a236d51332e34ca7cb5cd2b9be
- SSDEEP 192:6P/PxZidV8oXVTww+kNzkhl8txXUz2hjMXecjOQxQT:6PridPXVsw+kNwhl8taz2hjMXecjOQy
- TLSH T1E9421FF1768465ABEC451F37977953813A90C02BCE72E315478E22A4B83D1EEBE217E0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.InputModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.JSONSerializeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b232f25dbb761e8fb42234d183e3349f70117c9d00143d0e3bc6ddcb306d7264
- MD5 9e62699fe045b593228a6aad97815a48
- SHA1 5931401c3a4a6bf5776cd7c9df61abfe9c9f8067
- SHA512 4ffee5ce8b2fd3e079c4e7fe9bfc58998d6713a221eba5cdada196fe60e4c76d328e2e9b5d260e836615e52f73693ff9ba4e01239683534ebdbc21fa50055815
- SSDEEP 192:bJkooBsbTTDIIqLVC8ANzkhl8txXUz2hjMXecjOOo7:SLYMw8ANwhl8taz2hjMXecjOt
- TLSH T10032DBF176C9255BEC4A1F33943993803DA0DC27CE72D355468E22A9B47D1EE7E217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.JSONSerializeModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.LocalizationModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ea8a8677762fc17eb2b53524f475c349b5b9f2c5b57a238f8152195be126553
- MD5 fc7f25acd058c35f3f7aca51f8ee785c
- SHA1 070f72d1c06bcb14c484ed5f3c34be2bd2dc8f50
- SHA512 5f984c1f990477d11e30a6304cb78b1f15dbae388d6576a4197290bfdc353d41fca21ffea2802caa911b5ac5407b80fe8e38d47e22c013a4ab7c071107847852
- SSDEEP 192:bKJXV9uva8Nzkhl8txXUz2hjMXecjOLT7QT:YV9uvtNwhl8taz2hjMXecjOLfQ
- TLSH T12722BDF276892157EC4A5F73943993813890C427CF72D7E54A8E62A8B43D1EE7F217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.LocalizationModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ParticleSystemModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25c5c6c364f83b40e7739aa054955517b3da471ef0531b80b65d035066eb300d
- MD5 ea76950f0ab4d4c5c528c89e65fd0306
- SHA1 39276fbd48d1a0c831babc725384510d64d38c59
- SHA512 9e72d8c9cc12113fff73d0e7a250065eae42b7245fe13937a515eb1057685e20c97a73b5a8c17e2bc9a030b35008dc943216c98db90ab4eb4575ccde8fb56936
- SSDEEP 3072:TU68DJgApDDQPUC/TloOlLJ/Fx1ljP031g1t8na0eiNwm:A68DHhD4UCLlowFr7jAg1t8Xesw
- TLSH T1ECE384945FB5C9ADC9CE427CFC698D20DA35D2847152E7C42AAEF03C263D35BE132989
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
149934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ParticleSystemModule.pdb
mscoree
_CorDllMain
Name
.text
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.PerformanceReportingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 601e895a96448fc35ca9ad625d71236a16cbe7e12f2275c7afc540e622e0fc24
- MD5 99a0c9cfb0200e48287c1905e01def4f
- SHA1 8d509e9eb1ded7f76c7c10f79d6a5e45a385d29f
- SHA512 d5f05d581fc7bdc3f4a459170b3023f95ece66013c0329018409394262cb9121244bc8e370d99f4f0d01e2e4eb03f4e2414d03d18b1ace3bba90124d6671288f
- SSDEEP 192:jtVcm9kVvBz+AWNzkhl8txXUz2hjMXecjObLzr:jotBz+AWNwhl8taz2hjMXecjOL
- TLSH T15822DFF1768B219BEC4A1F73907993813990C427CF72E715478E22A5B53D0EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.PerformanceReportingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.Physics2DModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 811e03d786a52e18bbc324e0d32ea8fad56b59710b2b8f0ecf07d7a54611743c
- MD5 08898752869ce9d13c6ca7063b9cb8ac
- SHA1 5672fbcac0b8d718cf1b92279cfbc14ebe4e3210
- SHA512 f6aeb30c4ad08ff0cfafc48d6f25670a4201941ca283b7091c6ab7dbda73041fcb5d1d1aa55d23566c45fb7ad72dd7ebf854696dfd3cd155c535ccb39ba8305f
- SSDEEP 1536:EQcmGqbx1RRgO6aY2yuUF7+y7KmcxS7pBeDWA9+Nwhl8thjMXeh1:EQcmGqb7Pg/ZuUF77MxS7pBeDWI+Nw6
- TLSH T1DFC308BDA7D89456CEAD1778E8218434DB31D69A0E23C7DE01149038AC677EDEA32FC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
129374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.Physics2DModule.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.PhysicsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1b370dbd552b8ca5171d582d3ba692963e63a645e2905075a045e62d0e3c345b
- MD5 c081341e6e5bb7a8362e94726a2a62fe
- SHA1 2202e7465bba682f9aec823fdca7dd9bb4359295
- SHA512 22743beacdb47e131a23dd462726d3071ccdc1f45bcd0f71f8fc05ba5e530a047b45c6b9ab74a1aef63287508a989d89080013a6dfc907edae210e2cd29b79fa
- SSDEEP 1536:rCW+qcVn0SWxXP9mrQiELthEcMd/V268ANwhl8thjMXehX:uWEVn0SW5P9dLtmcMdhdNwI
- TLSH T1BAA33C643BF0804ACF9D03B4F8644D21EB31E5996153E7AD255CA03C78B739ACB26BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
110030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.PhysicsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ProfilerModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e1fd14308f6cf0bf7d66cc1c49bfc7c5a52adcb76c9bd894add93fcc59a38ac
- MD5 8bbdd53f91d6cde0125eb2e4f3f526d9
- SHA1 8297650c06274bb908f854f262a32af05b9a115a
- SHA512 4df87096d05f814ba9674af84562cb17f5778fc525854d71763aa88dc893fa43329e13d2abab1fa13793d38a9d46e0b7acbea40c963e821297db78caefe59a5a
- SSDEEP 192:16r4ZyoM2BNzkhl8txXUz2hjMXecjOt3q:16rnaBNwhl8taz2hjMXecjON
- TLSH T1FE128DF176C825DBEC4A5F33943997813990C027CF72E715468E22A4B47D1EEBE21BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ProfilerModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d819951dfabf8692f8c6981d3da961648ec0f5dab9a32eab49deb73ce93c8671
- MD5 6356345bb1503e0d522864fe144b4695
- SHA1 b62ba72e16b92e0200c1130a80216613f38bf0cc
- SHA512 acdbb1ff439a1e93bbed893e9817501e1a415d0bd0dff835dd59e5a90683db6c5ae60c81431dd3ffd5cd17457df26aa0045a618be4392b2d0eec26b6a02ac924
- SSDEEP 192:6q6r4ZyoMgiNzkhl8txXUz2hjMXecjOeJsf:x6rn8iNwhl8taz2hjMXecjOJ
- TLSH T11C128CF176C825DBEC4A5F33943993813991D427CF72D725468E22A4B43D1EEBE21BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.RuntimeInitializeOnLoadManagerInitializerModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.ScreenCaptureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 467491ae6434873fc389bd2f16c777c6a96b3ae90d663d013c4eeb5d279bda6d
- MD5 611aa63e56f79f58b5e3d4a91fbecef3
- SHA1 c1795b7e945d1c16990722d3a0ac95ed6fd5a4be
- SHA512 c76453b434ad5b933cfe42eec3836c82dc28bba6f13b2a012972f5ba0411e168b27fd0d97a2f91c842dd8468d26ae946ccc58f93b409c64a62315f4dd1a067cd
- SSDEEP 192:q23qLsT+bxljNzkhl8txXUz2hjMXecjO4oN:qlLI+b3jNwhl8taz2hjMXecjO3
- TLSH T11722DEF27688259BEC495F739439A3813D90C027CE72E715478E22A4B57D1EEBF217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.ScreenCaptureModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SharedInternalsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 de4b207c2f95bc79f6a1b3d300b87d3889a5111091d0d9096b9a085949784c60
- MD5 03435621a7e0aaa31a9c99f864995f9f
- SHA1 93025be1b6a7b71396e40d216ea24f3066a21e20
- SHA512 e266559130bebea609fe37e97a609a9361721a285eb7655d23d9710d1849eb7b8424d6506516d5d0a5583101b03c0ae56ce52327c00428076eb182ae13399186
- SSDEEP 384:vbpfZtsrcxUFfGBPA50SVDV7M9LNwhl8taz2hjMXecjOCN:vbpBSwmFf+2DVY9LNwhl8thjMXehCN
- TLSH T1EEA294B1328852B7DD490F77D83453413A65C91EDA33C6238B4DA5A5793F3CEAE21AB0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SharedInternalsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SpriteMaskModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f1d774b14fc93056a7cf52b9ada40b0187a4bb9b58e0650d7db1465087c22bb
- MD5 8b8b240000f517a89f4acdc5a5508ac0
- SHA1 87d715e8ceb5983aa752d015e02206a26af457db
- SHA512 394b9a52d63528401e3c90be1eaec3e83d3ae94d02ae1f24976b3c2e1d9b93c88bac059273e02ccf220fc52bff3d3fc8136502cd2c44ded778805ef2f2388619
- SSDEEP 192:ytNHnUG3SyNzkhl8txXUz2hjMXecjOWtu:KdnUgSyNwhl8taz2hjMXecjO4
- TLSH T1932288F17A88259BEC491F73D039A7813990C037CA72D355478F62A8B47D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SpriteMaskModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SpriteShapeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1074d9d3cf63bb48f260ae19ce9d522a0728d0e87e920fea85456f797d07e562
- MD5 7665fd3cf351dec0c55cb9dc06b9ee12
- SHA1 acd4bff8f14e092a5991b9ab6aa386c5deb19ad9
- SHA512 7d9b7debe3fe9d71b17f0c56014d1d60dc3bb91bdba3d418d4f6f8cadab64067d0fee430e5b2b1116e3d67a94492d16360353cd8b70a7397735a3d6f11d7abf5
- SSDEEP 384:3hNN40j8F54TL3QiIRsfyxaEDHNwhl8taz2hjMXecjON:V46H0Rs2Nwhl8thjMXehN
- TLSH T1B46262F07684116BDC4A1F37D42993813DA0C857CA73E715478EA2A4B47E2EE7E617A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SpriteShapeModule.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.StreamingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9374b6d0f648eb81b622651c6f0f2e91dcf2650ac8dad95801cb096f49d382e8
- MD5 c5b232af94f2f01d757bef6a3be2c94c
- SHA1 d1b43cd726e48fa4f8d7bcd1bec5d20171471449
- SHA512 bfc1ebf1cc4d2743a133a6709235cc49608c1fc9dfa3e3dfdfa707c9d0f3788a060fdfafa81a8330538db5ca861995af6ac7c267a002b3448a02fbc1dc80560c
- SSDEEP 96:hukmGzQc2lZrXb98PtVZPINzkitJMl8txXUz2hjMXRVaLcjObRw4MbytZ:rQwbGNzkhl8txXUz2hjMXecjOAMZ
- TLSH T1F422BEF13687129BEC5A1F339439978039D0C027CF72D7154A8E22A5B57D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.StreamingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SubstanceModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 13cf486c1f743ded6d99df560bb74198f579b9ccf01b18cd9e3b7aace2b49dfc
- MD5 d7c2d6fdf07c58e12785421b64fd6624
- SHA1 855034deb6852bbe0ae14b41b8b3c4190a1b0b42
- SHA512 e421507f5db2ecb61475ec076c1bfc7d7ebfa9934b3dcc1fe5a8c3ff7b05441e604271b01ae6c26e1d804fef0f7f3f201b5ebec3c67820225bb30218e6abee5f
- SSDEEP 384:GL08ZTEJfD8pHauENwhl8taz2hjMXecjOX:GgwIOHaJNwhl8thjMXehX
- TLSH T1E35240F1B689125BEC8A0F37E43A43413A94C417CE72D3168A8E21B8743E2DD7E22775
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SubstanceModule.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.SubsystemsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5c51f08a8e42a879aa8291d1f69fd80d5b3e95a2c5d00f0359e7e7ae200bd14b
- MD5 6f5ee2fca8d2e6ccb3712dda9a6407b5
- SHA1 446be052954dd2eca879110fa688da203950dc31
- SHA512 7a740553e5583402f0a9af925255c4ccb83d137ced2142f82235c5bfcbd62a95d336a40fcb493b48c99c34f56993afe6a557f1e6bdf1c3f0a94defb433cc0852
- SSDEEP 384:bW6d/yQ262I2222222r2222g2u2NfCylIDizSW5ixZCikMs/TNwhl8taz2hjMXeI:bWu7262I2222222r2222g2u2NfSWS5xf
- TLSH T17EB2C6B57B951297ED460F77983543407AB0D017EA32D32A0BEE61A4F4393DA6F316B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.SubsystemsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TLSModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5c6c1ac104902cff3fdceebfc0d88f1a0f7c507725f694124155dc505048b37
- MD5 0774aebdb1dd7ab08c2e677b6c5d09a1
- SHA1 98a7d2b4d0b580fd2e45865a248eb27b942d0642
- SHA512 14caf87634fc8081df0b7ce5a16ef4750d6fe0f9dc11fd4e43e0fff3e27794ac72636eb7a8126433cd2b1963dfa137c0c82e7bc58cd8fb3ea8695d7c903d5c0b
- SSDEEP 192:BuAHJQarAzccuBGbWYkULgqYekllNzkhl8txXUz2hjMXecjOWPeU:5QaM1uVUibNwhl8taz2hjMXecjOp
- TLSH T1587262B272C731ABDC501F739875838039A4D516CA33D322569E62ECB57E2ED7F216A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TLSModule.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TerrainModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4c1aee1344b5e431664166ae4f666edb889f4cdddf627fa8875abb8946df010a
- MD5 220d6c2a5c08eab2c23ad81c25f9f7f2
- SHA1 832b0a5d45d474b162c0c84059563b293c5af60a
- SHA512 27acd539694fcb143abb29be8f97e1cd547c8dacf55b37ec51445f66c06f3b58374b92decb9b21a86f1548acb99002bd9db43dab4f4ed234f8e9e05c6b058aab
- SSDEEP 1536:EWhahNwJ7ggm6pLmhbA5lPGUFj4CAHvDSC6bnHTr2FcuohZERmgsJfrtp9m0avuu:E6ahNRGPGUFOHvD5iuohZU0eFNwg
- TLSH T1D3832B342B94AA9AD9AF2F7AE47183102B70A113C133D3DD1E89B47C29F7754E824797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TerrainModule.pdb
mscoree
_CorDllMain
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TerrainPhysicsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf40357fab5f828e487eb973a2161236a26db1b946ddad95ab8227e66fa94228
- MD5 c39b842eaec72f105800ba5af1d811e1
- SHA1 f58860075ab890be3fa22ee50ee56a8a0d39007b
- SHA512 fcf63be758f7621b701308ed634225f206350a85c9e12be8c797c5ee0fd62a67a632244a9aee737448177db513d12a227e246538436a5296538fb0c7c8293a6d
- SSDEEP 192:YlAAtZi1I5Nzkhl8txXUz2hjMXecjOFZp:YKAZ5Nwhl8taz2hjMXecjOr
- TLSH T12922AAF17684229BEC592F33943997813990C027CF72E365468E22B5B13D1EEBE217A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TerrainPhysicsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextCoreFontEngineModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8a74bead365bb6699bf2370a609b6bce6516a197e17305b7d4f818227443fc84
- MD5 841ebc48352b92885682517b050cf873
- SHA1 0f1ddb1fd8ab7c9dc7db84096174c659edf0f47a
- SHA512 0da61cedef5393614a008fb6e361be55d5892cd7d74ddd63ed4daad4b8c0c5de1d6aec4404812883597040866adcab73642a9624de2d43436d9e7543ee697805
- SSDEEP 1536:hrowR2yKJ7iR9ZsXc0fH0AzdbOwB9N6ZNwhl8thjMXeh1:hroeLsXckVdbOEN8NwK
- TLSH T1C953F9BCBA8A786BC99A0F7FD4A493341620C0058653F706578875F47CB77F8B8266D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
67806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TextCoreFontEngineModule.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextCoreTextEngineModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f6e2109a5e577128161604102df8cce2bd4584efb11fc4814d4c7538bb2795b2
- MD5 b6478e20a9258c1996629e50978eaa83
- SHA1 95fd0e4a0a1aa30030a67ce7c6903685bebb7a8d
- SHA512 6d076dc188bbe8f11c297f19da498953c1175218647d831e31ce1df8359fa6de764c71400ccfc174f40baeb16fe3907521092558325c96d9c00ab527015f8dbc
- SSDEEP 3072:OnM1SAm/sy95aW7L0iJ90iJXZzGzXlplOb/hP/fqA/n5PkvqJWtQmckVommycSEo:OiXmH91bxl5PkvqJyVRzt4E0Th6/vyvM
- TLSH T11A046D381AC46A13D43FDBFF9875465263385153E26FEB8F4FC864FA285A3A18810797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
192686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TextCoreTextEngineModule.pdb
mscoree
_CorDllMain
Name
.text
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TextRenderingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c62259c85ec7698d9d711ab32056dfabc4a79af702e40e01ef073c346536c36d
- MD5 c23e0e28a08991af31547b5d90096abf
- SHA1 e8285b1aa1f37c5b9d8f5582f982ae46bf3b5fee
- SHA512 14924430c9a9fe53e954e5a552228b78a2752524ec99d54c47097a20b41871cee1420d5fc288aa0e2923721181b2e9b37d036aeea71319cf2c186eeb7913214a
- SSDEEP 768:xz2/ivET61EUwSFaRZXkNwhl8thjMXehP:xKG1EdSFBNwhl8thjMXehP
- TLSH T1DEC2B6F87AD4551FDC4D0F36E034534036A4C107DAB7EB96424E606478BB3E9AA327DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TextRenderingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.TilemapModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7498a4b52d21b35ef5f24ace2fd95e8d47b8547b040811120be4979b1e80f013
- MD5 75b07567ecaffbfff1bbb8041bb1f257
- SHA1 a3809d70ac4f0a14c8df082ccabc2cbcbf51715a
- SHA512 800589d8deb5ead1bacb46734096b3057d0ca49a7487ec25741d092c7668feb905402608873bfc6d67513cd3d87b73c7359acad897c3fc9b12ae3a09906c4e7e
- SSDEEP 768:1id5ae3DiMnpgj7A9Hy02IcDLB79JP0aNwhl8thjMXehYL:4d5aehpcAZaiaNwhl8thjMXehq
- TLSH T132E2D9F92794913FCFCD1F7AE08547807A30C1228A63E744A74D61B8793A3DDAA217D5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.TilemapModule.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIElementsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71f6b51bf14d4a8c85c151eefc9a20d8549657051c747375ee252214ad8694f5
- MD5 7fb7848cdbe741a01032e77efc0e1a3b
- SHA1 f8027477f37dfd26da1f33e4b2f597c23e78536c
- SHA512 693048919c134968a2212a937627c8a21899f2ab2847fae06089aa4907d02b2f5b6ffd0af85eb418ee065102d63453c6de1760f55ae411dbf1519ca610244e08
- SSDEEP 12288:3O4bBZ/cqjD+Fw6PnheDcepBlHYRxQpI0XGqtTrbUIv2cQVcIUSqDa:3O4LjD++6gqRxQpIatTrYIvvQVcLSqD
- TLSH T175454B2476F49F2AD69E973F9072441913F0E002A757E74B17E5FAB82CB37918C09A93
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1203534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UIElementsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIElementsNativeModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 18b294981a12f08a7804b0fccdc9d21dcb0d17b1f8b5d8b1b25af7f0e6f178c4
- MD5 05da785176b28bed6ee2d518c7e419c2
- SHA1 afd0880e8b98b10daab3cb181b9383203174d82c
- SHA512 a48a744956a9cf051b642a0b88473af5c19c163b0b78230c2513e9bf520d90d89c2b286bc4c44dcf480f8c4d67dbe7817743785b58e9c865df8f90bcdd05cea0
- SSDEEP 768:j9qfAs97dCSEA5ZsZyPt+l7SIjqPNjHqZGE1y4iCqDFSSyj3N5ueeaoxGOPJ0pgv:Ij0yPmOIePNjHRE1y4idFSSyj3N5ueeh
- TLSH T18F23E97C3786A95FC88E1B7AE0F106417B30C1518A13E316675AB0796D7337C8972AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UIElementsNativeModule.pdb
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UIModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14d92c1c764d25c86c322fa37ab8e13703a9e036a3e792664e759f8e4dcdf3dc
- MD5 72ffa512e4456299cf0d9e41c76428a2
- SHA1 287595708033a8891f65b5dfb1d49baa95a3af7f
- SHA512 7921f61b39e55c13e07d25ebe2762fef688245e3dc7060cd70e99c287659fe76e7f5cd820667b79d875eb4e52a25bc6f5cf068a413cd23723e99b4ba70a922c7
- SSDEEP 384:qJQqvq2/UJhHlnlCHeviQvyZC1UqX1zpQkG6Nwhl8taz2hjMXecjOI:qJ9vt8Llk+lyLf6Nwhl8thjMXehI
- TLSH T198B2B3B1B695558FEC4E0F72E035070176B0C127CAE3E3954A8E616D783A3DD6E32BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UIModule.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UNETModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 228600b51831b534de193ddef949879e3c5a7e205b944390eb0dfad29eabd380
- MD5 90b5d6c694cfcf0586503326398f8909
- SHA1 695ffa3e3ba332d420cf567003cb6b553a058f7f
- SHA512 6099ff4710bf13bd92cbef22aca61830b771bcefbcab5a61be365257f2f44596cd81aefdb84f930491d77141c29ff360db6ad847b17ccbd943bc29559b896b95
- SSDEEP 1536:duRsh2DrpobpZzNf230E4pPxdx7edXlHBCmxgbKWN+oHcf3Nwhl8thjMXeheF:dCVovg303Pxdx7edXlHYmxgbKWN+oHcs
- TLSH T18E7308B67BDC591BEAAE2F7FE47005002771E8126623D35E028091B93C7B786D9217B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
85022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UNETModule.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UmbraModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 49db0dcc6fde2e950fc94d018986cee4030682bcc300cfea238b1a361dbe756d
- MD5 520304645864f577b1955a2c98701590
- SHA1 1493141abfc1db20bce7595c783149cf9f088d1d
- SHA512 a769e38016ba390bdbf88fc765bc1217f4e02cef23582eb30627c0c288e97dcb446039b2ed6d582803d2df5f2bf45d4b5eaa5f3ed2bb3d595d2f9ec8bdacf0d9
- SSDEEP 192:b6r4ZyoMPVNzkhl8txXUz2hjMXecjONEQi:b6rnTVNwhl8taz2hjMXecjONT
- TLSH T17E128DF1768825DBEC4A5F73943997813990C427CF72D7244A8E22A4B47D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UmbraModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityAnalyticsCommonModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e02d24c1dbc99566f6bbdc719bce387461e6eb9f3662ec80fc213a25b0c68a4a
- MD5 b45b902ba4674fb9d0714aac38028424
- SHA1 faa60c1e04ee66bfd3476d7feca71973294e3cd6
- SHA512 5e5e1dd2f3dd39eb46afc6b0eb38adf498adba63e7861711af3d4bc703d9608bb265c58ab72fb9ba601b3fc7fab5ec3f2d8d1a239e3e1eb3d842a167208476ef
- SSDEEP 192:NyCKYM7xvJTNzkhl8txXUz2hjMXecjOpBzh:Nyl7xRNwhl8taz2hjMXecjOL
- TLSH T1A922BCF17687219BEC461F73907993817D90C427CE72D325478E22A8B53D1EEBE227A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityAnalyticsCommonModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityAnalyticsModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b61ac52b16c6676976b45e1264545c363fa6421e2fe36a629956425dba5d04b
- MD5 9c41cac0ece308d4e80ef8d46427dec3
- SHA1 b5e97c228ff4c1155cd61d537e572e182adc914d
- SHA512 54d79a56f84785b92384597df85cf0ddccfc49ecf9c3828eedd5e4b048e37a88f038c6f0f71e3796c038d16db231053a898e6c93ca97b38c7ff339bfb37e0e3b
- SSDEEP 768:VkntuXOL4bFgjBTr0FHMFOMe4I8f/WiNwhl8thjMXehN:RXOL0gjNyoXlWiNwhl8thjMXehN
- TLSH T126E2087937D5B62BCCAD1F36D83542002B70D1539523E396164EE2BC783A1EC6AB1BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityAnalyticsModule.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityConnectModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 48be24795799193311a1eaf5a2d5e21b10b285d0f5695ff77a3841c37893f16b
- MD5 58c7f4ec4eed943c9700babbdb2a0427
- SHA1 e982f80898d2f1e87f6fb0087c424c90659f0c99
- SHA512 6e2cc60ff7c571a951a6739583d60923b0303b6ab31af338fa7ff4b2ca4457f31186b1dad14d946d4798764ce32e5171999c14829fe20b5b69bd0baa34bf8af2
- SSDEEP 192:vXR7Yj5RPANzkhl8txXUz2hjMXecjO5w7S:vXwkNwhl8taz2hjMXecjO5U
- TLSH T1163298F13684259BEC091F37D43993803990D427CAF2E75D478E22A9B57E1EE7E217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityConnectModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityCurlModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5be5e88a877ba962c0e11a2389076f010fc3fae8dc26950c6c74c6d39adfc271
- MD5 d958aebfec4f5cc47db872a2ee178b8c
- SHA1 47bfd7a0cfcd16cf989f55d0b55cc003a06c18e9
- SHA512 50386f6cd6338802dbf6804e12db8f89838c19b5b7896bff78ae6703df204db410a85e3f8900e6c2086eb9e2ff55a90d2133cfc397268c3980a8f81d0c99075d
- SSDEEP 192:1vYksn2vxmWnlk42SwYNzkhl8txXUz2hjMXecjOLM4:1vPvZlV2cNwhl8taz2hjMXecjOQ
- TLSH T14B32CDF17A88215BEC091F33942997813990D037CF72D7654B8F22A9B57D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityCurlModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityTestProtocolModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2b0cdc82c5647d2c8ef4d7e34817e0d4ac4e0c779d9e1dd046f78fc6c18b204
- MD5 71112f854e13825694c2634d4e693c01
- SHA1 81cbe23525b7fe235ec53bc4c0a58480edca2f7a
- SHA512 845d7e3e4cb68a79364cd0fad7fedbdb74db1aaf93f55de59fef60185fd5ee330ce2e17330380e167ebf5b649f836182b6c64ec68b956dfae284f02d2cb2eb31
- SSDEEP 192:3D6r4ZyoMb2Nzkhl8txXUz2hjMXecjOb04:3D6rnf2Nwhl8taz2hjMXecjOo
- TLSH T176128CF176C925DBEC4A5F73943993813990C027CFB2D725468E22A4B47D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityTestProtocolModule.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestAssetBundleModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 90b57025b01a92f3fefed80b21e4ab906cc54eb7bcb59ac30b541be711c870c4
- MD5 a73b35e634e81080125232018ac2d7fc
- SHA1 338e7e006c340cccc14baeaa0939a20c03558fc1
- SHA512 c86c4a4e51e9007b75c9f4e150b285b5f567b36a7482bd3067ce15581fad8be2e2e5b9a846c062de6dce241303db2da0b173a674824450aa990c9d77b93643ad
- SSDEEP 192:uxcKEoRyC2M3YRgt35Nzkhl8txXUz2hjMXecjOCd3:u7EpC2MoWt35Nwhl8taz2hjMXecjOU
- TLSH T15442DCF176C5215BEC4A0F73943893817E91D427CE72D326468E22B5B43D2EEBE207A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestAssetBundleModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestAudioModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8dcf2b295cb70b4bf59b90edc1aa47264bf0f168116ec0f47db5c7132815cc5
- MD5 c709899b978efe37eb9cbf4b8d0a9a0f
- SHA1 17313c80179ff8472f92fcd2ad20f1fd204c911d
- SHA512 e2929b857b6d4fc8b2cb0da35546c206e1da64dc8f61d99e7cb80db7b569cd456c9b62ad2f272fa7ec3f303c12116e333b707634cc6814aebbdc573b486a572e
- SSDEEP 192:hyB5ZOXrhZF+sZ6cl65vOcIMNzkhl8txXUz2hjMXecjOEdz9:hy5ElZF+sZ6cE5mcIMNwhl8taz2hjMXJ
- TLSH T11C4210F576992157EC490F73963893813E90C017CE72D329478F62A8B47D2EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestAudioModule.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5ce3ea6584de90d061ca9588e536e3ee4cb548339c00166946c001d67ef04862
- MD5 15ed63e0b6600b28248fac03abdd0d94
- SHA1 b5c9b096f4b3d506292cd7018d8b5d9940d7063a
- SHA512 852eb5ff0828ecf8b71a0f7182a25613490cfbec82bc25d12c5a5497e1e61dbd09daa321394d5e5ad8e735cb50f7992ffe218a4d14e3c2e5eaa9924b9a6c4683
- SSDEEP 768:aG7wJMKJHEClPqu0NNGLMBdZ68cBAyv7Zb8PNwNwhl8thjMXeh5:/8JH5pmNQEG8AlZlNwhl8thjMXeh5
- TLSH T1F323F87A37C49117DDAE0FBA843643402771F012AA27D36E5B8A717838763F0AD10BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
52382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestModule.pdb
mscoree
_CorDllMain
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestTextureModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 582ceedc281d189bbef7850084621d697964e6427600fd9b4dde522c61be51dd
- MD5 b932ff215b0efbfce36995c5dcefba29
- SHA1 4c3ee3630a48be8754ec18e5505d6f3d0ac9c050
- SHA512 27ce80535eb77eda22a3fa69185bca9666d8038e9202ef13981b258ad6a61322ec6b86447087bf0e05379041c3f825b8b3c85e502962eebbd3bf12eefd88fb5b
- SSDEEP 192:jNNzNgUseEnVna1WwWNzkhl8txXUz2hjMXecjOnCBHC:jNEUYnJa1WwWNwhl8taz2hjMXecjOnoH
- TLSH T1983212F276C56557EC0A5F73973853803A90C017CE72E769478E22A4B47E2ED7E217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestTextureModule.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.UnityWebRequestWWWModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 465d6ad6e6691d9664d9e5cb0bebfd510769276f0eca438e4eb6492b6b03ef23
- MD5 7137b48acc9b682acc27b1667ba50561
- SHA1 1d2c9304c70925036b36b9bddeb9b38962724cf5
- SHA512 7d59d399bee9a833a1dc247cdbb5ca00478b8fe7b3d564cbfa8639c98a3c33c4734a3e0e35ff241e6076612fd30b0ff28c4c9af14683750fc59d04ff69e78d7c
- SSDEEP 384:nAgSG4H8OfHG+pgv+1A3oZD6H3POxzKfgPVdIG60l3gac1TbNwhl8taz2hjMXecF:m5vk3oZ2Xkzo8s0VPc1TbNwhl8thjMXh
- TLSH T1849295BA36D45247DC5E0FB3A03583803BA1D106DB33E3694A8EE164B57E3AE6D31365
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.UnityWebRequestWWWModule.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VFXModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 342286d0630a3127a8c9226400861c4b33bb5f62367994ab41b407245ae2b862
- MD5 b3be827d2069ccc8b7736db1303ad026
- SHA1 76c836d99341f4f2e85c55db0ac6954c8377109f
- SHA512 d2ac9593f5b6d005b3e3fdfff4e509f56297af11a3e63cdff4c2158794da84adcca4f26f0b6369679c3493fde306a79ab296b4fdd2184d3a7b6c35bf007a27b3
- SSDEEP 768:BX9PBPnyHweQivfnumiT3XrrKnbq8TyhcuvtCOc3OLByOkNwhl8thjMXehb:3PBPyHHnumYnWyFvtC33O9dkNwhl8thx
- TLSH T1B413B870DBC89B2BDC880676D5279A043B34C1638B73CB94129DA0785D7B3946F276BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VFXModule.pdb
mscoree
_CorDllMain
Name
.text
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e46789289d31dca832738ce234369fdc52767c5d2da62ddb4a9e37a205af7f89
- MD5 fe77041029e4e852ded29ef977490afa
- SHA1 22eed23d58321e475be5eedb3293cf91fb1d61dd
- SHA512 10499f9e7e220edcfa4d2505e803ae32ef167c39914e8a103752f8738a7f2d700765963451e4877d5fd533e5cb3e4524faa2b271987390a3efa4577ca1a18335
- SSDEEP 384:cEw8Xpri2KxRJu4EwchVRBqFQ8wg4kZDPNwhl8taz2hjMXecjOZ:jZ22ARJu4EphVRB38wg4ODNwhl8thjMY
- TLSH T15D6251F136C5615BEC4A1F33947593C07A60D427CE32D759568E31A8B93E0EE7E21BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VRModule.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VehiclesModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f41986bd81b49983bc3a6b2a628bde4f7d188877052c2a0e0145997a47c83275
- MD5 90345c6bebd995ec48c4d076ca87f1a8
- SHA1 2895afefd6ad713c1d271481f48204798b2dc999
- SHA512 c2074acf56cf63cd04fb437442feec1e3e65d7f8bb634182488c4c0df2b84e19158b29e223132bd3cfa52a29e4614eb4ed75daf757c3050b067a6a235c400e54
- SSDEEP 192:r55/p8tiMRuwHfY3w32ooG7Nzkhl8txXUz2hjMXecjOd3s:rL/p8Z4E2HG7Nwhl8taz2hjMXecjO9
- TLSH T1FB523EF1769B649BDC4A1F37E079535039A0C017CB32D355468F61B8B43D2EDBE22AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VehiclesModule.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VideoModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f766050ca5634a88ce06f9ab158b1c9749719b39f978acf59e0ecc194254085
- MD5 be237a3b6c16cfcf709a57f3810c7a59
- SHA1 839f9be1b70177e09e7e50ef3b135366714ceaaf
- SHA512 2f36eb560e26bca0a517a5dffd7ac79f9f48707d3bd02c0c1c68b4df4213a3bf17a61ce17d8e88a015840a7eb6055dd6ec00dd027bcc464a7f67173d9b15b8c9
- SSDEEP 768:9eaqFWQLN47E/P2987zDSuuhNwhl8thjMXeh6:9C47EX2GOuuhNwhl8thjMXeh6
- TLSH T1E8D2A4F273C41587EC965F76F43043803AA4D5068A73DB89076F116C793B29AAE32BE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VideoModule.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.VirtualTexturingModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 347d1293f460fb20681386534242b79d6075f7b3a2a0125822ea333eef0a370b
- MD5 a8ab8b568c65b9129bc70672c25c4563
- SHA1 3106ad51000ad4711fd03afbb72fcdb53da8a003
- SHA512 aa204539ee0837b49c50ad02fe8f1bd7703720da45a8da374d0a1cd323f9f57ba70dc86f11d32f966cf5b34ea9262bd0501dfc4a30147f199ba86d4fc84fa789
- SSDEEP 384:vBOgzfiUcfZu/lXl9l9lQl7l7lhl7l7lnHp8N4AGwGytN/bgci+80cYh43ABjgPn:DKVfc/lXl9l9lQl7l7lhl7l7lnHp8ZGS
- TLSH T139B2A1B53BC0555BECA91F37947553003B60D0239EB7E356028D21A8B87A3DDBE227B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.VirtualTexturingModule.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.WindModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8d389746f94d12f7ea55fd7a41c0b9dbe5de0c8381617873a9987d0ce645ab6e
- MD5 af5381466372bda22267da96104ab8ac
- SHA1 6626d1623efc41ac2e7986261aa64a4c2b5b1354
- SHA512 bd88aaf7df62165bef77d8c94a7c614e923a615e96a639bbaf32b41ce4c854da943f8e711122175423afa5da78f05e0d4e16192c49b9fa85b0b19eb1d182d79f
- SSDEEP 192:hc5SB26+DBNzkhl8txXUz2hjMXecjOIRjx:h+dDBNwhl8taz2hjMXecjOw
- TLSH T1EF22EEF17684169BEC561F37D03993813990C027CF72E7664A8F22A4B57D1EEBE217A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.WindModule.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.XRModule.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4747a37c33f6e449b478feb5d7ddddaade6efd667e60de07f772ab1da6eaf186
- MD5 cef14b47ad94d323a11d795729ae5496
- SHA1 571b807f8e76ca6f99b341f25cdac6eb59d0d522
- SHA512 186b0651930103cc1d4dbd8aec78da0f2af4e73ac7e6bdf61c259f9ddb319b7ff914f776b5bb9d4d72727c1548fc12c9ace03e572f0d15d7f11094393679bc1b
- SSDEEP 1536:Q+X4dqIXPaTS4jouIShudf+ZTNwhl8thjMXehi:Q5nXPaTS4jI2NwD
- TLSH T14D4329B137C4555BDDDE1B76F4B4C2002B30E056A633DB5B52E990B834777E88E22BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UnityEngine.XRModule.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/BepInEx/unity-libs/UnityEngine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a0949b9cf7cc5f002a570ece43095b6498a7dc485f14b217ad427eeadb28cdf2
- MD5 e714fbd7461d85957504fef110769322
- SHA1 5e509fcd96a5e6aa38ec9adf74717abedf3682e6
- SHA512 25886755984a5e1584c24853c02742febceca59abaacbed580fef8578b349edb9fc31c373055b1ebd9cc63be91a5952394b600bcd54b3967588eaf7bf140081c
- SSDEEP 1536:2BUfnPxcW/EgkszBmPK8BSst+MhUhBvWMZuZ5S+InBMsel2QucFplk3v:lPxcW/EgkRb3+7vR+m
- TLSH T103A3C4B216C44E72CC9E0FBBBC6745C0AFF04A821A7A8B67245B8109647FDC86B36755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/bokken/build/output/unity/unity/build/LinuxStandaloneSupport/Variations/linux64_player_nondevelopment_mono/Data/Managed/UnityEngine.pdb
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/GameAssembly.dll
- IMPHASH 110babf15ddf388fa7db7f333d42a9e1
- SHA256 881997c5822a704f452fb38a34555199aabc8fa445061c9b5a81b543a1498ce3
- MD5 94134d905fed778daf72b03049ae8162
- SHA1 54d888a4ca9f0d2bc3ec263c9c5f28b41e802f93
- SHA512 c1b896221a5f5994fa474b63e9e02b6568051df84701f352a55f14271c1d459a85a37e9cb43e7b9365b58b3205789da8561406ec87ae5cf3fb96219d8790ada8
- SSDEEP 786432:+D/ZGv04R6rgAZqp1B6otxkjf9EaCTgJ:O/ZGs4RuZqp1B6otxkjyU
- TLSH T175C74A6ABA708058C06EE1B89E13149FDBF138409F60ABCB65D04B9D1F737D4987BA71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4280380
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\git\CodeNameSekiren\Library\Bee\artifacts\WinPlayerBuildProgram\u1oik\GameAssembly.pdb
kernel32
GetSystemInfo
GetSystemTimeAsFileTime
GetVersionExW
GetModuleHandleW
GetProcAddress
GetComputerNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
CreateDirectoryW
CreateFileW
DeleteFileW
DeleteVolumeMountPointW
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLogicalDrives
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
WriteFile
CloseHandle
DuplicateHandle
SetThreadErrorMode
GetOverlappedResult
SetEvent
ResetEvent
CreateEventW
GetCurrentProcessId
GetNativeSystemInfo
FormatMessageW
CopyFileExW
MoveFileExW
ReplaceFileW
GetTimeZoneInformation
GetDynamicTimeZoneInformation
GetFileInformationByHandleEx
GetConsoleMode
GetLongPathNameW
GetTempPathW
GetModuleFileNameA
GetModuleFileNameW
WideCharToMultiByte
GetACP
GetLocaleInfoW
GetThreadLocale
GetCurrentDirectoryW
FindClose
IsDebuggerPresent
WaitForSingleObjectEx
WaitForMultipleObjectsEx
Sleep
SwitchToThread
VirtualAlloc
VirtualQuery
CreateFileMappingW
OpenFileMappingW
GetCurrentProcess
UnmapViewOfFile
RtlCaptureStackBackTrace
RaiseException
SetLastError
ReleaseSemaphore
ReleaseMutex
SleepEx
CreateMutexW
CreateSemaphoreW
QueueUserAPC
CreateThread
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
FreeLibrary
LoadLibraryW
GlobalAlloc
GlobalFree
SetFilePointer
SuspendThread
ResumeThread
GetThreadContext
VirtualFree
WriteConsoleW
GetProcessHeap
GetCommandLineW
GetCommandLineA
SetStdHandle
HeapQueryInformation
HeapSize
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
QueryPerformanceFrequency
GetOEMCP
IsValidCodePage
RtlUnwind
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapReAlloc
HeapAlloc
HeapFree
GetConsoleOutputCP
ReadConsoleW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
QueryPerformanceCounter
GetLastError
SetEnvironmentVariableW
GetEnvironmentVariableW
RtlUnwindEx
TerminateProcess
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
GetCPInfo
GetStringTypeW
LCMapStringEx
MultiByteToWideChar
DecodePointer
EncodePointer
InitializeCriticalSectionEx
RtlPcToFileHeader
GetSystemTimes
FreeEnvironmentStringsW
MapViewOfFile
GetEnvironmentStringsW
user32
MessageBoxA
advapi32
GetUserNameW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
ole32
CoInitializeEx
CoGetContextToken
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayDestroy
SafeArrayGetVartype
SafeArrayCreate
SysStringLen
SysFreeString
shell32
SHGetKnownFolderPath
SHGetFolderPathW
ws2_32
inet_ntop
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
WSAPoll
WSASend
gethostbyaddr
socket
shutdown
setsockopt
WSACleanup
select
recvfrom
ntohs
ntohl
listen
inet_ntoa
inet_addr
htons
htonl
getsockopt
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
gethostname
WSAGetLastError
send
WSARecv
WSAIoctl
iphlpapi
GetIfEntry
GetAdaptersAddresses
GetNetworkParams
dbghelp
SymInitialize
SymFromAddr
baselib
?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z
?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z
?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ
?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ
?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z
?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z
?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderIsFinished
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderHasMoreOutput
BrotliEncoderSetParameter
CloseNLSocket
CloseZStream
CreateNLSocket
CreateZStream
DllCanUnloadNow
DllGetActivationFactory
Flush
GlobalizationNative_GetTimeZoneDisplayName
ReadEvents
ReadZStream
SystemNative_FStat2
SystemNative_UTime
WriteZStream
il2cpp_add_internal_call
il2cpp_alloc
il2cpp_allocation_granularity
il2cpp_array_class_get
il2cpp_array_element_size
il2cpp_array_get_byte_length
il2cpp_array_length
il2cpp_array_new
il2cpp_array_new_full
il2cpp_array_new_specific
il2cpp_array_object_header_size
il2cpp_assembly_get_image
il2cpp_bounded_array_class_get
il2cpp_capture_memory_snapshot
il2cpp_class_array_element_size
il2cpp_class_enum_basetype
il2cpp_class_for_each
il2cpp_class_from_il2cpp_type
il2cpp_class_from_name
il2cpp_class_from_system_type
il2cpp_class_from_type
il2cpp_class_get_assemblyname
il2cpp_class_get_bitmap
il2cpp_class_get_bitmap_size
il2cpp_class_get_data_size
il2cpp_class_get_declaring_type
il2cpp_class_get_element_class
il2cpp_class_get_events
il2cpp_class_get_field_from_name
il2cpp_class_get_fields
il2cpp_class_get_flags
il2cpp_class_get_image
il2cpp_class_get_interfaces
il2cpp_class_get_method_from_name
il2cpp_class_get_methods
il2cpp_class_get_name
il2cpp_class_get_namespace
il2cpp_class_get_nested_types
il2cpp_class_get_parent
il2cpp_class_get_properties
il2cpp_class_get_property_from_name
il2cpp_class_get_rank
il2cpp_class_get_static_field_data
il2cpp_class_get_type
il2cpp_class_get_type_token
il2cpp_class_get_userdata_offset
il2cpp_class_has_attribute
il2cpp_class_has_parent
il2cpp_class_has_references
il2cpp_class_instance_size
il2cpp_class_is_abstract
il2cpp_class_is_assignable_from
il2cpp_class_is_blittable
il2cpp_class_is_enum
il2cpp_class_is_generic
il2cpp_class_is_inflated
il2cpp_class_is_interface
il2cpp_class_is_subclass_of
il2cpp_class_is_valuetype
il2cpp_class_num_fields
il2cpp_class_set_userdata
il2cpp_class_value_size
il2cpp_current_thread_get_frame_at
il2cpp_current_thread_get_stack_depth
il2cpp_current_thread_get_top_frame
il2cpp_current_thread_walk_frame_stack
il2cpp_custom_attrs_construct
il2cpp_custom_attrs_free
il2cpp_custom_attrs_from_class
il2cpp_custom_attrs_from_method
il2cpp_custom_attrs_get_attr
il2cpp_custom_attrs_has_attr
il2cpp_debug_get_method_info
il2cpp_debugger_set_agent_options
il2cpp_domain_assembly_open
il2cpp_domain_get
il2cpp_domain_get_assemblies
il2cpp_exception_from_name_msg
il2cpp_field_get_flags
il2cpp_field_get_name
il2cpp_field_get_offset
il2cpp_field_get_parent
il2cpp_field_get_type
