ps2DLC.zip
- SHA256 d9812e7be1f72ff49d73f3179e207aa0000852d9d0efd92455ad376fad5d9b7c
Overview
overview
8Static
static
3ps2DLC/Bin...cs.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...st.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...me.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...on.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...kr.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...cs.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...st.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...me.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...on.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...kr.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
1ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...kr.dll
windows11-ltsc_2024-x64
1ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
1ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...kr.dll
windows11-ltsc_2024-x64
1ps2DLC/loadGAC.ps1
windows11-ltsc_2024-x64
6Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Diagnostics.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Management.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Utility.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral4
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.ConsoleHost.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Security.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral6
Sample
ps2DLC/Binaries/amd64/Microsoft.WSMan.Management.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral7
Sample
ps2DLC/Binaries/amd64/Microsoft.WSMan.Runtime.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral8
Sample
ps2DLC/Binaries/amd64/System.Management.Automation.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral9
Sample
ps2DLC/Binaries/amd64/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Diagnostics.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral11
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Management.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Utility.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral13
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.ConsoleHost.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Security.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral15
Sample
ps2DLC/Binaries/x86/Microsoft.WSMan.Management.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral16
Sample
ps2DLC/Binaries/x86/Microsoft.WSMan.Runtime.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
ps2DLC/Binaries/x86/System.Management.Automation.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
ps2DLC/Binaries/x86/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral19
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral20
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral21
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral22
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral23
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Security.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral24
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.WSMan.Management.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
ps2DLC/ResourceBinaries/amd64/en-US/System.Management.Automation.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral26
Sample
ps2DLC/ResourceBinaries/amd64/en-US/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral28
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral29
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral30
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral31
Sample
ps2DLC/ResourceBinaries/x86/zh-TW/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral32
Sample
ps2DLC/loadGAC.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
900 seconds
General
- Target ps2DLC.zip
- Size 5.6MB
- Sample261002-pyra2asgnb
- SHA256 d9812e7be1f72ff49d73f3179e207aa0000852d9d0efd92455ad376fad5d9b7c
- MD5 2798089d4a382a3dd6a70d2a2c059f0f
- SHA1 d0db33f5fc4e1e49f9b4adfcab96268298a07c65
- SHA512 11b187bf24cd2c667360f62d194ff93cb7b348bb6d28688c7e47f223d63c54deb20bea389e2d6a750f29840f9a3b2d0e9ba09fba21c8ea0410556bb6b3da2a1a
- SSDEEP 98304:r/TeTcFWwZoP0pDRQETf5RWQ9P9awWXX4xLZFTKOyFj1iLfCee9ia6CzNUnTqVZr:r/aTOW6o6DWETBR5ECxLZFjyFgfCTT6k
- TLSH T1E156333BF61CD837CA37A53B420A181AD61DD2C658E48C0AC9106B04657ABCDFF5BFA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 194 IoCs
Checks for missing Authenticode signature.
resource unpack001/ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Diagnostics.dll unpack001/ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Management.dll unpack001/ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Utility.dll unpack001/ps2DLC/Binaries/amd64/Microsoft.PowerShell.ConsoleHost.dll unpack001/ps2DLC/Binaries/amd64/Microsoft.PowerShell.Security.dll unpack001/ps2DLC/Binaries/amd64/Microsoft.WSMan.Management.dll unpack001/ps2DLC/Binaries/amd64/Microsoft.WSMan.Runtime.dll unpack001/ps2DLC/Binaries/amd64/System.Management.Automation.dll unpack001/ps2DLC/Binaries/amd64/pspluginwkr.dll unpack001/ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Diagnostics.dll unpack001/ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Management.dll unpack001/ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Utility.dll unpack001/ps2DLC/Binaries/x86/Microsoft.PowerShell.ConsoleHost.dll unpack001/ps2DLC/Binaries/x86/Microsoft.PowerShell.Security.dll unpack001/ps2DLC/Binaries/x86/Microsoft.WSMan.Management.dll unpack001/ps2DLC/Binaries/x86/Microsoft.WSMan.Runtime.dll unpack001/ps2DLC/Binaries/x86/System.Management.Automation.dll unpack001/ps2DLC/Binaries/x86/pspluginwkr.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/de-DE/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/en-US/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/es-ES/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/fr-FR/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/it-IT/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ja-JP/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ko-KR/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/pt-BR/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/ru-RU/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-CN/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/amd64/zh-TW/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/de-DE/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/en-US/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/es-ES/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/fr-FR/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/it-IT/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ja-JP/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ko-KR/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/pt-BR/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/ru-RU/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-CN/pspluginwkr.dll.mui unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Diagnostics.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Utility.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.ConsoleHost.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Security.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.WSMan.Management.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/System.Management.Automation.resources.dll unpack001/ps2DLC/ResourceBinaries/x86/zh-TW/pspluginwkr.dll.mui
File Explorer
-
ps2DLC.zip.zip 5.6MB
-
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Diagnostics.dll.dll 100KB
-
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Management.dll.dll 284KB
-
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Utility.dll.dll 652KB
-
ps2DLC/Binaries/amd64/Microsoft.PowerShell.ConsoleHost.dll.dll 196KB
-
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Security.dll.dll 76KB
-
ps2DLC/Binaries/amd64/Microsoft.WSMan.Management.dll.dll 280KB
-
ps2DLC/Binaries/amd64/Microsoft.WSMan.Runtime.dll.dll 7KB
-
ps2DLC/Binaries/amd64/System.Management.Automation.dll.dll 2.9MB
-
ps2DLC/Binaries/amd64/pspluginwkr.dll.dll 170KB
-
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Diagnostics.dll.dll 100KB
-
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Management.dll.dll 284KB
-
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Utility.dll.dll 652KB
-
ps2DLC/Binaries/x86/Microsoft.PowerShell.ConsoleHost.dll.dll 196KB
-
ps2DLC/Binaries/x86/Microsoft.PowerShell.Security.dll.dll 76KB
-
ps2DLC/Binaries/x86/Microsoft.WSMan.Management.dll.dll 280KB
-
ps2DLC/Binaries/x86/Microsoft.WSMan.Runtime.dll.dll 7KB
-
ps2DLC/Binaries/x86/System.Management.Automation.dll.dll 2.9MB
-
ps2DLC/Binaries/x86/pspluginwkr.dll.dll 151KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Security.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.WSMan.