il2cpp_field_get_value
il2cpp_field_get_value_object
il2cpp_field_has_attribute
il2cpp_field_is_literal
il2cpp_field_set_value
il2cpp_field_set_value_object
il2cpp_field_static_get_value
il2cpp_field_static_set_value
il2cpp_format_exception
il2cpp_format_stack_trace
il2cpp_free
il2cpp_free_captured_memory_snapshot
il2cpp_gc_alloc_fixed
il2cpp_gc_collect
il2cpp_gc_collect_a_little
il2cpp_gc_disable
il2cpp_gc_enable
il2cpp_gc_foreach_heap
il2cpp_gc_free_fixed
il2cpp_gc_get_heap_size
il2cpp_gc_get_max_time_slice_ns
il2cpp_gc_get_used_size
il2cpp_gc_has_strict_wbarriers
il2cpp_gc_is_disabled
il2cpp_gc_is_incremental
il2cpp_gc_set_external_allocation_tracker
il2cpp_gc_set_external_wbarrier_tracker
il2cpp_gc_set_max_time_slice_ns
il2cpp_gc_set_mode
il2cpp_gc_start_incremental_collection
il2cpp_gc_wbarrier_set_field
il2cpp_gchandle_foreach_get_target
il2cpp_gchandle_free
il2cpp_gchandle_get_target
il2cpp_gchandle_new
il2cpp_gchandle_new_weakref
il2cpp_get_corlib
il2cpp_get_exception_argument_null
il2cpp_image_get_assembly
il2cpp_image_get_class
il2cpp_image_get_class_count
il2cpp_image_get_entry_point
il2cpp_image_get_filename
il2cpp_image_get_name
il2cpp_init
il2cpp_init_utf16
il2cpp_is_debugger_attached
il2cpp_is_vm_thread
il2cpp_method_get_class
il2cpp_method_get_declaring_type
il2cpp_method_get_flags
il2cpp_method_get_from_reflection
il2cpp_method_get_name
il2cpp_method_get_object
il2cpp_method_get_param
il2cpp_method_get_param_count
il2cpp_method_get_param_name
il2cpp_method_get_return_type
il2cpp_method_get_token
il2cpp_method_has_attribute
il2cpp_method_is_generic
il2cpp_method_is_inflated
il2cpp_method_is_instance
il2cpp_monitor_enter
il2cpp_monitor_exit
il2cpp_monitor_pulse
il2cpp_monitor_pulse_all
il2cpp_monitor_try_enter
il2cpp_monitor_try_wait
il2cpp_monitor_wait
il2cpp_native_stack_trace
il2cpp_object_get_class
il2cpp_object_get_size
il2cpp_object_get_virtual_method
il2cpp_object_header_size
il2cpp_object_new
il2cpp_object_unbox
il2cpp_offset_of_array_bounds_in_array_object_header
il2cpp_offset_of_array_length_in_array_object_header
il2cpp_override_stack_backtrace
il2cpp_profiler_install
il2cpp_profiler_install_allocation
il2cpp_profiler_install_enter_leave
il2cpp_profiler_install_fileio
il2cpp_profiler_install_gc
il2cpp_profiler_install_thread
il2cpp_profiler_set_events
il2cpp_property_get_flags
il2cpp_property_get_get_method
il2cpp_property_get_name
il2cpp_property_get_parent
il2cpp_property_get_set_method
il2cpp_raise_exception
il2cpp_register_debugger_agent_transport
il2cpp_register_log_callback
il2cpp_resolve_icall
il2cpp_runtime_class_init
il2cpp_runtime_invoke
il2cpp_runtime_invoke_convert_args
il2cpp_runtime_object_init
il2cpp_runtime_object_init_exception
il2cpp_runtime_unhandled_exception_policy_set
il2cpp_set_commandline_arguments
il2cpp_set_commandline_arguments_utf16
il2cpp_set_config
il2cpp_set_config_dir
il2cpp_set_config_utf16
il2cpp_set_data_dir
il2cpp_set_default_thread_affinity
il2cpp_set_find_plugin_callback
il2cpp_set_memory_callbacks
il2cpp_set_temp_dir
il2cpp_shutdown
il2cpp_start_gc_world
il2cpp_stats_dump_to_file
il2cpp_stats_get_value
il2cpp_stop_gc_world
il2cpp_string_chars
il2cpp_string_intern
il2cpp_string_is_interned
il2cpp_string_length
il2cpp_string_new
il2cpp_string_new_len
il2cpp_string_new_utf16
il2cpp_string_new_wrapper
il2cpp_thread_attach
il2cpp_thread_current
il2cpp_thread_detach
il2cpp_thread_get_all_attached_threads
il2cpp_thread_get_frame_at
il2cpp_thread_get_stack_depth
il2cpp_thread_get_top_frame
il2cpp_thread_walk_frame_stack
il2cpp_type_equals
il2cpp_type_get_assembly_qualified_name
il2cpp_type_get_attrs
il2cpp_type_get_class_or_element_class
il2cpp_type_get_name
il2cpp_type_get_name_chunked
il2cpp_type_get_object
il2cpp_type_get_type
il2cpp_type_is_byref
il2cpp_type_is_pointer_type
il2cpp_type_is_static
il2cpp_unhandled_exception
il2cpp_unity_install_unitytls_interface
il2cpp_unity_liveness_allocate_struct
il2cpp_unity_liveness_calculation_from_root
il2cpp_unity_liveness_calculation_from_statics
il2cpp_unity_liveness_finalize
il2cpp_unity_liveness_free_struct
il2cpp_unity_set_android_network_up_state_func
il2cpp_value_box
jinfo_get_method
mini_get_interp_callbacks
mini_jit_info_table_find
mono_arch_clear_breakpoint
mono_arch_context_get_int_reg
mono_arch_context_set_int_reg
mono_arch_set_breakpoint
mono_arch_setup_resume_sighandler_ctx
mono_arch_skip_breakpoint
mono_arch_skip_single_step
mono_arch_start_single_stepping
mono_arch_stop_single_stepping
mono_array_element_size
mono_array_length
mono_assembly_get_image
mono_class_from_mono_type
mono_class_get_byref_type
mono_class_get_context
mono_class_get_element_class
mono_class_get_fields
mono_class_get_flags
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_parent
mono_class_get_properties
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_instance_size
mono_class_is_assignable_from
mono_class_is_enum
mono_class_is_valuetype
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_value_size
mono_class_vtable
mono_debug_find_method
mono_debug_free_locals
mono_debug_il_offset_from_address
mono_debug_lookup_locals
mono_domain_foreach
mono_domain_get
mono_domain_get_assemblies_iter
mono_domain_get_corlib
mono_domain_set
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_field_get_name
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_set_value
mono_field_static_set_value
mono_find_prev_seq_point_for_native_offset
mono_free_method_signatures
mono_gc_register_root
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_new_weakref
mono_get_lmf_addr
mono_get_root_domain
mono_get_runtime_build_info
mono_get_string_class
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_is_dynamic
mono_jit_find_compiled_method_with_jit_info
mono_jit_info_get_method
mono_jit_info_table_find
mono_marshal_method_from_wrapper
mono_metadata_free_mh
mono_method_full_name
mono_method_get_class
mono_method_get_context
mono_method_get_declaring_generic_method
mono_method_get_flags
mono_method_get_generic_container
mono_method_get_header_checked
mono_method_get_name
mono_method_get_param_names
mono_method_get_token
mono_method_is_generic
mono_method_is_inflated
mono_method_signature
mono_object_get_class
mono_object_get_type
mono_object_get_virtual_method
mono_object_hash
mono_object_unbox
mono_pal_init
mono_property_get_get_method
mono_property_get_name
mono_property_get_parent
mono_property_get_set_method
mono_restore_context
mono_runtime_is_shutting_down
mono_runtime_quit
mono_set_is_debugger_attached
mono_set_lmf
mono_string_chars
mono_string_length
mono_string_new
mono_string_to_utf8_checked
mono_thread_attach
mono_thread_current
mono_thread_detach
mono_thread_get_main
mono_thread_state_init_from_current
mono_thread_state_init_from_monoctx
mono_thread_suspend_all_other_threads
mono_type_full_name
mono_type_generic_inst_is_valuetype
mono_type_get_attrs
mono_type_get_class
mono_type_get_name_full
mono_type_get_type
mono_type_is_byref
mono_type_is_reference
mono_type_is_struct
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
il2cpp
Size
33.8MB
Virtual Size
33.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9.3MB
Virtual Size
9.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.6MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
910KB
Virtual Size
909KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=34, id=259, version=30795,
count=181, id=261, version=30795,
count=50, id=260, version=30795,
count=2, id=253, version=34321,
count=11, id=259, version=34321,
count=14, id=260, version=34321,
count=81, id=261, version=34321,
count=2, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=262, version=30795,
count=21, id=257, version=30795,
count=276, id=1, productName=Unmarked objects,
count=529, id=261, version=34810,
count=135, id=260, version=34810,
count=1, id=256, version=34810,
count=1, id=258, version=34810,
KunoichiSekiren-0.1.0/KunoichiSekiren.exe
- IMPHASH 5f74a5c747508e2822fdb9b687deaf42
- SHA256 6192bcf1110f23165678538d0b5bbdc511f6934b875a21bbc6a4b51142db001a
- MD5 6314dab78639dd0e5e5327fa1b8cd567
- SHA1 8a1e5f474c9ed3e96c2b0e667a776b77ef0ef8ed
- SHA512 179ebd555625a2b6021ea391ef69c21e102bd72290567f2693b4f0dca02860c0d12598d17e1ddb076092b0644da267eafdc2088f1ff3f7e1102cb76e7dc24320
- SSDEEP 12288:3oCCvcXeGqyQd2y5Shu6iKYNll3DbTttzJBVj:YRX03s6yNll3Db9BF
- TLSH T1ABD4F5C277C706C6ECF441B7E45D0D290A2CFC2F5294875E58ECA9A70CE797A0E4A927
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildslave\unity\build\artifacts\WindowsPlayer\Win64_VS2019_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb
unityplayer
UnityMain
kernel32
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
RtlUnwindEx
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
552KB
Virtual Size
552KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=26715,
count=5, id=259, version=26715,
count=136, id=261, version=26715,
count=2, id=257, version=26715,
count=37, id=261, version=29118,
count=16, id=260, version=29118,
count=9, id=259, version=29118,
count=3, id=257, productName=VS2019 v16.8.0 build 29333, version=29333,
count=85, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Plugins/x86_64/lib_burst_generated.dll
- SHA256 a130b8631ea32480f93e40e740ae913ddc821516aca29b2382c6b0128ff927cf
- MD5 a40ee5e042b2d24bb34b8ab788f46c0d
- SHA1 32c0de4e2d37389e52da1c9ab5fdcfc03c798675
- SHA512 623fa0d0c70f3c5fe70c93a374bd14df7b2292dfe1e0a7be74a1029772ac33488d3577e86c73f9412c8d366d5861ee8a98490bad8d584f51ca8f95490f72cd9c
- SSDEEP 3072:6BHFKWg+uIuoZgaCIisrlhvUZW5t8Nus1W3jWA6:aLuoZDXrLvUZWJs1W3jWA
- TLSH T1ECF36C7820C7246DD12B80B4072FA9A265733C8917841EE76AE054763DF5BD2EF7C92B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
1998da082e6413092f0e7bcd5a0e9331
26c6d10914da2fc98755b3533c59141e
34e8fec66b799db60cf2f2f751c3bdd9
5bf0a813706ef9287fcaa55dd0ccb876
670478f3fb3f285eeace534fbe61a03e
77fc393cb521ac129b1392d4eb94d29a
89425a97f3f500fa810ad03f0c382542
8c2be93e18276203cbd918daa2748a10
a185c62eba2497c95197140e5282b27a
aa309157da5950aa53ed6075709e6e40
b04c75a68edf1d166f6547f2ea0e8928
burst.initialize
burst.initialize.1998da082e6413092f0e7bcd5a0e9331_avx2
burst.initialize.1998da082e6413092f0e7bcd5a0e9331_x64_sse2
burst.initialize.26c6d10914da2fc98755b3533c59141e_avx2
burst.initialize.26c6d10914da2fc98755b3533c59141e_x64_sse2
burst.initialize.34e8fec66b799db60cf2f2f751c3bdd9_avx2
burst.initialize.34e8fec66b799db60cf2f2f751c3bdd9_x64_sse2
burst.initialize.5bf0a813706ef9287fcaa55dd0ccb876_avx2
burst.initialize.5bf0a813706ef9287fcaa55dd0ccb876_x64_sse2
burst.initialize.670478f3fb3f285eeace534fbe61a03e_avx2
burst.initialize.670478f3fb3f285eeace534fbe61a03e_x64_sse2
burst.initialize.77fc393cb521ac129b1392d4eb94d29a_avx2
burst.initialize.77fc393cb521ac129b1392d4eb94d29a_x64_sse2
burst.initialize.89425a97f3f500fa810ad03f0c382542_avx2
burst.initialize.89425a97f3f500fa810ad03f0c382542_x64_sse2
burst.initialize.8c2be93e18276203cbd918daa2748a10_avx2
burst.initialize.8c2be93e18276203cbd918daa2748a10_x64_sse2
burst.initialize.a185c62eba2497c95197140e5282b27a_avx2
burst.initialize.a185c62eba2497c95197140e5282b27a_x64_sse2
burst.initialize.aa309157da5950aa53ed6075709e6e40_avx2
burst.initialize.aa309157da5950aa53ed6075709e6e40_x64_sse2
burst.initialize.b04c75a68edf1d166f6547f2ea0e8928_avx2
burst.initialize.b04c75a68edf1d166f6547f2ea0e8928_x64_sse2
burst.initialize.d23a07cb3c3f217121d5bf94e76674f0_avx2
burst.initialize.d23a07cb3c3f217121d5bf94e76674f0_x64_sse2
burst.initialize.da352d92cabf024fc9986011d52a4537_avx2
burst.initialize.da352d92cabf024fc9986011d52a4537_x64_sse2
burst.initialize.e046a1595d0148509657ed4dbcb52a86_avx2
burst.initialize.e046a1595d0148509657ed4dbcb52a86_x64_sse2
burst.initialize.e943843acfb78f5f2f3716a6553740d9_avx2
burst.initialize.e943843acfb78f5f2f3716a6553740d9_x64_sse2
burst.initialize.externals.1998da082e6413092f0e7bcd5a0e9331_avx2
burst.initialize.externals.1998da082e6413092f0e7bcd5a0e9331_x64_sse2
burst.initialize.externals.26c6d10914da2fc98755b3533c59141e_avx2
burst.initialize.externals.26c6d10914da2fc98755b3533c59141e_x64_sse2
burst.initialize.externals.34e8fec66b799db60cf2f2f751c3bdd9_avx2
burst.initialize.externals.34e8fec66b799db60cf2f2f751c3bdd9_x64_sse2
burst.initialize.externals.5bf0a813706ef9287fcaa55dd0ccb876_avx2
burst.initialize.externals.5bf0a813706ef9287fcaa55dd0ccb876_x64_sse2
burst.initialize.externals.670478f3fb3f285eeace534fbe61a03e_avx2
burst.initialize.externals.670478f3fb3f285eeace534fbe61a03e_x64_sse2
burst.initialize.externals.77fc393cb521ac129b1392d4eb94d29a_avx2
burst.initialize.externals.77fc393cb521ac129b1392d4eb94d29a_x64_sse2
burst.initialize.externals.89425a97f3f500fa810ad03f0c382542_avx2
burst.initialize.externals.89425a97f3f500fa810ad03f0c382542_x64_sse2
burst.initialize.externals.8c2be93e18276203cbd918daa2748a10_avx2
burst.initialize.externals.8c2be93e18276203cbd918daa2748a10_x64_sse2
burst.initialize.externals.a185c62eba2497c95197140e5282b27a_avx2
burst.initialize.externals.a185c62eba2497c95197140e5282b27a_x64_sse2
burst.initialize.externals.aa309157da5950aa53ed6075709e6e40_avx2
burst.initialize.externals.aa309157da5950aa53ed6075709e6e40_x64_sse2
burst.initialize.externals.b04c75a68edf1d166f6547f2ea0e8928_avx2
burst.initialize.externals.b04c75a68edf1d166f6547f2ea0e8928_x64_sse2
burst.initialize.externals.d23a07cb3c3f217121d5bf94e76674f0_avx2
burst.initialize.externals.d23a07cb3c3f217121d5bf94e76674f0_x64_sse2
burst.initialize.externals.da352d92cabf024fc9986011d52a4537_avx2
burst.initialize.externals.da352d92cabf024fc9986011d52a4537_x64_sse2
burst.initialize.externals.e046a1595d0148509657ed4dbcb52a86_avx2
burst.initialize.externals.e046a1595d0148509657ed4dbcb52a86_x64_sse2
burst.initialize.externals.e943843acfb78f5f2f3716a6553740d9_avx2
burst.initialize.externals.e943843acfb78f5f2f3716a6553740d9_x64_sse2
burst.initialize.statics.1998da082e6413092f0e7bcd5a0e9331_avx2
burst.initialize.statics.1998da082e6413092f0e7bcd5a0e9331_x64_sse2
burst.initialize.statics.26c6d10914da2fc98755b3533c59141e_avx2
burst.initialize.statics.26c6d10914da2fc98755b3533c59141e_x64_sse2
burst.initialize.statics.34e8fec66b799db60cf2f2f751c3bdd9_avx2
burst.initialize.statics.34e8fec66b799db60cf2f2f751c3bdd9_x64_sse2
burst.initialize.statics.5bf0a813706ef9287fcaa55dd0ccb876_avx2
burst.initialize.statics.5bf0a813706ef9287fcaa55dd0ccb876_x64_sse2
burst.initialize.statics.670478f3fb3f285eeace534fbe61a03e_avx2
burst.initialize.statics.670478f3fb3f285eeace534fbe61a03e_x64_sse2
burst.initialize.statics.77fc393cb521ac129b1392d4eb94d29a_avx2
burst.initialize.statics.77fc393cb521ac129b1392d4eb94d29a_x64_sse2
burst.initialize.statics.89425a97f3f500fa810ad03f0c382542_avx2
burst.initialize.statics.89425a97f3f500fa810ad03f0c382542_x64_sse2
burst.initialize.statics.8c2be93e18276203cbd918daa2748a10_avx2
burst.initialize.statics.8c2be93e18276203cbd918daa2748a10_x64_sse2
burst.initialize.statics.a185c62eba2497c95197140e5282b27a_avx2
burst.initialize.statics.a185c62eba2497c95197140e5282b27a_x64_sse2
burst.initialize.statics.aa309157da5950aa53ed6075709e6e40_avx2
burst.initialize.statics.aa309157da5950aa53ed6075709e6e40_x64_sse2
burst.initialize.statics.b04c75a68edf1d166f6547f2ea0e8928_avx2
burst.initialize.statics.b04c75a68edf1d166f6547f2ea0e8928_x64_sse2
burst.initialize.statics.d23a07cb3c3f217121d5bf94e76674f0_avx2
burst.initialize.statics.d23a07cb3c3f217121d5bf94e76674f0_x64_sse2
burst.initialize.statics.da352d92cabf024fc9986011d52a4537_avx2
burst.initialize.statics.da352d92cabf024fc9986011d52a4537_x64_sse2
burst.initialize.statics.e046a1595d0148509657ed4dbcb52a86_avx2
burst.initialize.statics.e046a1595d0148509657ed4dbcb52a86_x64_sse2
burst.initialize.statics.e943843acfb78f5f2f3716a6553740d9_avx2
burst.initialize.statics.e943843acfb78f5f2f3716a6553740d9_x64_sse2
d23a07cb3c3f217121d5bf94e76674f0
da352d92cabf024fc9986011d52a4537
e046a1595d0148509657ed4dbcb52a86
e943843acfb78f5f2f3716a6553740d9
Name
.text
Size
149KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Plugins/x86_64/sqlite3.dll
- IMPHASH 9d201bd141fcea19df09c999847d730e
- SHA256 eda5024b1cebf7eb43c500558b8f0ddbde458527ee41f13f47af0c74d973242f
- MD5 2bf12a095766ed5a9db92cecd5da43f8
- SHA1 a486e1f8f2873282976081dac01e13ac7e4dec20
- SHA512 6287429d86deacf2d7498ba04f13e7073d74aee163788b813cbfca5c50f1f0be72b9de506f8986b397c61dbc40e96b0184fd872e2fce47fcf5be02918a81d91a
- SSDEEP 24576:QvuO2mt3amzRU12pD0pPC075HJyGykHEsth0SKyyqWBhzt1Wx6:QvuVNmpDK5HJBkktWXt1G
- TLSH T11C956B4BF2B400ACD5ABC1798A53474BEAB174081730A7DF9590CB662F13BF66A7E314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
1459880
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\dev\sqlite\core\sqlite3.pdb
kernel32
FlushViewOfFile
GetProcessHeap
OutputDebugStringW
OutputDebugStringA
WaitForSingleObjectEx
WaitForSingleObject
WriteFile
WideCharToMultiByte
UnmapViewOfFile
UnlockFileEx
UnlockFile
SystemTimeToFileTime
Sleep
SetFilePointer
SetEndOfFile
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
LoadLibraryA
HeapCompact
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetVersionExA
GetTickCount
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetProcAddress
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentProcessId
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CloseHandle
AreFileApisANSI
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
ExitThread
CreateThread
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTimeZoneInformation
HeapSetInformation
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
RtlUnwindEx
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
RaiseException
CompareStringA
CompareStringW
SetEnvironmentVariableA
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_fts3_may_be_corrupt
sqlite3_fts5_may_be_corrupt
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_unsupported_selecttrace
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
229KB
Virtual Size
229KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=126, id=1, productName=Unmarked objects,
count=27, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=91, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Resources/unity default resources
- SHA256 b49c082097cc7cc1523d89ec7466ebd5e3b30ea4dd62f9de3caf12c37660ff3b
- MD5 c2cd399a2c8f7295c2e2babae84cb6e9
- SHA1 3b53091c74d7be679fc19106aded74cc303badd8
- SHA512 f1ba27ec5a66d232f5c2d1f0968dbead48924a9ca7d59e26b98b11e5d5040b6076e64aae7724513178f5b998a9e4579b5961e0dd866aac9201c73acf054b3eed
- SSDEEP 6144:aulVhI8aICPGrdVKIaglj3aDopEOD2hg/3YWO/OJ9WqOmKySHCkcCBWcbjutYRKh:auCuljbKhggPOjdOZ78OQ
- TLSH T14126910396A0E4DAD89B30BD893B2DE0D19F95F8C6D50FC2272B1128DBA35B767119DC
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/Resources/unity_builtin_extra
- SHA256 10cf0bf4288684a6da5722cb17073e1243d1f4f3c63858832b95c58893772d68
- MD5 f2fa6e8c5be2002cfbe094f2adf7eac9
- SHA1 b6ce8ec3050720debde4fb2cd519d00c9609b44d
- SHA512 419513d8f164e187f6cd025deddaf0a90cfb1cb4d525ec3618b4d34b2b02592bb9baeb3872f2c7b4d1277f886a35e15347717f5aed6b8ea07a4ebef38c470d3a
- SSDEEP 3072:B5lxIGSxxNMSs9XZ0IMfllljcolljymg8l5zbM+i7MX5:B50vxxKlMf5cWymgY/G7A5
- TLSH T1D6840A79635B583FCC21153748BA0B739732A5F81BEE0F236E6C6F6C28E5258AB11744
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/RuntimeInitializeOnLoads.json
- SHA256 49044063dc0ea71d20ae58f76a1c270c874319da5e842c62fcd1a398ce7547d3
- MD5 db4cb63d92c9fc3e15b0dc63d2db70d0
- SHA1 34e274d2a2938410bb2968764ca39a7a3fb2c750
- SHA512 9f3779d3843b2ce80c46feae95345c7edb33d2a50392caba781d5fc2b316107d91470cc27cec0fe89a1e9ab5e7f7b70cbd05e03f450855f3c4556cf40ce2b85f
- TLSH T1E361D6AC37C28F3F1F8BC79778BA6A4D3494090F9AC74C00E8B81E2F9676201258512D
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/ScriptingAssemblies.json
- SHA256 2b52b6baa50e564d8caeb62cae0f424423a634153584f4281e95ff6fa260a23f
- MD5 dd971bd3b6081f13db139c82c8cfa98c
- SHA1 a1ee42da0ca9d7d13a44ea867ccface71f4d03b2
- SHA512 fc63a44bad8c5e72c52cac48b1ccd1a940af19a18ffe2ebbc8b4c2225f0eb3034aad48cb7b4b9d906ee736a6cdc1c1ad49d81fae6d55a5411d65e4c078fc779c
- SSDEEP 48:YXjrAYrwXrjFR/ClouNzoVPQGoSfTG/fj1z+Amlvr9mueJddSx:mjmjr/MouNzoyjgAmHmXEx
- TLSH T1108102B6C58B26C72ECC5EC38C349C8C39D350A60A65D0244EAEA79FA978CD67D0C6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/AddressablesLink/link.xml
- SHA256 283bf7b58ecdbb83817b92fc9735a64b8e5d7561bba987ed3f353e9a05092195
- MD5 6642a7256f6c90f8d04701f2653fc0e8
- SHA1 c3f1d0129d1e7d42076ad16bbf8fae9ecc936f84
- SHA512 6bd9f41ad3551b09c24c31a497753775750c8ec643fac77fa9b41df112d2acc398d394dbbdc38cb5d836b915679cbecceeb37a461a4cb4360783cdb72760ca65
- SSDEEP 384:vaNyEhzwzEazkz0zWzEzLzNz6zCz7zxzMHpJwxzDzgzezqzEQzbzTzEozVXv/2ox:vYIqEUy4
- TLSH T191C2F8B152983DAB4B76AF111A2A44D6743C81FB076871AA3FF2393B7FB65011623317
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/10fc854e30be554fb33fe683df820872_unitybuiltinshaders.bundle
- SHA256 5a42397a3430bd8f7cf815ca5fe28b1961b0f4a247ddcc4594b4a319e188e668
- MD5 687e08a320cb9d5298059034d5512007
- SHA1 13a53d59935a946599ad423112b029b716656ba7
- SHA512 22d33528b71b292d658122115762f350e6dfcb7a25e8d4cfaacd2d464eb3ccddd3bf984a5a5160b32cf44c3fb4fb28c434fa60e4e1e375c1cdcd5b7da485d17d
- SSDEEP 1536:M3cw1emDCKX9nhbWvRByep0+KF6CH5hvwhW8g3WMpOiQEt:M3n1HD7GyOgLWJgmMs4t
- TLSH T1E443AE7B926B82DC8000662181DD137AB55ED1DEB07AE6FCC33FD1276C8262A375D978
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/bullet_assets_all.bundle
- SHA256 1e64871a82b66fe720325e2724de92de298e22347f87e531dbbc90808025e665
- MD5 9b997ace3ef3516d87bbcf06382f1ea5
- SHA1 96af6b87b8a65bc318f2c31eb64de708767c7633
- SHA512 8557bdb00ec4de811901c7349f96562f5f22725ee36af57b098b740e9ed289dadb77b9f2067cc9ce06274e2e5066f939942287e2b6f16697464226b4f135bb17
- SSDEEP 12288:P5VD2pqZ8r/XOLajUol3pvzr6c2vgdBkfEZzNL3UbehaFyRTevqoTq/wHTl:P5VZ8rmL6lJuRO3MLURTWq2Tl
- TLSH T16CF4E120C7898596C125613554F334428A8BFDAA7E43953D0C6BBF6BB9F789C08E633D
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/cg_assets_all.bundle
- SHA256 0605d6fb468373bde2be6655e602a771c2c134901291ba9ee24ef420b1e3ca0d
- MD5 1d49ef1552d5ee92eaeb0bd89be35721
- SHA1 3289bb855d5113fec440cae1d4aa2fc20a236fdc
- SHA512 8544fcfa11ec232f3e20822d18bfb0a98891b3ce9c7648c84cc8481905d9e8bf67ef8f6f0775cc63b9f66f4912be43bd4967fa3556af3219e8e9b76aa400135d
- SSDEEP 384:Ky2G9VmtPOoaF1R3ET0sqFD9X+s/MpOZF9UeEIvx5IYI0aWMovR0A4:KyBctP+1G3ADNB7Oe/IhWdT4
- TLSH T1A4B2AE69B26B40AFC41501C840D62BFAAC26F4DEEEA2BCEC8578D04657E385C64D617F
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/character_assets_enemy.bundle
- SHA256 4da51f65e8d369098e085ffc9fe53d60467db928dbc352648f71324f91773a6e
- MD5 93c05eeffef1e698fdba88c5f49bff1f
- SHA1 9d26ef9a30ba32d09642d45313f0d07039457aa9
- SHA512 eff94729c7ea409adfdb2906f39686b42e1c492f5f4ff577c1d6153f1679fa74680e97d6293710fdfa26caadba27447315c2e11e0c0addb11aa2ecf5e4f6ccf3
- SSDEEP 49152:Bn4Gj+9vJYcCGIsYTYFjZbrMS6rO6Zm6KsQV55JX+bqKIFLob9oxDtZt8WqqVmty:yGaI5ubl36MtVj1OjGBlEsX9NCsMSGq
- TLSH T1CC06A0C1C2426887B5F84099C5F27421C43BCD6D5EAA0912A91FB74AADFB16C19F33F9
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/character_assets_npc.bundle
- SHA256 2429113fbc3031dc3ca3e52b86b9f3cb34bc1bb8dc1924465d8c26f08c3997a6
- MD5 2338925eabfeb53d01d6ad7f6eeffcf6
- SHA1 9d96d36279159ed2531fa4d6dc411772961ead33
- SHA512 dc37272e13a2d28b0ea60159c5639cd686c006db11a37b71b700e7601658c7cf0b78b7994f63b52d4f655879c3c9ecfdea669a501561cdef907898642a7806c0
- SSDEEP 12288:laacfPM/ZtZR8mvKvHf275598e+NNXSxQJIo/PLByiZXmPVyMlW:lQPMhtZCmvKvHY559N+NNXlJl/PLByi5
- TLSH T12FF4CFE0CB0664C7B0F8519E84F23411945BC96C6EEE9C63691F93466DF76A808F23BD
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/character_assets_player.bundle
- SHA256 d3f4d6fc8de29917dbfe6b7f65f430f030bc25e9564182f768829927893e078a
- MD5 668df0e69529b82a6f304b82661894ec
- SHA1 984baf1363a30ea2deda345811c77be9f80f7eb3
- SHA512 4c4d908c2a86e0f8361319d11ea75305a6097398993d2fc993f093e15caf1f51bbff4d265866d5ffaaaa6e9c564898f306222771e8c25086e9ca63c3051aab0c
- SSDEEP 12288:Iwx8waYTex5ZX6SpnMvOztIYQuu9TzjtSSlqnr:K1YTkZdMvOWuu9Tler
- TLSH T1C2A4AEE0CB0658F7E579D5DC89F67412914F9E297EBB2813001F7642ACB71EC29F22A4
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/data_assets_all.bundle
- SHA256 886db6aff40e1ae1aca743419c96cb82bb1f6b0bac4bacb8d06a78d5d7ca7164
- MD5 545721d7e8d879104e3134aa295eff29
- SHA1 3042df49c15250b695017d7813e398d2a5ff8b4e
- SHA512 e807dd13998e3d6d59821dcb7d0fab8de1603c347d465e54c5ef4d6baa4b24ac58dacd9f718d14739c6b747ce1e151f60c7968e2a5d1d38a6df65c151b6cd56f
- SSDEEP 384:OBpFojZeZYYc+WPWvVGJV2WBpjbXHbuhV79EUOYRUJiorh+lNepegZpTGcxGKqtB:V2vmclN8FGmlOp
- TLSH T18B13C65173518954C434023B0C9BDF89A729E6A5DE09EB27772C732C3CA63B6FE1A52C
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/default_assets_all.bundle
- SHA256 7ed633b610831c689fe1532f67e9dad60d5dadec1fac6c502e83966acd42a5ae
- MD5 1de503e0ef90b433b3e6d99c8a523586
- SHA1 028667f5a9bf691c9fc31cc44e386f1af71c6d13
- SHA512 e6e315f20ff65f7ae1dbdeb47c7587a6e32e285bf6e8c461b25c5167f0ca246cff0673ac82d228f04d82da4870c99b6ce0f52c8d0ee82ff4f15d03f043757657
- SSDEEP 393216:LE6/zfBU+qDc/e3iYLvOWAXCAxc5mOkY9z48BxoA+pWVippV7:QgzfB1ac/eSYLWCA01EyyA+pWypV7
- TLSH T1D97702C3D244C897D5B8883AD4EB3097949B9C0F7D651C4D6D23390E7CFAB682AA2771
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/duplicateassetisolation_assets_all_a6e631a8ef51331daee957a35244244a.bundle
- SHA256 7198e5ac2c28c909a8f14d2ea8d234a1c78606ee22010276bbac2de71ba60c4e
- MD5 dec7dae2cb8a572a0271848c26bba827
- SHA1 3cfa06599f1370738eb6d4be12f697c3d5db1a28
- SHA512 c79320087ce47159c6e05cd9d425a64cc3df21da7ff4bcc2fca3704436316600733efbbeb868f5d9e22c712dc9d2273f3cc36668a55d93fbb83c7fe8c8fab45b
- SSDEEP 49152:G26+S79p1lHP1XM/LOTqWKd8Jj/w7a6VMOz4Gr91F9QQg7Fqo9vVp3qwPhSCGnLe:0BnHPwMOmOz4G99JMwCSVxH0ANfY
- TLSH T1CBF5CFC1C206A997B5B8549984B2B411C07BCD5C1FAA1816A94FBF5BBDFB16C04E33F8
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/effect_assets_all.bundle
- SHA256 8ae7380a1c98425cab66273eff6315e05a0f95fa19c05ba4e94ed83252342e57
- MD5 2c873d83450b3ef7429da400a0704f27
- SHA1 809898a4fd93d2572e6698077586430ade09e475
- SHA512 55917c58820117c226d1f9b6647af4a36d5878395c2de949583daaaf46e02d1da50967c2d8d7ccd6d88318a6c37457bec7f510fa29da6aa40f51b8e21e8305fd
- SSDEEP 24576:hV6RSXX1crqqX17QKXTW18LPuNufvjN8s0KNY7i2:hV6R19NXT7LcufvjN8J
- TLSH T1FE35E164C386689A62E4106A60F23101483FDD7D6D9F5936992EF3172DFA89C08E73FD
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/map_assets_all.bundle
- SHA256 9b0a478f694289b0602a48c5bef87ab1903c77d23a493becb39ed44430810bef
- MD5 d48fd554a6ae513fdba8385c5c03ab2a
- SHA1 b0f5db60f64d139fcb642bd6cd3b3e3c9797e15d
- SHA512 80ab92cd14aee8be61bfa8e882258d6302a8419274bc3a0efe9c9ca320812160b58f901e980b5a346da5bded7e7ac63ce11538428a26c1fd022b28a2fcf4e4f5
- SSDEEP 98304:Y4OJikLfXRnfg2pIHBMrOhlgOVwTgTE545S7avqvxDubO:YSg9g7qrsnTE5Q1vGz
- TLSH T10846E0D0CB02595BAA39E4A546B1B843514BDE947ECF0C1E151AF70FEDFAA6C04E43B8
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/scene00_scenes_all.bundle
- SHA256 79583a8adab2d8079d380de7a75905bd6ef1d2459e0ec42eca08103fc15c9197
- MD5 8c6f24202fd58a18294e4c702d373c40
- SHA1 11b2a370abf96312a4e7f5d1b5f694b51fed95bf
- SHA512 243a5f4df44eddc19c4807edda2ed57ad659a0f934cfaf55a738032c0a5d9dc61c0a8e2ad9bf9e5bd000efab33381025a6146e9bed0cfdee82c3229e71d96bab
- SSDEEP 49152:KiCTA9t1Lz26ZxmaNluVBAooMlbAj20QGY:Kefl26Pu9b1
- TLSH T189858C7D878B504A62A4109582F632A148D7CDBF7AC56AFA482FB2065CF20DC5CE717F
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/scene_scenes_all.bundle
- SHA256 6df43bb41a9659d6654cfde7744ec1a297abfb635aece72c02e623139a12c584
- MD5 42426cfcfdfcb304bddfab37b77846f7
- SHA1 b10111cc9034d73adc57ffac849ee978cdded315
- SHA512 67d8195ec4862bbf2803f08b5cc53f115dce0fcc630818fa18e5e8d7b2cac93b40b08a0271296f1c61066ad5ff8633260e47c3d0458b9cab1066ac249ef513ea
- SSDEEP 49152:56T/ZcpFnJtwHKI6vs6v0uX2zHZkLFtPXuBNBw:UOJmCd66T
- TLSH T13DB57B3D57CB5009529A10A293DA62E148D2CDBFB9C0B7FA4C2BB15658F24CC9DA707F
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/sound_assets_all.bundle
- SHA256 c5730bd4c0f3fd3cd034bfd45f4c0a38a6b9e402bf84082c29c6d540e32c455d
- MD5 a54a402e05a09bab7333570f745f6835
- SHA1 5ab15e9c56c87d0350042c5b9bc67026b7332710
- SHA512 a25f9719fd650c03bcbd4d6da4dcacea1efd85c62e59b11774114a535df20fae3f9adfed9e0d85d3938b5e20937504d1facffa5fb68b7e9beee69851b9935a36
- SSDEEP 393216:IRwl7aXZp3M13Urnyid0yxuaE37n8clrLWAniOP1EGF3tEPujLT+h2:IRtppc13unyidl1EL8sqciOP1bB5P+g
- TLSH T107073313CDD30ED3D39CA53563BBA58711E0ECCB06B2518B6866B799AE7F740120672B
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/StandaloneWindows64/videos_assets_all.bundle
- SHA256 04d6d36ac4001e1d6d1a7f6197543037f5f21316b171a55770ee85c13014aeaa
- MD5 e86493bf2732e34a6417d7ec4090a0b4
- SHA1 3cf128ec5b19383e4334d61bcf58167f53cf87aa
- SHA512 ad50770477ce86285eb7a208cba45678c59238936a9f77ba9a34946438eb2e7a659d1d49d19cdf9c4c380d2aef18ccd7383cbf5e3387ac5899090277ec063c29
- SSDEEP 98304:GSzK+pRrZMvzV1i1g4NEwSgfdhCcb4SbB:E2Mo1Kwj7Ccd
- TLSH T181163352870162DBD899363442CB833DB7793C28A56C65DA4267BE5E68F1380FD1E3F8
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/catalog.json
- SHA256 33274f8d832f4f79644d0ce93d09651b25394d6b73bb4803d44d22dfc79d1aca
- MD5 120648c1ca7c75256602d6323e24ce4f
- SHA1 5455f30316a5df94550beecd368fe5c34424a647
- SHA512 6ebf86ffd47b7ed01e0612eaf6766dd24f4a6a03e3fde669a52ec3b78119d87389f7df0d2058bc6184f0e9934b438bd596e48ccda0fe1faf475f1d79ab4afe42
- SSDEEP 6144:a5aO0La08iljF7gruXdyxP00o+Ob7d2ys8ICSWzqivjUx:a5SYo+ObnlSwrUx
- TLSH T12994D6350443BCDC2B396F41901639D09C9C2B5B6B61D144FCE933BB72BA424FA9ADB9
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/aa/settings.json
- SHA256 e79a9e666ac4e424b6cea4c36c158a50aba091285e795d9b89c244a18b6126ed
- MD5 96d86eb1b443b0cc5e947e4200f4499d
- SHA1 bb5c26c9023897c239cb746655eff334f2ae5554
- SHA512 1a155dccf70a2669c3533ef3b48eba19404c57d588a7608f4ba533eb22ae24ea1f3443addb18cc6738c6af0f7fffee8dba65b7bb50eac55d70d7a8931d2c8fec
- TLSH T1A111CC38378C74BBAB105E13A854756606D5028A55AE50384CCF561CB3FE86A3E32B47
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/StreamingAssets/playerdata.json
- SHA256 05df3f48e1f5a82a95ee37ac58feeca4645ca0d54546b75cd02238c20a6a2f57
- MD5 44bc84b9bffb67e3bc9cd498dca562eb
- SHA1 40363d8db50087a2b000f685eb663d5dea09333f
- SHA512 8861232b078a45b813c37f3d076ef40f7917ed039e1a661c938cbc2068903c3a4f64e5725a91e60e35c6df521f45d0f366f2a0481334e44bd8f398183f162679
- TLSH T143C0482B1CF80ABED2038A6D723E20330BE85A14B2C3B945BE0D3C74D16261842BC58A
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/app.info
- SHA256 9512baf68ca67c841896058f60a1f91ddd5bf1fe261a53b0ec4df4a9e7b0585b
- MD5 3f3d6122a82d80c268a4ade2c92ed9f1
- SHA1 98a9ec91a4cc087168eb12afe639f76e4f79c392
- SHA512 b6f4f80ffd580e5da32960f7e50056c8cc2172dc0128d3b4f1fc46f4d2ca0d23a3f95d9c70a26805df60795e72bfc281f4d2bfa6cf8fde90c92c9ca938bc1279
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/boot.config
- SHA256 1ba31bd2ee0ec9324e413f2e1785d83eb2b183a551b222d8304a94c6a48f4658
- MD5 59372c9302f78a0688f0370791fb0242
- SHA1 666493a5f3fc445b46fb956e2c1c2ec446d07d7d
- SHA512 00aa8fdfb8324bf4c5100a91992d5ad388425dca62502fab144de40c7bf8cde70199dcf545d22ff47381c48bc30dfba908c1ac81db3cd7625c1db50107b19eaf
- TLSH T193C02B00E3F836036388C410A8B31EC3E2234505CC0250FDF5C011B9332C40E0707832
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/globalgamemanagers
- SHA256 15ff612ff3c448af9174736818f6912ba44212bb207d552de1b6a2f3b2a253bf
- MD5 5f943ac291fc91364d48321743cb549e
- SHA1 4eee3e8de14f01ef2b834835cc4082a936a3403b
- SHA512 abf866c597375b2cb3afa5fbaba01551031de01b0f6eeffff2e78f69079fc7245a257e7a793c76bea1524127de57c227911ca06be8faa86f958f410a21a73b14
- SSDEEP 3072:k/UVgz6dWgdmPDp+PmBg+MXUu5WDshieTqCD0kCv9gwevp0i4MbX:ezCmPl+eBqXUcWDcFTqCD0kCFgwip0i
- TLSH T1A834380DCFC69E6BCC66867A48E307217735E4CE1B1AE70762687938BC273E84D9165C
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/globalgamemanagers.assets
- SHA256 4e803db7a0a18dd6559d49cd58633ec6dbd24ebdc95c933a2facdfa8ad634bf0
- MD5 6ff6cea1ce41f3006fb02380abdb1fd6
- SHA1 257e16953af650bf7e8dfd4b4f0d15a02bcb6850
- SHA512 cc372bb8985c5a3c4bf07ae2843ec0aacc1a0ab7bb0926edb57e8bf0c3b076a895f24421d0759ea993d6a17e97ebb4c46e67ff2878d9142d3a75a5ad46d51c06
- SSDEEP 6144:HSDm+J2V8FtAalycT/CAEgIBelCYzBSLtPMVueahlSfpvd6CkdeeZN8MCM2MW+o:yB/+BXYitPMVNahlSfFgdIjtjQwu9K
- TLSH T116153E7A9B474D7BDC5401374872072A37707EF90BEC6E2B6A9C7E2865BA24C2F24315
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/globalgamemanagers.assets.resS
- SHA256 2d655ae2c5d6547faf7796542ea892399fd3d1a60ad905e6d5d80d48318cf6f2
- MD5 94d91bf0df0eed3d33c4e630a7e6fa3d
- SHA1 2c3d630ac47cf8a47dcca68fcc90c74230b46302
- SHA512 b13043d2cf771afac082e70940cc7f64a80f0745d39cd3d6c0054c61e0b3ede9b1601275eb7a1e0e8904973df9cac442a2ee3f3cd127a940fc510f1b7f817bc3
- SSDEEP 98304:LZAvSYIhjR5hZAAJc56NFbqnxpnKpOuoeK:LZAvSFd5hZAASMNlJK
- TLSH T15E064CF19592E041EC0FC5B5FA26C4B9F45BECD8D7CD86161208EE2770A6221C6DEED2
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Metadata/global-metadata.dat
- SHA256 79d69c3a013d776467f68820e105c4a9bcf9759a58e3cae70fe2fa1465565733
- MD5 7486a5759ad30ade3705a31071753df2
- SHA1 e317e2c9f6cb652dc178c5da853a00b407b2aeac
- SHA512 fa5edbe484a661109cda5a28b3d238da6b1a82a00266dbbb0dfaf2cee825c9b8e8f5f98885142be4d0e73fe91c95a6ed98f54e1846ba6b446edfce44e7974a58
- SSDEEP 49152:/+lmFfAlLJMDyeIAanR/yNe+mEr1fV8sZ+P3uvjVTFxFuMTGBoyqqx4MujpZORIG:3I2rRgP+vjcBPD4zOF9z
- TLSH T140B62A62BE64F5BBC245E2728C5AC6C42779AF852E01838B338DBF6DB5711644E132F4
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/Coffee.UIEffect.R.dll-resources.dat
- SHA256 b18f7dbe957def1b2814e59a62a06831a7760d25b73abf97afc772b2a8814bdb
- MD5 2b6f3fcb411dec22d36c31ab58e88ac0
- SHA1 2d57491217d273fd59083e057f3c17b329fd1586
- SHA512 5a838c93aebd387af85125d3a497c5575625a75ad6dcd833bb14fe41e4ccfb93289b002f8340e6637848f028020bc34f27ac7ccf8092b6fafdca959c6a8dd3fe
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/Mono.Data.Sqlite.dll-resources.dat
- SHA256 e50a7e07a02e32d62e3d313cb67237ecb870d29dca6e5fab511798fa97aa23e1
- MD5 8891fb0a2f1ccc7853773df7f27d5f6b
- SHA1 5af84f86c9a44de24481161d99ee7e3f0be28c20
- SHA512 3993b0b4938ebbe27796a24d747e2d05bbc2d1d71f7122b7295aae9ceba1a3a12f4bdd6e5ae2a7471151bbfc2b051bdf1b5f315a90bfca477474204c9efa0233
- SSDEEP 768:uFNFGFOFwcGF6cmFWcHUFWc8cIcKcUFJFpcNcHc7cH7cHBFFc5cbc1czclFJFpcn:uFNFGFOFwcGF6cmFWc0FWc8cIcKcUFJ2
- TLSH T19BF26ABD3BC8326E46BB90D9EE80AD91DE0182731A490451BCC5644BEFF6C553CA3E79
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/System.Data.dll-resources.dat
- SHA256 98a7950ec6de3242c2e190dfa630188dfa32511a125542b94baa952d1c757d49
- MD5 4860ddd4350579f8fcacb1881582335a
- SHA1 493c03e9cfef6f72a00f92023cdb88527dfdf72c
- SHA512 51421a1e79914cb6d828305103c5f7cdb020d98107586abd7e04614f65bae8004101e5567a873f52fe2daa3a7984bf4f7a4930e628cc5f86e709e3a37f812a95
- SSDEEP 1536:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FBFdFzF+FUF8FvFOFvFNciFEFvFxF5FHFj:lgFLFsFLFac1cWcvFMF+F1cIFaFnF0FI
- TLSH T1C693567CA75073DEDD4A3052064B2807766CC276E15A80F6BE9C4004EBBBD7626BBD6C
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/il2cpp_data/Resources/mscorlib.dll-resources.dat
- SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
- MD5 21d06dbc8af6432b2b49536ed30609af
- SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
- SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
- SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
- TLSH T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/level0
- SHA256 f75ec99b7173d56be8cba10d58e8826ddd71627e74cae90b60e6bbf69649be42
- MD5 f93649f414769f1f8d4156061214005e
- SHA1 78d6a8fa3b15b3f735b16d81d88b499343422498
- SHA512 e78b91ca75904a4eff381b771bfb5a08dc5da09ecaadcb7fe40c460462b75976a1c42ebf6f67e5e248aead849b3ea928021fcc4ed2e8523f64659a2c1065177a
- SSDEEP 48:dO20M9PPMxkYuei3z2mkjHBJ/Igj//yxSabknUgv2xZonvZZ8elQISnu/:dH0MixXu8XIgTmkUgv2xCnvZZhlQISu
- TLSH T1DE02A686B3859E69C874237389E70F94F331E9894F2E9B771378A52C1CE278C1F41698
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/resources.assets
- SHA256 8994a6fcac4efb0c74d45d281a3b0248afd86c8b7d7b45cb6520018d6ff3ede3
- MD5 80f2ef8b2b19eb4da3307bb294209b61
- SHA1 0d3edb1ea3b5fb81dabffae4d30d48d867f1bcb2
- SHA512 14e9f28a1045ad189938d515b45ab604de37e5760c1c59a4762dab7be89780fe39f41aaeb9072bd079c3539502940164d590ee45894d8edef998dcebba753e7b
- SSDEEP 3072:WlPjcieWXXh181zX1E8EfyZheSqxmqQSZhc37dBl+N:gXHh18171xEfyZheSVqQSZhG7dBq
- TLSH T1F784CCE5D7D71C3FC87112364C674F629331E8AC4AFD8B271AA85A1CACE72C81E51E94
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/resources.assets.resS
- SHA256 03667ae6592762569b67443ebb51468df87563a58062143c337d3ee5bad210d8
- MD5 eeff58d0792886bbfa9ccd0841adcf9b
- SHA1 9c786dd5a275a45075010f815fd03f57ac81ce8d
- SHA512 d48c315f0d032ac1eb0cd1e1baca481d1bda06f1dadfae3e858de424f064a5b1f70f63ada395b0d5216bbe3d4a46cfbb5ef862b049d7882675052ed763ebaca4
- SSDEEP 24:DHCHG/Dyzn+yugpurGSLm/bBshD+yKKQNHAmS/QYY1y:Z+uSH/lshTaNI5YU
- TLSH T19F32CB12CAA4E05FC49827F8CC2A61F4EDDF2EBDDB104A83516E3D59B87F96242352C5
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/sharedassets0.assets
- SHA256 3130076e24053f266d12aeb19cfbda7e0fae27967a59ecd4667484b21316ca9f
- MD5 41a1048ac6beaf06c55a065d40e9affb
- SHA1 d9978cffc07262d5c9644f667c8eec78cd42546a
- SHA512 bb171554486293b3423f263c87b78e20f285c1c687d439a8cd99e7a6a3872fda497a3e766a9882d18b19d0c65ae3d306738dd0de3c1b953fca38a030cc710960
- SSDEEP 768:NK9nzQ1NiH4NtU7WwmazPs4ZOx6ynWdjjyY:A9gw4NtU9Jzn7CGvyY
- TLSH T19323A5A6A34E096DD874113B08272FD1D633EAB847BD8AB34BF8199C1CC93ED1F58516
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/KunoichiSekiren_Data/sharedassets0.assets.resS
- SHA256 4697af964ff04216ac7fc5c3914e81cfcecaa84c769cbdfe27a590655cea500d
- MD5 985121e78a0384929829778e05de89b8
- SHA1 85c783cf70dd84fdd6c05b6bdcc3f0ed7c706df8
- SHA512 2e0560fea96b63c0269d53b2db4e59bf3859f88d5a43e32400eccce6d0187453cd72aa5541d74aa6830b79e430945d38dedd341e50efcca36201a34359866113
- SSDEEP 3072:QjVBEbB4bDYZYIIb3jogRVOrH4Tma/qu8DfR08LFz0ChhRWHnX7seTJ3uV0cgs0+:QhBEt4bkZ4S4+rL6MnWHnX7blumcg3+
- TLSH T13405BF462BD8DB03C6A1A0BFBCF092F1542B7EFCE8974DD226FDB6494E4645143CA492
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/UnityCrashHandler64.exe
- IMPHASH 82d5f2a4368311ce5c9024144758d8fa
- SHA256 2517f5e88c2310573e140e505fff35030ca10ac3859066a9ea094bc808e3f834
- MD5 3bc5930691bf78a78d8140adfb837086
- SHA1 ad51511ba3303d1ee8cf94e01ed537175f454f5c
- SHA512 2ad02c057e371d992e9f71a8964d58b9a06a68cd4eb9cf9270011194d6e0cfaeef85098d916be932d1bfcedf07b3e69216f0c1d37a09d916b4f4193c592501d1
- SSDEEP 12288:7OilcYy2QC4LuLiT2SSYHHIj0+FY6gEWNAEofZ5Qfz2fzAd9:rlcY1FWTBSYHHkFzSAEvz+zAj
- TLSH T1B5356C6AAA6800F9D5678039C9564A0FF3F23C1513619BDF1390B7AB2F376D41E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
18:0a:06:01:9f:37:81:7d:ec:55:10:4b:31:af:a8:25:53:69:03:f1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
Chains
Apr 17, 2023
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
Serial Number
0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 14, 2021 - Jul 18, 2024
Minor OS version
0
Major OS version
6
Entry point
262780
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildslave\unity\build\artifacts\UnityCrashHandler\Win64_VS2019_nondev_i_r\UnityCrashHandler64.pdb
user32
SetForegroundWindow
SetWindowTextW
InflateRect
UnionRect
SetWindowPos
LookupIconIdFromDirectoryEx
GetDlgItem
SendMessageW
SendDlgItemMessageA
GetWindowLongA
OffsetRect
AdjustWindowRect
EndDialog
CreateIconFromResourceEx
DialogBoxParamA
LoadImageA
GetIconInfo
kernel32
InterlockedPopEntrySList
DuplicateHandle
VirtualProtect
GetVersionExW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapQueryInformation
HeapSize
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapFree
HeapAlloc
FreeLibraryAndExitThread
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetFileType
SetStdHandle
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
WaitForSingleObjectEx
CloseHandle
RaiseException
GetLastError
GetCurrentThread
OpenThread
GetThreadTimes
GetModuleHandleA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
SwitchToThread
CreateThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
SuspendThread
ResumeThread
TlsGetValue
TlsSetValue
GetThreadContext
SetLastError
CreateEventW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
QueryDepthSList
GetFileAttributesA
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetEnvironmentVariableA
GetCurrentDirectoryA
OutputDebugStringA
GetSystemTime
ReadProcessMemory
VerSetConditionMask
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleW
WaitForSingleObject
LocalFree
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetStdHandle
GetFileSize
GetTempPathW
SetEvent
Sleep
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetProcessId
GetThreadId
OpenProcess
CopyFileExW
AllocConsole
SetErrorMode
GetCommandLineW
InitializeCriticalSection
CreateEventA
TerminateThread
GetExitCodeThread
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceA
EnumResourceNamesA
GetFileSizeEx
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
TlsAlloc
TlsFree
VirtualAlloc
VirtualFree
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
UnregisterWaitEx
ResetEvent
FlushFileBuffers
WaitForMultipleObjectsEx
dbghelp
SymRegisterFunctionEntryCallback64
SymLoadModuleEx
shell32
CommandLineToArgvW
SHCreateDirectoryExW
ole32
CoCreateGuid
CoTaskMemFree
CoInitializeEx
psapi
GetModuleFileNameExW
advapi32
GetUserNameA
wininet
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
gdi32
GetObjectA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Name
.text
Size
530KB
Virtual Size
529KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
349KB
Virtual Size
349KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=260, version=26715,
count=13, id=259, version=26715,
count=183, id=261, version=26715,
count=1, id=199, version=41118,
count=144, id=261, version=29118,
count=19, id=260, version=29118,
count=10, id=259, version=29118,
count=1, id=262, version=26715,
count=27, id=257, version=26715,
count=269, id=1, productName=Unmarked objects,
count=9, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,
count=32, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
KunoichiSekiren-0.1.0/UnityPlayer.dll
- IMPHASH 73b5f08b467a2e01f341f796eea41aef
- SHA256 9abe63112816aebf576c517a5a8d42aa72a89710bd01727ee9191d34164881e9
- MD5 ea2e6ec9c542a678b62083871d5ca7c6
- SHA1 ee466ff8b027be4d03234485293321186979ebc6
- SHA512 cb65d10c997a37781d8d5a9a5849f4eff10529af46cc133af3bc6f71e48f12c231471d7a564e37bc4e11c4946445b12d01aa3cf7ac52e602ed4c56158013394e
- SSDEEP 393216:1cQlVNrSEAgicUw/wwAaxqtYtcBlQLLI5dokFxXq3yt+R8mPFpmtexJdQJKIeRSp:1cg1kqlWyRShn
- TLSH T16B579E9562B800E4C47BD078D66BA91BF7B1344A03718AEF13E146A52F77BF426BB710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
ec:22:8f:46:d1:00:8e:b0:e4:0f:fe:e3:2d:88:66:01:c2:8f:5c:9d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
Chains
Apr 17, 2023
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
Serial Number
0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 14, 2021 - Jul 18, 2024
Minor OS version
0
Major OS version
6
Entry point
23398864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\buildslave\unity\build\artifacts\UnityPlayer\Win64_VS2019_nondev_i_r\UnityPlayer_Win64_player_il2cpp_x64.pdb
kernel32
DeleteFileW
GetFileAttributesW
GetTempFileNameW
GlobalAlloc
GlobalUnlock
GlobalLock
GetSystemTime
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SuspendThread
ResumeThread
LocalFree
CopyFileW
MoveFileExW
ReplaceFileW
SystemTimeToFileTime
Thread32First
Thread32Next
CreateMutexA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesA
DebugBreak
SetUnhandledExceptionFilter
GetErrorMode
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
LocalAlloc
GetOverlappedResult
CancelIo
ResetEvent
GetWindowsDirectoryW
FormatMessageA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateIoCompletionPort
GetQueuedCompletionStatus
DeleteCriticalSection
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
ReleaseSemaphore
GetLocalTime
CreateSemaphoreA
GetTimeZoneInformation
GetFileSizeEx
IsDebuggerPresent
CreateSemaphoreExW
TlsAlloc
TlsFree
GetThreadId
GetNativeSystemInfo
VirtualQuery
GetFileSize
GetStdHandle
GetEnvironmentVariableW
SetThreadAffinityMask
VerifyVersionInfoW
CreateSemaphoreW
MapViewOfFile
UnmapViewOfFile
OpenSemaphoreA
CreateFileMappingA
OpenFileMappingA
VerSetConditionMask
SetConsoleCtrlHandler
GetStartupInfoA
GlobalMemoryStatusEx
GetCurrentProcess
SetLastError
GetModuleHandleW
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
CreateToolhelp32Snapshot
SwitchToThread
GetModuleHandleA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetTimeFormatW
GetDateFormatW
GetProcessHeap
HeapAlloc
HeapFree
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
GetConsoleCP
ExitProcess
HeapQueryInformation
HeapSize
HeapReAlloc
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
DuplicateHandle
GetVersionExW
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetTickCount
GetSystemDirectoryW
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetFileType
GetModuleHandleExW
CreateWaitableTimerA
OpenEventA
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ExitThread
SetErrorMode
GetThreadTimes
OpenThread
GetCurrentThread
RaiseException
CreateWaitableTimerExW
SetWaitableTimer
SleepEx
GetSystemPowerStatus
GetComputerNameW
CreateHardLinkW
GetModuleFileNameW
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
InitializeProcThreadAttributeList
GetProcessId
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
CreateEventW
CreatePipe
OutputDebugStringA
K32GetProcessMemoryInfo
TlsGetValue
CreateThread
LoadLibraryExW
CreateEventExW
GetUserDefaultLocaleName
GetTempPathW
WriteFile
FlushFileBuffers
CreateFileA
GetCommandLineW
GetLogicalProcessorInformationEx
WaitForSingleObject
GetSystemDirectoryA
WaitForMultipleObjectsEx
QueryPerformanceFrequency
TerminateProcess
QueryPerformanceCounter
CloseHandle
Sleep
CreateEventA
WaitForSingleObjectEx
SetEvent
FormatMessageW
SetHandleInformation
SetDllDirectoryW
LoadLibraryW
GetLastError
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
MultiByteToWideChar
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
TlsSetValue
user32
GetCaretBlinkTime
SetTimer
MsgWaitForMultipleObjects
PeekMessageA
GetDoubleClickTime
KillTimer
MessageBoxA
CreateWindowExW
GetMessageA
SendMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
DestroyWindow
SetDlgItemTextW
SendDlgItemMessageW
CopyRect
OffsetRect
ShowWindow
MoveWindow
SetWindowPos
IsWindowVisible
LoadIconA
MessageBoxW
EnumDisplaySettingsW
LoadIconW
SetWindowLongA
AdjustWindowRectEx
GetWindowPlacement
GetDC
EnumDisplaySettingsA
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputBuffer
GetRawInputDeviceInfoW
GetRawInputData
SystemParametersInfoW
GetWindowLongA
PtInRect
ScreenToClient
GetCursorPos
GetSystemMetrics
IsIconic
SetFocus
GetActiveWindow
GetFocus
DragDetect
ValidateRect
SetWindowTextW
GetClientRect
GetWindowRect
ShowCursor
SetCursorPos
ClientToScreen
ClipCursor
GetWindowLongPtrW
SetWindowLongPtrA
SetWindowLongPtrW
GetParent
EnumDisplayDevicesA
MonitorFromRect
MonitorFromWindow
GetMonitorInfoA
GetMonitorInfoW
EnumDisplayMonitors
UpdateWindow
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
GetDesktopWindow
ReleaseDC
AllowSetForegroundWindow
TrackMouseEvent
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
SetCursor
LoadCursorA
DestroyCursor
DestroyIcon
LoadImageW
GetThreadDesktop
GetUserObjectInformationA
RegisterWindowMessageA
SendMessageTimeoutA
SetForegroundWindow
EnumWindows
RegisterClassExW
DialogBoxParamW
EndDialog
ReleaseCapture
SetCapture
MapVirtualKeyExA
MapVirtualKeyW
MapVirtualKeyA
ToUnicode
GetKeyNameTextW
GetAsyncKeyState
GetKeyState
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetMessageExtraInfo
DispatchMessageA
TranslateMessage
GetKeyboardLayout
GetKeyboardLayoutNameW
SetDlgItemTextA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
CoSetProxyBlanket
CoUninitialize
CoInitialize
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateFreeThreadedMarshaler
PropVariantCopy
CoCreateInstance
PropVariantClear
shlwapi
PathCanonicalizeW
SHDeleteKeyW
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInfo
advapi32
CryptAcquireContextA
GetUserNameA
GetTokenInformation
GetSidSubAuthority
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegDeleteValueA
RegCreateKeyW
RegCloseKey
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
DeregisterEventSource
RegisterEventSourceW
CryptEnumProvidersW
gdi32
GetDeviceCaps
SetPixelFormat
SwapBuffers
ChoosePixelFormat
shell32
SHFileOperationW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
opengl32
wglCreateContext
wglMakeCurrent
wglGetCurrentDC
wglDeleteContext
wglGetProcAddress
wglGetCurrentContext
winmm
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetTime
waveOutPrepareHeader
timeBeginPeriod
timeEndPeriod
waveOutUnprepareHeader
waveInStart
waveOutReset
waveOutGetPosition
waveInGetNumDevs
waveInGetDevCapsA
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
waveInReset
waveOutWrite
waveOutClose
waveInUnprepareHeader
waveInAddBuffer
waveOutOpen
oleaut32
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysFreeString
imm32
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetConversionStatus
ImmNotifyIME
ImmGetContext
winhttp
WinHttpGetIEProxyConfigForCurrentUser
bcrypt
BCryptGenRandom
hid
HidP_SetUsageValue
HidP_SetUsages
HidP_GetData
HidP_MaxDataListLength
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetAttributes
crypt32
CertAddEncodedCertificateToStore
CertFreeCertificateContext
CertCloseStore
CertOpenStore
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
ws2_32
WSASetLastError
WSACleanup
WSAStartup
gethostname
socket
shutdown
setsockopt
sendto
send
select
recvfrom
WSAIoctl
ntohs
listen
inet_addr
htons
htonl
getsockname
ioctlsocket
connect
bind
accept
__WSAFDIsSet
WSASocketA
getaddrinfo
freeaddrinfo
getnameinfo
ntohl
getpeername
gethostbyname
getprotobyname
WSARecvFrom
getsockopt
WSACloseEvent
WSACreateEvent
WSASocketW
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAGetLastError
WSAEventSelect
WSAResetEvent
WSASetEvent
gethostbyaddr
WSASendDisconnect
WSAAsyncGetHostByName
WSACancelAsyncRequest
recv
closesocket
dwmapi
DwmGetWindowAttribute
UnityMain
Name
.text
Size
22.7MB
Virtual Size
22.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
409KB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rodata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=37, id=259, version=26715,
count=18, id=260, version=29118,
count=31, id=259, version=29118,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=526, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=34, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=124, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=111, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=2, id=262, version=26715,
count=68, id=260, version=26715,
count=43, id=257, version=26715,
count=573, id=1, productName=Unmarked objects,
count=9, id=199, version=41118,
count=144, id=261, version=29118,
count=13, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=217, id=261, version=26715,
count=9, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=366, id=260, productName=VS2019 v16.8.0 build 29333, version=29333,
count=33, productName=Unmarked objects (old),
count=917, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=255, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
KunoichiSekiren-0.1.0/baselib.dll
- IMPHASH 0cd66d5908e9ad864cdc5a032a7889e5
- SHA256 ee8fd8484b39a1aaaac1aca00a839a5f7bcd14a91bc57e2d6f91aa45964d7424
- MD5 220e4ac68f27a29035349f14c304e7e7
- SHA1 46c58aefe411e0d1de334ffec579be4b9d0501d2
- SHA512 35e7a456c0d61e07cbc40d6eb2a76fdf4315a3dcb27371fd81651005bcbaeaf0dd44086579f899d71f9c4ff497f45be0cc784b934c0e0fe1e09da5fd8ca31ec6
- SSDEEP 6144:amLYaM15dNBJ69tUpFxE3qj4fW1Uyy5Um7vn78sdTW4FwVXpwMp4o3FL:ZYa8P2UiWeyogGdyN
- TLSH T1FC846C9AF76408B5E5679078C9B3890BE3B27C49176187CF23A4439A2F33F91563E361
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
96:1a:5e:9c:37:0a:10:ee:61:dd:82:3c:83:b9:85:39:82:2d:f5:b4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
Chains
Apr 17, 2023
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK
Serial Number
0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 14, 2021 - Jul 18, 2024
Minor OS version
0
Major OS version
6
Entry point
64660
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\buildslave\unity\build\artifacts\baselib\Win64_VS2019_nondev_i_r\baselib_Win64_Master_il2cpp_x64.pdb
ws2_32
accept
WSAWaitForMultipleEvents
WSASocketW
WSAIoctl
WSACreateEvent
WSACloseEvent
WSAGetLastError
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
__WSAFDIsSet
kernel32
IsProcessorFeaturePresent
WriteConsoleW
GetStringTypeW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapQueryInformation
RaiseException
GetLastError
CreateFileW
FlushFileBuffers
GetFileAttributesW
GetFileSizeEx
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
IsDebuggerPresent
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
CreateSemaphoreExW
SwitchToThread
CreateThread
GetCurrentThreadId
ResumeThread
TlsAlloc
TlsFree
GetThreadId
GetNativeSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
FormatMessageW
Sleep
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GetTickCount
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
GetCurrentProcess
TerminateProcess
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualProtect
DuplicateHandle
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
HeapSize
RtlUnwindEx
RtlPcToFileHeader
GetModuleHandleExW
ExitProcess
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
HeapReAlloc
??0AbortShim@il2cpp_baselib@@QEAA@P6A_NW4Baselib_ErrorCode@1@PEAX@Z1@Z
??0Thread@il2cpp_baselib@baselib@@QEAA@$$QEAV012@@Z
??0Thread@il2cpp_baselib@baselib@@QEAA@XZ
??1Thread@il2cpp_baselib@baselib@@QEAA@XZ
??4AbortShim@il2cpp_baselib@@QEAAAEAV01@$$QEAV01@@Z
??4AbortShim@il2cpp_baselib@@QEAAAEAV01@AEBV01@@Z
??4Thread@il2cpp_baselib@baselib@@QEAAAEAV012@$$QEAV012@@Z
??6il2cpp_baselib@@YAAEAVomemstream@0@AEAV10@AEBW4Baselib_ErrorCode@0@@Z
?Baselib_Debug_IsDebuggerAttached@il2cpp_baselib@@YA_NXZ
?Baselib_DynamicLibrary_Close@il2cpp_baselib@@YAXUBaselib_DynamicLibrary_Handle@1@@Z
?Baselib_DynamicLibrary_FromNativeHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@_KIPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_GetFunction@il2cpp_baselib@@YAPEAXUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenProgramHandle@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf16@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBGPEAUBaselib_ErrorState@1@@Z
?Baselib_DynamicLibrary_OpenUtf8@il2cpp_baselib@@YA?AUBaselib_DynamicLibrary_Handle@1@PEBDPEAUBaselib_ErrorState@1@@Z
?Baselib_ErrorState_Explain@il2cpp_baselib@@YAIPEBUBaselib_ErrorState@1@QEADIW4Baselib_ErrorState_ExplainVerbosity@1@@Z
?Baselib_ErrorState_FormatAndStoreExtraInformation@il2cpp_baselib@@YA_KPEBDPEAD@Z
?Baselib_FileIO_AsyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@@Z
?Baselib_FileIO_AsyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_AsyncFile@1@UBaselib_FileIO_EventQueue@1@PEBD_KW4Baselib_FileIO_Priority@1@@Z
?Baselib_FileIO_AsyncRead@il2cpp_baselib@@YAXUBaselib_FileIO_AsyncFile@1@QEAUBaselib_FileIO_ReadRequest@1@_K2W4Baselib_FileIO_Priority@1@@Z
?Baselib_FileIO_EventQueue_Create@il2cpp_baselib@@YA?AUBaselib_FileIO_EventQueue@1@XZ
?Baselib_FileIO_EventQueue_Dequeue@il2cpp_baselib@@YA_KUBaselib_FileIO_EventQueue@1@QEAUBaselib_FileIO_EventQueue_Result@1@_KI@Z
?Baselib_FileIO_EventQueue_Free@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@@Z
?Baselib_FileIO_EventQueue_Shutdown@il2cpp_baselib@@YAXUBaselib_FileIO_EventQueue@1@I@Z
?Baselib_FileIO_SyncClose@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncFileFromNativeHandle@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@_KI@Z
?Baselib_FileIO_SyncFlush@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncGetFileSize@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncOpen@il2cpp_baselib@@YA?AUBaselib_FileIO_SyncFile@1@PEBDIPEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncRead@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEAX1PEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncSetFileSize@il2cpp_baselib@@YAXUBaselib_FileIO_SyncFile@1@_KPEAUBaselib_ErrorState@1@@Z
?Baselib_FileIO_SyncWrite@il2cpp_baselib@@YA_KUBaselib_FileIO_SyncFile@1@_KPEBX1PEAUBaselib_ErrorState@1@@Z
?Baselib_Memory_AlignedAllocate@il2cpp_baselib@@YAPEAX_K0@Z
?Baselib_Memory_AlignedFree@il2cpp_baselib@@YAXPEAX@Z
?Baselib_Memory_AlignedReallocate@il2cpp_baselib@@YAPEAXPEAX_K1@Z
?Baselib_Memory_Allocate@il2cpp_baselib@@YAPEAX_K@Z
?Baselib_Memory_AllocatePages@il2cpp_baselib@@YA?AUBaselib_Memory_PageAllocation@1@_K00W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Memory_Free@il2cpp_baselib@@YAXPEAX@Z
?Baselib_Memory_GetPageSizeInfo@il2cpp_baselib@@YAXPEAUBaselib_Memory_PageSizeInfo@1@@Z
?Baselib_Memory_Reallocate@il2cpp_baselib@@YAPEAXPEAX_K@Z
?Baselib_Memory_ReleasePages@il2cpp_baselib@@YAXUBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Memory_SetPageState@il2cpp_baselib@@YAXPEAX_K1W4Baselib_Memory_PageState@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_NetworkAddress_Decode@il2cpp_baselib@@YAXPEBUBaselib_NetworkAddress@1@PEAW4Baselib_NetworkAddress_Family@1@QEADIPEAGPEAUBaselib_ErrorState@1@@Z
?Baselib_NetworkAddress_Encode@il2cpp_baselib@@YAXPEAUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_Family@1@QEBDGPEAUBaselib_ErrorState@1@@Z
?Baselib_Process_Abort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z
?Baselib_RegisteredNetwork_BufferSlice_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@UBaselib_RegisteredNetwork_Buffer@1@II@Z
?Baselib_RegisteredNetwork_BufferSlice_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_BufferSlice@1@XZ
?Baselib_RegisteredNetwork_Buffer_Deregister@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Buffer@1@@Z
?Baselib_RegisteredNetwork_Buffer_Register@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Buffer@1@UBaselib_Memory_PageAllocation@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Endpoint_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@PEBUBaselib_NetworkAddress@1@UBaselib_RegisteredNetwork_BufferSlice@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Endpoint_Empty@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Endpoint@1@XZ
?Baselib_RegisteredNetwork_Endpoint_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Endpoint@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_Close@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_Create@il2cpp_baselib@@YA?AUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@IIPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_DequeueRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_DequeueSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@QEAUBaselib_RegisteredNetwork_CompletionResult@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_GetNetworkAddress@il2cpp_baselib@@YAXUBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ProcessRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ProcessSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_ProcessStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ScheduleRecv@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_ScheduleSend@il2cpp_baselib@@YAIUBaselib_RegisteredNetwork_Socket_UDP@1@PEBUBaselib_RegisteredNetwork_Request@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedRecv@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_RegisteredNetwork_Socket_UDP_WaitForCompletedSend@il2cpp_baselib@@YA?AW4Baselib_RegisteredNetwork_CompletionQueueStatus@1@UBaselib_RegisteredNetwork_Socket_UDP@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Bind@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Close@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@@Z
?Baselib_Socket_Create@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@W4Baselib_NetworkAddress_Family@1@W4Baselib_Socket_Protocol@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_GetAddress@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_NetworkAddress@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_Poll@il2cpp_baselib@@YAXPEAUBaselib_Socket_PollFd@1@IIPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Accept@il2cpp_baselib@@YA?AUBaselib_Socket_Handle@1@U21@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Connect@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEBUBaselib_NetworkAddress@1@W4Baselib_NetworkAddress_AddressReuse@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Listen@il2cpp_baselib@@YAXUBaselib_Socket_Handle@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_TCP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@PEAXIPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_UDP_Recv@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_Socket_UDP_Send@il2cpp_baselib@@YAIUBaselib_Socket_Handle@1@QEAUBaselib_Socket_Message@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_SystemFutex_Notify@il2cpp_baselib@@YAXPEAHIW4Baselib_WakeupFallbackStrategy@1@@Z
?Baselib_SystemFutex_Wait@il2cpp_baselib@@YAXPEAHHI@Z
?Baselib_SystemSemaphore_Acquire@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Create@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@XZ
?Baselib_SystemSemaphore_CreateInplace@il2cpp_baselib@@YA?AUBaselib_SystemSemaphore_Handle@1@PEAX@Z
?Baselib_SystemSemaphore_Free@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_FreeInplace@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_Release@il2cpp_baselib@@YAXUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_SystemSemaphore_TryAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@@Z
?Baselib_SystemSemaphore_TryTimedAcquire@il2cpp_baselib@@YA_NUBaselib_SystemSemaphore_Handle@1@I@Z
?Baselib_TLS_Alloc@il2cpp_baselib@@YA_KXZ
?Baselib_TLS_Free@il2cpp_baselib@@YAX_K@Z
?Baselib_Thread_Create@il2cpp_baselib@@YAPEAUBaselib_Thread@1@UBaselib_Thread_Config@1@PEAUBaselib_ErrorState@1@@Z
?Baselib_Thread_GetCurrentThreadId@il2cpp_baselib@@YA_JXZ
?Baselib_Thread_GetId@il2cpp_baselib@@YA_JPEAUBaselib_Thread@1@@Z
?Baselib_Thread_Join@il2cpp_baselib@@YAXPEAUBaselib_Thread@1@IPEAUBaselib_ErrorState@1@@Z
?Baselib_Thread_SupportsThreads@il2cpp_baselib@@YA_NXZ
?Baselib_Thread_YieldExecution@il2cpp_baselib@@YAXXZ
?Baselib_Timer_GetHighPrecisionTimerTicks@il2cpp_baselib@@YA_KXZ
?Baselib_Timer_GetTicksToNanosecondsConversionRatio@il2cpp_baselib@@YA?AUBaselib_Timer_TickToNanosecondConversionRatio@1@XZ
?Baselib_Timer_GetTimeSinceStartupInSeconds@il2cpp_baselib@@YANXZ
?Baselib_Timer_TickToNanosecondsConversionFactor@il2cpp_baselib@@3NB
?Baselib_Timer_WaitForAtLeast@il2cpp_baselib@@YAXI@Z
?Call@AbortShim@il2cpp_baselib@@QEAA_NW4Baselib_ErrorCode@2@@Z
?CreateThread@Thread@il2cpp_baselib@baselib@@CAPEAUBaselib_Thread@2@P6AXPEAX@Z0@Z
?Detail_Baselib_EventSemaphore_SemaphoreBased_AcquireNonSet@il2cpp_baselib@@YAXHPEAUBaselib_EventSemaphore@@@Z
?Detail_Baselib_EventSemaphore_SemaphoreBased_TryTimedAcquireNonSet@il2cpp_baselib@@YA_NHPEAUBaselib_EventSemaphore@@I@Z
?Empty@AbortShim@il2cpp_baselib@@SA?AV12@XZ
?GetCurrentId@Thread@il2cpp_baselib@baselib@@SA_JXZ
?GetId@Thread@il2cpp_baselib@baselib@@QEAA_JXZ
?SetAbortShim@il2cpp_baselib@@YA?AVAbortShim@1@V21@@Z
?ShimmableAbort@il2cpp_baselib@@YAXW4Baselib_ErrorCode@1@@Z
?SupportsThreads@Thread@il2cpp_baselib@baselib@@SA_NXZ
?TryJoin@Thread@il2cpp_baselib@baselib@@QEAA_NV?$duration@IU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z
?YieldExecution@Thread@il2cpp_baselib@baselib@@SAXXZ
?detail_AssertLog@il2cpp_baselib@@YAXPEBDZZ
?detail_AssertLogMute@il2cpp_baselib@@YAX_N@Z
Name
.text
Size
260KB
Virtual Size
259KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
94KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=260, version=26715,
count=8, id=259, version=26715,
count=139, id=261, version=26715,
count=14, id=260, version=29118,
count=9, id=259, version=29118,
count=111, id=261, version=29118,
count=5, id=257, version=26715,
count=159, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=256, productName=VS2019 v16.8.0 build 29333, version=29333,
count=1, id=258, productName=VS2019 v16.8.0 build 29333, version=29333,
KunoichiSekiren-0.1.0/doorstop_config.ini
- SHA256 996bda4a6e4a105b2cd48a6e756bafb32178546394afd7b47ab5e199120c4052
- MD5 3f2d00f6c51bc72ea33e4d9901a0c6e0
- SHA1 7e6c8271a9d1f0bde58ca30252912f6272e86ca9
- SHA512 b342aa0e97afc872e45d4c76324b8fffd66b1956839f49480a27a9d480e4042638c25f47cab0c5a8f4694159ad7397dffc46119f312e6b12d91a6b7d65a2b6ec
- TLSH T1F6416672258C73397B7B8143C8E637E7171D849DC2A6363079C6C22F73114A54663EB0
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/dotnet/.version
- SHA256 4052ab33b00d0411fc9ce103ac9d51564cf8630fddb7464d82ddcc168d4d302c
- MD5 42786a0624692125170e4a81f6583174
- SHA1 eab9a830e665b7eae35cd4f4958a3f0133de2652
- SHA512 377a9d9e7db39215de22a429bf1a92583d3d306fea75442c3d6f8d6a952d6260e4d753956ce4fccf2d12206860964c8901b9965bf4f76ebce4d2219e9a080f09
- MD5 SHA1 SHA512
KunoichiSekiren-0.1.0/dotnet/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5705d245072d3eb78400547b32147dbb6e2c8b02ba8bda76729798f5efdeaecb
- MD5 8074b0eeb2d4cf9b1a6b26865bf91aa5
- SHA1 2e438aef830795b2d240cf3160a3353bc6cb0232
- SHA512 05f7d9003427e611f011018844fb8180403cd6ca807e4c5a8beeed03e4cd7fd8babd89dec51a14510eef7c266ba4505b731eb065606d066b061751c89a1d772a
- SSDEEP 192:mzuPwZ40ytyqjaWeb/WIWOL8/pCuPHnhWgN7aAWDr/MqFCfvXqnajJ72h/j:7G40ywqjaWeb/Wg/uPHRN7yM9Xl172hb
- TLSH T10C722A91C7A84203EDB57FB05679D5463C3CB6D26C31922D1189E29A1CE7BC1EB31B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:7e:f2:5e:12:89:94:a4:49:bb:ee:3f:25:b9:95:26:a0:eb:2b:62:d5:1c:de:26:01:e7:d8:a8:bb:f2:47:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:3e:ce:ca:77:52:c5:f7:34:2b:00:00:00:00:01:3e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
11386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/netstandard2.1-Release/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.CSharp.dll
- SHA256 316a247fd993e03f0a4d1e7acb89dc5bc602555b7078bfb60e11ba2e24d960c6
- MD5 e4ae12a37c000be48ab17ffc779a2328
- SHA1 0944549a72d13aeaa1fb1ea837bb096f72bc4876
- SHA512 78bce2e512d2751c4cbcda4a6c6d9fbc08c967a134c44062f17bd0cad2a7b1d648b14c384dfa3d6e91ccf57bd072c8936fb3e7fd42b8c77c8eed873594705838
- SSDEEP 24576:IIhfl0yk3tfO992KgvANnG1T+Vu9yH+Lj2K2H4:Fhfl0yWtXvE8T+Vu9yH+X2Y
- TLSH T168257D14A3D48307D11A87BDC1568207D6F7F456232582CB0E14FABA2F57BC3ABB6276
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
44:28:3e:9a:b0:fb:94:c7:8e:3a:85:ef:bb:85:cb:4e:91:d1:37:11:9c:fc:52:9a:27:ec:0e:34:02:6b:5e:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.CSharp.ni.pdb
D:\a\_work\1\s\artifacts\obj\Microsoft.CSharp\net6.0-windows-Release\Microsoft.CSharp.pdb
Name
.text
Size
951KB
Virtual Size
951KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/Microsoft.DiaSymReader.Native.amd64.dll
- IMPHASH bffa8501aec5c29321d36de57d4de8be
- SHA256 3aecc22ececf784182883ebd2c2bf60bcdb25cc209dd64c32800b845ee8966e0
- MD5 ee5a55bf0d399ef09502d486aa1c6242
- SHA1 2e882ee6cccee6e5c0ee5e13eb40dae98e2b6f07
- SHA512 dc4a73d3cee381eb4cc524ed2a0b9facb1cadd72768eda0215ea17600ab1f3d84aa1af01f5b22b0cb3574ea5dc9256cdba9e463205116cf31adb579106276cb6
- SSDEEP 49152:i5urR4U/p7Zak9DVobQPx0ktMokJH1+bV2GAT:j/pcLexRMoOMb
- TLSH T143856B8796A851A8D57AD17CC677460BE7B238110321A7CF12A047AEBF37FE55A3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:29:d0:fc:40:44:34:08:32:30:6e:a3:2c:9c:16:f3:d7:f7:ef:1a:41:e6:3f:0b:50:33:b2:04:eb:e0:fa:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 16, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:4D2F-E3DD-BEEF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2b:93:d0:ed:8e:0a:f7:f0:47:00:00:00:00:01:2b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
163376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\agent\_work\7\s\\binaries\amd64ret\bin\amd64\Microsoft.DiaSymReader.Native.amd64.pdb
kernel32
GetLastError
FreeLibrary
InitializeCriticalSectionEx
GetNativeSystemInfo
DisableThreadLibraryCalls
LocalAlloc
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LoadLibraryExW
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
CreateFileW
CloseHandle
WriteConsoleW
LocalFree
FormatMessageW
GetEnvironmentVariableW
GetTickCount
GetSystemInfo
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
SetFileAttributesW
VirtualAlloc
VirtualFree
DeleteFileW
SetEndOfFile
DeviceIoControl
MapViewOfFileEx
CreateFileMappingA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
ExpandEnvironmentStringsW
GetFullPathNameW
VirtualProtect
VirtualQuery
LoadLibraryExA
GetDriveTypeW
GetCurrentDirectoryW
TryEnterCriticalSection
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
ole32
CoTaskMemAlloc
CoTaskMemFree
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateNGenPdbWriter
CreateSymReader
CreateSymWriter
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectInternal
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
283KB
Virtual Size
282KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=260, version=28900,
count=7, id=259, version=28200,
count=173, id=261, version=28200,
count=10, id=260, version=28200,
count=25, id=260, version=29620,
count=9, id=259, version=29620,
count=7, id=257, version=28900,
count=192, id=1, productName=Unmarked objects,
count=122, id=261, version=29620,
count=31, id=265, version=29620,
count=1, id=256, version=29620,
count=1, id=255, version=29620,
count=1, id=258, version=29620,
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ccd830351aa28bc683d4f8d1cefd9e724161f972d25bfb64eee5bf55c48c5e3
- MD5 d6cfda4e1c948aeb3e5d57376334375f
- SHA1 cb8c35306afd15358104ecfe70e724ad9c753e6f
- SHA512 93a7571c4d186243d78641630b8997fdb69d411df307d95c86aed556102369a98b9a13ca5c7ca8d593244cf0b0f039bc37d330b86194b07b2c9f0bcec3c06b2e
- SSDEEP 768:o8+cxuPn//hpz2XCkCkCdvAb4b4qox06OoV0F8l0HCTpw0wo0emDMtj:/+cxuPn/bvvE0Q0HCNfBsDMZ
- TLSH T170133C4577FC8366D5BE5AB065F191149D3BFAC72802E7062948D0AC1CA7FCC2A62FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
33:44:d2:12:a3:fa:19:78:e9:74:93:78:44:12:1b:43:4a:85:4e:bc:f7:e4:bf:1d:0e:c7:1a:32:18:49:6b:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7880-E390-8014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:5c:86:d2:e3:ec:39:f6:8b:38:00:00:00:00:01:5c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
39418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection.Abstractions/net6.0-Release/Microsoft.Extensions.DependencyInjection.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.DependencyInjection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2aa8182b5356a8cc5c35fc3641a87e814857d8d9be399ac78f260343754d09e0
- MD5 5db27bdd3d6a9a225b88b12293382f95
- SHA1 eb7d6d2250bf2509b89166bc22c07423ac9c2d91
- SHA512 4ed559768d1f1a405203f1e2d6a72dddc4c7b485461979a14d22566236e169f7e2652e9b3d85f0205c296bc4d705a30519a5f292aa6eda26137b7f2923660b3d
- SSDEEP 1536:iNLmvi666OjIX0h9zMPvHBWCaRweUG4DynjEZnBaMH:Q66fjLb8vH0CiUG4DyneBaQ
- TLSH T182834C25A7FC4722CAEF6AB4543595110F7EF9C67003FB481EC8A0691A97FC14B623B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:16:39:be:45:fb:96:ae:fe:b9:9e:33:db:fb:63:ba:02:90:9f:c5:a5:a8:e4:5c:83:d5:1a:b5:96:26:49:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:41:af:7f:52:97:5c:f2:dc:45:00:00:00:00:01:41
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
77390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.DependencyInjection/net6.0-Release/Microsoft.Extensions.DependencyInjection.pdb
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Logging.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d575c9d1543ca726ce14dbdffd103e93ea527cd46bb28316da1f4122dbc55d56
- MD5 a2544f077d57c4ea44a4694efcbea30b
- SHA1 02ec010722bbd1740782b502df30d4475aebe5f2
- SHA512 ded82fdc0cbfd644a6368b9776eb9d5e0899c61373599d8c3485a47140850bba8b7b448ce4bf276fdf1d4b2ca24745a17ceabcbea793255e34d625fb3db68b0e
- SSDEEP 768:N+UfRQY8PGNWovMLJYBjtLgnuAAAAAknwd45FnrfMq1/yJuoiYblHJg6GOmDu3MN:N+tY8PIiq51wcFnDMsno7jRma3MN
- TLSH T1EB534B0067EC9323CB6E9DB9E0B1A6026775C2673403EB4B2DDCE2742557BCC6B52366
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
38:6e:d5:5f:03:20:1e:ee:f4:20:44:fe:b4:ad:62:0d:ef:4b:ff:32:91:52:80:45:6b:60:69:c3:36:41:25:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:59:9f:fc:7e:5f:2c:ea:f2:43:00:00:00:00:01:59
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
57606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging.Abstractions/net6.0-Release/Microsoft.Extensions.Logging.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Logging.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 183650081b551dfad967a7cbf79946a229cb79458b8d04a12db7c44b03bb9ab7
- MD5 037fa19d37892f003cb18c3f4f070b66
- SHA1 7bea9201a90f69ff958f5bf64e959d1e4021f252
- SHA512 04dd786ae74827dc3e8c417e1da3cd2603618b4a57a8aa861eba2a96b4e1c795ac27b2aca9f9fb886ae4791af1b356e0243e11bc2b5a3158ecea2cbdfb449391
- SSDEEP 384:kX8pDPkAvn3sac7bhN6hym/DEdwe9Kc78uwAiWMTGLWIMM1uGxzHjzg2DfsZqQOG:kX8pDT8XP6hA+wMaLWCzAVLOPneM0I1W
- TLSH T146134A2283AC4367D97E09B4B4B8E5954F35C766B402FB466E8CF19A1CB3BC0162177B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:6d:55:a8:1f:6e:04:66:89:85:84:b1:9a:4a:df:c0:8d:0a:16:37:bf:52:43:d1:c6:3e:02:4c:98:60:bb:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:58:70:5a:22:f7:be:96:e6:03:00:00:00:00:01:58
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
40470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Logging/netstandard2.1-Release/Microsoft.Extensions.Logging.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Options.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 786112cb2f6646ef1170219a8c0bb813c9f14a6781e67c6266414f55a679565d
- MD5 950440793a182cc76ffc7f7280e55daf
- SHA1 6ec0c1fe1332912086247080b55b06623c78326e
- SHA512 132280392e9c60cb764f6f5d9b24c01abd2bdfff4e66ab4ca8dbb7d52150954df02277d49083754df2f2bca82660622c39f75ff80eb4cf9a2bd52dc0292943a1
- SSDEEP 768:sCD3yk2B8+9PwwOxC8wZLq6J4q2r0qafouRVPvW3aMgi:DkB8+94xxBmm6mqaBafouRdiaMN
- TLSH T12F436C01A7BC9B92CEBF8B30E43490231A36D6073503A76F86ECE59C2C677646A75335
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c7:fd:d1:97:31:41:32:f7:b4:4b:51:55:f2:77:25:fd:c6:08:d3:5c:f1:13:f4:4c:ca:ec:2a:2c:f4:5e:53:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:41:af:7f:52:97:5c:f2:dc:45:00:00:00:00:01:41
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
54862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Options/netstandard2.1-Release/Microsoft.Extensions.Options.pdb
mscoree
_CorDllMain
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.Extensions.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ce9a85927ec7507b11ffe90080e7a811d51304a9e8b1da20c350159ba403902
- MD5 a53d11973f75b15bef19c16a35ffb432
- SHA1 376636c20cee083da54d4146479032170ec7231b
- SHA512 99d6a73c8bcd4de86e877c0e5c37960f9bcc5bf40ce2f8fd5ed2ec37650c91d123c29bb254fe6e81fc5aa25749eabdbde9a64352d497eddd862ca10c154f43eb
- SSDEEP 768:slx+oQSHqk49NI0OP7NWEfDkkuiEk3LViOM+1zy:WVQSyI0OP7NxfAkuiEkbwOMX
- TLSH T1BF034B12A7DC4333DEEF1A3591A1D1605B38D7FA7822EB5A504CA17819A3BC48732777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
22:e9:96:61:4b:6b:02:03:d3:64:d9:b6:a9:92:0f:1e:d2:0f:c4:df:41:3f:43:b4:27:52:00:13:06:b4:f3:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:462F-E319-3F20,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:58:70:5a:22:f7:be:96:e6:03:00:00:00:00:01:58
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
35610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Extensions.Primitives/net6.0-Release/Microsoft.Extensions.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.NETCore.App.deps.json
- SHA256 879dc0cb9c9a7a41681e399fc4f18c15ef1ac9a3410f68b94a8d13dd0c6c391c
- MD5 c78a13ea8516a22b60b31b40aa79c310
- SHA1 225dddee736b30214150f8b935b8dd4237d28d55
- SHA512 ea26a813c414c70e4bbbc77aad581adc07fcf5a24dfe66662575da4a1e1dc483260244a19b4ab703eb9e4f4e7a8b8ad75e4ea3ecc6b6d403614d02ad56f423e5
- SSDEEP 768:+6XeVEsIhKPMEPrT3XCGjDyiEc6BHa21Fe8kFN92uwtEeCJyA:bOVEsIhKPMEPrT3XCGjDyiEc6BHa21F6
- TLSH T122E2D206D9809EBA05351BE62C388A54F672032F7585C81EB4BC641E9F3FFBB1255B78
- MD5 SHA1 SHA512 SSDEEP TLSH
KunoichiSekiren-0.1.0/dotnet/Microsoft.NETCore.App.runtimeconfig.json
- SHA256 1b7aa545d9d3216979a9efe8d72967f6e559a9c6a22288d14444d6c5c4c15738
- MD5 3fbd84a952d4bab02e11fec7b2bbc90e
- SHA1 e92de794f3c8d5a5a1a0b75318be9d5fb528d07d
- SHA512 c97c1da7ae94847d4edf11625dc5b5085838c3842a550310cca5c70ba54be907ff454ca1e0080ba451eacfc5954c3f778f8b4e26c0933e55c121c86c9a24400b
- TLSH T15EC08C61DC107EA312F2167A84B2C483EE21B33300251890B9FE69082F2B1A21017F51
- MD5 SHA1 SHA512 TLSH
KunoichiSekiren-0.1.0/dotnet/Microsoft.VisualBasic.Core.dll
- SHA256 5897c9fc711aeb67f0c0cb1dcf205035cd48ea6aa6e8c9a9dfd99874e7ef9eb1
- MD5 3361666dfa355d77de379e1fe5fa5d2f
- SHA1 fe2ea2792d7ad4e606fa5122a9b5d0f3e521c4e3
- SHA512 87b337f3b67698c5e03815a5cc3dc0230d268ffeb7a872e3d83d04a77af7e786bf14acfcd32d226656c1e5ae1be4075382891f3f2ed5866dcef38670fe5b060d
- SSDEEP 24576:5ZACvS0b5H7FN0Ja7/HfW8Fg1YlcCimIo+nI:zvSQ5bF82/HfWMeCiq
- TLSH T188458C06A7C8CB16D17FA2BF859A8506C6F5F4561B01A2CB0418DE942F43BE373B6367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bb:65:7b:45:7f:e3:75:13:f1:58:cc:51:6d:9f:56:43:76:c6:b2:b2:20:36:1e:c5:fd:71:17:25:d8:a5:d9:b8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.VisualBasic.Core.ni.pdb
D:\a\_work\1\s\artifacts\obj\Microsoft.VisualBasic.Core\net6.0-windows-Release\Microsoft.VisualBasic.Core.pdb
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/Microsoft.VisualBasic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2ea09b137eca6d0aaa01fc6746b56242f9bd4f9659a7fcdc78e64162d58752bb
- MD5 695e07d61311f2927e811e73e0af7252
- SHA1 f4b047cefc83a167cea6cf85a94166556dc5b780
- SHA512 fb01d78593984f2dc9cc6bda9be24a09597b07582c6fcc0056d7afdfcd73c4bcf36056b39637b62ae151cd2bfeb97217935cb3944d94feb71c80da267ae8d005
- SSDEEP 384:yG9NphH3cNeg+MxWmHd9QdWzsBlHRN7M07OQGR9zWnn:yGjHMNL8jbOQ69zE
- TLSH T147825B929A688913ECB72B7056A3D5833EB9A7C329754F6A544DE6010C53780EB3533F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a9:9c:d7:fe:18:1c:98:6c:53:58:47:5d:1b:e2:32:53:48:3a:0f:57:35:90:c6:87:4a:45:94:6b:68:65:1e:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
13002
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.VisualBasic/net6.0-Release/Microsoft.VisualBasic.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/Microsoft.Win32.Primitives.dll
- SHA256 e8f2611b0cdc077d5600cce9e02c1bac42a54c3574f6dc16c478b3e6a0ae217c
- MD5 2c631bd51ae34578f6f84955e3f20579
- SHA1 4491ca7f8e3b13ab86f3871d4ccb329d087392b4
- SHA512 54efb05d3edd9d02aac618e0101a6b0192bc6dfb4e3d717646b6b056688cd8a5d4632fd382a303733c9dbb526a03a7343dfcd5d6d140195cee930c62aea71929
- SSDEEP 384:uWh/pW+NVuWauxG9vQnByXhWuoB7OFsBlHRN7LfGlD/LVNSR9zk7:JDNVkuxGSnMXsjFjCxLVNe9zo
- TLSH T11AC27D658B940202FCFAA6B4D9BAED026D38F2C617019AEF0495E5580CD37C2EF3413D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
05:62:12:79:e9:03:05:1c:a7:e6:fc:0b:3d:3f:d0:bb:cc:ce:8d:92:a6:1a:37:5e:ed:4f:88:58:2b:08:c2:e8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.Win32.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\Microsoft.Win32.Primitives\net6.0-windows-Release\Microsoft.Win32.Primitives.pdb
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/Microsoft.Win32.Registry.dll
- SHA256 e927cbba4f097b165bc07b85dc8e6b8bad6df17fc1035f2ab54dac844bf9c922
- MD5 af485e8dd83c7ec6d57f33ff347f46c6
- SHA1 34bce63f47ae7ff28e2ce3112e60ee05add06a5b
- SHA512 88d090d148e53fa7a3c20453e6a33d8f12deb40ed904dd6490880c9318d84f86e87a5cbd775f614481ee80dd59252771006d5c349ef6b8cd20a4e53418f2b5ef
- SSDEEP 1536:wJFTcxml5oKPYieudDym3sykEoTWxGsViHo5ekbIzznNaz0:wJFTIml5hPYeDy5ykERxGsViHCes4NaQ
- TLSH T176835C0A7BD4410AD9AEC9BD89BA9922C679F1C2170387DF2444D24D3F97BCFD232664
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2b:f3:94:51:88:5d:35:28:84:dc:ae:c4:2a:dd:9d:0a:e5:c8:89:1e:10:3f:6b:eb:4c:c0:f5:54:91:f8:94:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Microsoft.Win32.Registry.ni.pdb
D:\a\_work\1\s\artifacts\obj\Microsoft.Win32.Registry\net6.0-windows-Release\Microsoft.Win32.Registry.pdb
Name
.text
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
452B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.AppContext.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50646e8365bb6774c96843e2050607daa727fe01c5ac0dc33f20078bbca17800
- MD5 f64fa3ea58552bcaf91292b8b4920227
- SHA1 7cac0f5db5c3361bced07bf5ab3f087e5acca908
- SHA512 6efb29e755d109dcea09d698b7e9b8e06bf66895dc7e8d80a301975cbebd72379e8cbdd30ce5a2bac2e996c6f6790543add761a65933b6649dd23bd0961b3060
- SSDEEP 192:N9LrxxBZMWY7W1SlWo0A2j9seHnhWgN7a8WMjT0OEU+9YX01k9z3AUCWDOeEW:L5r+WY7WesBlHRN7lX0OQGR9zWdW
- TLSH T15A626BE68BA84107FDA75EB0A3E5EA833D3C97C65900966A05D9FA481C933C5DF3023D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7b:d8:4f:ed:61:12:68:09:fa:65:a5:eb:82:6f:f4:a5:09:b7:75:69:8d:f8:3e:bd:04:5f:0e:9f:e8:b8:39:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.AppContext\net6.0-Release\System.AppContext.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fcdd06fc669315988d2a27a6a2e78deb03dfb5550c277b328d90a8b26ed81adf
- MD5 cadedd777af21077a3582a6be32582f8
- SHA1 38966069f6104cc0acd8f5d5223080c05113939e
- SHA512 0cccac6e39acce1068099c100a1b84ddd7c137790ca85f3a24672989c8509f2588b10e77dcb3cd9885349bf26bb852e5e6436ea3971ddba19f0aa502a0435b86
- SSDEEP 192:lnx0Z37WN2W1aWo0A2j9seHnhWgN7awWu+ELUhG2ZUnQJeX01k9z3AzXtbO/i:sxWN2WesBlHRN73+vG2teR9zmXtp
- TLSH T124625B928B688107EDA72EB09BF4D9833C7CA3D76D41966E0A85F6491C53388DF30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:84:36:ea:47:6a:33:be:05:f4:a0:6f:67:9f:da:4a:63:5e:3c:c8:7a:00:03:64:52:1f:12:51:21:33:bf:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Buffers\net6.0-Release\System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Collections.Concurrent.dll
- SHA256 1314f85d88a247a8d3fc4a41f1735af31e5e0c5324e93e3b167b331b46de8019
- MD5 1e660eaf8c1f5cefd0ca4f6e3866381e
- SHA1 8e31cee95d94a5bf434b7fc4f139b910ca589395
- SHA512 36bbe8533e70c179651acbda8bd14d0c6d1269f15bdbf55c7dd019b69c5978637deafe7ddb4dd2e6a4df37675ea76192414ac982a757fb6f1ab4e1be462d64a2
- SSDEEP 6144:trgyvcyXXtNUPvD7tDMClqZORPXtikbyO25KGJ0pebY:t8tBPvKgqlkbD251ieY
- TLSH T167344A1173DC0F2BF8AE467E9DA3E1559233A59A1712D2CB06B4E6581E53BC23F36123
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
06:20:cc:f8:e8:f8:bd:c8:1a:e1:a9:c0:e7:da:8a:c8:51:ce:91:fe:1e:41:5c:5b:97:85:3b:50:20:d0:d4:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Collections.Concurrent.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Collections.Concurrent\net6.0-Release\System.Collections.Concurrent.pdb
Name
.text
Size
216KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Collections.Immutable.dll
- SHA256 89743bc3e0b95132470c2c699add5cb5466fe7fb938725e09612b9bee526eb9f
- MD5 a45a937e2d09beacbfcb758e09cf3c96
- SHA1 2a1c730f4271adde8295674b68b045ac08bebcab
- SHA512 9a060ccb1be00164d7544e31f8ac1a598f917dc6db486e00a47c6cd29565bca0557c185e3ea39b5b4dc9910d266b2dd0924b5fc3d8cc8f840f31869d79ddd1c2
- SSDEEP 12288:Z36MIyN0sWrQ9aoBIyrtXz66M4cR9cv/oMy8Oo/i:Z3Duoa8dLL6
- TLSH T17FE46A41E79CA701D42F85BBA57344B2C421E9921312C9CBC49DFED01FA77C6AA3BB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
92:f4:b8:d5:a3:9f:b4:59:e1:e8:bf:20:06:ac:e3:23:86:11:2b:a0:4e:50:83:99:ef:13:e0:d8:d6:b2:a6:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Collections.Immutable.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Collections.Immutable\net6.0-Release\System.Collections.Immutable.pdb
Name
.text
Size
580KB
Virtual Size
579KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Collections.NonGeneric.dll
- SHA256 aad04cce314ced4070b457a1638fa9bd85160b4148582483b4e317d7f2f92ceb
- MD5 4a1e3ccc9bc277e825fc303e10b919a2
- SHA1 9ed930f6fa9b79e91004d37df6c6d6f53f052544
- SHA512 2ca1e93fc807b78378d857490b3610cc649fdd0b59f633bfb8e2e4f964c151538665805b046ffad386edcb0dd87e2cf9c5c1b4657fbe1a55b0512004c1929d08
- SSDEEP 1536:0iKNtDdkLBXcEL/MTWsXRTk+wf67D+XBQCCeJELDrG2kCazUD:0iKNt6hRQWsBTkev+XBQCCeOLDrUm
- TLSH T1D3A3171173980342DA9E51BC95A3CA52D271F4E32B23D2CF1A04E5CE5EABBC3A774617
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bc:73:90:98:62:6e:a0:71:f1:07:2e:af:d5:5c:3b:b9:67:ab:94:ea:2d:c8:7a:92:3a:07:d4:83:63:e6:4d:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Collections.NonGeneric.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Collections.NonGeneric\net6.0-Release\System.Collections.NonGeneric.pdb
Name
.text
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Collections.Specialized.dll
- SHA256 6b3143ab53ef90285db5c30de82eab03a78ff83cc53f62730408a3eb593ff026
- MD5 ade5de0a0fa21438849777e54424cad6
- SHA1 40e694f6272ce394151c98ee40af3d5a10f6779e
- SHA512 667f4485a251f16a5f60806821b6d7abcfffcfd5a653e106d722a9eb29c775c092769f897d155ae97c02fd97ca68985974b6c8f0472276df35563c5274f4c287
- SSDEEP 1536:+DjsJiX7Riijp1ywYRvk/+9/YyY20Y5hpVe/TOQzzPA:+DAJiyns/YQyY20Y5hpVe1/A
- TLSH T141933A1673884312EA6A95FCD8A78C96C235F0D72322C2DF5858F2491F97BC6A732177
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:e8:e1:b9:fd:d8:fc:5e:fb:ac:a2:67:9b:06:dd:3e:28:56:c6:19:3c:7b:63:8a:ec:af:78:ca:bc:9c:a3:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Collections.Specialized.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Collections.Specialized\net6.0-Release\System.Collections.Specialized.pdb
Name
.text
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
396B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Collections.dll
- SHA256 628a180f7c368a1011608b422dd1c8de37064f21b59cbc26bd62e9b065c2e7be
- MD5 a375448efcbc7cae77a34823cfea2904
- SHA1 899343984f022af7046fa350da4b7868f8f1e56f
- SHA512 d2b3cee37f1e5cfccedebd0f9ffaa1deb7eb652d2403ca5be7c4fee9041cfdb16ed19fe36729b3c75429e3fbf1a278f0a3dd562d214edc73a8de86f2230c6c69
- SSDEEP 6144:gUnDbH6scxiHjZpjRg0EZo56pAje2lE9u7CLU:gKH6DMtgzDWF7CLU
- TLSH T17B445A0AB3880B13F86F447BE667C012E6769483870286CF137EE6496F57BC27E76525
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:33:86:bc:2d:e1:5c:8f:dc:13:22:b8:c5:52:2c:31:c6:82:54:8b:75:93:19:ca:48:81:95:81:60:30:1f:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Collections.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Collections\net6.0-Release\System.Collections.pdb
Name
.text
Size
232KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.Annotations.dll
- SHA256 c72aa4efbb17d9c5c8bc03a69b963644652da5b5b5b6cc8489d75379026511d2
- MD5 a99127fb9887e986c8ecdf155671386b
- SHA1 891eac67ee12c9d365256f94fad6328e4ea884c9
- SHA512 8548a3f4471e56a6d1ce0c10b44cd9a439b93270121d0c171b4560a79e0c60ac0361c1ed50995d7e7f32be9386f3876ed4a61cd23d2bc2e310f4ee55bc2773e8
- SSDEEP 3072:AQ/nI1Qnpxlvi+t0Lvy5J5GumTG5D5/vbF6D+F7uWYf84+3:ZgEpxlviW1QG53F79g8b
- TLSH T18404192637D84216EBBB5A7885364851C6FBB8922735C2CF4A50E58D1F87BC5BE303B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1b:83:e1:fb:ac:26:91:82:f3:34:d8:ad:0f:28:18:81:55:49:a9:c1:33:71:01:b7:a2:e2:4d:0d:9c:c7:01:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.Annotations.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Annotations\net6.0-Release\System.ComponentModel.Annotations.pdb
Name
.text
Size
157KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.DataAnnotations.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ade682d3e52b24e47d7b14b1e71aeb8dff77f5063006e5cb1bf0caf03629db1a
- MD5 999cb91924b2d8ee22080b3f9a39cb03
- SHA1 98cb69b70d5e2c3fddfd20cd811ddcf87b432195
- SHA512 400fab898a6e623aceb629d42a6a654ae1db26d5a697aa01d383d3eb66bf1d8aca0ca21ef4ff8af21e71e3d9968550ccbc06b4be502778bd21a3431055309ec9
- SSDEEP 384:jY8fmyfJe9eGXxa4WcUvWsXWhsBlHRN798KNcM6a1R9z/W5f:s84NwJj99n6K9zg
- TLSH T164725CE297688623CDBB5BB096B6E4437EBC97C16C528B3A0C9DD7461C533849B31335
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2c:57:79:db:d6:7f:e8:22:36:1c:e2:e2:5f:d3:e0:dc:5a:88:55:93:09:4e:de:3b:be:a1:cd:6e:7b:90:88:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ComponentModel.DataAnnotations/net6.0-Release/System.ComponentModel.DataAnnotations.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.EventBasedAsync.dll
- SHA256 f2533cb4e274ce9dfe702ea34affb2e32b220ee714fb8dc118b2339519227131
- MD5 7f7a3ffb0300a0ba74545e512762c08d
- SHA1 69f08847e1dd473a7bc0b72695f737a5cf84895a
- SHA512 c35887fc13a31503bda980a8dbf78cbfc562b4ad0875cf38d9e81f7337e5371b9d3fd86db4bbe426d755460720755dfe0702e21002fae8918bf548ae4cc146ec
- SSDEEP 384:4WMwWxF2tOSWyiIo/D8NPAo2BRswb7ekbBXip9klAFDXSO88+6EZccdwVpR8T6ZB:29PICvBEOe84t1feRj0xLVNe9za
- TLSH T1EB035D6553C40296EE6745BDD6B3DE1359BCF6861B02C1CF1858E2092FA3BC9873227E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ac:e9:5b:30:06:88:60:89:35:e7:90:81:a0:ba:75:0d:f6:dd:1a:10:60:ee:e7:36:2f:4f:e5:9b:2d:b7:0f:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.EventBasedAsync.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel.EventBasedAsync\net6.0-Release\System.ComponentModel.EventBasedAsync.pdb
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.Primitives.dll
- SHA256 adac36fec73388cdbb349527bd81b84c0b88ec2b381b81cc97efb4549cd471fd
- MD5 5442a44e3e5dccefc6ffd217092dd95d
- SHA1 dea6a340c9e68d123f8dc0e4bb043b53924098b0
- SHA512 836fd9606115bfadde8d273ca4c6dd0526476bdb634cebbbd3e9198ab695aa6fc86b8c65d8a11dfbe0261ead51451ae9a2b563e00dbe1cc549ad71ea97d29a4b
- SSDEEP 768:Qv48FwP8OAte2fPOq6BRRmf1yF0dDC2oKQ15hl9Dgb2mD7j/flOQ69z4:QvYvST6rkkFQC2oKQfxYQz4
- TLSH T1DF734B1A77D80312FAAE423D91B79841927AF5872723C8DF4951F98E1FD3BC2A630539
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2d:55:34:6f:b0:52:83:eb:cc:5a:e7:86:48:d3:1d:9f:16:eb:24:f7:ba:cb:e6:4d:7b:54:03:61:75:6d:3e:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Primitives\net6.0-Release\System.ComponentModel.Primitives.pdb
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.TypeConverter.dll
- SHA256 7126b16695d5a2e4a593cec1b7cab8ec10df5cbd9f31f5ff7cc25671e41e82cf
- MD5 4fbcf7e7aa2c7634564c8221b5bc59bc
- SHA1 88fd4c36b24f921bf294f183818ba96e2161d030
- SHA512 91d3ca65dc0116927c4e1a0f30b48d1f768937c7d0711d51fb46e08756e2c93a0eb8e7ef3e154b9f831652175ebb12490cf4614056457a63a26e22640803d0b6
- SSDEEP 12288:CqfcFt5yHNmBzp+xEVT/7jmCIdEMwp+QMed4HigifVsVJmxY5qDQcBnd+7dOI3tb:ncv0HNm1p+xK/7jmCIdEMwp88poIQcBu
- TLSH T12AF46C18DBDC9612E9AF81BDEA234413D279E5C3BB31C2CB0454EA842F87BC1A735675
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f0:c2:af:41:eb:a5:42:07:7f:72:40:4d:5a:24:9e:95:16:35:e0:9d:11:4b:77:4b:24:ee:4c:e7:fe:66:e1:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.TypeConverter.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel.TypeConverter\net6.0-Release\System.ComponentModel.TypeConverter.pdb
Name
.text
Size
666KB
Virtual Size
665KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.ComponentModel.dll
- SHA256 69e9429b032c853fcabd9dfc3bdf13701ac8c730ca40e1afc949f935932846cd
- MD5 d2be8860845474e6252edddd853fd915
- SHA1 56a880a23aae53e9165e090f964e271d3186dbff
- SHA512 d7ac76f0a8232d543ff35681c07d4d429d6b5390e4ded8b731b2a49ad7ef96a5c1e330fdb9285bc810038e36f68fcceafcaac3c0c0f2d33dc238a67962037a1c
- SSDEEP 384:/Wc1WyvxROSQkA+nCo0WU8sBlHRN7r011BUGWF//dJR9zJ+:n0SfxqjenBWF//dj9zY
- TLSH T160824C9287984203ED560E7067FDE9433E3CA7C66B0192AF1685F6451ED7BC89B30179
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
19:49:76:ae:98:83:0f:0c:c4:70:05:16:4d:57:37:16:00:fd:54:bc:32:2f:a9:21:53:cf:8b:5a:f8:a6:24:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel\net6.0-Release\System.ComponentModel.pdb
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Configuration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2c724a2a5b4e6926c5ebb56adb3f33f27067e2e3d319e814a8537b9a579b32e1
- MD5 981c2862d67b2f75e5c81ecfb1772644
- SHA1 d648f80303ae8951ac4a4fc0c07db0e486ec1e6a
- SHA512 d3ce18a2c1dc0451c8e1ec7c03082a1125c91d2ffb993146ffdc78d25ab5be8f7f3dad43255c95670818e0086fab42726771044251f1025331c17a558f90af7b
- SSDEEP 384:qXoWX0yXQB1uXTSv/fvNRvGZYdf3zyP/weeYEyYDzWTNWzsBlHRN7THGlD/LVNSq:FniZP1jSxLVNe9zZ/Y
- TLSH T14D9239965A444E13CDFF0BB3E5A3D5422FFC87C22871875808AEF185289B78497B932D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
97:71:d6:5f:ef:67:ed:f8:14:5c:21:ed:22:9d:06:94:d1:28:28:f8:4e:09:62:10:4b:66:a6:b5:d7:3f:31:bf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
14826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Configuration/net6.0-Release/System.Configuration.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Console.dll
- SHA256 82f483f5b349f8f4f0bc6c651d1faa2e78dd3f01528dc72c7ac387ba7246ae06
- MD5 ba3f3b2ae3674cd8b7fcee5af742f93c
- SHA1 ea5a09ac33378ed4b3ef3c58f33c1eee6b65bed0
- SHA512 c1d259419335823adbbd40ba58f40986df6d862f18e041ee0596a760d67f07b9226094a07294c1308d1c25199808521f7f33b87d14a5516ea850a929a06a0b4c
- SSDEEP 3072:D6RmINm43AYT+a5TfaEPv+K1UymOaYI4Hv:4pqaFCGVePcIU
- TLSH T17AE36C16A3C00157DBBF86B940A36742C63BE8A60B1293CB2545E6B82F47BC77F31995
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ce:1f:d0:81:fa:16:f9:92:0f:dc:83:29:10:96:3d:b3:9c:81:8f:fb:7f:a2:f9:9f:7d:3a:a1:7b:31:6d:3c:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Console.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Console\net6.0-windows-Release\System.Console.pdb
Name
.text
Size
133KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8b05cc2dfd7491b709caab31c5fa5d58da1bc321210536360ad20d19be39e508
- MD5 78b50239c21f6158f2134d32d63de1a4
- SHA1 b2beba43cb69727b620beca3f54ddcb70d72fee4
- SHA512 e9a9a0efbfc8261aecab935ef999fa95f353854ac6ab23256326d022d359e2b0818fc22dc9c8eec9aa0c9ad47822b2b1626387aadbf3a754689672c57aa2ac58
- SSDEEP 384:GEfbPFWOUSnPEW51b04H9DGMq/tE8aQjryAkxkBm4U1zXtPC1MHRIQWO2W/sBlHw:GaPFWOUSnP751b04H9DGMq/tE8aQjryh
- TLSH T1B8B25CB09ED48663DCCE9BB156B3C4852DF8E3C32874492F11C9EB4928A335A9F2131D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
50:99:93:ec:db:59:98:31:a5:06:42:50:9e:61:f2:91:52:26:14:eb:53:8d:de:59:8c:e4:06:2f:c1:16:fb:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
19094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Core/net6.0-Release/System.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Data.Common.dll
- SHA256 48d8145ef5e96c016adb303bd59a34bacda6f94baeedd9dc548ded61defebab1
- MD5 140140a008093c1d2202dd344a22bdc4
- SHA1 5c1b6051cd7bdc9253b4a6a086106d07c1c6664a
- SHA512 5c0a3c0660d6122637125291ef43ab4371b149566bae3517a56aeb92622d47ee14c3ea79678b30a617e77a7f0fbc3e7bdaae67b93981ae84cd3e78e32eb3fcbc
- SSDEEP 49152:iJZG6LhH6cEEJUE7EPba92I7aE0Vnv1XgVi4nNmcPdDpBsYTzktydjz:irPkc3BNt
- TLSH T18DD59E1173C80706E46F92B9CB5A812BE5B5F46B1761C1CF0804F6D62F87BC27A7A663
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d1:b6:99:57:e4:ac:26:7a:58:48:b7:02:48:af:6d:99:08:b6:29:0b:83:b3:c5:92:dc:f1:60:f9:b2:43:48:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Data.Common.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Data.Common\net6.0-Release\System.Data.Common.pdb
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Data.DataSetExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f5e8441ce28f0771f8fde9a5d1c6b65e6e25dfbf2c1b24420c2dfece3a29631
- MD5 d268bbd8bcf206bf54474a30919ad41c
- SHA1 f0f4e046f7ddd34830c3d34c1eb8d45099d5a095
- SHA512 ab94c0aa45ca27b959a8a4a6e89f45fce4cf315ff2c5039d41f26c3abbf3cd88b13cd1ceaa1fbdf87df8f7fd3150c29dc258d68a604d8e1a77abefcd5df44705
- SSDEEP 384:KpuSrhoWk7WLsBlHRN7wG2teR9zmXtD8zT:MuDPjwG2tC9zmRyT
- TLSH T1DA7239828B685203DCBB6E70E7E9D9433D7CA7C76951862A05C5F5881CA2794EB30B39
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
de:02:19:86:b5:ce:87:7b:9b:c5:a0:24:bd:b3:83:2e:bc:85:6d:d6:e0:c4:4f:a4:94:d2:e1:4f:18:ab:cf:02
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Data.DataSetExtensions\net6.0-Release\System.Data.DataSetExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Data.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5566075cda9658c248d506aea051bcc120c94005bf14cf4bcc1b23fa7257f9ee
- MD5 f090088e69488b019f373b9a1d1a7a21
- SHA1 811ab6c75ceafea8c80fa19fb444a67698be2d8e
- SHA512 3126f5f9d4dfbd2ef03197afeed7759a2926ec721f474675e9a7366a60d555759ffa7b3d6435e40580e2c812acad5649b1cea296b4d3398286de512d224a0d11
- SSDEEP 384:UB/JC9XmGP2SoxDZQZ/adWuFW5sBlHRN76PoB/P/R9zP10hY:UVsXmJDZQUznjXBPZ9zd0Y
- TLSH T18BC22A8592A8AA37CD9FCB7431A7E04339FF03CF62B142725584F51958A7F41AA3431E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
92:4e:86:f9:66:bd:1c:4a:32:46:c8:ce:dc:78:25:88:8c:ed:ce:07:c1:6b:37:ee:39:2d:80:8d:bf:56:b1:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
20722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/manual.System.Data/net6.0-Release/System.Data.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Contracts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eccdaaac1b9f2af83a9f6b49786996d334f6ce7133c1c37c4647065b49ea8a63
- MD5 978e7e3bef6fe9d9fedaa66358bb58e2
- SHA1 1d564003923562721cede97626b5b5f85f267b15
- SHA512 b3e756894ee70c71f471a1fdafdc85a8afc6ec23c89dd1f7491d731cf756ce04189b1618c9c092b0e3db402e0f95ebee66e41eb5f5706e5d973e2e4d23ee21ea
- SSDEEP 384:V9VqATWb2WOsBlHRN7byom8WF//dJR9zJNqXW:bQN1jbyom8WF//dj9zT
- TLSH T199724CA2CBE84307ED671F70A2A6D9433D787BD76851916B0A85FA0908977C8DB3133D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
de:ea:3a:35:d0:6f:2c:12:0f:75:e0:d4:83:81:9b:3c:c1:2d:2b:fa:65:59:9e:b7:f8:ca:da:dd:d4:7f:4a:fd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Contracts\net6.0-Release\System.Diagnostics.Contracts.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Debug.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 606e24a3bbc11942914ff4f60c3007fa737e0d5a2f4a5c021e0238f5403b66fe
- MD5 445635353c9d8e7723b9bf5cc3ce7243
- SHA1 ad5b48ed0e06b9cae9ee2e7daed518c38b5f99be
- SHA512 68d397e4fbebe11abfb26fa8344597f50e390ba2f3bec429d88488c6cf4d0adae19827a89c80f9d2e01446076b7d9ee93ca0920a24964d7b66f738bb10b133ea
- SSDEEP 192:ik1b0xx+Zy1HW/mW12Wo0A2j9seHnhWgN7aIWXsSXo+KKnAX01k9z3AXhWy27mLc:goUW/mW6sBlHRN7usSXoTKAR9zeu
- TLSH T10D724BA6C7AC1203EE675EB086B5D5833C3DABD25C5196AE19C5E5090CAB784DF3033E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
86:24:b5:b7:79:4e:1f:c5:d0:1a:e3:f6:b1:0f:65:fa:9a:90:47:f9:42:21:b0:d1:c4:e8:5d:d4:4b:f6:5d:b8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Debug\net6.0-Release\System.Diagnostics.Debug.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.DiagnosticSource.dll
- SHA256 a939f33ccea3a6731fdfb7791d32c3b518864f243211e39b6156dbb21ceb04bc
- MD5 5fdaa8916aed22e9471351d594903010
- SHA1 aac9096c11ee3c85b2eb60155ce8801c738cc1c1
- SHA512 7d4dcc849f213daa45bfcccb80f9c306aeca862d154839b7bbae0fc4bec3416465c5b8c8b80112d23d6d77ea4f3a9246e30aaeb313793b3b1ee0a2982da0cb9c
- SSDEEP 6144:en7IdejeGFPNOYsQyRQF2EH0KkwovSV1yuU95XW18Wdv0uHK:enwevFyQaQF2EX6XwKb
- TLSH T12D846C15E3C40221DDEFA679E153DD42D6B2F69363D1C3CB8604FE985E4BBD26632222
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
eb:d6:f1:24:d9:13:c4:2b:3d:08:94:b8:73:a8:07:51:47:aa:eb:80:de:d3:25:cb:0a:53:c9:a8:96:c2:80:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.DiagnosticSource.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.DiagnosticSource\net6.0-Release\System.Diagnostics.DiagnosticSource.pdb
Name
.text
Size
327KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.FileVersionInfo.dll
- SHA256 b9e7b0073c546037a4f28439e8c3800c93f442e22ca706790d90ad71e7c319b6
- MD5 10bb5f5b99e6c0a7d9a35fe34cdf2788
- SHA1 bacc282fdc0ff0b3fc19783979e6d100a8435998
- SHA512 8e9705985f2023782d479b158494d867cf21d9be861360c6fd6e96430d509e23e1cc43364c1982928d7eb1e1700a5f54c484700116b2040c63c1aaab1c14718b
- SSDEEP 768:mR0pgyQLiKqFCM1n29wWJZsjkUOQ69z19:mR0pgyQLidFT1n29JI4zX
- TLSH T1E5F26C01B3E4412AD6AF0778DAA2D9531EBAB7861321E9FF45C9E1980FB77C48230735
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
eb:f4:68:83:42:7b:21:76:93:47:ee:ed:b1:89:55:4b:77:6d:46:bc:fc:2e:38:7d:7d:20:7e:e1:e8:b8:2b:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.FileVersionInfo.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.FileVersionInfo\net6.0-windows-Release\System.Diagnostics.FileVersionInfo.pdb
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Process.dll
- SHA256 98c318970936e1ac79cde888e4cbfa455d91348881931fefa6c84a2cb084d5e3
- MD5 7a55dfc1b12be52c646df9d8c406f895
- SHA1 540cfc294f2840f85028b95e15bd5a8fded0d2ad
- SHA512 564d5f41de745cf56aa474bab4a5c28d43a89c8a425b69e769abf3ff54df0b8e04103f41b7c493d566e16eca666f6576d4999e6002cf9c9c61ed0b4546f6701a
- SSDEEP 6144:/HBkBUomnQSH7IZpVdbjuQNVs9b3NX1PkxlqNS7s03IXM:/hkynQSH72vbjuQN3PS03IXM
- TLSH T1C0546B16A39C5601FEBA5679C05BC422E0BDB4972707C3CB0B74E69D2F9BBC65B31122
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a5:1c:cd:7c:b1:67:30:66:56:3f:5c:3c:1e:69:c8:52:5b:1f:17:50:46:ff:84:77:78:14:3c:71:e5:1e:85:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Process.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Process\net6.0-windows-Release\System.Diagnostics.Process.pdb
Name
.text
Size
253KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.StackTrace.dll
- SHA256 7b7d3f408ae1aefa8c78f9af5e2300546a08ba49e198247fb6538b13bf0e5b0d
- MD5 2c22eae7dc7ba0b22c1f5499d1c43e60
- SHA1 d93f32e00bfc61dc0dd867b853188314fb643c28
- SHA512 1edfcb8a32c2320682b386c402a1880b2e591e8f6a8d0acfff29c2292b13628baf3036cc2453111175c1784f2bfee9f66cd6388c92d90239732aabd42348990e
- SSDEEP 768:zTYv/xnjonVukH3fn9Is/HwSPWjN19zAV:zTYv/xnjonVug3fn9IawSiZzAV
- TLSH T12DF27D6397A8E213FC960178F9E6DD021738DBCAA7C39ADB0948FA1D1CC77C5A634119
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:01:f1:11:16:54:ac:37:55:32:43:1f:72:af:cf:4b:a5:ff:c4:a9:9b:dc:7f:ed:d2:bb:46:55:01:b6:15:a0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.StackTrace.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.StackTrace\net6.0-Release\System.Diagnostics.StackTrace.pdb
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.TextWriterTraceListener.dll
- SHA256 655d26fcf394b8ff01c2e3ecc8a40271903c02a7e251ebf4d58b8d291ea5f488
- MD5 491e2929178560faef51121f862b091a
- SHA1 9ec3ee3f5edbb16389c028763348f5a14aa952f0
- SHA512 c30dc775d9560a211de82297b293e64df8ba5947c40b6e9d6225c80788252b7fe16ea910c0ed8789dab5305837e18b9059752a27df0dde26be59b751145328bb
- SSDEEP 768:sa8wJAKTrqhVqzfkRoDvLgBsUbvNI3LxXRCIDOFTkyFWOQqjkxLVNe9zy:stkrqXcMoDTYI3LJEflSGknNazy
- TLSH T1F0433A0EA7D84A12E976C23DD2669402E874F9C71321D6EF4889F19D0F83BD6BF31469
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:14:e9:60:cd:3b:87:fa:4f:8e:ef:3b:20:26:90:ac:6f:19:94:56:48:b8:eb:45:9f:c8:41:19:b3:42:c0:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.TextWriterTraceListener.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.TextWriterTraceListener\net6.0-Release\System.Diagnostics.TextWriterTraceListener.pdb
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
292B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Tools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 89b601e94e5bfd18c573dcbdd8ab2f6fa67f5c6b88e9b32888d79d70a2a3b2bd
- MD5 be47395433b7c672a0bafbc8a3ef6f16
- SHA1 3e24f67423d645fe0c6c065d6ac4eab9d91ae84b
- SHA512 b975a880bb2b4ee8628fd3d00484c2bf10c005a6f3ef291b1bd398e4569454c1e533a65b2c9c982f11216c405f5f627ef7998b99bccb522864cf921be55b2d2c
- SSDEEP 192:XVWAwxxeZzMhFW/UW1MWo0A2j9seHnhWgN7awWttKhG2ZUnQJeX01k9z3AzXtD6b:lXu85MjW/UW8sBlHRN7nG2teR9zmXt8
- TLSH T182726D92CBA88247EDB71EB093A4E9433C7CA7C7AC41962A0A85F6451C677C4DF34739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:4f:71:18:ef:17:08:d6:28:65:ff:66:0f:b6:9f:64:83:0d:33:66:e7:67:1b:3d:11:a1:af:6e:3e:d4:af:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Tools\net6.0-Release\System.Diagnostics.Tools.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.TraceSource.dll
- SHA256 a9138f26b1d866fa7179eab0962d7b90df61b39dbc088ddc951eaa0ab146b0a5
- MD5 c0831356c2d68671c7b584f93df09c89
- SHA1 873131eb5b22259ac62ea54e3e670b255e2d5e00
- SHA512 8ba5efd4c5f2c250929d82d9cf02709694bba7188fbb866e3e1d46ed77667abd4bfaa1832a5a0951414bf40c5264c2253ed47ef41e6abb5250be600f0192a6ed
- SSDEEP 3072:/mKb0Gaoj6SsuOj2Sf9eVnirmty67pNad:OQ0Toj6Svp1I60
- TLSH T161D36B26B3D84247CA3F927888538542D6B3D2D31782D3CF0956A6B92F437D6BF72066
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
91:27:da:dc:27:62:f9:91:1f:da:91:60:1d:4b:a5:8a:8c:d0:a1:08:96:44:b2:22:73:cc:af:9f:d6:fd:68:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.TraceSource.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.TraceSource\net6.0-Release\System.Diagnostics.TraceSource.pdb
Name
.text
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
536B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Diagnostics.Tracing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5407d3ac2fbdb47a25c34e84a7b679ec4f76791ae4c7cb7cc6312c20ffd04094
- MD5 c2fce54d3ab45b55174b1a37748b0b65
- SHA1 cda7d60de217f9c494bbc0611f372cd9d5715597
- SHA512 48c2344da8e46d1672b43684243a8ae91105d127f7cca3a0535765669a99475ba169d89e1774717d7f97d8cccee4b7b840ba370202bc917b5141b63a7fb1cf79
- SSDEEP 384:T+yr3RWpDWnrFsBlHRN7KG2teR9zmXt7fC:Jsor2jKG2tC9zmc
- TLSH T16B725C618B584107EC673F71A3AAED833DB8A7C76D5086AA0981FA451C63794EF3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ea:71:57:04:9d:27:83:e6:50:50:50:cf:31:c2:cf:dd:71:28:41:37:e4:af:17:e2:7a:40:24:52:74:65:56:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Tracing\net6.0-Release\System.Diagnostics.Tracing.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Drawing.Primitives.dll
- SHA256 d2aafdb04c1af629cdeb2798a189b23840ccf0630b8782920738cd928bc59121
- MD5 e97fcfcf6da57eb74eac345e017dbbfe
- SHA1 60a839d1c08086e8a1d41a8ba4efd62c5d1a0ed2
- SHA512 a2eb8ad0dd46e96addcc9403e8deaf3630029e47f0411bd00e75f4ff035d770675943d9d53d00da262224225ecd660942c88d62e6eef15fbd8d9880ef84a4efb
- SSDEEP 3072:n3POfBY6c2ZPg52Hzvagb4xfHIKHnq6IdIl/kHLYyv:3POfjayzKHH+pp
- TLSH T165D36D25B74C829DDA5C4A3850D38517ED77F7891325B7EF0AA8869C2EA27C0E2730F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:ce:10:3d:a4:5d:5f:8b:11:0e:b0:f5:52:40:c3:ed:2b:57:ad:26:1e:92:df:17:ec:c7:85:43:32:38:b5:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Drawing.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Drawing.Primitives\net6.0-windows-Release\System.Drawing.Primitives.pdb
Name
.text
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
300B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Drawing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5176d9cbee941ded09dc6c1ab8255241abd07dcaa8b177f0c7f6fc1e99f498b3
- MD5 99334f057c9ef5ea900e5826b3c42073
- SHA1 b9f5ad986c15b5fa4c792cc26e4a7004804f742c
- SHA512 f7381344ea4c8495d02b00d3f354b7f6aafa67264a5860494ff49e5cf074874c99e6a0cf637f2443f67d9cda0c842d32af1a5caa04c12538d2586e63023dc127
- SSDEEP 384:YsLzP7uC8sYITetLP9dbaWttWz0sBlHRN7XG2teR9zmXtxme:Ys7MFWjXG2tC9zmL
- TLSH T1E7921A929E189E56DCBB1B70A6A7C9423FF8D3C624B1875A25DCA1040D93794FB3933C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
34:d8:dc:10:8b:fb:db:78:6b:df:fd:33:68:84:81:e8:0a:91:77:b3:3b:9f:c1:70:2c:51:fd:37:26:55:23:1e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
16082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Drawing/net6.0-Release/System.Drawing.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Dynamic.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2a930d63f7020099f6b61733147af4e38cbc3f80ea6eea93c79421103751e6aa
- MD5 00efc98052b83dc3e9c1494ad542afd8
- SHA1 e7458eeb06cd6f2c7c8e30e7a61a75485f3cf631
- SHA512 e2722836151fb486e94d2ba7b3db303a51550ad34878160b2b0ec444551a366896696a715bea3dbd52618e2e89078097fd70a6c0b2f0a28ba6addbc739ebefe7
- SSDEEP 384:4GMn1jAMWFCWysBlHRN73Yl8R9zrrisIN:y1MNjIlQ9zw
- TLSH T1A5726CE287984203EEA75F7081EAD9837DBD6BC699A0C31E14C5F9451893394EB2133E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:da:33:bc:61:dc:4f:84:c7:44:e0:ff:02:8a:5a:d4:15:ea:d3:46:31:e6:89:08:39:53:ab:d3:48:3d:21:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Dynamic.Runtime\net6.0-Release\System.Dynamic.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Formats.Asn1.dll
- SHA256 26173e7e2970904164e8e3374eb225351453ba4d06d7cc3762ed2e610f9f8a7f
- MD5 c0436bb8f594a37b55ac969a38702a6c
- SHA1 42c931bf307d1c5e8754c0549dafc5627c248e15
- SHA512 df052bd4c6b1e81cbc5e535ca28701502099399dd14a9360be730c33bc0add125edc8434ebbe2e025d4f4c0331e3b5e670e8a96a764b8ebe743c37ebf444ddd5
- SSDEEP 3072:oeAdDcVqut7od4iT6szkiTMDaphMMZBknH5wgOuG4krZAuZAY/RhlRBXHsuQ+Q8:n2MCNJkiAWNSnFsPJ9f
- TLSH T1F4146A56A384C693E52F96F8C063D113E733B4D65B11D2CF4A94C58D2F23BD1BA3A226
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d6:79:29:ab:92:04:dd:83:90:8f:f6:58:70:76:cb:ab:33:67:92:b6:fc:39:98:0e:7e:b6:87:ec:7f:52:e6:63
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Formats.Asn1.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Formats.Asn1\net6.0-Release\System.Formats.Asn1.pdb
Name
.text
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
772B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Globalization.Calendars.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9df5237e78abae0efd1d90849b6a94c88a73c5da5cab3302407472f886eaf057
- MD5 08ffcf55c03808d310ebb3930fe594e1
- SHA1 cfe99a9d56309755b259b94f652044044b8e6554
- SHA512 d21038e586b7e390cf2b239d63a4e7abbfaa5e32cd1bc6550f0765e236b0de3024ccc8cf0e54d3054ebd11dfa9d2558330f1521e541f92b275867b45d966dfa8
- SSDEEP 384:Fa37GRqXWDRq8Rqm0Rq7WDsBlHRN7JfkkOQGR9zWDd:EQqKq2qmuqTjJ3OQ69zqd
- TLSH T1AD724CD68F684107EDB76E70A6E9EA833C7D57C25842996A0685FA481CD33C4DB3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ed:61:01:a1:98:3c:d3:50:07:9b:0d:ce:13:ba:05:de:fa:c2:9f:9f:a8:7a:38:95:40:57:4c:80:73:47:c2:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Globalization.Calendars\net6.0-Release\System.Globalization.Calendars.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Globalization.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 51eaa10853a4672f0ed9e673ff8d7ad154514a26a8c4b990c313f61787a9fc62
- MD5 7599a265c0773be94ca3b6d2cbc50cd7
- SHA1 04588c8e1f5a78287a7447722042159bf9a19a2b
- SHA512 d993b81fe8340aa0d45bb109bdc73d9028e37f2180b73602f1f0d2be93cd50def1dcf27f74e1ca3fdd758aedacd5b0f8bc680265af23ac836726fd11c8fcf21c
- SSDEEP 384:8lHRPWYRXRp0RjWpsBlHRN7nlEGlD/LVNSR9zkBJ:8/NBpu1jlLxLVNe9zmJ
- TLSH T16E625CE58B684103EDA79E71A6B5E5837C3CABC75C0186B615D5F54818A3388EB3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a7:f8:7e:f5:65:2f:43:0a:0d:b7:0d:25:f9:a5:67:61:24:cb:70:22:f3:bb:37:04:ac:05:88:c1:ef:2e:c4:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Globalization.Extensions\net6.0-Release\System.Globalization.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Globalization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ff51c19e14e496ebd3c93a661190e1d6ed99d3f2cc7bee4f9a826b7a46332e5a
- MD5 b7bdedbb63f4269bc347788a20829680
- SHA1 a8f4833a9930d373156cc678f6bec7c74dee0fdc
- SHA512 723fd6581c08d4de3bfd039bf5ef0c56b8b5f9b22ba2b53ff14149f879c814601be204272fe7ccff90f6e04827798438ce7c6ca3dd8ea2f090ba10ccd09400b1
- SSDEEP 384:PnQDAyRLWdRSRA0RHWKsBlHRN7KjoeOQGR9zWaNBveW2:PnQDh0AAuGjo5OQ69zRBWX
- TLSH T101725AD68AAC4107FDA76E70A7B6E6833C3DABC79941866B0581FA541C533C4DB3073A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e2:74:87:ca:2d:7b:1f:60:0c:a1:f5:81:00:69:53:50:76:39:59:85:a5:9e:c0:85:59:78:2c:8c:a3:90:33:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Globalization\net6.0-Release\System.Globalization.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.Brotli.dll
- SHA256 dc1f71afbc55f6a6c135cd135b89e461c580b73c619daaaa91ef266ec0e4bcc1
- MD5 6da4087596e1ea683f1af1730565d5ab
- SHA1 90ed3962a6101ec501a6e9de5cdf27a2f3d0fe32
- SHA512 a796ddb0c833d4bb4020884821609c6971038e957873fb440ebba9a837613463909ea8f9788fe8ca0773657c01228042b71d097e407c35bd0a946300d462b243
- SSDEEP 768:4OV8KjTeuANDf80mzINeQrUMd6aOMXPYyTDXb2Dj32BCA6CdOpl2BgOobAdJjRMs:4S8Kjdlqr5dSCrXb23eCArEp8RKKRIzm
- TLSH T1BF634B05BBD4661ADA7B8939C9B28D228D35F5C22B01D2CF14A8D64F3F63BC6D234167
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:e7:b7:4a:87:ff:08:71:19:8a:7a:97:60:44:86:4a:38:7d:96:5f:09:c1:1e:a6:da:14:7f:50:6e:e1:23:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.Brotli.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.Compression.Brotli\net6.0-windows-Release\System.IO.Compression.Brotli.pdb
Name
.text
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
364B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.FileSystem.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fc11b8625f1e1a5382274494fe0f2459d9e67951217ddb965ba384b8f84a6001
- MD5 86af3459ce19d90d387dd383aa1ed0fe
- SHA1 1cd52c6ae3986ab977279acb2b3bbc2dc217054e
- SHA512 ee6ce132cae23d8e2f32a143cd513e01df2aa6615155079792700a3eaf417008803c4c4b2a37b4c35bd119f62c076cec97f79c57d87849285e5d05819f00a6e7
- SSDEEP 192:GOPc3zZD9W3mW12Wo0A2j9seHnhWgN7awWvQEBSdfva2NX01k9z3AXIQM9:TPALW3mWusBlHRN7iQEEvpNR9ziIQY
- TLSH T1E9724B918BAC8143EE975E70A3B4E9433E3CB7C76D51525615C9F6482C937C9EB30239
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0c:08:0b:0b:d5:6e:e8:1e:0a:8b:0e:2c:1b:5d:22:74:1c:ce:9b:78:10:9f:eb:c2:9a:6b:79:98:a7:8d:59:2f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.IO.Compression.FileSystem/net6.0-Release/System.IO.Compression.FileSystem.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.Native.dll
- IMPHASH 5c60dda7f0e42c4ab1a4510cd287d92f
- SHA256 b4e65c507f48f28e96e69247e47093b35d0b1a376af4c052d504983e9c26ae44
- MD5 c5135e850c824a66b73fc2de6af6df26
- SHA1 588feb6110d04e0de8d6be4d00f271633e227d4a
- SHA512 0ba6d96c805e365409d842fb2095560e9a632655a3ba7e22f61c97a7866d36f5b23bfe1db047b9d3515ff37188b8901623bfc91e28dd8b9fc8223dc1ea2bbcb1
- SSDEEP 12288:ZWTY83GfyvVf4OelYfHoFA04ETwt3AHhlyt8bXTw05nmZfRbp:4TdvVf4+65Tw3AvgAmZfRd
- TLSH T12D059E07D5A24776CC2BC0788CA75635EB317269531089A7729CE9353B83B2417EB3EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e0:ca:27:bd:57:59:b4:68:74:12:7d:71:cc:f7:56:37:96:a8:4a:4b:18:ef:a5:91:7a:e7:75:92:2e:60:e2:31
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
316096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\native\net6.0-windows-Release-x64\System.IO.Compression.Native\System.IO.Compression.Native.pdb
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
api-ms-win-crt-math-l1-1-0
log2
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_initterm_e
terminate
_configure_narrow_argv
abort
_initterm
exit
_execute_onexit_table
_cexit
api-ms-win-crt-string-l1-1-0
wcsncmp
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderIsFinished
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderHasMoreOutput
BrotliEncoderSetParameter
CompressionNative_Crc32
CompressionNative_Deflate
CompressionNative_DeflateEnd
CompressionNative_DeflateInit2_
CompressionNative_DeflateReset
CompressionNative_Inflate
CompressionNative_InflateEnd
CompressionNative_InflateInit2_
CompressionNative_InflateReset
Name
.text
Size
312KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
469KB
Virtual Size
469KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
388B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=29395,
count=58, id=1, productName=Unmarked objects,
count=31, id=261, version=30034,
count=10, id=260, version=30034,
count=8, id=259, version=30034,
count=45, id=264, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.ZipFile.dll
- SHA256 6237bbae8bcd8e34273ca5aa59685701fad22b6b6fcff3e7dae277942f254355
- MD5 a7c6301544a46159b059b6069123ea21
- SHA1 5f934e77c2bb8a28a81ee5511fe472f933e075b6
- SHA512 fdfeabacb1321d63a9e3456ce6584dfec92105c67a55659df23c683e094b200defb0a170ecc9ece3acd469b25f781d767eabca402eb5c634d478f2b856f65b25
- SSDEEP 768:ET7wEf45GjIYyosE7capXojpikWHnWF//dj9zz5:ET7wvkcJosMnB4c1WZz9
- TLSH T1E1034B1163E8021FDDEA893853F2E8069A74F6D72B12D2CF08C5E54C1DA7BC49B325B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:f3:3f:62:de:2d:4b:46:52:6b:01:c1:6e:02:00:f0:7c:da:80:16:01:fd:d5:4a:6c:f0:4b:c5:fc:6d:21:ea
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.ZipFile.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.Compression.ZipFile\net6.0-windows-Release\System.IO.Compression.ZipFile.pdb
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.Compression.dll
- SHA256 2c70db9227451b97f5f2c9cad7e4a434895983450e5b653082c29d69aaf25292
- MD5 7ca4730590919fe963752f06c1f4eec7
- SHA1 a3238000a4a4199121cbfa24b137c835104aac12
- SHA512 d7d5e5fd1c450af387da4c6565f302425ea759c8ca9a3379478f280c056041062a34fa21d2136d1af7208e806ae275ca29eca4a524fc4dd305950b9ff188e097
- SSDEEP 6144:qFAnQfVBIyPfyiWltSd1xI5lllOk5oyKY:qFiQfVBIUfyDto1fY
- TLSH T15D448E1A63D44E07F62995BCC653C41AE371A492AB02C7CF0739E6C92F937D5AE36123
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ff:21:8f:48:17:2e:5a:81:e3:af:cd:45:1d:2e:32:f8:5d:70:86:d6:3d:8a:f2:47:93:50:44:5e:31:dd:1c:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.Compression.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.Compression\net6.0-windows-Release\System.IO.Compression.pdb
Name
.text
Size
234KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.AccessControl.dll
- SHA256 544deee0e7663d4c5d6091f1b2197ed27e2fc5222254682b3bfb76a01eaaa8be
- MD5 95e6591759035bad767ce60b426e7d96
- SHA1 dcde9208cb750367205d3b323b729f8f0ecad48c
- SHA512 c473b01e9fcb5eff6e752ee995e084f9fb7e7f8453576e18c1e3fe6bc272c49966979644e98537c7e0aa6c6ac17765a0993a11d6c0013d8c370b0624fc8b2b37
- SSDEEP 1536:pjorkem0Qn+kHdIYgdUR9s6+gvXYBFB5gvmXDgq2wzk:pjornm0QntdIfdUREvZCoEwg
- TLSH T140935A11B7D50636D97F857CDAB2D916D5B0F08317128ACF1880E18D2FABBC647B21EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c8:ad:59:95:c8:a7:f4:1d:0e:c9:e3:4f:e9:e3:21:86:af:cd:e1:62:fc:2a:be:85:12:2b:85:8d:1d:74:a5:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.AccessControl.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.AccessControl\net6.0-windows-Release\System.IO.FileSystem.AccessControl.pdb
Name
.text
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
516B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.DriveInfo.dll
- SHA256 cfc334386e491a0fa41409d2e7cfe9c8b27e18fa3193d101916f92d93d975984
- MD5 f1fefff416f0308ab9252dac5135a134
- SHA1 06a6c09ecfc84160553db64b18ad4ed2734409b6
- SHA512 a2614e4e5783c56c083ac234116790885b535d032f4ef96dfe3fc8fc3127fbc0d54e55c36e9095ec394d7d796710c204695e99ea925c94fc320642394b14a818
- SSDEEP 384:nWdyWhbVCHWl2Yd5zwNiyXKTmRIYfZKG46JdicX+zu6NVy1/8KhY5eks+dLFSHY8:6ff/L36JwcXKikKhYL19jMKWF//dj9z5
- TLSH T108135B4997EC430BE9BB4DB88B7BC5019A71F9D62702D0DF60C4E50D2FAB7C58632A25
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:83:e4:8b:37:61:37:9f:09:ae:62:ac:9c:6a:9c:96:7c:00:84:3e:fc:ac:13:c0:06:fe:ae:9b:03:3c:d1:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.DriveInfo.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.DriveInfo\net6.0-windows-Release\System.IO.FileSystem.DriveInfo.pdb
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 42a9d51d8fe5166fef82aac23c820adcb354b822b5b74728ffb0e79093ea0d3a
- MD5 1fc1fab62a76a9f958ead1a9d6715430
- SHA1 0a36319f04d15e86d6a5515783b6c6eacea38877
- SHA512 bd54ed52d8715fdd504a865f54bfb330b995a7fceeb6e740a8b00119d9579f20368c05e8e1000c4b0ae1c8473646d07e001ba3f88401466ee1e52c3bd924256d
- SSDEEP 192:VSYSx9ZFWKqW1CtWo0A2j9seHnhWgN7a8WlYA05v8OEU+9YX01k9z3AUCWR+:V49zWKqW2sBlHRN7ex05v8OQGR9zW3
- TLSH T1EE625BE68AA84107EDF75E70A2A5E5833D7DA7C25841875E09D9F6441CA3784EB3033E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:1d:e7:25:75:05:18:34:98:de:b8:cb:60:2e:2c:b2:f5:c5:95:bc:5c:86:a6:e7:2b:b8:1b:07:8f:05:d6:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.Primitives\net6.0-Release\System.IO.FileSystem.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.Watcher.dll
- SHA256 ddba64e364f20ef1472d39bbaf988073276c4f2ecf72b4f8196388ddb20bcc11
- MD5 04c518c7ddf2340c921cb6410914ef7e
- SHA1 2075ea08d893b317e0b161e1c1954d3ac2f2b170
- SHA512 f3328d5c6ff7fdb2b46f523a6dff06b363237b03e1921f0926b9ba8e69cf6c29217040ce7ccb570add38d74a55d1973730524ae8aa35575634351383e0ed2e16
- SSDEEP 1536:vsux62C2SM9ILBZ+df7lgsd6I0bWOkizu:vJxtNWlZ+7l1cI0bpdq
- TLSH T13C637C2267EC5326DABF863C8A666D5A4974F1F62713C4CF4C94E24E2F477C18732262
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
32:a8:86:7e:8b:60:d3:1f:d1:d3:57:46:8d:6e:7e:82:33:17:28:e2:2c:4d:9c:1d:ed:02:27:59:d9:ab:50:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.FileSystem.Watcher.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem.Watcher\net6.0-windows-Release\System.IO.FileSystem.Watcher.pdb
Name
.text
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
368B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.FileSystem.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 91e0348a48b0d9a69e0fd8db54b1bee3b9465ae13f7fd95fbb4b25bde3f80c16
- MD5 10ecfef971fc5de232e8e706b2063adc
- SHA1 be4ce5ad92b14aa6bbc587ce167514556670cca9
- SHA512 1dba0ae58bc8a1dd5e67bda54deff047c9bae9183b1c728140cd7e01f0fead28648363821f03bfc7d0e95d0fff32733fc8392bb5a7b4a1e611e3c9df618c9e86
- SSDEEP 384:E5aPWc+mFnJ85Zu+m2sqjd5z5nNkULGhJWz2WdsBlHRN7cTQOQGR9zWb:nP7Fn8dPfVqR0WjccOQ69zs
- TLSH T146B24A426BFC022AFCF31B307BB6D1525D3AFAEA1521C25D1189E20D1A73B949B32775
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
17:a7:f1:da:db:3f:28:51:2d:c7:8e:3b:56:a0:63:59:3e:1a:16:9f:6e:d4:d5:fb:a9:21:2d:a2:aa:29:9d:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
19022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.IO.FileSystem\net6.0-Release\System.IO.FileSystem.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.IO.IsolatedStorage.dll
- SHA256 a79b19f37db340184f6a53a82b0e3410d7698bf1736ec479224edf7eb3d508f9
- MD5 f2266c97ac8d88b087d691c7cd61ef67
- SHA1 51ec5b9d90a900114559f3a85495b856d629aa36
- SHA512 a386b54cdd8af58b0bac2c5038bd7ccace6d015ac725dbba0a4c1d2b8f459ac3cb0b60d5a38335bc1fc8dfa14871ed8f3bcba1da23abff9a357542988f0858ca
- SSDEEP 1536:71UyLw9JeCCAcw10KiRUH7VpdNee+1f35KZOVGEHWZzE:7y9JeCCAV9iRUH7VpdNeNf35KwER4
- TLSH T13B83391EB7D8421AEA6B85BDD573DC11C53CF1C6A722D2CF0941E18E3E877C2467162A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
99:5c:18:b8:05:21:cf:56:be:e8:f0:15:ed:01:2c:b4:43:93:09:e4:0c:f2:10:8a:36:79:28:86:d4:26:5d:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.IsolatedStorage.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.IsolatedStorage\net6.0-windows-Release\System.IO.IsolatedStorage.pdb
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
440B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.MemoryMappedFiles.dll
- SHA256 958eb5c597368f194d334d0bff479706c83a8a80c992eac3b9ba5b94e5ecfe4c
- MD5 02e28fbc060f99e35e3728eb3ab51c13
- SHA1 5a88d8c01740673c68808fc4172c2054f933d7a6
- SHA512 1cec56f39aa9402b7ed1524b814c50c9e6b8d4416bf34f915d7625dcf5f17d8344140d8e69585e559288606ea4db14d491d80f5da4bcbc3e4f7eda9116d8ad60
- SSDEEP 1536:+wln4bbPOrgQqy2gYSxPcVFYd3g0TwKtUWZz+Q:+wlMPO2y2gYMEVid3g0TwK95
- TLSH T1C9634C06EBE80517EABF8A7C897296098535F9E61712D2CF0491D04E1F9BBCF5A30673
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
09:8e:7b:7a:1f:78:cc:cd:e6:50:af:b5:e3:02:98:97:7f:5f:08:10:30:07:b2:73:5e:09:fa:b5:1d:dd:80:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.MemoryMappedFiles.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.MemoryMappedFiles\net6.0-windows-Release\System.IO.MemoryMappedFiles.pdb
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.Pipes.AccessControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d434a73f0b9368922bdc7d57e0bf7a80e3566cbd3a29665f4d868e5aac1a1677
- MD5 e32478b880f0ff285066e9fce9414827
- SHA1 3f8a054c1950875fd17818b6a44c595b94b60070
- SHA512 64148fff559dd3b30b9f6d6d68c2618f02b4cad6f8f77eda9a1ec444f2fba6347598b4ab61e2090445ad609106556e8078436b6bc02a2bb41d417d1098ec1190
- SSDEEP 192:6AVjeuxWaZWUPW1eJWo0A2j9seHnhWgN7a8WFuql0Y0OEU+9YX01k9z3AUCWWW:6OeUWQWUPW+sBlHRN7cvj0OQGR9zWfW
- TLSH T142726E9387A84553EDB71D70A2B6E5433C3CA7C26821966E59C5FA052DA37C0CF31739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:53:36:bb:02:b6:7a:c1:90:da:61:2c:ae:67:99:a5:d9:02:1b:db:27:ce:c1:8d:b3:f3:8e:af:98:89:84:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.IO.Pipes.AccessControl\net6.0-windows-Release\System.IO.Pipes.AccessControl.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.IO.Pipes.dll
- SHA256 fb75c1dd8c3a77641ab28058d32738551fca2e5ec52fa6c123e3b42e5639126c
- MD5 ff3be501ad164d67eded8421aea82487
- SHA1 1ef89103dd633d18433af2a2e4318c10aec4a06c
- SHA512 5b7abf6b5c1be71f5dd2ce4415fc30a47c6828d4ae74a9b38188d003f069a988b4181173bdd341ca8c46ab46c75e60598c09e3f49cd55bf7e771e69f0ef2ceff
- SSDEEP 3072:pR3C1fr4ydLwfR0apSEy3w7feCMM0eGepClhk87lAB/U:D0fG0a0z3am80npABc
- TLSH T1A2D33815B3D80252D6ABDAB8D4730916C17BFCC6170282CF0485DA4E6F67BC7B372629
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b3:b4:ad:ee:45:da:f3:82:29:76:38:f9:96:a5:f9:68:c2:52:de:16:b8:04:a4:64:c2:3e:59:47:e7:2f:f3:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.IO.Pipes.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.IO.Pipes\net6.0-windows-Release\System.IO.Pipes.pdb
Name
.text
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
716B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.IO.UnmanagedMemoryStream.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cf9c47e009e08695c200647ddf2b6757a8375fe3a74830137143c989864ebfd9
- MD5 2829430eb3eb9a2711d7e8ddd7369fc8
- SHA1 6c258d7fecb2a5fb4001a8962bab56017c6e4b35
- SHA512 d7c9bc96b206cd74413dbb1a1c50a869f7904f34ab231f7539d0c2535713f95eca85f3f1d4d87da6d12c27e5549c53ca75a66f2b16a625b313a3d8257d241345
- SSDEEP 384:0wz+lW6+WBmsBlHRN7+el8R9zrriseF37:0wzmhFj+elQ9zSJ
- TLSH T146625AA68BAC4207FDA75D7092A5D6833D3D5BD7A850A65E14C9FA011C937C8DB3033E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:ce:a9:62:8a:b4:7c:f9:d8:18:dd:c9:6e:61:80:5f:f4:27:b8:e9:b1:79:84:70:45:39:1b:25:45:6a:20:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.IO.UnmanagedMemoryStream\net6.0-Release\System.IO.UnmanagedMemoryStream.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.IO.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bb50ff8a1f9affd53107dddc78a33cb656988d6842f5aac628cecb0b15f634ab
- MD5 48aeadee0f5402dc3e7e1aa3e94bbbc0
- SHA1 83f524133595edaa9c5a3777efc8bf896d6c7505
- SHA512 876208da6e90ba6ef2773dbdd7c170bfbbb7fc252ec63f2b30d2c406d2794a67dae16fa07bc872a15e14ea2d288012c3918d28c2417bed3764415d8bd1989b11
- SSDEEP 384:ybS83yY7WgbWLsBlHRN7dWZOQGR9zWMO2:SSfmvjyOQ69za2
- TLSH T125724CD69EA80107EDAB5EB0A3E5EA833C7CABD25851865B0585F6491C937C4DB3033D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4d:75:ce:5e:32:7b:61:6e:d4:fd:76:f7:ba:72:56:0f:1e:c5:d4:85:0e:99:0c:61:2a:bc:70:81:d5:bb:d5:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.IO\net6.0-Release\System.IO.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Linq.Expressions.dll
- SHA256 df96691089ea41cb5a8daffc5e95324a5a5f3516083bff2448a377fbfd61e918
- MD5 c321e4cd592cfd5e669f8bff5306d962
- SHA1 47d2b660e390287ec7669b92e831435a9122b2e4
- SHA512 ef87f0ff81637270ebafd81d0f83769aeb034ffcfc0dedb19587f951ef96d648f4a3f34959f7bfa0a91d12d14a2459efd90f46a6c49f1984c8c41c8656ca2386
- SSDEEP 49152:3bm1Md4Bn0YsMkmKayrjMGdrMTcfr3yERGelYzb553P77zbr7jrgrVZW9NHXU3b:Lvd450QTQ3a52rVZENHXUr
- TLSH T19D063A52D3B94614F116C2BECBA2E927E2F097160BC1A6CB0026E6855F477F332778D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
70:3d:48:cd:e4:bf:a3:c8:c2:a1:3a:ea:10:63:38:09:ea:2f:e5:e5:1d:67:1f:bd:c5:56:1c:a9:bf:3f:6d:5e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Linq.Expressions.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Linq.Expressions\net6.0-Release\System.Linq.Expressions.pdb
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
385KB
Virtual Size
385KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Linq.Parallel.dll
- SHA256 920b3f087c615a7ad0057925b3fa6d9720690123075a6fe2af07203f26786656
- MD5 6bb77206c803ff629187343731f756d3
- SHA1 b58a1cdf0c06b29b72ec94027a04ed7bdb4832f0
- SHA512 f689c8dbcfcd9278e1a96d9f8a3b8cfac2e9f680fb8b5ba34c2a73d03bb5403bf727daff5d0c9564056cbfd6115b36648f82d0f91c3f3ce84f8ae18a4180eace
- SSDEEP 12288:eFeeO6ALK/iA4mQ72yaK4lT97EG1FpIORtFSQRYSHqsXNscKDaqFM9tFe/Qf:5WiAlQ72ySTFE4FRtEiecKeHFeW
- TLSH T1CE056C06E3C80311C43FD2FBFD5B9582D971A183536690EB848AFA9A3F93BD1657B610
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
22:13:d1:07:37:4f:47:a4:7b:20:93:8b:8e:f2:06:6c:96:8f:23:29:5a:0c:aa:94:4d:eb:b6:87:7f:f6:e6:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Linq.Parallel.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Linq.Parallel\net6.0-Release\System.Linq.Parallel.pdb
Name
.text
Size
726KB
Virtual Size
725KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Linq.Queryable.dll
- SHA256 ba5e7f66011ac7f215518d46ff2a13f646489d5a89334c33d6b9c6f697e3e2d2
- MD5 4ab65e195c1130afb9c08762d0521fd9
- SHA1 bbc6f5cd96c8748cb87fe5f658f1571060d02a9c
- SHA512 a5c229fba62d95c1c4ba9f0c66ab26ef5f8c4e63764233a964e1e7e6ca53c89bb7737155c53379173fbe1a731c156b1bda5d600331c3e253f1a11f0022612888
- SSDEEP 1536:PuYpfYopMQxfPIDsdiIcQ3yw5dygvzjac83fI/GRyrnm48sJE87MZzsSqGMTNBTi:PGeMWPN7dbSccRyrnWsgsNGqNpC
- TLSH T17324D66763899D07F63A423C8553C229E6B79AD7130097CB1BF9D1A62F47FC27A30990
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:74:5a:d1:a1:bc:02:88:3f:6e:26:eb:c9:ac:ef:a0:3a:96:77:74:77:a6:9c:e0:c6:74:c3:ea:dc:d1:ec:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Linq.Queryable.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Linq.Queryable\net6.0-Release\System.Linq.Queryable.pdb
Name
.text
Size
182KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Linq.dll
- SHA256 52e1cfbd54de414a2b3c44dad40bbba10f72a8f9ba9cee68323bda0b4f417f69
- MD5 b982f8bf7686215a9d8e4df9d61a5240
- SHA1 17d36d5e338bf2dd2c27a413e5543f358868bf72
- SHA512 c030da4e0edfbfd6b7d43323f13acc0601292887d8a7f6417520c6a11c58d372c1e96b396e09f864ef0571da8c042edea24ac58d78bcc03c8a28e428b26e3176
- SSDEEP 12288:7jqOmDf7INpG5k4HcEVMPdzYIKskoYQaUASxW3:SL7MsVMPdlm
- TLSH T153B44B0797980711D61B827B9577404BC370DAE353D1C1CBEA8DEA962EB7FD366BA020
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:45:07:08:2f:2c:79:de:31:6f:58:42:14:60:2b:eb:f6:3b:38:de:3a:c6:31:b6:1f:e9:a9:bc:7a:97:bb:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Linq.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Linq\net6.0-Release\System.Linq.pdb
Name
.text
Size
472KB
Virtual Size
471KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Memory.dll
- SHA256 108f424ca216f2d057c722f686bcc25dbc02b221b2cbceeae21ddb456fd97eaf
- MD5 fdc17763830dcf840622210a9bba534b
- SHA1 e122d515efdf128190ae74518043c325302c6c06
- SHA512 f21ef3dac2cbdec212e520d727cda5b9392c76e8b8d5ba929d8086c6d446ec3f7bcbfebce216eff52f9b6fcc9cfb7dd609c7fa7eeb1f2606ea1ed625e5da04dc
- SSDEEP 3072:ZT7RVN4azCHEuCKvSwOy6fM/vzovpPh/h/t/lIYrA4S1TUgM1t:3PuGKjt6Ph/h91U4ZX
- TLSH T1A5046B1BE7CC4717D82FE5BA85668662D633204BA301A6DB45C4FAD80F63BD0BE77025
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1c:44:e0:fe:40:ff:49:a3:91:c6:1f:c2:30:29:ad:92:f2:19:a1:34:5d:69:fc:c0:c0:72:ac:08:fe:18:ca:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Memory.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Memory\net6.0-Release\System.Memory.pdb
Name
.text
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Http.Json.dll
- SHA256 d0b4bc46949a090c1f30dff8834efdd7ab2cae8fb888b60032f180e5c179aebd
- MD5 1a3d046dcb8abea91ad3eb177574ef01
- SHA1 6287d97595f0036087ec82ce58d22ad0533e156e
- SHA512 03a61eb269cd9e691f5ec3a3c6ab8e51e10dd4dbf020c2dfe7c07baab0f5bfbfcd671d5bde3394d3fe17a1e3d119d6158bd611eeaf05144736519ece3d843dac
- SSDEEP 1536:hyhVsO0ifu2mizM8x04plK0iB5Yjbw5HUfLCN73P+sXNqkz2:hyhV30ifuViz5K0m5YjbwCCBP+sdv6
- TLSH T1C7834A0AB7D89713DD6F99BE81B34941D8B8F0E51301EADF49DC90AC2EE73C0697815A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:7c:d9:b6:d2:77:f9:74:fb:06:61:9c:53:e0:da:3d:b1:ac:64:2f:9f:d8:8a:45:4a:41:51:1c:d9:7b:1d:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Http.Json.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Http.Json\net6.0-Release\System.Net.Http.Json.pdb
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
492B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Http.dll
- SHA256 5b1cb786c6da2c36e86f2079eeb22081c35bf951d5f286ae4a83154a3071edff
- MD5 0d72d2c3ed9dd230eae0ada862e10e69
- SHA1 b4871d7e726836904dea9c8f7c7cd3c7c18cd54b
- SHA512 61cb4e65aee9a8171d82f187ae207dd61c900243e2c4af96618591a8bcda60c02b17a0f4b5c1b2afec9adf1c50506e1f936006801871c94002f96bf3d213a1e9
- SSDEEP 24576:iZlQCOlhxfwiaceZ6sroCo9zLYQ3qWJZ3yGMRGy4hpJvee4:cublhRLeQsroX9HYRyVpdjm
- TLSH T106859D05A3D98712ED5FC679C1738872C6B1B48A9702D6CF2844E9892F537F1EA3532B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
79:a1:8b:d0:50:ba:51:f1:f9:4a:44:75:cd:03:7c:98:e0:6d:3e:31:ce:44:02:b8:92:15:f3:76:10:49:42:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Http.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Http\net6.0-windows-Release\System.Net.Http.pdb
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.HttpListener.dll
- SHA256 4efab60ed73e5ae823610fdcd2dc66cc02c6c44244eedfa8ce424be7f62488aa
- MD5 d47945a2f8c74ef11729906664f11db7
- SHA1 c09f3c6b40a7a8441233642e6cdb57b375dbe69f
- SHA512 ff05412c9bebc9d51fb98392814c59cccd17b83eea4f236d7076cba397e6c1ca0977bbca407780b938aa5cb3bd3b2a0a3a07d6393b86c4c250890613ec88f65b
- SSDEEP 12288:3kzkd/GVNra3fZG+O0xs/pYE+6fwT2zPflwQUZVdR9XR3jQz9kk64y2L:3k2craBGz/R+6flmkzh6LQ
- TLSH T11BD45B10ABE48A4AE26F477895734437E6B5F8872301E7CF5400E5AA2F77BC19672336
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
be:b1:b1:f5:95:ef:4e:c6:44:8e:f2:a8:f6:3a:89:1c:77:75:c9:9e:b7:ce:8f:c4:b4:07:c7:6d:21:98:e0:12
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.HttpListener.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.HttpListener\net6.0-windows-Release\System.Net.HttpListener.pdb
Name
.text
Size
570KB
Virtual Size
569KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Mail.dll
- SHA256 866b26900d30a29b174213e217e21a49d2bfd1e99b21e5ab33ea8e4d5aa1c88c
- MD5 13e4dbba5c461b56e175d83fc68fb423
- SHA1 d0cde72da0e29518d4b16377e281474dbff4a2d3
- SHA512 8be0155fca08a38425239d308f21207fbecb07621e7831ab0f25bc68c3d71bac505e89ce59bbe1e00c44e98a73a31bb6931b3f087a294095ff67115683f391ef
- SSDEEP 12288:yJYH+rK4oMuAgqSr6tbDOHqBo/WU37bH52tOGgZFBvT05:D+VohDqJx7QS
- TLSH T162C47B14A7D41606E65F83B9C5724412D1B5FE97131AD6CBE800FB982F63FD2A3B21B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:f0:b1:aa:c2:37:ef:cb:1e:25:14:6e:5d:bc:5f:d7:9e:40:ec:61:7e:bc:e6:34:c7:d6:a7:f1:11:5b:00:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Mail.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Mail\net6.0-windows-Release\System.Net.Mail.pdb
Name
.text
Size
494KB
Virtual Size
494KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.NameResolution.dll
- SHA256 bc9f07b05893c03cd47fbc71176c3e89287a493eea4a430d74193c841463181d
- MD5 618345e60417bcb1c5282f5cea296174
- SHA1 c6ef153579a84d690ae10efe91d95f2403b294e9
- SHA512 a5992a23012565fd4cee6e5337b40c04c557bfaa8f2792e4489f2cb50c0d0d479cf07e96546ed3d5b8ca8c65de561012812da1f11d4771b6e131e23b5db4c6da
- SSDEEP 1536:yRo88c44CMKiatU2A7Kr5DCHUwyBKPG4xRo/mpiAJ+UFbCHdz4:yZ8biratUp7KrhC0wyBqfoOpibUFmHdk
- TLSH T1A3A36B24F3D40250DB6E993C98A35946E5BBF4C21382D2FF1858D29C1FD37E6B632662
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:4e:ca:62:55:e4:f3:d0:22:59:19:9c:47:bc:f0:e9:d9:32:10:17:82:df:e4:15:a5:ba:50:86:fe:43:f7:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.NameResolution.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.NameResolution\net6.0-windows-Release\System.Net.NameResolution.pdb
Name
.text
Size
78KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
676B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.NetworkInformation.dll
- SHA256 4310ee56787d5cb17a908c6313c7d7c0be7e66772ad43dcd384cc12940793067
- MD5 5b491f0a3ca8135076dede7dd3985ff8
- SHA1 ab7fae790062146dd20006c9316be1d909d7a773
- SHA512 bf53915f7e239843b96f1719b0e64260ce8351d5d034ec03de0d398c0ee97fd0bde9271e81c9362f685640dde91f632f9b7b73de776c05fcaf7a327736e6294d
- SSDEEP 3072:Bf7rbQ14d8qGQZOBrjG9LysLUXxPZLVXQ2VfMynzLD+1W4U5k:lr81SjGJrSLUX5Pni1dL
- TLSH T199E35910938C521BDBAFC67CA4734D13953BC6C25326C5DB1A48AF8C0EE7BD1B672626
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:53:04:57:e5:66:1c:75:68:3a:11:34:e4:38:76:df:e8:c9:c5:de:48:77:ed:0f:0d:76:43:83:db:5a:63:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.NetworkInformation.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.NetworkInformation\net6.0-windows-Release\System.Net.NetworkInformation.pdb
Name
.text
Size
124KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Ping.dll
- SHA256 76d2a89cfeae149c1ceea891b563527cad6c4823e01185aa25824cf1c0aa931c
- MD5 a9bb09b1672947725f8a64b6002f2002
- SHA1 51c575aa79502a0cf5100b9e2ce1605cb02489a8
- SHA512 3ed55ddde5d9557e60f6b7b2dca7f63a01997c7845cd0ee7593cfe4ae6628a8365a06b4ad587bbfd23cf00d825b75ffc8ee99f75643c0590f0256060931a83a6
- SSDEEP 1536:yiFI9trHS12hWE30ULjUMj4m5ImmSvKBpKpdL3hy1Fzj7:yAITHS12Ik48ImupKPaX7
- TLSH T17C736C7A73840316DD6E867B99A7C92386B1F1D15763A3CF089BC18D6EC37D29631222
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5c:43:32:aa:70:7d:c1:ce:ca:04:67:9e:33:6d:f8:62:59:16:80:8d:0a:92:21:19:10:62:26:0b:ee:b6:bb:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Ping.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Ping\net6.0-windows-Release\System.Net.Ping.pdb
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
484B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Primitives.dll
- SHA256 421fdcbd8eb0a744424995dbcdee2e72eca9ef1bfcddb53187fb624499dccc51
- MD5 b45e7bdc05bf2868e6eea382a887d4a9
- SHA1 195033e4312455aefbe8fee29d2de9976350d691
- SHA512 d208d124fefd76693b11b2f188ae6e10ab526a35348651834e64fbfd1b7bb9934c57c81ce818826a4d8f7bce3ca854281320c051be54d3d86e5c520798d733dc
- SSDEEP 3072:EDhvFjVkipTPJoUwbE8nbbEBz94YX7T1sWkN6O6E/Z4BWm1u2use6M6eURojHqJa:KxFjVz/+8BZr+DGwx6eSojKI
- TLSH T1B7247C19B3E48E53F7ED91B98953D502C373A0C26311D6CB0E64E6892F537C9BE32266
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:90:ad:0c:e1:b4:1a:f8:79:19:8e:4d:e1:76:19:4c:8e:5c:91:9a:be:13:84:c8:21:6a:d1:29:ff:17:fc:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Primitives\net6.0-windows-Release\System.Net.Primitives.pdb
Name
.text
Size
184KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Quic.dll
- SHA256 78c61d0efdeca3dd6929e80083798dcda9b557183f37d556397daad7241f83e7
- MD5 354c1eb3d8943475be210f3fef57ecd3
- SHA1 89f812e33c5328274bb208dfb06500adae6d383e
- SHA512 38094a5ee65f06759b3c462c51e6da93922547a668d49f0eab5dc70cb03d6e69889ffbf419b6b324deebfe1cc1649b77772a58037297a523ce4fa3c24e30c2d0
- SSDEEP 6144:S9u2tODNS5dFFxxqJU190poKYHAh++Z1SzdlSwH+JR:4Bu8NYJUMpoKPfIlPeH
- TLSH T16E546C12B3988B03F69EA3798593C002E37DEED65742D2CB4624D68A3F537C55E32267
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
91:43:49:90:2f:e9:c6:71:e7:62:0b:c1:d7:78:d4:ee:87:2d:02:6c:63:5b:ee:06:fb:52:bc:73:a4:c0:55:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Quic.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Quic\net6.0-windows-Release\System.Net.Quic.pdb
Name
.text
Size
247KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Requests.dll
- SHA256 9990e35b0aafbdd58acc4ed76db1f4f8639c0f9cc9f02aa38b8fbbe8d173f340
- MD5 3246fc9a12fb58c4a27476f1f1a0126a
- SHA1 c7c2658d90489e6c9d4ca6a962794370f7fedf10
- SHA512 e08be2a7b894ab51b47a5d829d7775ebff304bcc7a5d328d3c2e463068afeb32381dd8732d476c7d74d8756ae901c2404c5e43818b54b2187fbb6078abb231a8
- SSDEEP 6144:4TADzXp97wEfbvrySyLAbEskQ32ZrUS/DpGH6+u4AJ:GADbp9MEfr1OAbEtQ3qybAJ
- TLSH T1EF747D22F3D4051BEE2AA27EC563C512D9B1A4C727D1C3CF8111E6CC2F9B7C6A635266
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:5a:25:1c:97:12:52:c6:a0:3f:98:92:22:b3:82:f6:3a:ab:b0:d4:16:0d:31:31:a9:c0:b2:60:6a:89:85:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:897A-E356-1701,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ab:09:09:ef:ab:63:d4:e8:a9:00:01:00:00:01:ab
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Requests.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Requests\net6.0-windows-Release\System.Net.Requests.pdb
Name
.text
Size
302KB
Virtual Size
301KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Security.dll
- SHA256 f591ce881a45fe77608f8b301853218dec7caccc7f1007a3c6d59eeec8f8c7ae
- MD5 d2f36f5ceb8a9c62e1d67c11d69bba87
- SHA1 43aa216b1b341eb0395e665dd1b17d98e5c9df21
- SHA512 784e517af2f085c5285e8c782a6b123b3fc0fdfa2b5f56da927eff2dffd13f4f2c3552f305b3b649ac7bb54f4cc452447d1176ff4aa1b28685611fc50fcbcf7c
- SSDEEP 12288:sqrvlBdfB69BtO1Jd3V2jQNTh2JA4320uT5AawHcbn:sqBfUjtYO24WVT
- TLSH T1C6E47C21E3E11711F66F863A85778802C271B8E67B06DECF4485E4992F63BD29B36313
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ac:fc:33:5e:81:f7:b3:8a:dc:22:ed:c7:82:3a:5e:db:c0:de:e3:3b:6a:eb:2e:93:0a:b4:67:13:a0:e2:0f:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Security.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Security\net6.0-windows-Release\System.Net.Security.pdb
Name
.text
Size
608KB
Virtual Size
608KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.ServicePoint.dll
- SHA256 15a4182be2f2d7613f5240fd7805e197cd28b6e5dc85ff56a18438d2adc0ae5e
- MD5 0757909c449c86c4eca656413679e29b
- SHA1 3829ef6bc7f29e8639a65ea22800fa4a31ef01d7
- SHA512 1c1f414214d79de1e0f6ef78eeb103ea89d850f5209d0d0f6b3b615161a6a5a58297143aec5e6829f43296379ed614150011b39c27ca4503b903ddad4627daac
- SSDEEP 384:zWSFWmbZ3dWpNmLmxBB+az21JCcBVKnxLjqYFSlxgdg3a2myQJNU9RClsgSRWnsP:5v5MLYTvAZuwggxsg8WsjKzn6K9zA6m
- TLSH T1D7F27D6993DC436AEEE901B981BA8642C638F38353429BCF05D4D34D1EC3BDAB67215C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:58:98:d1:e1:16:66:39:27:fa:0e:6c:bc:c9:4c:d9:7f:d7:d2:86:21:f4:65:aa:3f:53:d9:2a:f6:d5:d2:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.ServicePoint.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.ServicePoint\net6.0-Release\System.Net.ServicePoint.pdb
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.Sockets.dll
- SHA256 0d00c303e305949a1543658e9e15477fbf6eb66b663c4cd2cf8c037e0265e7d7
- MD5 f80de89a879192709cfbde0fde6f0e96
- SHA1 8de48ab97689c9f4d7503573a71a605b9e9044cd
- SHA512 606317ea687ba2646b41a843d15b4d3504414a88da35ff85f1d44a9d9e04887a6d3084353b39f24ded69c8d8bc86ccf6b681527d9e5743308836185f7eb331ea
- SSDEEP 6144:2Bj25ky5UxOoYiNa3Y0czTiL1u72NVpPQzg7wYopz+tTdhzjZg:2Bj2yyho5Yo0mig2Plop+tTdhxg
- TLSH T106B47C1AA3E44B92D52FC6FCC8664492D6F1B1862781D3CBC458EDD92F43FC29636272
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
81:a2:79:25:65:a8:47:47:8b:86:06:8e:47:93:b0:e8:76:1f:10:f7:3f:1f:75:2b:cb:9b:4e:57:15:e9:dc:ea
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.Sockets.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.Sockets\net6.0-windows-Release\System.Net.Sockets.pdb
Name
.text
Size
452KB
Virtual Size
452KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.WebClient.dll
- SHA256 2dab6b8b9efa86a7f0af51ccfbcfd135d309e648c4d43223923d87f7ba983fed
- MD5 7a3622c46154f05e4a9bfaa77b81a11c
- SHA1 faaf73cc76d112883d4ebac3afe12606049925e8
- SHA512 641492d36a0cd1413f0f9203bdb391f0287911c34ac0cdba4d73b867415edc28058f3cb291754ae80e6e58e1f1bd5cef60e8241626ec48aeeb5d270c1415b282
- SSDEEP 3072:xGmi2SI95WbWMDjTN1iRcz7quMOxsVY3qwJhliX3AMlusnhSFzMfd:0mi2SOKWMTGRczOuMtesnkzMl
- TLSH T128F32A16A3A84613D61B82FCDD7746419BF7D4A31312E3CB0C98E5D81E83BC5BE7A162
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:8f:b0:51:65:95:07:0e:98:85:4a:a0:2e:26:3c:1a:53:aa:c1:23:3b:57:71:42:45:a9:0c:01:b6:43:63:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.WebClient.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.WebClient\net6.0-Release\System.Net.WebClient.pdb
Name
.text
Size
136KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.WebHeaderCollection.dll
- SHA256 a62cb21accebbb410308073bd1d7b177d91365aaf5af63324e7446d4fd6155c4
- MD5 4da22c8e47ba1fbb46cdd18663f19f2c
- SHA1 9a814e2afa4febb359f058086ba69d752dffe0fc
- SHA512 1248a9f488f495e098542bf40f2c2a6395b3263ca2195f9a626334df765df2f60416af81b00712532bc710a2416d1fe73fc04ad521804e5ed4b59fb4a1c9dc96
- SSDEEP 768:8DPdRfR1oA+yB1uKbVWMyOKDq6oFg9V7v0EF3KXuulTTTU1vZjIL289zkSw:8z7fRiyDuO6OY6EF3VulTTTmJWFzkSw
- TLSH T1A343291A9BC8234ADA62997CE2B345B7D431FA8267A291DF4D41EA8D0FC73C04773D25
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:fb:44:3d:40:45:c8:df:fa:de:6e:6e:6b:df:37:c3:39:4d:c2:73:70:d2:d6:1e:6e:34:78:8a:d4:e3:ae:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.WebHeaderCollection.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.WebHeaderCollection\net6.0-Release\System.Net.WebHeaderCollection.pdb
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.WebProxy.dll
- SHA256 21a3230f6d7a3d0bd307be718ade71e8f12d25d0c1f468d040f12f053680de2e
- MD5 f50bc8a4cf614cb46d6442119bf8550d
- SHA1 4476a6a9955dcb4024ad2e92e5030255a3ac9bed
- SHA512 4f421c78a35ba0880f51b7e004b5ef6e1d88fea94787b01d51cc779a4db19d34056fa050ee389adbba798e2f9de006b17bec1b4a88f5a0ffb7f82558738dd146
- SSDEEP 384:R3WWwWkhzq5acZkCUhekVGt1pWKlL/95s19qOMacVd4sBlHRN7CEdWF//dJR9zJ5:R5MjCvh1MmTHvzjpdWF//dj9zz
- TLSH T1BAE28D624B888302DD6E8578D2A7CE42AE38F387571291CF29DCF6495D833C4AB3567D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:b2:e1:1a:56:ce:8f:13:b8:5f:bd:9d:6b:3c:d1:15:c9:9d:57:53:53:77:79:a2:ff:d6:77:2e:e3:00:19:b3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.WebProxy.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.WebProxy\net6.0-Release\System.Net.WebProxy.pdb
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.WebSockets.Client.dll
- SHA256 9c21e9ac3caa811d28ec68b063079eef2cf3ae889855d1d989360f53994eca3e
- MD5 47c3eea0bdbfe25e7c336f652ed87935
- SHA1 df117de7aee33fc1708c634b6e62339d9a9a1a5f
- SHA512 35f655a80e6e61ad6aeeb9d79d6316575814bb8bbdd73ff9b65e23a5dddbe384af2275183ca5cbc26d2505fa6e20e1c8bb98e9f75c012a2ce1c19afd7246881e
- SSDEEP 1536:JHGMIHH9mPzfyAIDCh2RQCOm2gfisqlc0deP2vKdHezKX:JWn9Ef9IDCh2RQCO4fivlc0doJYWX
- TLSH T1F2735C00B3EC0756E5BA8AB689B7C992AE7DF4C22702EEEF08C4D14D1E537D1567530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d5:84:32:66:94:c0:6b:1e:98:50:9a:5c:77:54:3c:f8:32:7c:b7:8b:d2:54:42:58:dc:88:e0:c1:06:fe:13:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.WebSockets.Client.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets.Client\net6.0-Release\System.Net.WebSockets.Client.pdb
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.WebSockets.dll
- SHA256 2d92421344665a67179b8e0a6ad2fb74c233ec45673eb3cab1e20c1ccefd206c
- MD5 686bba1d78133f86d9ca7f5827e2fc85
- SHA1 906531b376e02f54a82eba512ebcb98b3f1a1e61
- SHA512 95e92b768caad83a2846e473bb3b6b77b0f981803d631fcba1ab054889762b4baabc563b324d7653e01469d56a5e4068c0517fc992fe7a13704ac44fac88477b
- SSDEEP 3072:1tJ1yGe/rWqtcYrgXdz2toYA3OJC+qq87repROM0KnXWRuYZbQLmvhTst/ao1BVv:TyGotlgIz87rijVXWomvhotT1O/R6Rhh
- TLSH T11E046D4B93E80253ED7F8579C5B3834AD773A4992B05DACB0688D4562E5BBC2FE31213
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:98:c9:1b:28:e5:2f:31:a4:60:a3:67:dd:67:5f:fb:bc:83:f1:63:eb:b0:0a:a8:66:8f:f0:c6:38:26:5c:91
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Net.WebSockets.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets\net6.0-windows-Release\System.Net.WebSockets.pdb
Name
.text
Size
152KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 50e883ae0cf45cd8d35ee4cdb83dbc3b6da8284afc4ef53352ccba502febe6a2
- MD5 3cd1bdf048a87ff32766464cf3fcb5af
- SHA1 4c33cd1e23b8af8e810e791febc2dd7b8b021e46
- SHA512 f9696d9f6fa91890256a214a8b46b6852636db67da2de3f7d3395929127066c169360d5878551d375dcb97d698fb720160259ab18bcededfe01d72ca3f24477c
- SSDEEP 384:hQ6EWw13RN8OW7VaWosBlHRN7VT5vpNR9ziRM:hQ6Er13R6vjdN19z/
- TLSH T120824BA6DB9C9113DDA71F7492B6DE433DB853C7A9618ABB1888F9040C933859B3433D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:00:6d:b5:01:e4:a6:5d:93:7a:f4:d9:1d:7b:f7:f6:fc:f6:91:16:aa:d4:f3:4a:f9:f2:4e:a6:8e:ab:c9:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12942
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Net/net6.0-Release/System.Net.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5b4fe8f00f2c18936ce3ba3c22ba351e0d886b6bf071bb19ea1deedce4d3624b
- MD5 2a6f7b0f936649610cad423f49c9a30e
- SHA1 b8543f47611555b3cc2b752646fe3b2ac8132155
- SHA512 6c366cc55562b064669cb82ee32cffae86925b6d1aaada5894e0ba471e23e532501e4a693439207c00ebfa9e78ba46ad8162fcd6bd72e52a663258070fbbede7
- SSDEEP 384:vLj4yWCBWNHsBlHRN7t3GlD/LVNSR9zkW:j5DjUxLVNe9zN
- TLSH T130725BE18FA88147EDA75EB063B5E6833C3C67D3584191690599F6442CB3784EF3023D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4e:78:8f:98:8b:c9:bc:d3:ac:df:76:ec:5d:90:5e:f3:08:ac:3c:3b:de:27:46:01:23:9c:ce:94:b1:59:d2:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Numerics.Vectors\net6.0-Release\System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Numerics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb8c60330243a677cff36e3ebcfd3dfb5ac0f2d739f92c7dcebcf5c8c9e62da2
- MD5 aa7a3334ab0421650c5c8a276257dcc4
- SHA1 04ff914f22d1fbb0de70fef212a45a31a8607727
- SHA512 7ac3893219578dd86fc55a03e063bdcd55fd92034e8576e40f4ac7e2fe982a1cdc57a3bd64cbccfcb8ba39e57184aaef9349a3821aabc4fd322cb10a08c20f7d
- SSDEEP 192:QDsZDtW6NW1IWo0A2j9seHnhWgN7awWqlhG2ZUnQJeX01k9z3AzXtyutM:QY9tW6NWMsBlHRN7fG2teR9zmXtPa
- TLSH T134727C528BAC8243EDA36EB092B5E9433C3CE7C76951963E1984F6491C237D9DB30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:41:e0:95:62:3a:60:d3:8d:58:a5:34:5e:76:9e:66:1f:e0:6c:cd:04:20:a2:e1:1a:ac:1f:8f:52:57:be:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Numerics/net6.0-Release/System.Numerics.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.ObjectModel.dll
- SHA256 ee2a487cd7abe5e08207426240e5eb981902ea894baa6767a7f786be8311e538
- MD5 ec8cb96a1b6143ff28b14340e95d7813
- SHA1 88c7c2f68e05eed7e2bbe6928bb2c2472f69631c
- SHA512 1e3698e00966d2256ec5d484110195fb8a11869ee28a98dffa74ba9a3656c422f7c4f317ef80ff46f397bda82a897a6ce892fee93967ce9a4d89d45816ba631a
- SSDEEP 1536:j6rLsIeVk6fmcKnJ8F+p4BdDhFqSInFz+t3:jMLsIeVmn2DhFCqt3
- TLSH T127935A1673CC8712C5AE4B7DE5A68682D239F5D22302C7CF1494F68E6EB3BC1667112A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7c:5f:ce:f0:b3:8f:91:d6:c4:0a:e3:43:6c:a6:fb:3a:5a:01:ca:e4:7d:d3:8c:c6:b5:28:cd:3d:37:a4:a1:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ObjectModel.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ObjectModel\net6.0-Release\System.ObjectModel.pdb
Name
.text
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Private.CoreLib.dll
- SHA256 2caa46d2ae726e135592033b6c682232a08698c23dbd1a9207f86c4cca081ad7
- MD5 a1a66ac40e833b1271aed73961c5f2ac
- SHA1 cd0ab725e6aaee2677d5ed5e4fa0c1a55c5c5565
- SHA512 d70794fc15a227b1dec00c5327e0d9f3a6e0088c841f18b1a50d7f40d959899fef26347aead2860568b37597fb2e4745925264e555a76c0d1d24f386bfeef33e
- SSDEEP 196608:dgtUXjGC7B/sXjTFK7TgnLy/KZdUabxzB:d5CC7B/ojTFK7TgnLy/kL9
- TLSH T185B69E26F7C44B57D01EC2BDC4778636D171E8E6232289CB0418DA4A7FA3BE5E637162
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4d:87:62:af:2c:a4:fd:af:30:8b:5a:6e:a4:77:f2:6e:bc:e6:9e:81:b0:95:96:37:bc:c9:7b:0a:fa:c9:64:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Private.CoreLib.ni.pdb
D:\a\_work\1\s\artifacts\obj\coreclr\System.Private.CoreLib\x64\Release\System.Private.CoreLib.pdb
Name
.text
Size
9.7MB
Virtual Size
9.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
372KB
Virtual Size
371KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Private.DataContractSerialization.dll
- SHA256 913461fdca318c69540ec544619a52cf4865626dfd2054ebe075ecfa82bff1ea
- MD5 92e78ecbcd5d2d6d9efeeeefdd1a443d
- SHA1 0dcc76691e2800b02210dae308744586b908e4fc
- SHA512 fb71d70e69fd362e9d1312980c922e0034765c81a51812b887093ec061b1cb0fc16401a7f5439e760b83b5f10f34975558c7ad09c58da73ccc6f86229440db21
- SSDEEP 49152:2Eup/fRgAaLHs33NMfSsdt1Vts5PL6Zwja7DQcDWSSPF9ODPPL32DL5DH:4pg14PDH
- TLSH T163A55B25B3D8C666D1AF83BDC5168522E5B5F4A31332C2CF8418FA492F57BC197322B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:94:ee:ba:d1:3c:5e:e5:56:36:4a:8f:44:f6:c9:d1:a4:99:a3:c6:7e:02:38:57:52:00:f7:c1:40:4e:28:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ad:fc:df:4d:58:e3:5d:32:e9:00:01:00:00:01:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Private.DataContractSerialization.ni.pdb
/_/artifacts/obj/System.Private.DataContractSerialization/net6.0-Release/System.Private.DataContractSerialization.pdb
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Private.Uri.dll
- SHA256 4b80767452017da1726302df729d9918c95ba8b5b05ee75a4807b17d88ef96a6
- MD5 11b56355bdd2926f6a9128b575563091
- SHA1 6bf3b6c39669d3adc2b27d55c585d4b8aebdead4
- SHA512 970c25518cfaef654d8a5c30fdd3ff6c4b1f51eb5d7f9cf4305c31f229a7c34dda80046a551f63e534aa8b78cc80a14eb5c535be3f055d4d81c25acddcf5747c
- SSDEEP 3072:EZ9N8P+ra9A3z0JykCWN9NCknAwe0tAqBmlMaP8l2YD3c7WFqZ+aodJsu/Q0DAGb:sw8Z3zHkVNCVweEiMw8l2w3ctZejsMX
- TLSH T11A348D15E7C8196BFA29877EC5A3C223D6B2745A1301D7E70AF4E4922F137C0AE35963
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5b:b9:bf:bf:ea:02:9f:67:0e:34:7d:94:05:57:7a:b5:70:ee:05:70:50:49:c0:26:b3:07:25:ca:e7:aa:77:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Private.Uri.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Private.Uri\net6.0-windows-Release\System.Private.Uri.pdb
Name
.text
Size
226KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
724B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Private.Xml.Linq.dll
- SHA256 5166bfe1a33746892b87f09ccad542396f9a23ed4a5e79427e3dfe764fc1ad42
- MD5 0c375d8aa43a2af8c7d3bc2bfb238843
- SHA1 5b294aaef9c73144ab233cb18d11ea86c96f3f1f
- SHA512 1205ecae66cc946f14878ce7be0a1d737528917785fc103ea9c3a197bd7bef74929205615b96db24fe49125eef3e53e55d3f04d72b6111cd8df6d6b3541d6c2f
- SSDEEP 6144:Yk5PNttiS2p0fo5BpIVGc2H0lKPmS4hps:l5/2p3qWH0G14w
- TLSH T1CA847D54B3C84622DD5F93BDC55A8442D6B1D29103E6D2CBC808EAF5BF4BBC2A673163
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
38:82:e5:a9:46:fb:29:8a:b5:a8:86:f9:0e:3e:ea:f6:8f:69:28:17:4b:2e:47:68:28:79:b7:ac:0e:85:3f:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Private.Xml.Linq.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Private.Xml.Linq\net6.0-Release\System.Private.Xml.Linq.pdb
Name
.text
Size
358KB
Virtual Size
358KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Private.Xml.dll
- SHA256 38a26c1f6510be0f2371fbdbcc590b3d44fdb2b76807785fddbe52336630f66a
- MD5 b9be74f1b747c4031d4ad369840cfa87
- SHA1 50a3a3c63b8531690a2bf4e3bb9ae4b11aec1bd1
- SHA512 ae91fd002d7083f0699a8a278edb3c144b4c8fb8aca11634e38ceee88c60b7ecd26f86a8eef37e685a9c9f4395f5b5d7f569b8672a17dfab0fd14cd0056f00ce
- SSDEEP 98304:+UKshaJXnDm8W3NkRn03m0ZTuZvaQH2Dy:NKNnqx34n03ZcvZWW
- TLSH T140869D18A3D02711E12FC2BD8A56C512EAFCF45B670A9ACF0018F6D52FA3BD25776523
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
39:bc:e1:49:86:f7:b1:5d:5a:e0:97:77:87:e1:06:a4:58:a6:9d:f1:b3:2f:02:2a:91:8f:2f:02:b4:03:9b:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Private.Xml.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Private.Xml\net6.0-windows-Release\System.Private.Xml.pdb
Name
.text
Size
7.8MB
Virtual Size
7.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
329KB
Virtual Size
328KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Reflection.DispatchProxy.dll
- SHA256 86b297ae56ec792107f2649a4e5c54120064d88f40e5a4541331f653f7ac1e83
- MD5 71a47ec75c097bce53ebb2e880db23be
- SHA1 811b99b76fa992a25125eff5ba544f8702628c74
- SHA512 2b8f5c9bed8edc52162d3d566433f30589de33fcc746cc58b5bdd80cdfcdc80776151b036e2fd0d9219ba35c2262513bfc08ddb66ca03098dfe71d71504af5c2
- SSDEEP 1536:LdhLXPxE1VyOUe9sFcu5BiZUxbgu6m9FFzwh:LdhTxe8OUNlBiZltmRa
- TLSH T176535B106BA85303C9BA4A7C59A39C5BA9B1F68A1323D2CF5CC5EC4D0F8B7C157B11DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0c:9e:c4:1a:5d:6d:30:f9:2d:e7:5e:77:c6:49:20:a7:7c:f2:a4:77:bd:8c:6b:3a:d2:09:f9:9c:b7:4a:0f:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Reflection.DispatchProxy.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Reflection.DispatchProxy\net6.0-Release\System.Reflection.DispatchProxy.pdb
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Emit.ILGeneration.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59e813fa039d140323b7bc2e51def90aa141c7f02cf45b6cab45b9829db9b993
- MD5 a603015ec04d56d0659bd36b617f9b14
- SHA1 ec44f87f35fc3476ec8f1198061e407ed920a187
- SHA512 c3fad8f47b09fe96151d448d518be3717a7e85eb8d89bea08b1353027e5428722ec71e7e96aee9600aa8febda1b0e2e9832be240ab77a732d3a222fca21cb3c8
- SSDEEP 192:LkIW+xxSZlWGUW1qWo0A2j9seHnhWgN7aMWhehfva2NX01k9z3AXNx:QvEIvWGUWCsBlHRN7/1vpNR9ziNx
- TLSH T10D724BD68BE85243EDA71E7092B5E9433D3C6BC68940922A18C9F6481C977C4DF3173E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f9:52:e9:e0:22:21:ec:82:f8:d0:37:f8:0e:c9:51:51:72:ec:fe:81:4a:f4:f6:ff:31:d5:64:75:7e:fa:66:c2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit.ILGeneration\net6.0-Release\System.Reflection.Emit.ILGeneration.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Emit.Lightweight.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c63fbd51c1d794f1551e096a5a8adfccedfba4b6ee0b6aeaf966bf6ebb1a7223
- MD5 6e2eada9f67814f89a70b92b5323cc06
- SHA1 151943c5c07a75ff9f27b366762055d63190e1e1
- SHA512 899174379c9bfabcac3829833cd6db51cbd76c82b127ed81e3cf9f79728ace8f5c8159d146d192d1d83569e73d354135118aa31fcce23a1c269f3396dd5e66fd
- SSDEEP 384:Umf+jS1W7VJWXsBlHRN7Q9RG2teR9zmXtW:U3fRjmRG2tC9zm4
- TLSH T154724C914B6C5243ECA72EB096A5D9833D3CA7C7A801D76E0985F5451CAB3D8DF30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9d:44:7f:cf:eb:0e:2f:92:32:55:3f:08:38:5e:e1:5b:aa:7b:8c:f8:28:c1:63:1f:fd:64:ed:ca:b4:07:e6:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit.Lightweight\net6.0-Release\System.Reflection.Emit.Lightweight.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Emit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 06b2aab6e04ff1f2250c0636b90355d73e39e5a2b0ada6065b475282c28153e0
- MD5 44bf5070cf31a2d705e0befe5f37a4f2
- SHA1 9cc95bfc581856ea2073599f64316ae240ac7267
- SHA512 095c51b69a6950d1b3c7d1e3502c0e1fb8e21ef00d0aa2d90006f4f5e639c1512987b6ca527738340d5a6ba621e32e9f647ea026f23bd6daa907efdffbbaf5af
- SSDEEP 384:Uxmxgu8ILLW60RWTsBlHRN7ixBuk/P/R9zPR:UnuoFj7YPZ9z5
- TLSH T1E5725CE58BAC0603EEA76D7056F6D9033C7C6BD7A850912E0996F6091857BC49B3033D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5c:ca:43:09:fd:48:36:73:ae:fa:0e:a1:8e:37:82:29:43:f0:19:6a:8e:2f:a4:85:b3:ed:d9:0b:8b:a5:41:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Reflection.Emit\net6.0-Release\System.Reflection.Emit.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 71caa3d1d16bf22ac4cd1672d200ace3225babce1e2e889200f15efa734b6222
- MD5 dafbe56aea03e70e13023991c44c7cfa
- SHA1 3a93e356a867ae71e46a390d8e4fa11c7f6ce406
- SHA512 fe0930c128ce0a9bd853b88a70539bc13514fb3ed48fed18501a9a5c4eec1b5fafbab5e0b35068d1dcf85a515a07ba7e96bf97a178685f20f0ac2c2a14fa4d44
- SSDEEP 192:Mx3WxJZmW7WW1bWo0A2j9seHnhWgN7aEWmkHOEU+9YX01k9z3AUCWIOO3t:MlcJMW7WW7sBlHRN7AOQGR9zWjTd
- TLSH T11E624BD24AAC5107EDB75E70A2E6E9833C3C6BC25C41926A04D9FA491CA73C4DF3023E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:ac:3b:2f:22:fa:14:4c:10:bb:6a:c9:f2:54:1b:78:76:50:39:4a:15:a7:ef:16:1e:7a:93:95:7f:33:ab:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Reflection.Extensions\net6.0-Release\System.Reflection.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Metadata.dll
- SHA256 695365a6fb1c1b7762ae925bcbb5bd2827ced11c750d15dc5f88218d6fc4d8df
- MD5 36f92de525444c2909df69e10f586094
- SHA1 dba7b854851011e086dfc58614775aff845a9e3b
- SHA512 d97b096d01b2ed88365b20ffd19a927dd0bf9def6fe1a63568b62f3dfd6f851548c69976d1488ad897a59f98905a3d7b7f646b111c965565b0d5eab00ccd3819
- SSDEEP 12288:8mAT6IQGZ2dgoLYY+OMU0h/TMbSdQUR8kJjaJlB9vNjAXvtQxoVODzty2Ol+OU:aTJMUY+OAhLMuRpO/CvCBDzw2Ol+h
- TLSH T121359D01EBAE5B1FD53A42B9E25344728372A4522337E3CF0458EB666C4F7D367325A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7e:98:9c:aa:dd:d4:b2:fe:1d:49:b0:94:88:68:9d:ce:a8:f4:c4:85:2c:4d:a4:94:c6:32:8b:12:41:c6:cc:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Reflection.Metadata.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Reflection.Metadata\net6.0-Release\System.Reflection.Metadata.pdb
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Reflection.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1df428d05437f42dc1ee52ef3be19a751cce5a577b130425c8137fade97c5ccc
- MD5 9d03e2c3bf274ed762cabcd2486e11a6
- SHA1 a48a2a3329469b1a413eb89608b055fd22aeaf36
- SHA512 036c707be73d2678167b2a0739f442723a3e525c897070b37cc72c681ac2c5ada348f99cc8ea2c48e19453c6cc3ee2be4b05764eb855548db9bacb7a36e9d90c
- SSDEEP 192:WzrlnCixxkZrWb+W1DWo0A2j9seHnhWgN7aIWkdvqks9gICQX01k9z3AbaTLsNeR:gnzWxWb+W7sBlHRN7Tdvq/P/R9zPM0R
- TLSH T17B726CD59BEC0213EEA36E7056F6D5833C7C6BC66812916E19C5F6091C9BB849B3033E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:ad:84:57:1f:38:8a:f9:a8:9f:0d:66:94:b6:b2:f4:ab:fd:15:6f:d4:64:bf:3a:f6:98:64:e6:92:ab:32:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Reflection.Primitives\net6.0-Release\System.Reflection.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Reflection.TypeExtensions.dll
- SHA256 5bd856cfa8f30beddf9db302f6acf851f63661c7c753b9088266f9ac8dd09973
- MD5 f868b0cea5fefdf01702c30c9d1b0440
- SHA1 885dc713b6f5f5c1feab26af7140c54324b85644
- SHA512 ab6c9f9466533d409c0d3119fa741b37089298d74d6867c784f6501c944f68e99f8c6f3bda4c23cee6aba7e82693517b3186e15df8a53e5698428b2edcd13370
- SSDEEP 768:GAlZcJEAwcc17Wc+bfzPLfNjV8zWF//dj9zl:GAlZcwcc17Wc+bfzjflmWZzl
- TLSH T158E24B14FB940303DA7A55B8CB5A8901E93DF5C31722A7EF3948E2492ED7BC46B710B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
42:7e:e4:a4:35:95:e7:8a:3f:fd:08:05:d1:e6:ce:03:d2:c6:da:d5:51:e2:b9:c8:66:5b:4f:bd:5e:42:3f:30
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Reflection.TypeExtensions.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Reflection.TypeExtensions\net6.0-Release\System.Reflection.TypeExtensions.pdb
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
140B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Reflection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36194cb5f9821d7712e66c222e6a4d6de7557344ead607eea6a6ff55d8a0a4f1
- MD5 a891e6f5fc26b90cac7ba5e0e610cb16
- SHA1 792723afe2e45e47e1880e1947539909579b48a7
- SHA512 123eb8f857ddc525bbc98efcb50b7fd9522e3d76003fac11bb4710b6bb31e9b1ac8234e6753e776fd1da51e823b674b15af61a8fd36f81dc496b77175faa6c8f
- SSDEEP 384:RFQiIWYCWdFsBlHRN7hyT8vpj/P/R9zPwKb:PQ/B2jhA8vpzPZ9zVb
- TLSH T12E725CD2DBA84203EEAB6E7055F7D5833CBC6BC75860912A0986E64D1897758DB3033E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
53:8e:96:c4:86:79:88:9a:74:8c:e5:eb:c9:da:bf:9f:2c:7b:47:42:16:4f:1e:bc:16:e3:80:ad:b6:28:ef:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Reflection\net6.0-Release\System.Reflection.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Resources.Reader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1cf8daf7b1d834d48e95af0e92d281ed18f0c40036008073ac61418f44b1c1a4
- MD5 942b9b469bd7fea3f9cb34132c264b91
- SHA1 ce6864311391b02ff571e11792efdfa4eb52c04b
- SHA512 f8df5176a1bdddc1fdf288771988f89c01bc41ae7d9679a8ac1986be7364dfbb21613797e4dfc09cf5b757e6e24f8c26ee886b79650ae32ddc4ca03e81ace609
- SSDEEP 192:jFdxKZSWS3W1iwWo0A2j9seHnhWgN7a8WT3h6I7OEU+9YX01k9z3AUCWglD:hnK0WS3W3sBlHRN7j2OQGR9zWt9
- TLSH T15F623AD68B984207EDB75E70A6A5EA833C3C67C39851965B09C5F6451CA33C1DF3063E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f9:8a:ee:6a:83:23:0b:53:88:f0:35:c3:e8:2b:73:6e:dd:20:e7:9b:87:b1:30:af:83:0a:36:c8:47:03:80:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Resources.Reader\net6.0-Release\System.Resources.Reader.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Resources.ResourceManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bef18f0cede69f1f3b889d7bf1bd00e90b7136cd9c4ce0d85fae23b6f952885c
- MD5 6bb018b21b68aed105ae03bbafa14e0a
- SHA1 752ec47b01676b6aae8aff81e63db322a5102ed2
- SHA512 f11338ea8db39d4599d6ab763a0ade2a6bcf643d71297fa490b5ff47d85236708b52c67cf8c699369a037044c9b3aab6e359f3c478c4f515f4012f8fa9d62f84
- SSDEEP 192:35JmtRVxxBZAWXzW1nWo0A2j9seHnhWgN7awW0CX7WhG2ZUnQJeX01k9z3AzXtM0:S/fLaWXzW/sBlHRN7VxG2teR9zmXtLkA
- TLSH T1E07239878BA84113EDB71EB252F5D9833C3DA7D3A850962E09C5F54518A3384DF3073A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5b:51:9f:1c:d8:fe:0d:03:4b:bb:cd:6c:e8:10:2b:99:12:a5:0f:c0:a1:ae:29:eb:30:af:c6:0a:fd:6e:1c:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Resources.ResourceManager\net6.0-Release\System.Resources.ResourceManager.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Resources.Writer.dll
- SHA256 752f89c066fc0d872654c6501dd6b89fa6e1a4fb649ab19be00ac59a5d02052f
- MD5 2524068ec1923cb0e49804a260ffdaea
- SHA1 eb41b70eb8b509ff52863cd8ac45653f62cef81c
- SHA512 d1913cf6647d1d48380f61ffdeec0cf0bbbd58adeb196dbe6142b95ff3c34e5eb66831059400f41ed7f719bc99cad7e59da551093355f063f196b14802aeef06
- SSDEEP 768:IMyqgTrp98WDSeTzjIeDG8lZ3hZjGHSWF//dj9zb:IAgTrQWLTvNDGUbdWZzb
- TLSH T1CF134C59A7D8520ADB318A7993F2DC7289B4F4A31B11CADF0985F14D0FA37C257388A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
54:32:a8:2b:f0:db:f2:4a:66:d4:0d:d6:77:a2:cd:93:ec:e6:61:b9:2e:07:2a:6a:1f:4f:da:79:7b:e6:01:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Resources.Writer.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Resources.Writer\net6.0-Release\System.Resources.Writer.pdb
Name
.text
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
264B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.CompilerServices.Unsafe.dll
- SHA256 1f1269f45ed627b6da1d02e668a5846fc8d89fd54ba541458fe3206cd261d4d3
- MD5 8fd918a821b30207d33ecc5a522acd38
- SHA1 12a14b3f961a6ea5410f469e6409dc03fff3b7eb
- SHA512 d7e0702f24195fd5485d537be3db77974f09239265e7bf08098304eaf58b5fd56fd680d2650002913688830ace7626f9c3999466a5b26d7ee6c0ecc9aa459b6e
- SSDEEP 384:RWF2W8ePGmbciWWWM7XrPNsBlHRN7B8l8R9zrrism1:wkAGmbcy6jOlQ9zi1
- TLSH T13DA22956CBC81607FCAA2B3481DAD683AF34A3964721D3DB28C9E56418967CDAA70139
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2f:53:5c:d0:89:3f:0c:7c:ac:b1:c1:6d:cd:71:2e:6f:c6:c2:6d:fc:77:81:b6:b8:06:39:fd:f3:53:16:48:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.CompilerServices.Unsafe.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net6.0-Release\System.Runtime.CompilerServices.Unsafe.pdb
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
317B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.CompilerServices.VisualC.dll
- SHA256 a4645622db0fc9d3bc239b5136472c17ce738becfc8c9875dc9ccfd1c153e51a
- MD5 2b26095763743bf306bf754e79a344ff
- SHA1 be153cff6ed3d7ffdacc49c552dc5cad0877d2a8
- SHA512 1644692dd054ab8e635e484419ce03e61ca216dbd3567462523df56e9e9df6098e16a0da24a7da867914c0eb593d3f715abe7282dc3340ff39c216fd1f2f571e
- SSDEEP 384:cWyLWp0FIrRDTveaGEcGOsBlHRN7MyxWF//dJR9zJfx:cC0FqDTveaGgjMyxWF//dj9zD
- TLSH T101926CA697DC8357DD630DB0D5EAE5433E3CB7C66B5252EB268EE206089A3C49730136
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
24:0d:93:40:73:d6:95:e9:92:56:99:66:59:1b:8f:55:d4:5d:2f:9e:08:c5:87:fb:38:29:35:bf:be:fa:71:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.CompilerServices.VisualC.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.VisualC\net6.0-Release\System.Runtime.CompilerServices.VisualC.pdb
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f17fe826509283f6bdef0789eec192fbc811da6a142b19f9e14e25a79d4c2403
- MD5 996d65fca7107fd9cc697df98120328b
- SHA1 5f96d6c8da77b3322ca4b3bf70b4f07882e097e1
- SHA512 56aac9075cd09f99082150ef02978607ee5b6f3fc49a72acce629b75dcd677acefceac21e986fbf8727584af4cc29484946912e810ebe55683861860d110c05c
- SSDEEP 384:/58KUByGe9xCEn64WANWxsBlHRN7xGlD/LVNSR9zkZ7:hpUByGeBVjjYxLVNe9z+
- TLSH T186824CA2CF9C4103DDA35FB06AB7E6426DBCB7C66871956A0989F10518A338CDB3133D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fc:98:1b:87:d3:7d:d5:e9:a2:3c:5a:4d:b5:98:7b:20:f2:13:ca:e7:d4:c9:77:26:90:b7:27:cc:d2:ba:f3:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
13198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.Extensions\net6.0-Release\System.Runtime.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Handles.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 581dd1b50b99f685b62f0cd79c7e0629b3841e371850686e78eb68d695e52633
- MD5 6041be47eba1678c3b21a6d7be1c4819
- SHA1 abb5ebd946243be3a28f3c45d309a9a912640606
- SHA512 f96a1c4b8b06129dafb9361ffcaa0cb7f90b9e59bd87ce4259fb11ecb39fb7d3837aedb9ce7d25c90c5e1392f53c49a803342ba66b38182963fdc1699dfec7e5
- SSDEEP 192:MO2x15Z8IWVmW1i6Wo0A2j9seHnhWgN7a8WwlyYOEU+9YX01k9z3AUCWFl+S:MO815uIWVmWZsBlHRN7dyYOQGR9zWM+S
- TLSH T1F7625BA68A9C4147ECB71EB096E5EA833C3CA7C25941965A09C5F6481CA3785DF30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b9:26:85:d4:61:df:85:4c:02:c6:e8:aa:66:e2:aa:c6:f7:22:08:a1:8b:27:52:d8:ee:fd:33:83:1f:75:26:bc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.Handles\net6.0-Release\System.Runtime.Handles.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.InteropServices.RuntimeInformation.dll
- SHA256 00b0f34e391f998e0df534d32e7abcb62d524e84bd3276c8526924231ee22d6a
- MD5 68c597a9f2bfa25bd627db3dde401978
- SHA1 4290c6976c41acfb133aedf5ec750746e8a4f000
- SHA512 caaa66c7120fc7595ac833167b195250b9ce554f689a932e12a57bafa441c2979f21cf1df6dc47581f52e29a68d730160328121967f6555fdd7c2d8673b60c0c
- SSDEEP 384:wW4UWHL675ciURw3IG6KMWFYSmGR7Oi+RphsBlHRN7NFl8R9zrriscZz:itL95KMWFzmG9X+yjHlQ9zwZz
- TLSH T1DCE26B6197D89216EAAF463988A3D6461E38F7855B21F2EF24C9E00D0FD37C8973163D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
39:b2:28:fa:51:36:bc:13:09:ec:85:0d:6c:cf:3c:d6:65:02:99:07:25:86:89:92:7e:47:73:d4:e5:f0:0a:b7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.InteropServices.RuntimeInformation.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.InteropServices.RuntimeInformation\net6.0-windows-Release\System.Runtime.InteropServices.RuntimeInformation.pdb
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.InteropServices.dll
- SHA256 833cb735ba01762c8ec501d20936081c0fd75f267f45b4fe3c86bfd0321885c6
- MD5 572ceaf175d2cf3fab525e0e36446d14
- SHA1 0ad1d6739942b3d391747a4df25f422914bd56bf
- SHA512 29a88e05bc8f01d3651f742f0901dbd4398d21ec85bbd7ee886c16fcf554fa7170b75f600194664100a096888f7787bdac8eb259493d228e5bda657ce48b1083
- SSDEEP 768:iDZoZfKXIPMWWjz2rg8k61rvZqhwFLQFMjJIuPkdj1sPZ9zp3ej:i9oYXIPgz2rIGqhwFsFMjJfPk1ezEj
- TLSH T1FF335A21AB989326DED757385673E6920DB6F6C613239ADF90A0D94D1D9BBC80330335
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:e5:d7:67:62:66:40:67:ee:f5:bc:fc:cb:7f:9a:93:a9:d2:ce:38:f2:e8:19:b8:b0:71:25:a1:5a:37:7a:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.InteropServices.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.InteropServices\net6.0-Release\System.Runtime.InteropServices.pdb
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Intrinsics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7345861db1327a1b748690e6952b1a153ef1340c36b9fb9390d149fe04148f85
- MD5 8b8d5995854539d4afdc7ae55d1840b3
- SHA1 41e8e1d661dce405d498b518bf2970cdbb894f4d
- SHA512 f12b4dc35f8c58aa7e14a6d2c65b432977e0da3b6eb2f12cd06442ee6fdb025b6cbe05fe24d54adc41cef339710b9d73bf0047059ecb923bc6b8bf6cd1151e24
- SSDEEP 192:R9FErJPlZ3HnWQLW17Wo0A2j9seHnhWgN7aIWFcpl+KKnAX01k9z3AXhoV:O1t9WQLWHsBlHRN7mcplTKAR9zeO
- TLSH T139726D92DF98524BEDA71FB04ABAC6433C7DABC718B0956919CDE6080867794DB3033D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d8:d5:a4:b2:94:e5:18:8f:ab:e1:85:67:0b:c1:6a:cb:99:08:23:37:46:fb:4b:c9:ff:6a:24:41:c6:e4:56:4b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.Intrinsics\net6.0-Release\System.Runtime.Intrinsics.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Loader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a3343c5602a5244883878dd2a2e3a354975094557be888b093e08255e3b802b
- MD5 5ceb2237e481004491f8edb7bfdc1e9f
- SHA1 6d75c2d24da51a56484542de406666f13b7e2c8f
- SHA512 a7acceebb8c5b1b649df24db646d8825c92ba869969b29d96379707a53a151b4ba9fa68edcd49b6e001c4717352765862c3ca328224601e6cf8f4af4d26895dd
- SSDEEP 384:gWJT6FRWcGWAsBlHRN783G2teR9zmXtPX:gWZyjjSG2tC9zmZX
- TLSH T1E0726C958B986203ECA72D7096E5E9833C3CB7C75851862A1994FA490CA37D8EF3033D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bf:79:a1:97:d2:0e:96:4b:1b:21:19:a9:d8:7e:ab:97:08:a8:fb:78:2e:d8:fb:c2:bc:cb:65:e7:42:05:e8:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.Loader\net6.0-Release\System.Runtime.Loader.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Numerics.dll
- SHA256 19a0c0768273026e7cc01631ed0827665d1b603f10f536d786d8ab11b169b93b
- MD5 f21ee5d39b531099dea3971cc13d40bf
- SHA1 17b76544347e4a0704c81635a2e640bb665ce8cd
- SHA512 09554b998448c5cb0f8e146ec95d0b64b343b614fef5c40559c0254a4a2b33252129b0460c58f6a3bceaff9006b3d966c562671f68a0e780a28d7535b6d3b02a
- SSDEEP 6144:svBg53q1zUO+jMDLjUZNEJrvBLXuDcWrDr:0Bgxq1zF+gDnKNEJLVuDcW7
- TLSH T173248C06B3A44A4BE86CC2B9945BD503DB7270968312E3D30EA4E6542F277D17E7B273
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b4:a0:28:f9:68:72:38:49:76:a1:f9:eb:e9:94:56:5f:9d:72:ae:77:2b:2e:83:80:00:b7:25:63:4d:28:e4:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Numerics.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.Numerics\net6.0-Release\System.Runtime.Numerics.pdb
Name
.text
Size
198KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
644B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Formatters.dll
- SHA256 33c6d92a36190e0d3abe51746c8828a189d594159a636ff88bf76f51b057a416
- MD5 cadc97d9e7e89f49e31267648fd97e89
- SHA1 006b62a76ca14aa30bcdc9583be98f99041c74fe
- SHA512 882d2d8209abe3a8b3db0c8cfd3d3fb5a53ff52092c78d4bbcbd63e057cfff1eb3e39b1dd8c7b2871a73310a9d513d2853d8bebe81eff81298644ce554fee166
- SSDEEP 6144:K3oz05QLDblKS/At1Fgi+/DvYqdKfx8wVOKW+20/c14CFY8QP:h8QkS/At1Fgi+beOAJ20ad+P
- TLSH T11E645A107BC90157F96A92BDC523D442F67EA49713C5C3CB0520E9E9ABEBBC59732223
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f2:10:d0:5a:d2:41:a8:87:b3:ce:ca:2b:80:3b:c1:7d:d5:ca:ff:10:c6:3f:f7:48:81:68:c0:31:ad:57:07:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.Formatters.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Formatters\net6.0-Release\System.Runtime.Serialization.Formatters.pdb
Name
.text
Size
283KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 670e0c3a4969b800835b65780639ea85ef68a69c8f1b2d015863eec96c2a8f1c
- MD5 21916f271ba02d2a2497c3d83569e539
- SHA1 10731674c6efdca5c21d44e7de0302a9862eb85d
- SHA512 ba7cf8a98489e03a8c85f262b997038a2412dac41ccb7ffd5cad5b8a7532a7f41facf82e673bccea2cfee5f9deb8316b888a23e3255e3314790c52f28e055bf5
- SSDEEP 384:avquVWbidB5WAsBlHRN7GGlD/LVNSR9zkl0:OpWidBWjtxLVNe9z9
- TLSH T184726BA587E84147ECAB5E7096F5EA833C3C6BCB5C40866A1694FA0928937C4DB3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f8:7d:35:66:98:3c:76:66:c4:17:6b:41:4c:b6:f2:f6:93:56:90:10:86:d1:6e:fc:e5:8c:8d:35:42:36:9d:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Json\net6.0-Release\System.Runtime.Serialization.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Primitives.dll
- SHA256 871fb41960257b1d1dc6f87e00b5de822d9288c8b93e3f3e5b17bd25924bd80b
- MD5 22bbe2c6f556ff75575ef805265816ad
- SHA1 d251da92c9b9e5d6391b08d95df622f900ee255c
- SHA512 c386a3cf94533ad2496e9339919ce4ebf608dae90874a914fd0052c3145a72847d0555db12c9a476dc70ed6e6cb483c6cf60d3b7062bbae36cdc746828033adc
- SSDEEP 384:2HWFuJBrW+lTwhxKH0sdznMbKF+87mXkO2akSMHHDIEHsfbErusBlHRN7sl8R9zn:2quJBPlTeIWW+8sDzcjslQ9zn
- TLSH T157D25C25DB8C8717DDBA04B481A9DB935A78F38B6712E2FF1580E40E1ED27C0573267A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6b:a6:72:e3:e1:a8:c6:ed:30:96:35:fe:92:f9:16:4d:fd:9a:94:de:98:a2:65:0f:1e:b8:31:29:fa:02:21:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.Serialization.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Primitives\net6.0-Release\System.Runtime.Serialization.Primitives.pdb
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
743B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.Xml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 47586d335a3dbcf691043df4670c741091b62b4f59e619f5a3cdc876eab08521
- MD5 a33a0d173949e8602ef041d2bd65b687
- SHA1 9a0cf5c368412b4e9e2c2bc20bfe96eae22b87f3
- SHA512 d49b0bc7996ef3a1d0dece5fcd6e5b6a53742cc76a0dc59fa88a86524789baa51fcfe4ec8c80bde219b8afd989227842a7a43559bc10daf18cfb3de2974bd631
- SSDEEP 384:pMYklmI8NevSMWsGBBgWCsBlHRN7ovpNR9zi3Rjc:pLklmI8NeKiGBBjjQ19zUFc
- TLSH T199725C96CBD89207FDA71F70A7E6E8833E38A7C75820866616C9F54528833C59B3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2a:6c:5a:9b:d3:b9:b1:4f:f2:c1:7e:27:ef:6d:8a:70:57:cb:fa:fb:fd:7e:94:79:73:77:e5:55:1f:bd:24:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.Serialization.Xml\net6.0-Release\System.Runtime.Serialization.Xml.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.Serialization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 70757055150731e3451f81e22f5707b0bfdff98c267b9e5783e9d4a6cd60ee4d
- MD5 6ac05c1534fecca50a1f686605ed12cf
- SHA1 948b0d86ae0321c71687b3160f9001df45c12178
- SHA512 700a1e47eb743a8bf4b88c0ebbfca88037ba5a7424a97b7f3bc5417e1d6fc4737054fdcb0035cc723af590b21517ef9a3501781898609e4ac136b1e2e581cc1e
- SSDEEP 384:gpEvDj8NGQylLWgb4BHWssBlHRN79gFOQGR9zWn5G:gpEvDj8NylPb4BEj8OQ69zn
- TLSH T1CD727D9187DC850BECDB5F70AAB5D8C33C7D67CA1865896A0684F50618833C5DB31B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9d:1c:6e:2b:9f:ba:22:97:96:e2:87:b2:ed:17:6c:d5:5e:d1:52:49:7d:7c:28:c2:fb:34:0c:ac:53:52:b6:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Runtime.Serialization/net6.0-Release/System.Runtime.Serialization.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5ee7ed5290d8b1f8e47854d4a9caeff68a503deeace7b36451988f80b5141504
- MD5 8d4905d3f743e5df7dff880b48528ce9
- SHA1 cfff2a109011947c55d1bb856c08c68149c697ce
- SHA512 9dc978541bd89c5bb075ac24e62921e0b3247df66852fa0b07146c553d454e35c986e47b70d0769ca5b9922b7c8ebf77e7e426278b34c8c271c69bd04284d411
- SSDEEP 768:hqV0jdpFKYl5f4bGRi2xVbcVT4paTISjGxLVNe9z/:MedGYl5f4bGR3G0eI+GnNaz/
- TLSH T1F31307A0AD4E1233CD8E937298B3E4C109FA33CF64B6D9BA445ED655288F384D273759
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fb:f2:c5:3e:f9:5a:d0:51:b3:26:65:89:25:71:ef:82:08:8f:f0:bf:bd:12:ad:db:db:1d:44:05:be:5a:42:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
37454
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime\net6.0-Release\System.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Security.AccessControl.dll
- SHA256 219a62e07ad0c1d56b1614d28b0b13bdbfbfcf6dadecf1e5ff69d858251dc3bb
- MD5 2249b0650467f9f694e970cc5a9ec9d3
- SHA1 acd5a1310f45c108e42f8f4c230cda1e1b3b6b92
- SHA512 33822e4ea8c86c072834b6195b52df2c8f9026bf3275007d449c4417cf16bf571737cef280570df47a1397d4176fee50129c662dd6d2ae71783e98768bd50d9b
- SSDEEP 3072:eFzlQlRminBzeYy6n3zdJ3DU1z1Im4lZnFW2iBeVICTiupU8TVUnVZ5pWs2XKosB:Znb3zbo4lZo+PXKCsF
- TLSH T19B245B26B7C44A86F56A82B8C867C512C2B3A4931713D7CF1765E2952F53FC67E33222
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e0:bd:9d:09:34:b7:8e:63:c8:16:2b:2a:2b:32:a7:40:3b:76:fe:67:32:68:e0:ef:08:7a:7e:fa:44:fd:7b:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.AccessControl.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.AccessControl\net6.0-windows-Release\System.Security.AccessControl.pdb
Name
.text
Size
190KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
708B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Claims.dll
- SHA256 18579e03cb56973cb460cbd7c501fa3aa246eedcc0f02b4f6775aff286db68c8
- MD5 6ad7c5dd2ad15bbdcf43fd1d62e4b222
- SHA1 0a20b8dc6df437e9205d6a9ff41af2147209ab64
- SHA512 7cf1dd87b3348142d9e3949f98d5ab75cf86694e3e438d1d777ce6a9e03ad2ee517cdd28dce687049a199a81fedb83cb4f860b79d99411bb6d93dce98725c22e
- SSDEEP 1536:GuU2a2LBUUfyWZZ5/yOuX3Xn6Fb9n8kGOQwQ7rzUU3q2bP6EOVFpIxWZzzW:GF2lUromOuX3X6FpiOVnu
- TLSH T15193399433EC0206D9BA0B7C89D2800A9479F9966712C2DF4930D74D0E9BBC2F931E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
42:70:81:6d:2f:81:2a:e8:01:9a:09:fb:24:f7:13:48:86:3d:ef:54:13:b1:69:e9:c7:36:af:d4:b9:7a:84:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Claims.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Claims\net6.0-Release\System.Security.Claims.pdb
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
316B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Algorithms.dll
- SHA256 667ef15b3831a6d7bc1a940911e428fe1344182d9fb14efb5d429107bda57d85
- MD5 e9f6c7feb0c16112d763256cbbc5f950
- SHA1 15dbf929ca2a9c81928924c724f49e4c0b81ea70
- SHA512 a3dffb91d06ac0c0f48a49c7d0a6bb95e7f1ba9dcc475af7f7b56973a7fe83fe0f952fb3e4eecbfcac50b88006fa7fbc3c1f3877084978cddeda6bbc6fb5e3ec
- SSDEEP 12288:kydFSo1rvv+jLZOYEsxtVsn0cpKxDM7gBSfzwzDxgqBG8VnX38:TEU0+nD44Hfz+xgqUC8
- TLSH T16B055B18F7D49645E57FE47CC4664023D578F4966323A6CB4AC1EAE93B23BC39236322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
51:5f:ca:d0:3a:05:95:46:fa:94:fa:35:09:d0:a6:b8:cc:0c:8c:53:ad:bf:51:f2:d9:22:26:92:69:e0:e5:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Algorithms.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.Algorithms\net6.0-windows-Release\System.Security.Cryptography.Algorithms.pdb
Name
.text
Size
741KB
Virtual Size
740KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Cng.dll
- SHA256 a719d3969bf9b6dd451d66b7e046458ea945d8338b976e350c4b6813269c404c
- MD5 1bca29f02d6d5b59db30b8245ed75edf
- SHA1 a2f2bdec485a937d5bc866457e73122f2cdcb5c9
- SHA512 6e359dfcd5479c7bdbd2fb0c5fb756e16ad4f3d87debd9514afdddbbf2606605942f89137116d617f479f8b84bb1f08aae1d53e731c04132f553d28813dab71c
- SSDEEP 6144:rXfVpXqW4iUbWkSxW0hUgWWZPX2TMiOYFbxJXtDpYjsOhkgQ:jHXt4iUykSxW0hUgWWZ+TMiJbx/6lHQ
- TLSH T18DA46B14E3D48756DD3FD57DC1634452D270FA963782A6CBDB80EE992B63BC29232232
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:85:81:05:c4:a1:91:f5:01:d5:61:05:3c:3c:bd:db:85:be:99:7d:eb:87:f1:0e:61:f6:9f:46:b3:87:b9:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Cng.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.Cng\net6.0-windows-Release\System.Security.Cryptography.Cng.pdb
Name
.text
Size
441KB
Virtual Size
440KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Csp.dll
- SHA256 3b7a3937f3fb40061a0d6e38b3f493a337e300c92746b8d2fc7b8cf1d9b59a4c
- MD5 38211df8fdbd06ea9444bf02b09e6eab
- SHA1 5458d0bf0b56d34e57d840583755d41d18371383
- SHA512 53ddd2ceb421ea7733e92565eacc12bc8cf69f1b3f23f8cbf2ac678279a21d2b8b6aba274cdc509d918db6a217e142ca90aef8b3b2ee1cd48eff08f7ced62369
- SSDEEP 3072:+1fj7hpJ8uH04ydtCQvmDDJLBWnW9JN/XlAUQ335Bot7ZqKaMJDByG894fJ:u7hpyu3ydwUyPUBot7JMG89C
- TLSH T1BE045B2663844693EB2F81BD84938212D27BD0E61712D7D70E44EE582F4B7C6FF326A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
09:ef:93:c8:1d:43:ff:66:ca:ec:27:15:43:d8:29:75:0b:a5:5f:96:0b:90:ab:3c:ae:7e:1f:8f:7d:fc:2e:ce
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Csp.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.Csp\net6.0-windows-Release\System.Security.Cryptography.Csp.pdb
Name
.text
Size
163KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
924B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Encoding.dll
- SHA256 dcc9b161cf56a2bb2bfaf847d81def41c4eb417fa96a5c79f984747849bb8877
- MD5 124c2872eaa1d69e93719b296b6df971
- SHA1 6bd78887174abfca7839b1391d24c15ef34591a6
- SHA512 2de10de2ca3ab463b84fff2749334d29112932dd869ab067d86d5963cfb0dba22548e8f90f767ee3ff6a567fe2e840ce11e0044cfa9f735fda4f7959edc3d651
- SSDEEP 1536:S9vT10gd5c0Q7wqwc6LyoVeSRzxI6VkQD3Fz0:ShSoc0Q7s7LyCeSRzxlVkuo
- TLSH T1DF933A1CB7D48312EA99D27C82B294439538F682DB924BDF09C8C58E5F937C3A671D39
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
40:68:8a:dd:28:50:5c:b6:6f:42:56:01:bd:51:4e:35:d7:10:14:c7:26:19:24:98:37:f7:51:1e:57:8e:b5:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Encoding.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.Encoding\net6.0-windows-Release\System.Security.Cryptography.Encoding.pdb
Name
.text
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.OpenSsl.dll
- SHA256 e74084306323376bab22b4f878b2c9fdc12c43ed06653b3f9c73db56b3591145
- MD5 20f10111a85f6fd800a2e7663c18492d
- SHA1 4dc1e89604318c69b7ab84937403ab53a86c47bd
- SHA512 48083d04d77b5a8c85e67fde433041cefe31a03d78e3d0eda8dcc8d7d4ac0c4d855bbed6663f087ce43292c78f0c0d1615fe9441e8b0ac5c1e9b4b2851d3246f
- SSDEEP 384:X9WAfijRWa9y4bwPV0D/F/pQ+1+HCeqtwlK+hlq4OcVVaFN99eMsBlHRN7lvpNRw:e/eqylbnJ1VIp98jZ19zy
- TLSH T1B9E22A11BBD8426AFCF305356271D6011E3DF6C47A12EA5F258AB6882CB7BC4973136B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
88:23:28:8a:af:75:95:ea:3e:e6:4f:95:cf:e5:3d:4f:f4:db:b0:31:2d:90:dc:aa:74:21:a5:c2:28:6b:7f:db
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.OpenSsl.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.OpenSsl\net6.0-Release\System.Security.Cryptography.OpenSsl.pdb
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
508B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.Primitives.dll
- SHA256 a65f2dc2405b377aa9aecdb3e892adf3c8569ceb4452addc924c9b16045b0da6
- MD5 793ac642eb5d8c0967ec18d5beb48d5f
- SHA1 4f15176187969bc3fba8432e1c8fa067d10cb4bb
- SHA512 25082f85beb52a4c02e05137ab094a03e7505f5b58e49396bda15d52eb84987e646c093404561ae9551f8243d236a4c48a8dc97bc850bacb717c04809254fbfb
- SSDEEP 3072:olpfRR+yHERhv7/UJMJ+JbVUoER0hcbGWbrrrrrrrrrrrrrrrrrrrrrrrrrrrrrZ:6fRRHsbbocbGOR
- TLSH T11DD35C25BBD8830AD6BEA57C89E38592A477F5922702D7CF1548D54C2F53BC2B732223
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:1e:2e:88:b7:91:75:76:88:8e:16:08:4e:49:ba:c3:d1:e6:4d:45:7d:a7:13:19:15:56:48:cd:43:db:56:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.Primitives\net6.0-Release\System.Security.Cryptography.Primitives.pdb
Name
.text
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
612B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Cryptography.X509Certificates.dll
- SHA256 cfda448a05d9971cb03ae3fbdc4979b5e5651fd30b63557a2c74112900f82041
- MD5 d5cbe0481d841bdaeccea6ebf59e65a2
- SHA1 5d4a9e6b13f7f5f1be070a8e1a59ab530d4ddc76
- SHA512 723423084d1a99c520099262cd5fbbccaf7edc715f15697d10144c76a8db7deded5d2a58d3cdafa2ac065c498f1bbc333dbeb537f314a7d48296f4e7843c07d3
- SSDEEP 6144:JE5AU+0syAaQFljGLcXC7jLzH1xNLyHCKsZZcufvh7OzxqoQ5JVIRbY7oq:+GUOaQDAfNLgChtOFZqLIRap
- TLSH T15EA47D18E3C05F55E96F817DC1634042C6F4EA966782E6CFCB85DE9D2F53BC29232262
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c3:c0:ad:c1:cd:64:ab:68:f0:7d:99:ea:5b:18:3c:00:fb:4b:be:b5:46:cb:07:2b:df:d6:f8:07:c3:5a:a5:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Cryptography.X509Certificates.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Cryptography.X509Certificates\net6.0-windows-Release\System.Security.Cryptography.X509Certificates.pdb
Name
.text
Size
431KB
Virtual Size
431KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Principal.Windows.dll
- SHA256 6e25d5295c42307ec2df0bb2f141cecbdb7e3ea5dc35d063e9fe7fd514700f0b
- MD5 7d1106970c75bb1eb626eec7a1ad3b71
- SHA1 800860b03ded3a826b498351165e4d204307e1bc
- SHA512 7f41715979d9bf47258ae50d110d69d5147ccae7ee4fd55ee520000dc9cf06e3ecddc20f04f68e885783e2539607f806b4e7f81fc0161bfe46a41cc79830a6d5
- SSDEEP 3072:e6UUvF+qAW/g0cAFcmTVeyLsJA1ypjcyessL:RFvPAZ8cDysJLw
- TLSH T168E349265BC85247DA6F463C84A39203D77BE5A71726D5CF06A0E1C81F57BC6BE32223
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d6:aa:98:78:c1:7e:36:28:7a:75:43:91:f2:19:33:c3:5e:b6:7e:88:c8:42:25:50:ad:4c:c1:dd:2c:f3:f6:00
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Security.Principal.Windows.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Security.Principal.Windows\net6.0-windows-Release\System.Security.Principal.Windows.pdb
Name
.text
Size
128KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Security.Principal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f1b9586d961c3eb0159271013be873dfeec4589c0674262ebe229ee06985a42
- MD5 ec288651fe9ffe7dad2be55a95477589
- SHA1 13415816c11e273d70cc95dc1cfdd8aa4e21a357
- SHA512 9ed3bd17d9bcc2457659ad14b9cfc3f10d9fc1fadce8fb99f101497a08b1df0e6a2110ae083c64ac1ce97790539d0356a2eedeb1ed9b9a23fe49f0569aa84728
- SSDEEP 192:xTIeYxx1ZU3jWVufW1RWo0A2j9seHnhWgN7awWrPGHYhG2ZUnQJeX01k9z3AzXtL:xa/YWAfWRsBlHRN7TuG2teR9zmXtunu
- TLSH T14E625B918BA88207ECB75EB096F4D5433D7CE7C76A51866A0A89F6441CA37C8DB3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:bb:fc:ff:02:f1:89:7a:28:ed:d1:54:97:04:47:13:e5:a5:dc:80:b0:40:20:53:2b:ed:26:99:2f:40:1f:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Security.Principal\net6.0-Release\System.Security.Principal.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Security.SecureString.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d70f379e07a8a54647ef157558b60de50ef6b4b0ad4abee41ad9c633e3d8fa6c
- MD5 68bac76793ade51324f4fd72a731fbb8
- SHA1 14852ea3bf1d2a4130f91c420202cb003f55d061
- SHA512 82b9e70815e89358fcd1e5d037dd35e875240d6fe317bd5c76fbf261da8d85a48eb0fc5cbe2c896d253f504248147740a22032eb38a91190d365a70a717a3e1d
- SSDEEP 192:AD7kBrhGSxo5ZsWr3W1i+Wo0A2j9seHnhWgN7a8Wm6UMOEU+9YX01k9z3AUCWCiB:Oehbi6Wr3WdsBlHRN7L6UMOQGR9zWoB
- TLSH T13B625CD287A8410BFEB71A70A3B5DA473D3CA7C259428A6A5685F6051CA37D8DF30339
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:59:2f:99:44:cd:40:42:c0:73:82:78:14:6a:c4:16:57:c9:1e:67:be:95:f2:c8:27:61:10:4e:51:a9:78:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Security.SecureString\net6.0-Release\System.Security.SecureString.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 519f5338ea24e512a1d71fd96d18bacb85128fa094ba813317bb331b658bec2d
- MD5 95a088a2d031a4872e18531039f363a9
- SHA1 85fbc974fe2b059c62598260c14435b27010e093
- SHA512 c38cc04d201ffa50fdb2a9370a6d99f15ef352d558825e0791cd7a48a81d533241b048f92eafac58e47733cd1a873b6c26a87fc4948af06445db9c1d7183d0fb
- SSDEEP 384:l+rueD0Ln3WaDWFsBlHRN7pPHG2teR9zmXtKE:xeD0LtdjJG2tC9zm1
- TLSH T10E824B56C758A013DD975B74D2E3D5037EFCA3CB34628A1A2A82E2481CD27989F3432E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
41:6e:41:57:25:c0:33:aa:eb:8f:76:b4:98:50:1c:7b:c2:72:6b:10:be:95:6b:e0:80:95:5d:7d:14:94:d1:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
13662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Security/net6.0-Release/System.Security.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.ServiceModel.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee7335cf0974cbea6d78768c524d5e7accd706cd99146f98727a457d207bd637
- MD5 906f6b669b7c998c0c73c904567c5964
- SHA1 56a909ef4bc3da11bdf2726c56eef3f5da8378bb
- SHA512 da25a75027913b9275b6f0c3357dd50c8600ef38ad1d67d1bc01d6c04f2dfe394653d04ad21b682dcd2eac7bd5f519f1c1fff5c82ab9086b50b7e75c245c70a3
- SSDEEP 192:aXiSEY8760DX88QgZ4Wi5W1YWo0A2j9seHnhWgN7awWeWyhG2ZUnQJeX01k9z3AA:aXxaiWi5WAsBlHRN79PG2teR9zmXtC
- TLSH T1B1725B968BDC8243DDDB6B7096F6D8537CBC63C6ED51862A4694F5042CA3B888B3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2f:f7:d7:79:91:dc:3a:98:02:32:ab:c0:b2:3e:7e:ac:85:6a:1f:3e:ed:b0:78:59:a2:90:2f:01:7e:8e:37:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ServiceModel.Web/net6.0-Release/System.ServiceModel.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.ServiceProcess.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e2e25d61f605db206c1fb57c2011564599d6b4750bdcc9d44719f81223f25d3
- MD5 060b751ec5956a759590f4c87f8a85d9
- SHA1 48fa4290c268ad9f33ea8aed550da166bc7d54a6
- SHA512 e2559765a148830d8678b8921bdf8e427bb06947a8828e3440cb9aad741815a0a2490cf53517d7732ead62f6f21c4b00c5e76230208130a810d66b800152b44b
- SSDEEP 384:XlulvpWnMlpFW3sBlHRN7eMqG2teR9zmXtWTB:XUPfjPqG2tC9zmkTB
- TLSH T1E4725BA687A84263DDE70F70AAB5D9433C7CA3C62850962E0AD1F5052DA37CCDB3132D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7e:42:da:92:df:5d:90:7e:2f:19:d0:6c:7e:2a:78:bd:d1:41:c5:fe:4b:e4:1f:e5:88:15:86:cf:7a:6e:c1:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ServiceProcess/net6.0-Release/System.ServiceProcess.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Text.Encoding.CodePages.dll
- SHA256 ac1e98b77cec783c34593a42bbbc4b97bf46ce738aed4933b804ef917bf3066c
- MD5 07958edcc524a2c9111eed69517524a0
- SHA1 6a45108e155bdbbe5666cba995415c5f79c06492
- SHA512 9fcaa5643ded0c4f303e69cc3b8b6896661e0db2f5a9bf4f8815b8dfc242885db255b2d3079cb418129361405847d6fb4f5b5c2018d03bc3a50f7ea7cb1bee5e
- SSDEEP 12288:to47xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPeYEBvjl1/ZRhJWo:toK9km6k/IwRYbiBeKGChBxRbt
- TLSH T1DC05CF6096655717F9BBC97087F3B412D6F3B8523F0244BB7A22A34546C3BF01AE4A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
41:53:88:90:59:a1:c9:75:73:8e:62:27:f9:78:55:95:e4:7b:0f:31:c0:b7:3b:64:06:12:7e:78:46:5b:65:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ad:fc:df:4d:58:e3:5d:32:e9:00:01:00:00:01:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Text.Encoding.CodePages.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.CodePages\net6.0-windows-Release\System.Text.Encoding.CodePages.pdb
Name
.text
Size
830KB
Virtual Size
830KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
536B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Text.Encoding.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ccaf501dc6e4b578fa8db6e8efdc549d405a63042ff916093bd8f84e8277032
- MD5 c02298d1dab1fc10ad0a57d2dfdc54f5
- SHA1 519366ed6bdacb0ab525319c853b6b514959274b
- SHA512 697868ddf96f65b1c3ede179f3f1933293db4ddebf49f9f4b65c8e026b405f49d067802960cb8df21186aafda165c7d202e8310bd57c3795446c6e19e78ca99e
- SSDEEP 192:9ZZvTixxhZAWqJW1QWo0A2j9seHnhWgN7aIWePgLlbF0F/C+dyoX01k9z3AQAmdH:1v8XiWqJWQsBlHRN78FWF//dJR9zJLH
- TLSH T1DB725C968FA89207DE675F7092A9D5433D7C6BC2A811A55A1AC5FA041CD33C4DF30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:09:35:40:b8:e3:2c:6e:26:8e:37:de:98:f6:00:26:a9:52:bd:85:7d:ca:cd:d0:19:84:6f:2b:cd:dc:f2:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.Extensions\net6.0-Release\System.Text.Encoding.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Text.Encoding.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 09cc4ffec8ac09328c3c03964dfea531e8f5536cef566cff51fb7da50f885e7c
- MD5 12568dcf9dc9d9ae55c31177105a4599
- SHA1 c136089a901a195ad062050a73a8e3c98a97e72a
- SHA512 37edda29a33d7a6dd68f20bb096c6af5d90f41acd43f3313aa1212b41014c67a31789f4c8d7d775866494ee4539dd491588c07821ac26bee4c2ba7b8898d41fe
- SSDEEP 192:n+gBLohxxXZxWTNW1gJWo0A2j9seHnhWgN7a8WnuhOEU+9YX01k9z3AUCWA5:nmNfWTNWssBlHRN7ZhOQGR9zWH
- TLSH T1EC724AD68A9C8107EDB36EB0A2F6EA433C7C67D25850969A0985F6081C937C4DF3073E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:d1:e3:22:da:a4:b0:d1:3e:f3:5c:26:70:85:eb:99:85:58:2e:e0:81:6c:bb:49:e0:cd:50:bb:99:d7:0e:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Encoding\net6.0-Release\System.Text.Encoding.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Text.Encodings.Web.dll
- SHA256 276dfd56c6573b8e1f418c78043dc6606d986c66a1b78cf882c8d9aa7c51864e
- MD5 331508e53fb2c2096cf548e438c3e10a
- SHA1 999d52064159cfc9e49bfb16487252448547d6d7
- SHA512 fe7fdcef43680b2be38f83121d26d1ff7b89834a35abf10754b4d9e13a78c7f10a82c427fd44d6c8a42086205527c64798695b2392d8361f9ae719a2dbde6d1c
- SSDEEP 1536:AC6ZikhyB8PdZL153A7NjNc2aBor8c5qUCNR6iAoAnlYH9RCCFAcynBRg9o7r+W7:AC6NXPXHZxSwKq8OAlCRm5nzg9oZh
- TLSH T139D37C10F7C4864AD96D59B9C51381B7D77BFDA20323A6C7888477481FB33C8B2BA466
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
60:5f:52:89:90:7a:d6:be:c9:42:40:02:69:1f:fc:2c:2a:1f:ea:e1:2b:f0:e4:aa:54:e2:c4:a6:7b:81:0b:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Text.Encodings.Web.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\net6.0-Release\System.Text.Encodings.Web.pdb
Name
.text
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
300B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Text.Json.dll
- SHA256 b1f14f11dd6f2bdf15705fae316a945c9b97c5ce5da67c29bf998353287b76df
- MD5 737558502a8d3ff4efbeccd689056b7d
- SHA1 93f0b9150586040c8eb84e579617c2b71085e432
- SHA512 822e8b53ea0592872b4f36c7afc501b43b1ef4b2846d5a46d7bb5abfd655fcbdd1edd58790eb73fa29013c44b17d947a1afb2676bc10c7a81134932148f4a401
- SSDEEP 24576:5ZifEJtZUpiicYpvodJUwpAN9SINcYJVLc9axmuo:MESG+vodJxpANUINlLno
- TLSH T10F656C11D3948326E5AEE2BEC51B5423CA79B4975B128AC728C4FE853F437D2A337163
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b7:0b:d9:95:26:ad:b6:e6:cd:dc:64:8e:e8:63:34:4f:fa:4f:d4:8a:de:60:2a:0e:58:18:3f:8b:17:97:17:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Text.Json.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Text.Json\net6.0-Release\System.Text.Json.pdb
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Text.RegularExpressions.dll
- SHA256 581ee84e5ca9e283bf1b61b94c495732153b5fbec98a51fc5d35c9865604ed0c
- MD5 f8a5f84f8cec1fcf9911f18f9feecf6c
- SHA1 ba8bfd290694624bf90c2c75ec9596221bdc364a
- SHA512 9dc8de747ffbeef270e9082807f106564e87c7be0516b7c8fa41840ab7c87e18834a02f54eb3d61dd7e3f498ce38f329650775cc9994b4342bee38fd0a514352
- SSDEEP 12288:dBwjJqk8464lQXczn7d/HOV9s+sQqOmzQ38HhiKpwR4OfoYrL+yZARp:uqkQszn7d/HOV9sgFmzbHhgoQHZAj
- TLSH T1A7B46C2463C80B7AC76F86BCC4975022D6B1BA632345D6CBC500EEDA5F47BC1B676623
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4b:10:0e:8b:06:a6:f6:bc:46:a3:54:91:74:d3:76:46:32:8c:ca:57:92:7b:10:27:1a:52:dc:2e:65:fb:e6:85
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Text.RegularExpressions.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Text.RegularExpressions\net6.0-Release\System.Text.RegularExpressions.pdb
Name
.text
Size
478KB
Virtual Size
478KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Threading.Channels.dll
- SHA256 52472cd978c808ebc3fd079f935cbc646b02c9eab41b175f68ca4e136037748e
- MD5 ee5a1970c2b0d339c8dc291eb5686707
- SHA1 6c753c66a54dd9e300eee196baa4a924d722bcc8
- SHA512 1c5e55419314ffe7f213b1f0f97f1f4a6756679d9c5f9ba9d5f730aee90720fcc85e0c39d30065eb0dfe0fbe161b1a786dc6a6a455b2d7c536e3bc84113dc860
- SSDEEP 3072:TjHXgcgkYaWexJdFvRgadJmH2trwg8AHWDy5ywQpkz:33V2eTdFvR9dJ4cwDDi/z
- TLSH T178C35A15B38C0202D96AA2BEA5938A42E6BBE7D16703C3CF448DD7CC1E577C3B635169
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d8:a3:7e:d9:1d:fb:95:67:75:ed:96:a8:ec:c1:4b:d6:f9:bc:67:97:e2:27:b9:1e:ed:8b:9c:cb:23:56:54:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Threading.Channels.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Threading.Channels\net6.0-Release\System.Threading.Channels.pdb
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Threading.Overlapped.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2385ca2d4d7df73888eb7b943402ee90d68b0cc99d03a02c760b1c23a49f40c6
- MD5 27d7cb1fe1680afdcca2989689d98313
- SHA1 30dbdca0e5f895ff87aa292e839aaf9801fb995d
- SHA512 7536c198b91c4d1bef0de2d31711fd2e4714925ca165c140a68935262c5ccbe29abc74ece60eadd8b9f6a032d574f0d41ccef3ac658e726473be927761abf76a
- SSDEEP 384:Ya+xHYCHWXuHVJHDHIWuHWTsBlHRN7/evpNR9ziXSqOkv:VjTHjq19zHg
- TLSH T14A725BD69BAC8243ED671E7096F5E9833E3CA7C3591096691A85FA040C937C5DF3063D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c3:00:9d:51:83:04:58:4b:f6:28:2f:3b:71:fd:09:a0:f5:9f:07:bd:6f:90:ab:cb:ca:93:c8:9c:be:84:53:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Overlapped\net6.0-Release\System.Threading.Overlapped.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.Dataflow.dll
- SHA256 7c9ec6a8d77f2a2e8aa1f146dd75c4e1f3dfeb9d7033f9f95fff84864fe2b73b
- MD5 3aa05d4563feb9b18eac04e5fd24babf
- SHA1 a0c30cfc79bb769dd619392ea6ef2093aba92550
- SHA512 f08ad9f32e78818c67936f0875144fe856e0f3ce4b52b2dd968b446ffbaf3c67b8b24df2bc4611df7658a924eedbadb7c87bcc0868a07bd4eb5d55b8526bd1d6
- SSDEEP 6144:R5Ens+c03uPIhST/NO/bT8jM5REzxE4RChwMeVB8v3Gu/L2SJgSGsvfT5v3Psm9g:R5sHSChwMyB8fGdS2vub5v3l6NEQ
- TLSH T1E5B43A29A38E4F02D46B91BFAD539491C3F19592A3D1C5CBC448EED42FD7BE1E93A024
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f5:78:2d:b7:67:38:ed:b3:d3:fa:be:f2:0c:fe:ef:f9:76:09:97:4c:7e:6b:6f:d4:ca:46:1a:f0:0a:7a:d5:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Threading.Tasks.Dataflow.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Dataflow\net6.0-Release\System.Threading.Tasks.Dataflow.pdb
Name
.text
Size
437KB
Virtual Size
437KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f292c1e8845374d4d27650e96badf3e080c6b5cef0a7ee37b7217509f6b732b
- MD5 ff6ad07c57181e3b3f09d415f93dae0c
- SHA1 720833fac89dbb84f4c4bbdd4f475adb0545486e
- SHA512 a8f6aad8d4b7db56703eeca54725dbc12650121ac5523efd3b4421db3d533b1b64a709527064f1b79585c8ac54f773fcd7d0d2d50f3bd50e51b19361d17e142d
- SSDEEP 384:yw05p091rcmNDkRfW4XWkksBlHRN703lFpTKAR9ze//:ybAA9fja/p289zc/
- TLSH T1C6725BE68BA81203ECB72E7082B9D6433C3DBBD25850557A19C6F5081C673989B3063E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:48:08:6d:e9:99:6a:eb:1a:6d:5c:17:b4:16:57:48:07:af:2b:6e:8e:b5:65:7a:6f:d6:dd:5a:9a:e4:72:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Extensions\net6.0-Release\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.Parallel.dll
- SHA256 83b2c4b665b58f993d4abe80f0d26a9322f12b40f7d5f696392efb637fb3a3fb
- MD5 07eeb6f1f76e2c51390371f7bacc7810
- SHA1 12fd3437f3a5de59a432f022a975a80fbe6c56bd
- SHA512 f25957974fd4c64194008172868913b385a67e8d28e13941a25ade87e41f61844d8fbd5889a4c150dcfd9b7219f33afb34ec3656ef53758e15409cc78aaff46f
- SSDEEP 3072:IdPNAs5anqPF55D/ZX3LBzdQZK/qJg9O57R29/NPur1XS:APNb5tPn5TZFzKZr8FE1i
- TLSH T168D36B25B3D84502C91F967A9A9396A2D6F3D4961306DECB14CCD18E0F93BD2B737232
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
aa:bc:96:d4:12:b7:9a:36:84:c9:29:aa:ec:c9:ca:e8:96:c6:c8:40:33:03:a3:56:63:d2:5f:33:89:56:3b:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Threading.Tasks.Parallel.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks.Parallel\net6.0-Release\System.Threading.Tasks.Parallel.pdb
Name
.text
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Threading.Tasks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 476884f230b4acb4ba86f24c8105c3076a5c30cce6b11275accf80c4e400a98f
- MD5 9116c41d646e235198d04e263668e15f
- SHA1 f8f5d51586b923710b1b99d90f186f7f341eed66
- SHA512 08682c82076bfdad1250dcb28ec39a1cc99fac536d3ab37e9c788ec612b321dd305f54c3f8d9c052e8f05b98b527cdbf06ea50092e026492d964fb6433d1c218
- SSDEEP 384:OiCj4AG3tNKiuqFPTO9WFzWrsBlHRN7QGlD/LVNSR9zkn:zCj4LNxuGLjHxLVNe9zw
- TLSH T145725BE5CBA8C103DDA76EB092B6D6423CB97BC6A810866A159DF6540C633C8DB3473C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:54:1e:a7:9b:8e:42:09:61:d1:33:b3:49:ac:b8:25:fb:43:dd:65:ad:5e:91:6d:5c:a2:85:d0:ff:50:be:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Tasks\net6.0-Release\System.Threading.Tasks.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Threading.Thread.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f11e17a820ccc7b084692c68411e1ffb6f506645d7994a956ccbd796abbb873f
- MD5 c3be7d11ea66b69328c422d26c943a49
- SHA1 5102e4764283ba6378d426227d2d5f1f2577c996
- SHA512 16eba418614077bbc47dd7fddd46fef4b6ae8ff7a8148ac174ffb021a3ce7bbcf5972ade4de139a762a964d376052168ed80ced0a4bdd75e90edffb25c8812ac
- SSDEEP 384:3Pz2EzZVkDzWC7W7sBlHRN7zHl8R9zrrisP/F0:3bbCnjblQ9zO
- TLSH T189725BE2CBAC4247EDA72E7082B5D6833C7E67D26860C26E15D5F5441CA73C8DB2063E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:4f:12:10:07:29:73:80:8f:52:02:9c:48:46:52:7d:53:7c:48:59:51:0a:48:ca:5f:c8:7f:fd:f9:40:0e:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Thread\net6.0-Release\System.Threading.Thread.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Threading.ThreadPool.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 718d35d92f5c055823d44599b0c049273fcd9d922eb46326b120a8d708fd6978
- MD5 a91425fb9d21eb6e669e4efb7e33c42d
- SHA1 27f81f7c2124e4f31e422cd862d6a989bdca88e5
- SHA512 5d5bbe141c24bc1948ae5834711baa0e91ccb49dc4c778945379fb685c560152cdc0d315808d33f1d73e82643c1f38d7bd3adca62b6a2bf3abfcc184b6e65238
- SSDEEP 384:6UC92rRTsB7WOvWGsBlHRN7CwBmfWojR9zuswyexBP:/1S6jcfWoF9zuHP
- TLSH T128726CE58BAC4247FC67AD7082A9E6833D7DB7C67840D26A0995F9081C57384DB3073E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9a:0f:15:12:4d:55:85:08:c4:d1:33:40:87:58:61:58:4f:61:88:bb:77:54:06:39:de:a6:27:51:5b:c0:06:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F87A-E374-D7B9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ae:aa:0b:5c:b3:34:a5:95:1a:00:01:00:00:01:ae
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.ThreadPool\net6.0-Release\System.Threading.ThreadPool.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Threading.Timer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 32c4d5f583e36e0835d9898514615c43e58bfcf7af7301644f49a17d18b6ac46
- MD5 7147809ab33b282bc574b57a0f2d45b5
- SHA1 77c5d080d425f75b83b3f5fee8403237196aee67
- SHA512 40e3f6e65ecf02b42c6f926cefe7c3c0bc536cf49f56a329eb83c6d9842187a6d3f5145100a15637cb1fb5d6eda20b79d733a40afb33ad2ddb1ecc51d6f268d5
- SSDEEP 384:9f6tuqMljM7MWFCW9sBlHRN7TG2teR9zmXtT:euRkSjTG2tC9zmt
- TLSH T139625C9647A88147FCB72E7096A4D9833C3CA7C7AD40876A0A95FA442C67798DF3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:14:f4:d9:e4:20:e6:8e:49:1d:7f:bb:0a:77:7f:45:76:e5:49:27:c3:01:05:b8:d8:e3:f4:97:ad:9d:f2:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Timer\net6.0-Release\System.Threading.Timer.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Threading.dll
- SHA256 9ed389096339c7fd65a1b11b624aa72e939e23651d86bfc6a81227db7ac91ab0
- MD5 b7936f483ee7ba42ad6ac5fc8f3dcfe4
- SHA1 c9abdd602d95ceef3bd0a9c35c86d01cf1b177f8
- SHA512 ee6ffcf6aa1cdf3260685a73cc0b09762c32c76eb8e147df148a09ae912ee788441ad7a297ec089677da0fdc5151117bf9e105c8ac4de6bd4c4360c0d3eef784
- SSDEEP 768:nnj8Lt3hAPHS7z1BMCVKu+yDqumnIrU8n7aXN9shu2OEoXz2ud3b1BfRAi7CBWG4:no5RZVKu+ydo98ufxd3JpRH7Avea9zC
- TLSH T1E8736B01B3E84216FEAF47BAD5B269128071F9DA1B12D3DF0098D58D1EA7FC19A71273
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7e:fa:5a:26:f4:6a:2c:2d:3c:4e:35:73:98:8b:91:36:30:78:3f:d1:fb:d7:e0:2f:7e:c4:d1:7e:f9:7a:e4:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Threading.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Threading\net6.0-Release\System.Threading.pdb
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
292B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Transactions.Local.dll
- SHA256 a12ba56a76034dec5a5d4013556d49ae5f4ffafba9c78c08a9fec808aa26bd30
- MD5 c137436ca2fcc37fe2b8802a2f021610
- SHA1 9167f696d9288d4005ba586640bdebb305f65e01
- SHA512 afda9b7a808993267e80af1f0d4e97239cb9fad44179fd159efcbfdcc32080804d706cc3461f3866b31702aa45d38ef396194102f8fa5fb7a3bbf8a85700f804
- SSDEEP 6144:lnwVkoaZ2wUqNT/sQ//FeOvAIghUoQ53H4:YkdZ20Tl9FeWFI
- TLSH T1C0743B20F7D64A21CCAAA17991D3C102B1B7994627D2E7CB1990E6C9AFD77C29733033
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
12:a3:8d:ed:77:0e:89:41:09:c4:81:bb:b3:a9:79:2a:b4:0d:3d:b9:75:bd:26:19:9c:61:74:e1:8f:c7:05:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Transactions.Local.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Transactions.Local\net6.0-Release\System.Transactions.Local.pdb
Name
.text
Size
310KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Transactions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ba6def1337ec434309b6a28a5653291f0cc9d411fc0de73c0783d3199c1fc24b
- MD5 c38b09017b7417909356056b31b97a87
- SHA1 4fc1de0d384c405c3ccefc6a5f7831ac3900ea2a
- SHA512 60b69fb05b57caa57770001efdc1bcceef60e14d610e755c799913f0f68e2ddea4e5a1f782167d00d3c24c1955147b34af8967e2a296e14868b274bd6e45e92a
- SSDEEP 192:dEuFRxbZpEbjW2iW1CWo0A2j9seHnhWgN7aIWlU+KKnAX01k9z3AXhzXGLy:dEuFRFoXW2iW+sBlHRN7oUTKAR9zeay
- TLSH T1B1723B92975C6612DDBBA93072E6D5433F7E9BD21C71863A2589E1050EA33CCCB36339
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
79:2c:92:6d:0b:0d:38:b1:a2:57:e6:08:cc:e2:51:7f:36:57:25:d7:57:92:38:48:94:0b:ab:83:f3:0c:7b:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12138
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Transactions/net6.0-Release/System.Transactions.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 05f443ae382efffb5da640d55c7c334243b559de26349da1d6a0b40ce1c11f30
- MD5 46432b408652939b99fda0595a3c287c
- SHA1 6aac316adb27112cecb1474b91e385ba0193387a
- SHA512 23fd82d31947126c3a49dc528bbd8a32fba7aa326aed55918eedaf6f8d91ff40dee490c9cbf9abc8cd12a9468efcb0e360fed9c3fd5259e931a9bfd3161f2382
- SSDEEP 192:mqjF90TlGc+ZTLWWVWhW1OwWo0A2j9seHnhWgN7awWo0o47fva2NX01k9z3AXfT:VxCGc+BW4GWNsBlHRN77yvpNR9zifT
- TLSH T114625CDA8FA85147EDA72EB062B5EE833C7CA7C75820916A19C6FA441C433C59F3023D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
70:06:a2:03:56:81:44:33:eb:7e:48:fb:57:27:ea:37:13:8d:6b:77:c5:8c:c2:b1:73:49:37:9d:73:60:a4:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.ValueTuple\net6.0-Release\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Web.HttpUtility.dll
- SHA256 8dbe2a8d794f0af632c49a8e9929cfedcc68ec4abf661a39b656974da9fb7c2c
- MD5 4d57a0fd78290bc0e0b8f06e5638c522
- SHA1 85b447a7bf80302c78e4b502ecb8d212edad6629
- SHA512 a892bcdf9af9735168714c82716894f87246b1f0b5b85f2b9dec72c11ccd73fb8fda88152a677540b089fcc4030067f81f49bf5ccac90b9e8817cc80dd259928
- SSDEEP 768:mF72+z/fQnRJJDHynSc9q5VQk7Y35YttjX/XHXJsEYcf+bfjnfWoF9zuKf:mFqe/aynSQk7Y352dPX+cfsLnf9XzuKf
- TLSH T173336B089BC8AA06DD6EF139C653966BE534FD922312E6CF1AC4F7492D733C092315B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fc:13:e3:4e:3b:f7:4b:16:51:0c:38:2c:1b:3b:0b:93:c4:56:24:de:c8:33:f9:a4:bb:1d:3e:fb:19:e3:9a:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F87A-E374-D7B9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ae:aa:0b:5c:b3:34:a5:95:1a:00:01:00:00:01:ae
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Web.HttpUtility.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Web.HttpUtility\net6.0-Release\System.Web.HttpUtility.pdb
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
216B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25b81b487b5b474e269cb4a7aeb75aeba0cb2ff9e72b2923e4bc0b8fb01af526
- MD5 bff09517fa41497a4ebd3f6763e95774
- SHA1 8362f3d4a66536b962044ab74bc45244f0cc6f11
- SHA512 560cef48157e9f0b927424be8ac8d99b1ce89aeb01ae7c1131868d8b4ae51e57597572e8d9a4e4d8ae48d6c9f86371b8d82e511d30eb83588b03e8b80268c4bc
- SSDEEP 384:FEqND6Wio9W7sBlHRN7sLG2teR9zmXtc87:FZzFj4G2tC9zmO87
- TLSH T1B4724B918B688143EDA76E7052E8E9833C7CE7C76A00462A1AD5F6891C933D9DF3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
76:cd:52:24:9c:7b:1d:83:bd:92:1e:9b:c4:4c:0a:eb:d4:6a:2b:f6:17:dc:38:54:7c:2f:61:81:95:fa:56:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Web/net6.0-Release/System.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 07ae7c534940c94625c7c8cd86e9eadc6fce3d750d308554edb4e24bf4587d93
- MD5 e471802e0bbe2610e91d54a0c06094e6
- SHA1 62853880d23c404b1404b79911debe5ca1bcc1f0
- SHA512 9bbbe53743a86ad764fa07ff38c4ee6c2b0e546c4a5199baa7928333b8372e4ab42d459185654fe10792296966b20aa796312e6e1e7f88832eab30dc4d22b52e
- SSDEEP 192:ShaMt6x2vZSWdSW1xWo0A2j9seHnhWgN7aIWUodK+KKnAX01k9z3AXhDUF5:ShaMtg0sWdSWVsBlHRN7hodKTKAR9zeO
- TLSH T14C726DF697A89203EEEB5E7082E5C6433D7D93C36C51892A1AC6E9441C67385DF3036E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:00:98:3a:00:05:a2:02:bf:69:67:2d:0c:07:15:3d:85:86:d7:4f:19:fd:1e:ec:c4:3f:f3:9f:97:26:19:1c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Windows/net6.0-Release/System.Windows.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.Linq.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5ee9219f397cb0de7940c872c0f40e54d04a1dade86e9322559009dc48fcb88
- MD5 0addac62e25b3212c25d1f36269f6000
- SHA1 5c4a436a3734548385c91890e2b28ba9f97b12cc
- SHA512 62350275f89f9a83eb437dee89a6b78ff3b8ebbe69162a2f0f47af0a4a8f4d3fcb7ce611e4cdc0d73c38863f5017a965d49564435c04221e545c040e67bafed8
- SSDEEP 192:gM0uhZfWK4W1AWo0A2j9seHnhWgN7awWcPigdhG2ZUnQJeX01k9z3AzXttqgw2:f7VWK4WAsBlHRN75HG2teR9zmXtV
- TLSH T116725A9296688243FDA76E30A6F5E9033DBC97C36851C72A1A80F5451C533C9DB3077D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:36:06:57:7a:90:30:d5:a4:46:c9:90:b1:45:9e:9a:09:43:31:7f:d4:54:4d:36:d7:28:82:48:59:c9:08:d6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Xml.Linq/net6.0-Release/System.Xml.Linq.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.ReaderWriter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2f5d5b42b268f17a68657535cfba174b350a39c0d70b8556de67aaaa6aaa828b
- MD5 39b37812523e570a8a46d6169c259961
- SHA1 966950f68a3632be6d78c878fbfc7af0b51d8039
- SHA512 da18e4188e2fdcd7443f597eb230500e2b66543f505d8d26ad59f52d8d22cf7cd143d2747c321008ff332705eb03aed576cc743829bd0d56617593798132f2ee
- SSDEEP 384:L125qkxK67ex4FCSu4WiAW6sBlHRN7qGlD/LVNSR9zkRVT:RKLldTjBxLVNe9zMVT
- TLSH T181A209A18D64CE03EDAA7BB0C6AFE5C37FF46292347187759485D50B88A27847733728
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e2:17:4b:93:de:42:47:a0:12:d2:86:d3:e3:35:34:dc:bb:8f:53:b0:77:40:bb:ce:2e:c5:b8:56:15:87:bb:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
17054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Xml.ReaderWriter\net6.0-Release\System.Xml.ReaderWriter.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.Serialization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c61362868eaaee5d22d2da10502fd751a0799647ea4a6c83fb1e4d994757b7b7
- MD5 f2e1067e0866f49df3d7d52d9011856c
- SHA1 266c9eda768a6eac7014d10d1213a85ce45ec55c
- SHA512 3e46b5cb3c0d8edf7942c4bd6b29e9d8f10f3c523c368f50651f573725a7217b056cd9efc224baaceb5047a35e00619d4b1e812dfb80d55b504124e951f17267
- SSDEEP 384:ntBLW74EqHWWsBlHRN7iGlD/LVNSR9zk4d:n3k4Eqij5xLVNe9zZ
- TLSH T18D726BA7C7A84263ED975F709A65F5823CBC97C738518A6614D5F50A0CA3388DB3173C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
63:b6:ba:10:b2:d2:0f:39:34:cd:51:67:52:a3:f5:f8:d9:16:7c:90:51:79:58:d2:2b:99:c5:99:d9:8c:89:b5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Xml.Serialization/net6.0-Release/System.Xml.Serialization.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.XDocument.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f9a5602336e6f819f2e502670075b93ac9061b92da7f43caa6fc5ad8f3cd9395
- MD5 a2cd687fb81d71d0371c86a8e6d3f572
- SHA1 f6046f199277a8d70a7ad01da55c895a29edbc09
- SHA512 8d5747d3a14accc1fff2399977710da0dcdb89891972b71a6a78b0cdadb3931bc8d07b1b09ad929d17f94ab22b0177653a984fd91b6245cfd072fc8e40d56f41
- SSDEEP 192:IDnxpZqWzdW12Wo0A2j9seHnhWgN7awW1l7AXkhG2ZUnQJeX01k9z3AzXtoSqeg:0pMWzdWCsBlHRN7G7AyG2teR9zmXtOf
- TLSH T19D724B924BA85203EEE72B7096E5EA033EBCA7C26911873B1984F6491D53394DF3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
de:3c:97:1b:e0:61:c1:20:68:83:c2:ec:fe:d1:e4:af:aa:8b:29:b0:fc:f7:b9:58:22:81:f8:5e:a8:f2:70:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Xml.XDocument\net6.0-Release\System.Xml.XDocument.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.XPath.XDocument.dll
- SHA256 b763654d251f0e7b32330ddcac46dff190d4eb784bb750bea7651b7c7132abe5
- MD5 579589a2bcd6d22c4179666ea36258b0
- SHA1 1007943dadaf4bec3b64b44c2e05146787b8cec7
- SHA512 79a4fe13a0e82915fbfccab0d0d9948d1e7f68b19806187d4d6b9d0ac18fafa9602ea6c6120ec7efe74cf37eb9d5c059aba48b1d9f558d985326b89266d51f56
- SSDEEP 384:lfWpeWO7hT8l2OsBlHRN7kOj5l8R9zrris8k:lOO7h4kjkilQ9zIk
- TLSH T19A826CA287988307DE676D70A2E8EA433D3C93867B1197AF2488F5451D937C4DB3163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e1:03:0d:c4:fe:f1:43:22:f6:39:ed:1c:ee:0c:1d:3b:38:ca:7f:08:6f:43:0e:e6:56:48:a9:83:1b:b4:fb:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Xml.XPath.XDocument.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Xml.XPath.XDocument\net6.0-Release\System.Xml.XPath.XDocument.pdb
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
319B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
KunoichiSekiren-0.1.0/dotnet/System.Xml.XPath.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d4e78592333a130250e9fec15d1fea2a768b9c0fd25a7aded3ec428aa1692f8f
- MD5 8be48da50158699dea7f2ca9e9e1d163
- SHA1 7dcedc4479ef3b945aca526faecdd1406e34fe57
- SHA512 dce0d0671da44cac974a0ba7e9ff599903ef90ac9d267da87f320caf8bd3b3d26d8e5ae6b24a1ccaec2946fadb5266d84eaf622922d372cae076e03be28a504e
- SSDEEP 192:Tyhlv8iAQxDZMWHvW1ufWo0A2j9seHnhWgN7awWSz0Kfva2NX01k9z3AXmGxu:TyhlkiAODCWHvWmsBlHRN7pvpNR9zivo
- TLSH T1A5724CE28B5C4103EED72F70A3E9EA433D3D67C3592096561989FA492C93385DB3072D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1f:a6:68:c1:cb:53:09:15:a5:70:a0:b6:30:eb:bd:bd:86:da:23:57:81:62:d7:26:71:76:74:5f:18:4d:c3:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Xml.XPath\net6.0-Release\System.Xml.XPath.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.XmlDocument.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea510537bddc1f5b5f85b41d94300b4189d13f5605faad1a5bfecb04c9c45a38
- MD5 b18bf2d43c9b4af181f1d45b8df8903d
- SHA1 ff0f85a222d18e47816fdc589148c1e22d26b10f
- SHA512 4390c1484ca716b98430967c776376f0c9c664eff9aba4dcfb0a2903e3dde6835577ab51ea229fbc21e97ac238b811010d027f714db348eda6b1faac87755c3e
- SSDEEP 384:D8EhGf4iWVsWfesBlHRN7AvpNR9ziQDEH:DthGCFNj419zrG
- TLSH T104724BE69B6C8103FDA31F30A7E9E9833D7CA7C26821C65A1985F9851C937C09B3072D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3b:37:13:d4:03:60:de:3a:39:bd:39:14:ce:f1:04:50:fe:37:b1:8f:38:22:53:bc:2a:b3:b0:44:9d:92:db:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
11214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Xml.XmlDocument\net6.0-Release\System.Xml.XmlDocument.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.XmlSerializer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d060142ed17394f97e4536e06d466a39fcf2bfa85c0280e8997605489854d782
- MD5 9996e4170698c97bdd6a051de8532777
- SHA1 c5e9aee1b8c05044f08f4a156322a7ff8e2f4e24
- SHA512 6315d52467c4de8e3fed014b32a726c5b3e32c677d45de66240e994646894febb9f6dbb50db9932d92fad706d87268495fe433d2917c226abe35414f4f666325
- SSDEEP 192:GhgsJNTlxhZw+WfvW1TWo0A2j9seHnhWgN7awWiE8H/gOhG2ZUnQJeX01k9z3Azy:G2uPhVWfvWHsBlHRN7XG2teR9zmXtbM
- TLSH T128824C658668CA63ECB72B7099A6F9433EFC93C77521477A049DE2420863384DB3D72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fe:47:a8:78:76:8e:1f:ff:21:b7:29:5f:ba:87:3d:ff:c1:ce:b8:37:d1:fb:dc:b3:9e:3d:f1:73:06:f9:04:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
13086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Xml.XmlSerializer\net6.0-Release\System.Xml.XmlSerializer.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.Xml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 57af41b86e30d8ebac3be05c9d063e5371d62de703e10aaf5a187908ff8ae6c7
- MD5 55891fe2a790688e509dcde04e742bb1
- SHA1 8b9326e05afedfc429198c4162c9c8b721533f20
- SHA512 1b445fd9e0d68254638814eecbb71bf03a7aa3f92d676283dd741c36b7ebebd65cd974bea0f11771d3522a8ee3f8869b43fe07dab586e066f034cc98db74e935
- SSDEEP 384:TV/Mc95qohA8bhUVGlQO4WdjsWfsBlHRN7OcF/P/R9zPK:TV0chOMbuj19PZ9zy
- TLSH T1B0B209A4DDA8DE63EC5A7B70C59BE0D33BF562D220B28B72D445D9174C93388663331A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
60:50:37:17:6a:e0:7a:4f:e0:f2:55:35:cd:ca:09:2a:eb:c4:5d:72:0a:c5:ae:23:0d:0f:10:16:c6:98:e6:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
19470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/manual.System.Xml/net6.0-Release/System.Xml.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9fb95a87ad50d6b0cae05d9108382915144068034fbbd9f7f733c01dcc0ccfdb
- MD5 a0717094125308f015b1827cb3664415
- SHA1 72e43489264604242bab532f0aa46f599e277fff
- SHA512 6d560521a8a067248c314950787ebef8bbc8f4b6f472d90adee9d01d82ac2704670d80dfac939a22c18f13941c7b04c50e1c03c82f82ad91efcf5c59322fa750
- SSDEEP 768:EAvuoy1c6A2ZX8TRNH5JVbOd502zq1TntVi6jqEWF//dj9zDD:5vuoO3ZX8Q5jzC3iWlWZzDD
- TLSH T17A33F836A6C6A772DACF9734FE578F900BF543D310720ABA48D4C6814AD27C157623AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b6:d5:68:a3:92:c7:51:ae:c4:83:be:bb:c1:57:0f:62:12:1c:65:5b:3d:b3:4d:12:51:5e:c6:43:e6:99:68:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
45822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/manual.System/net6.0-Release/System.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/WindowsBase.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b3e6df643dd07a3bdde2b6419da7e7ee49c2c01bdce7c758c9abc20b8b8a6296
- MD5 024c9da944a299d727aa25282cc7cedf
- SHA1 bfc0365ddc8837c42c2b54972bcc8a22bf60f394
- SHA512 7f14dcc48db6e0a05f84c00acc593bb52eba3672efde05e0a9167c29b42b5753060b22c5f6a2567795289154d3667b49ff84fdc42858c89b97f8c1b177a62b06
- SSDEEP 384:qpDduasEWQsTEjW+cW9sBlHRN7UjGl8M8/fi/GR9z/Q8:qpdJnsG8jKMufiC9z3
- TLSH T1087249E69BAC8263DC9B5E7162B6D5837C7C93C268A2857A05A9F5051C633C9CB3032D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c9:ca:43:f3:b8:9e:6a:d5:3a:e5:77:db:43:6d:a7:dd:39:eb:16:a2:3d:b1:87:28:8c:9e:c4:bb:a7:36:81:ea
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:897A-E356-1701,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ab:09:09:ef:ab:63:d4:e8:a9:00:01:00:00:01:ab
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
12050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/WindowsBase/net6.0-Release/WindowsBase.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/clretwrc.dll
- SHA256 825e796ba50a5656b80aefd3b53e44585f0caa33c46ac115bab0e09a67501354
- MD5 d0f55d39afae813b58d7b43fa02d1046
- SHA1 61b6dad8819521f0d46594480e7a354c70370752
- SHA512 be00b47d62507af293465c4f0ffed16bf58de1df406eac56d39486ca687b3124c3511d954fefb1cdbdc3207053556d1d4bee544cdd530d5520e32ad3e04e6a89
- SSDEEP 3072:s3X9Xit++0PJSKtOJsgI3mwNdmLZ8mTQfsqx4P:g9xacWIfsqW
- TLSH T11E5477063BED4409F5B35FB0BAB79235A676BCA52E51C41D2054922D2CF1F80CE62BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
22:bf:59:6b:b6:68:92:4a:e4:8b:c5:23:77:17:4f:25:3d:f6:f0:2a:4c:9b:49:b0:53:2a:da:63:38:1d:f7:b3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\clretwrc\clretwrc.pdb
Name
.rdata
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
286KB
Virtual Size
286KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/clrjit.dll
- IMPHASH 49de661d6e15395302bd76ca71f37164
- SHA256 6521495c6c1d0eb29402fa4a79667036d56bbfd902daa4e7f3fc89a1c079ea54
- MD5 da066ca0b459a51b0836ccae65c02a0a
- SHA1 9d8a879fee00af6a9f9df2d14ba55190116c963d
- SHA512 27c73915f22c41809cf8508e00a318528f5285d49d9f6a138ad19c9362950ea32b90d56c355ca262ff38da8805fa80db37b5e24a2211c6f2ad85d8ac2905a1dd
- SSDEEP 24576:aGWusW/0xd+gTEAmyBmtAI/UxqcLQSsdHkgr9T9la09/TU2zzbldWyyLKG3ZOTt8:aGWPu69HBmJ/UnI5kyN98wTU2nb+F2Gp
- TLSH T127658D06A3E805F8D4BB9238C5534B1BDBB3B8121371CFDF57A04A56EF233926A1A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:9f:fe:aa:61:71:cc:b5:37:6b:3e:30:9b:4e:24:b2:32:7b:ff:05:cf:0b:79:d0:df:19:cb:5a:20:69:c5:1c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9d:fe:89:e5:f9:7b:bb:4c:c0:00:01:00:00:01:9d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
914032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\jit\clrjit.pdb
kernel32
RaiseException
DebugBreak
OutputDebugStringA
WideCharToMultiByte
QueryPerformanceFrequency
QueryPerformanceCounter
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
QueryThreadCycleTime
GetCurrentThread
GetLastError
CloseHandle
UnmapViewOfFile
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
SetLastError
LoadLibraryExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlPcToFileHeader
api-ms-win-crt-math-l1-1-0
sinhf
sinh
sinf
sin
powf
pow
tanhf
_fdopen
logf
log10f
log10
log
fmodf
fmod
floorf
floor
expf
exp
coshf
cosh
_copysign
sqrtf
_isnanf
acosh
asinh
atanh
cbrt
log2
acoshf
asinhf
atanhf
cbrtf
log2f
ilogb
ilogbf
_finite
cosf
tan
tanf
cos
ceilf
ceil
atanf
atan2f
atan2
atan
asinf
asin
acosf
acos
sqrt
tanh
_isnan
_copysignf
api-ms-win-crt-stdio-l1-1-0
_wfopen
fclose
fseek
ftell
fflush
_fileno
__acrt_iob_func
_dup
setvbuf
__stdio_common_vfprintf
_setmode
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-runtime-l1-1-0
_cexit
terminate
abort
_execute_onexit_table
_register_onexit_function
_crt_atexit
_errno
_initialize_onexit_table
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
api-ms-win-crt-string-l1-1-0
strcpy_s
_stricmp
strcat_s
strcmp
wcsncmp
strncmp
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
getJit
getLikelyClass
jitStartup
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=257, version=29395,
count=187, id=1, productName=Unmarked objects,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=107, id=270, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/coreclr.dll
- IMPHASH 65c5b20007a0f8b5548613247a846600
- SHA256 04377968c540f704aae92ecb0ec9bbfd5fddfe226dfca30aa3eeb52006a44fd8
- MD5 92842b61ccf082f75f748551c5dbef87
- SHA1 a68dd39b1c63294a24bea3a69209625f40e9dfa0
- SHA512 f5f166fa246286fe6a24d26955023048c9f0482196859a7a53a97e86115402c9cae8840a6aa2c925b9d1fe50a351a9df1c26d72434e8fbe904ec4ba90c619b21
- SSDEEP 49152:VQ/cLz8amoGROJTDPHLIKia3RNufKB7Qv8oh5Oo6jODkh4ISOPsppD9UB/opoogS:0ROJ/cG3vwK1Rs9pD9xg9gytnU/N
- TLSH T103369D56B2FD00A8D5BAC078CAD35A17F7B178590738DBEF06608A552F27BE09A3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
75:61:2e:07:d5:e0:e0:e4:93:c8:55:60:8f:be:0a:b0:32:77:ad:8e:2c:e6:d8:8f:6a:f6:b5:a8:bc:04:77:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
1430112
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscoree\coreclr\coreclr.pdb
kernel32
RemoveVectoredExceptionHandler
MultiByteToWideChar
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
FlushInstructionCache
RtlLookupFunctionEntry
RtlDeleteFunctionTable
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
GetTickCount64
DuplicateHandle
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
GetThreadPriority
ResumeThread
GetCurrentThreadId
Sleep
TlsAlloc
GetCurrentThread
CreateThread
WaitForMultipleObjectsEx
SignalObjectAndWait
RtlCaptureContext
SetThreadStackGuarantee
VirtualQuery
GetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
MapViewOfFileEx
UnmapViewOfFile
GetStringTypeExW
SetEvent
GetCurrentProcessorNumber
GlobalMemoryStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
SleepEx
GetQueuedCompletionStatus
InterlockedPopEntrySList
GetCurrentProcessorNumberEx
ExitProcess
CreateMemoryResourceNotification
GetProcessAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
GetLargePageMinimum
VirtualUnlock
GetLogicalProcessorInformation
SetThreadGroupAffinity
SetThreadAffinityMask
IsProcessInJob
QueryInformationJobObject
K32GetProcessMemoryInfo
VirtualAlloc
VirtualFree
VirtualProtect
SwitchToThread
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetFileSize
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
ResetEvent
CreateSemaphoreExW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
GetThreadContext
SuspendThread
SetThreadContext
GetEnabledXStateFeatures
InitializeContext
RtlRestoreContext
SetXStateFeaturesMask
SetUnhandledExceptionFilter
RtlInstallFunctionTableCallback
GetSystemDefaultLCID
GetUserDefaultLCID
RtlUnwind
LoadLibraryExW
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
FormatMessageW
GetACP
LCMapStringEx
LocalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleFileNameW
VirtualAllocExNuma
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
GetLogicalProcessorInformationEx
GetThreadGroupAffinity
GetSystemTimes
GetSystemTimeAsFileTime
CreateFileMappingW
CreateProcessW
GetCPInfo
CreateFileW
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
OpenProcess
LoadLibraryExA
OpenEventW
ExitThread
HeapReAlloc
CreateNamedPipeA
WaitForMultipleObjects
DisconnectNamedPipe
CreateFileA
CancelIoEx
GetOverlappedResult
ConnectNamedPipe
FlushFileBuffers
MapViewOfFile
GetActiveProcessorGroupCount
GetSystemTime
SetConsoleCtrlHandler
GetLocaleInfoEx
GetUserDefaultLocaleName
RtlAddFunctionTable
CreateFileMappingA
InitializeCriticalSectionAndSpinCount
RtlVirtualUnwind
IsProcessorFeaturePresent
RtlUnwindEx
EncodePointer
TlsFree
RtlPcToFileHeader
AddVectoredExceptionHandler
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
RaiseFailFastException
FreeLibrary
RaiseException
WaitForSingleObject
TlsSetValue
TlsGetValue
GetSystemInfo
IsDebuggerPresent
LeaveCriticalSection
DebugBreak
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WriteFile
GetProcessTimes
GetCommandLineW
ReadFile
SetFilePointer
GetProcAddress
GetModuleHandleExW
SetErrorMode
CloseHandle
GetCurrentProcess
FlushProcessWriteBuffers
SetLastError
GetLastError
OutputDebugStringW
advapi32
RegisterEventSourceW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
DeregisterEventSource
ReportEventW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
SetThreadToken
RevertToSelf
OpenThreadToken
EventWriteTransfer
EventWrite
SetKernelObjectSecurity
ole32
CoCreateFreeThreadedMarshaler
CoGetClassObject
StringFromGUID2
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetContextToken
CreateStreamOnHGlobal
CLSIDFromProgID
IIDFromString
CoReleaseMarshalData
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoRevokeInitializeSpy
CoGetMarshalSizeMax
oleaut32
CreateErrorInfo
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
GetRecordInfoFromTypeInfo
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
VariantChangeTypeEx
VariantChangeType
SafeArrayGetVartype
LoadTypeLibEx
QueryPathOfRegTypeLi
SafeArrayDestroy
SysFreeString
GetErrorInfo
SetErrorInfo
SysAllocString
SysStringLen
SysAllocStringLen
SafeArrayGetDim
SafeArrayGetLBound
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
isspace
strtok_s
wcsncat_s
strcpy_s
strncmp
strncat_s
wcscmp
wcscat_s
towupper
iswascii
strnlen
wcsncmp
wcstok_s
isdigit
strlen
_strdup
_strnicmp
wcscpy_s
strncpy_s
strcmp
isalpha
_stricmp
strcat_s
_wcsicmp
wcsncpy_s
_wcsnicmp
wcsnlen
iswupper
iswspace
towlower
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
_putws
_flushall
__stdio_common_vfprintf
fopen
fflush
fputs
__stdio_common_vsnwprintf_s
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__acrt_iob_func
fwrite
__stdio_common_vsscanf
fgets
fclose
_wfopen
api-ms-win-crt-runtime-l1-1-0
_errno
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
abort
_invalid_parameter_noinfo
_controlfp_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_itow_s
atol
_atoi64
_ltow_s
_wcstoui64
strtoul
strtoull
_wtoi
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
sinhf
tan
tanf
tanh
logf
log10f
log10
cosh
cosf
cos
ceilf
ceil
atanf
atan2f
log
atan
asinf
sinf
acosf
fmodf
acos
sinh
sin
fmod
fmaf
log2f
acoshf
cbrtf
atanhf
ilogbf
powf
asinhf
asinh
cbrt
fma
ilogb
acosh
atanh
log2
asin
pow
floor
expf
exp
atan2
_copysign
_isnan
coshf
modff
modf
_finite
tanhf
api-ms-win-crt-time-l1-1-0
_time64
CLRJitAttachState
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
816KB
Virtual Size
815KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Section
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=29395,
count=11, id=257, version=29395,
count=418, id=1, productName=Unmarked objects,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=20, id=259, version=30034,
count=20, id=259, version=30140,
count=469, id=270, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/dbgshim.dll
- IMPHASH a8ae373a377301df4fccc75bacc4f0cf
- SHA256 8ba04ca88cdbb7aceb134c12bd67abd7fb2864c4008495f8224a084b9ba74c93
- MD5 9e604b091287d8c9da7f6ce25f60a257
- SHA1 719f494cb0d155a32c9b3ae48ed324b36abc44fe
- SHA512 1b7f99e160b9cd53a1ab3a42774262d0760e01dbb2eaa2c87d2be3f4fb572bf06cb5fcf14dc83795b3f8bb7125a5bf4f4205fed0a78c6c3e7dd34779ee9ebcf8
- SSDEEP 1536:BX+bprgxi41W1xthbGIUZZ6ubF2J7nDIiNCzX7US2zO70hrx08Ge8/2wzmJ:9+iZ1W3kboJ7DIdT74Omrx0Ze4VQ
- TLSH T141D36B2536BDC0A6E12DE079C9D34217F7B6B424072487CF47A5822D9F5BBC8AE38712
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3d:8e:e9:9d:ed:4d:49:3e:30:f7:1c:6f:25:cc:39:22:2e:35:a5:d0:b8:3c:45:92:6c:db:c1:6e:80:14:91:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
66720
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\dbgshim\dbgshim.pdb
kernel32
DuplicateHandle
OpenProcess
ProcessIdToSessionId
Sleep
SetEvent
CreateThread
GetProcAddress
GetFileSize
ReadProcessMemory
CreateProcessW
FreeLibrary
K32EnumProcessModules
CreateFileMappingW
MapViewOfFile
LoadLibraryW
HeapAlloc
HeapFree
GetProcessHeap
RaiseException
DebugBreak
MultiByteToWideChar
FormatMessageW
LocalFree
SetLastError
LoadLibraryExW
UnmapViewOfFile
GetFullPathNameW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
TerminateProcess
IsDebuggerPresent
TlsFree
TlsSetValue
TlsGetValue
ResumeThread
OpenEventW
GetCurrentThreadId
K32GetModuleFileNameExW
GetCurrentProcess
CreateFileW
GetCurrentProcessId
CloseHandle
GetLastError
CreateEventW
WaitForSingleObject
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
user32
LoadStringW
advapi32
GetLengthSid
CopySid
SetSecurityDescriptorSacl
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
ole32
CoTaskMemFree
oleaut32
SetErrorInfo
version
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vswscanf
api-ms-win-crt-string-l1-1-0
strcpy_s
wcscpy_s
_stricmp
_wcsicmp
strncmp
wcsncmp
wcsncpy_s
api-ms-win-crt-runtime-l1-1-0
_errno
abort
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
CLRCreateInstance
CloseCLREnumeration
CloseResumeHandle
CreateDebuggingInterfaceFromVersion
CreateDebuggingInterfaceFromVersion2
CreateDebuggingInterfaceFromVersionEx
CreateProcessForLaunch
CreateVersionStringFromModule
EnumerateCLRs
GetStartupNotificationEvent
RegisterForRuntimeStartup
RegisterForRuntimeStartupEx
ResumeProcess
UnregisterForRuntimeStartup
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=261, version=30034,
count=13, id=260, version=30034,
count=8, id=259, version=30034,
count=13, id=257, version=29395,
count=179, id=1, productName=Unmarked objects,
count=40, id=265, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/hostpolicy.dll
- IMPHASH 9d1e1eb9919cfae06de54f89d268ee67
- SHA256 3eee1bf88acdac74aedea15eb4ba2c4410d2082184266cd929c1310462115095
- MD5 89b1f94e0d86f2faefc894074185ed64
- SHA1 eeef4354d9e70624ecd1962fde03faf83f8b41f2
- SHA512 59675499c8a79ce7a9f6a9072e9421ed91c3a2ea4c1fb3e2f0cf5fe5a57ac9cffcc90faa564e8e0bef0c2dfe2ac6747b43ec2a1001bda831582418b7df84df53
- SSDEEP 6144:2jWuQ8oj7OW0d7/nYo4ZxQFu2Ud67U9RWDG258v:2jWuQ8qiLdso4ZxQFu87U+u
- TLSH T167844B16E2EC056CE1B7F2389AB39902E6763C4D07749ACF03A0556A1F77BD09E79321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9e:39:f7:dc:3a:65:fc:1a:26:6e:a3:08:6d:da:01:01:79:07:76:5e:9b:85:a9:ff:b0:cb:24:9f:1e:ef:18:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
252848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\hostpolicy\standalone\hostpolicy.pdb
kernel32
OutputDebugStringW
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
GetCurrentProcessId
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
FreeLibrary
Sleep
RemoveDirectoryW
MultiByteToWideChar
CreateDirectoryW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
QueryPerformanceCounter
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_wcserror
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initialize_narrow_environment
abort
_cexit
_errno
_initterm
_configure_narrow_argv
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_beginthreadex
terminate
api-ms-win-crt-string-l1-1-0
__strncnt
wcsnlen
strcpy_s
wcsncmp
_wcsnicmp
tolower
islower
_wcsdup
isupper
strcspn
_wcsicmp
api-ms-win-crt-heap-l1-1-0
free
calloc
realloc
_callnewh
malloc
api-ms-win-crt-stdio-l1-1-0
fgetc
__stdio_common_vsprintf_s
fclose
fwrite
__stdio_common_vswprintf
_wfopen
__acrt_iob_func
fflush
fgetpos
fputwc
fputws
ungetc
__stdio_common_vfwprintf
_wfsopen
fseek
fsetpos
fputc
fread
_fseeki64
_get_stream_buffer_pointers
setvbuf
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
__pctype_func
_unlock_locales
_lock_locales
localeconv
___lc_locale_name_func
___lc_codepage_func
setlocale
api-ms-win-crt-math-l1-1-0
frexp
ceilf
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wremove
_wrename
_lock_file
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
Name
.text
Size
271KB
Virtual Size
270KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=30034,
count=10, id=259, version=30034,
count=81, id=261, version=30034,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=29395,
count=207, id=1, productName=Unmarked objects,
count=29, id=265, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/mscordaccore.dll
- IMPHASH e3f5a92ce49bf8c4c609a6593842e6d2
- SHA256 dd2da6e841155c8869a68270d951246cbfe67943bb71082121fc5ea3d5439661
- MD5 b8e19d1a56d7bcee89a4b78f86372d78
- SHA1 6948e20e33a45f6ab1499f35fe8b320565685e95
- SHA512 cdd4d7a99a92eb260fef8ea8a03f66badab519889027ae3a4f3dd727fc2ccd7db8e185f79925bc1e2f4f001d081905def30ca63a967ce418e33244a87f5ff5f4
- SSDEEP 24576:A+4uSEG8HesT+gTfMjQC8kx7VxggJImDg3isXTA9YBmK4BpRP:A+q8HejjAkhnggJImDg3isXTuYBmRBH
- TLSH T130554956D6BD4499CEA9D1F8C50B490FE7B13801037067EF4AA08B196F3BBE5AB79310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:e0:b8:cd:a7:0f:6a:eb:a3:50:91:cc:5f:49:e6:ed:a2:ca:ec:47:17:fa:77:7c:4b:26:f3:3f:eb:f9:a3:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 22, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8a:3e:38:8d:d2:0e:02:fa:e8:00:01:00:00:01:8a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
918368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb
kernel32
ReadProcessMemory
FreeLibrary
CloseHandle
GetCurrentProcess
FlushInstructionCache
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
GetACP
LCMapStringEx
FormatMessageW
LocalFree
HeapDestroy
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetLastError
TerminateProcess
GetProcessHeap
GetLogicalProcessorInformationEx
GetThreadGroupAffinity
GetCurrentThread
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
LoadLibraryExW
CreateFileW
GetEnvironmentVariableW
GetFullPathNameW
IsDebuggerPresent
HeapAlloc
GetSystemInfo
GetProcAddress
InitializeCriticalSection
GetModuleHandleW
DebugBreak
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
MultiByteToWideChar
DeleteCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
InitializeCriticalSectionAndSpinCount
ole32
CoTaskMemFree
CoCreateGuid
IIDFromString
oleaut32
SetErrorInfo
CreateErrorInfo
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
_wcslwr_s
wcscpy_s
strnlen
strncmp
strcmp
strcpy_s
strlen
wcscat_s
wcsncpy_s
strncat_s
wcsncat_s
wcsncmp
strncpy_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
terminate
_seh_filter_dll
_errno
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo
_configure_narrow_argv
abort
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
calloc
api-ms-win-crt-convert-l1-1-0
wcstoul
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=261, version=30034,
count=15, id=260, version=30034,
count=10, id=259, version=30034,
count=4, id=260, version=29395,
count=11, id=257, version=29395,
count=181, id=1, productName=Unmarked objects,
count=190, id=265, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/mscordaccore_amd64_amd64_6.0.722.32202.dll
- IMPHASH e3f5a92ce49bf8c4c609a6593842e6d2
- SHA256 0cecee158f8b762c8a3610a91ca099abf7fb834984803ec7d4e0bae09ccec173
- MD5 5b80593983e2c369abb8f322e9c5ee28
- SHA1 c5714d69678a13eb431969ce8c35ce384eec550d
- SHA512 67669bfea0f4a79a4133e4ea7b2661743661855df384effb2b67c6d23456a2eba5add582aab734f337b8498bc4cd0292285ea2e7950e99d468cee8fd9d32151c
- SSDEEP 24576:z+4uSEG8HesT+gTfMjQC8kx7VxggJImDg3isXTA9YBmK4BpRr:z+q8HejjAkhnggJImDg3isXTuYBmRBz
- TLSH T1F7554A56D6BD4499CEA9D1F8C50B490FE7B13801037067EF4AA08B196F3BBE5AB79310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:e0:b8:cd:a7:0f:6a:eb:a3:50:91:cc:5f:49:e6:ed:a2:ca:ec:47:17:fa:77:7c:4b:26:f3:3f:eb:f9:a3:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 22, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:42:16:66:04:5c:f3:f4:8d:00:01:00:00:01:87
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
918368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb
kernel32
ReadProcessMemory
FreeLibrary
CloseHandle
GetCurrentProcess
FlushInstructionCache
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
GetACP
LCMapStringEx
FormatMessageW
LocalFree
HeapDestroy
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetLastError
TerminateProcess
GetProcessHeap
GetLogicalProcessorInformationEx
GetThreadGroupAffinity
GetCurrentThread
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
LoadLibraryExW
CreateFileW
GetEnvironmentVariableW
GetFullPathNameW
IsDebuggerPresent
HeapAlloc
GetSystemInfo
GetProcAddress
InitializeCriticalSection
GetModuleHandleW
DebugBreak
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
MultiByteToWideChar
DeleteCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
InitializeCriticalSectionAndSpinCount
ole32
CoTaskMemFree
CoCreateGuid
IIDFromString
oleaut32
SetErrorInfo
CreateErrorInfo
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
_wcslwr_s
wcscpy_s
strnlen
strncmp
strcmp
strcpy_s
strlen
wcscat_s
wcsncpy_s
strncat_s
wcsncat_s
wcsncmp
strncpy_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
terminate
_seh_filter_dll
_errno
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo
_configure_narrow_argv
abort
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
calloc
api-ms-win-crt-convert-l1-1-0
wcstoul
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=261, version=30034,
count=15, id=260, version=30034,
count=10, id=259, version=30034,
count=4, id=260, version=29395,
count=11, id=257, version=29395,
count=181, id=1, productName=Unmarked objects,
count=190, id=265, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/mscordbi.dll
- IMPHASH fbcc1d07f36e3433ba28ee8218a1d375
- SHA256 acab4f32fb8ce65f535b2096c4556962dd271d40000fe688f19a04bde93a2080
- MD5 6936e2413e8ed34f922350056f708f1b
- SHA1 f15c51d779a9ada0293d3a0364ad81dc3435b516
- SHA512 fef83d2d17db4fbcc6054121d275862cb688494925245c54f9a815ae04e9dd782283bd21fb5e71444e81f5ce262c1e55e81e878b8e68e72c1d6c9d92633f6d2b
- SSDEEP 12288:B3O17wLsbUBqpHnglFvU0xCokKTls534boOLeDOQw0ZKaD9Jqhg5flZSVWSI81wC:9O17wobPgli0Tls5oMh7LHJFDsxGd8
- TLSH T11D456C66ABFC9098D8AAD0BEC55B421BFA703816132457DB5760C61D2F37BE06E7C360
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:30:be:f7:92:0a:26:ec:f6:d5:72:c8:86:fa:aa:f7:19:44:bb:8a:03:cc:62:fe:79:6d:d5:e6:76:23:8d:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 22, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:42:16:66:04:5c:f3:f4:8d:00:01:00:00:01:87
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
822864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordbi\mscordbi.pdb
kernel32
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
GetProcAddress
WaitForMultipleObjectsEx
SetEvent
ResetEvent
GetCurrentThreadId
FlushInstructionCache
OpenThread
SuspendThread
ResumeThread
DuplicateHandle
CreateThread
TerminateProcess
DebugBreak
GetThreadContext
SetThreadContext
ContinueDebugEvent
FreeLibrary
VirtualQueryEx
GetModuleHandleW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
Sleep
DebugActiveProcess
DebugActiveProcessStop
WaitForDebugEvent
OpenProcess
IsWow64Process
ReadProcessMemory
WriteProcessMemory
HeapAlloc
HeapFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
HeapCreate
GetProcessHeap
VirtualQuery
RaiseException
SetLastError
GetACP
LCMapStringEx
MultiByteToWideChar
FormatMessageW
LocalFree
GetSystemInfo
IsDebuggerPresent
LoadLibraryExW
GetFileAttributesExW
GetModuleFileNameW
GetEnvironmentVariableW
GetFullPathNameW
GetCurrentThread
SwitchToThread
CreateProcessW
SleepEx
VirtualAlloc
VirtualFree
CreateSemaphoreExW
WaitForSingleObjectEx
ReleaseSemaphore
SetFilePointer
RtlPcToFileHeader
FlushFileBuffers
GetCurrentProcessId
CloseHandle
GetLastError
CreateEventW
WaitForSingleObject
WriteFile
ReadFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
SetThreadToken
RevertToSelf
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
IIDFromString
oleaut32
CreateErrorInfo
SetErrorInfo
VariantInit
user32
LoadStringW
api-ms-win-crt-heap-l1-1-0
free
calloc
malloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-string-l1-1-0
wcscpy_s
_wcsicmp
wcsnlen
wcsncpy_s
wcsncat_s
strncmp
wcsncmp
strncpy_s
strcpy_s
wcscat_s
iswspace
strcmp
api-ms-win-crt-runtime-l1-1-0
abort
_cexit
_crt_atexit
_invalid_parameter_noinfo
_errno
_register_onexit_function
_initialize_onexit_table
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_execute_onexit_table
api-ms-win-crt-convert-l1-1-0
wcstoul
CoreCLRCreateCordbObject
CoreCLRCreateCordbObject3
CoreCLRCreateCordbObjectEx
CreateCordbObject
DllGetClassObjectInternal
OpenVirtualProcess
OpenVirtualProcess2
OpenVirtualProcessImpl
OpenVirtualProcessImpl2
Name
.text
Size
988KB
Virtual Size
987KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
192KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=35, id=261, version=30034,
count=13, id=260, version=30034,
count=9, id=259, version=30034,
count=4, id=260, version=29395,
count=11, id=257, version=29395,
count=207, id=1, productName=Unmarked objects,
count=1, id=259, version=30140,
count=116, id=265, version=30140,
count=1, id=256, version=30140,
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/mscorlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17d4b3d640a611585c6bac2dadd22f76a68a667ae0cc90c446ede02edefb506d
- MD5 46d3bef90b493735207ea1752c48c40a
- SHA1 d33df5b1db01a27ab3b1afe4f80a44040aced3f1
- SHA512 3deb2435cbf0ca914c48519ca1b4af91640b27443a24485e728a128d0367e0859c0f685b091f529f7a0f2473c703528ceb6eb16887bb7c6e1a6d3d1fc440fbe5
- SSDEEP 768:X8zO+8uP8x/A15A4HI4gJl01Qa7ICltVj5jWSxLVNe9zlj:szO+8uA/A15A4o4gJq1DI+jpWSnNazlj
- TLSH T149430632FD484273CC8B9BFEAC73E68115F633CA5472D9696065DA43588E788433739A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b9:26:49:ce:73:66:d7:d9:ad:6f:3d:e7:22:32:d0:27:f8:62:02:d3:53:7f:d2:f3:05:76:37:6e:b2:70:59:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
53434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/manual.mscorlib/net6.0-Release/mscorlib.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/dotnet/mscorrc.dll
- SHA256 587fb8810e8ded0bd1b33c4a8281ea2f288c58c1dd62afcb33f30433f04b124e
- MD5 3d53d60c329ed84ca58d9646bf21c483
- SHA1 c1745c61ee3051c764ef7891c1e987620c17327c
- SHA512 1508081b829d87ccab08cfd3de0214792b74d6d6ea9b088f8b9b75ed7c8a91315b0e9f80a8af6879632dd585d9880cc81fe7cc9891d86ecac9a97917b0891a20
- SSDEEP 1536:xuDZms10iHvh7x8SKJlZ4vCCk7nw55IvZ4MgSZctpoEXXYhzr:xuDZ/aSKlZ4ZGnwmUS4ScSv
- TLSH T1F6E37791A7F95218F6F73B74A9B95AA00E7ABC96FDB9C21D0240805E5D71E40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:e5:da:b5:d6:38:73:5a:0f:08:bd:6d:d2:ad:f4:eb:26:cd:c6:a5:62:cb:d4:fb:14:4c:8e:39:f8:f9:68:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscorrc\mscorrc.pdb
Name
.rdata
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30140,
count=1, id=258, version=30140,
KunoichiSekiren-0.1.0/dotnet/msquic.dll
- IMPHASH 9015c4503d7600b29dd96f7a3f40ca8e
- SHA256 4101dcf2edc42417fdc3f7db048442ba0b0a05d376cafa3ed6c85e1dc6b3b9f6
- MD5 95f79b7efae73b5e4849750f3f1cd56b
- SHA1 a3335c7861792b0c50839d15631d8e0f83efd910
- SHA512 c385eb92431e7020e3b8f692a0d0c33be9261afae15bfd98e30a34eb2195189ba2a2e1442620af61c913027af7acbca280537fc6f2d575eae91caac9aef9a089
- SSDEEP 6144:iu+npsSxtqHSvpfpLELy0mT6GscG8M4D9zuQCL/PVcCvU/AVvTjJN2GLGjrbkP:iRyhCpftWmT6GsJq4LnVct/s9
- TLSH T1EBB48E1663EC1465F0B7D278C9678527FA727C150721D69F23A0922E2F63B50BF3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:61:7f:c5:fb:ca:c4:57:8d:31:18:c5:b7:dc:9e:d4:bb:0b:dc:7a:30:06:9c:eb:e7:85:f2:01:ac:9b:9d:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 17, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e0:71:73:24:ca:5c:98:f8:19:00:00:00:00:01:e0
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4a:a4:f7:31:c4:ff:22:a2:49:00:00:00:00:01:4a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
6
Entry point
167760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\workspace\_work\1\s\src\msquic\artifacts\bin\windows\x64_Release_schannel\msquic.pdb
ws2_32
WSACleanup
FreeAddrInfoW
bind
WSAIoctl
WSAGetLastError
WSASend
shutdown
WSASocketW
WSAStartup
getsockname
socket
connect
GetAddrInfoW
WSARecv
getsockopt
htonl
setsockopt
closesocket
schannel
FreeCredentialsHandle
DeleteSecurityContext
QueryContextAttributesW
InitializeSecurityContextW
AcceptSecurityContext
AcquireCredentialsHandleW
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
RtlNtStatusToDosError
NtSetInformationThread
RtlInitUnicodeString
bcrypt
BCryptGenRandom
BCryptEncrypt
BCryptDestroyKey
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptGenerateSymmetricKey
BCryptCreateHash
BCryptSetProperty
BCryptHashData
crypt32
CertFindCertificateInStore
CertGetNameStringA
CertGetCertificateContextProperty
CertOpenStore
CertFreeCertificateContext
CertCloseStore
iphlpapi
GetCurrentThreadCompartmentId
SetCurrentThreadCompartmentId
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
EventRegister
EventUnregister
EventWriteTransfer
RegNotifyChangeKeyValue
secur32
SetCredentialsAttributesW
kernel32
TlsAlloc
InitializeCriticalSectionAndSpinCount
CreateFileW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
HeapReAlloc
TlsGetValue
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetProcessHeap
LCMapStringW
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
WriteConsoleW
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
FindClose
FindNextFileW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
HeapSize
CloseHandle
SetLastError
InterlockedFlushSList
GetCurrentProcessorNumberEx
EnterCriticalSection
GetSystemTimeAdjustment
LeaveCriticalSection
InitializeCriticalSection
GetActiveProcessorCount
DeleteCriticalSection
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
InitializeSListHead
InterlockedPopEntrySList
InitializeSRWLock
ReleaseSRWLockExclusive
SetEvent
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
InterlockedPushEntrySList
QueryDepthSList
WaitForSingleObject
GetStartupInfoW
CreateEventA
GetCurrentThreadId
SetThreadPriority
GetLastError
CreateThread
SetThreadIdealProcessor
SetThreadGroupAffinity
HeapCreate
HeapFree
MultiByteToWideChar
GetLogicalProcessorInformationEx
QueryPerformanceFrequency
HeapAlloc
HeapDestroy
GlobalMemoryStatusEx
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
SetThreadpoolWait
CancelIo
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CancelIoEx
GetCurrentProcessorNumber
CreateIoCompletionPort
SetFileCompletionNotificationModes
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
WideCharToMultiByte
MsQuicClose
MsQuicOpen
MsQuicOpenVersion
Name
.text
Size
304KB
Virtual Size
304KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=26715,
count=5, id=259, version=26715,
count=132, id=261, version=26715,
count=29, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=1, id=262, version=26715,
count=21, id=257, version=26715,
count=185, id=1, productName=Unmarked objects,
count=45, id=269, version=30038,
count=1, id=256, productName=VS2019 v16.10.3 build 30038, version=30038,
count=1, id=255, productName=VS2019 v16.10.3 build 30038, version=30038,
count=2, id=151,
count=1, id=258, productName=VS2019 v16.10.3 build 30038, version=30038,
KunoichiSekiren-0.1.0/dotnet/netstandard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2666c3d2972e95b2306cfab72dff26704ce89f1a25b55ba05daefac2f7654575
- MD5 56169f24e46141aaf6def2ee6fa6b198
- SHA1 7ddd9250580386d93694076d8e79dd7640b8f9f3
- SHA512 f3d231c3abf282115dc634ee3bfbb1129c19b2ccd67b54deda4445473716edf64f16f83a78e36a981eb0fca5450ba98c63a148150b58051a710494b208eafb37
- SSDEEP 1536:OiTrnaN0HjO8MZYq5V4bgDHsPdPpwSJ5L3Akcg9Qjs0zm+:/aN8qZYe4bgDUnNKjTD
- TLSH T188A3F630FD19D233DCCE83BADDBB99A413F163C602722E6566DA852744D7A84923770B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:ce:62:ea:ef:3f:de:b3:fc:b5:0b:68:8d:b0:0a:88:9d:ed:1d:8e:d0:35:a3:c8:9b:47:79:9e:aa:25:c4:fd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 24, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:8d:7e:47:c3:82:7e:05:1a:2a:00:00:00:00:02:8d
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 14, 2021 - Oct 13, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
96306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/netstandard/net6.0-Release/netstandard.pdb
mscoree
_CorDllMain
Name
.text
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
KunoichiSekiren-0.1.0/winhttp.dll
- IMPHASH d104183de321e6535be598a241bbfce0
- SHA256 d3b62f4c9c3e2196ef82603c52d6b98c043a0d6c125c081fd33d7ca3798b41b8
- MD5 b2a4d0cb04bf8f5a27ccab237ecc2586
- SHA1 c305de177f4193558d2a9a7a8cddff21a0db7f8e
- SHA512 1b2e91ae3a636746aab68cbaccd0c4fba98cf434ad710d2fb9c0985b458fbb3724dc73ae209e2a7db1d48555bd7733c721775e5b0d3d901e80f0d7eba7e7d8f9
- SSDEEP 768:VXCNdrHc44GeNKspjsC1fxgKTb0+cmckVPxIiT7b:VXe+NKgsC1fxgKTQ+cmckVPxIiT
- TLSH T120C270A677A55168ED76D63CC6B0A783D273B0680DF1910F0375AA84CF237416A3DF8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8552
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
shell32
CommandLineToArgvW
kernel32
lstrcmpA
LoadLibraryW
GetProcAddress
GetCommandLineW
LocalFree
lstrcmpiW
GetPrivateProfileStringW
GetStdHandle
GetCommandLineA
SetEnvironmentVariableW
SetCurrentDirectoryW
CreateFileA
CreateFileW
CloseHandle
GetSystemDirectoryW
VirtualProtect
GetModuleHandleW
HeapFree
lstrcmpiA
GetCurrentDirectoryW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableW
ReadFile
HeapAlloc
GetProcessHeap
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Private1
SvchostPushServiceGlobals
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
WinHttpAddRequestHeaders
WinHttpAutoProxySvcMain
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpConnectionDeletePolicyEntries
WinHttpConnectionDeleteProxyInfo
WinHttpConnectionFreeNameList
WinHttpConnectionFreeProxyInfo
WinHttpConnectionFreeProxyList
WinHttpConnectionGetNameList
WinHttpConnectionGetProxyInfo
WinHttpConnectionGetProxyList
WinHttpConnectionSetPolicyEntries
WinHttpConnectionSetProxyInfo
WinHttpConnectionUpdateIfIndexTable
WinHttpCrackUrl
WinHttpCreateProxyResolver
WinHttpCreateUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpFreeProxyResult
WinHttpFreeProxyResultEx
WinHttpFreeProxySettings
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetProxyForUrlEx
WinHttpGetProxyForUrlEx2
WinHttpGetProxyForUrlHvsi
WinHttpGetProxyResult
WinHttpGetProxyResultEx
WinHttpGetProxySettingsVersion
WinHttpGetTunnelSocket
WinHttpOpen
WinHttpOpenRequest
WinHttpPacJsWorkerMain
WinHttpProbeConnectivity
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReadProxySettings
WinHttpReadProxySettingsHvsi
WinHttpReceiveResponse
WinHttpResetAutoProxy
WinHttpSaveProxyCredentials
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetDefaultProxyConfiguration
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
WinHttpWebSocketClose
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketQueryCloseStatus
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketShutdown
WinHttpWriteData
WinHttpWriteProxySettings
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
612B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=257, version=30795,
count=32, id=1, productName=Unmarked objects,
count=10, id=260, version=33811,
count=1, id=256, version=33811,
count=1, id=255, version=33811,
count=1, id=258, version=33811,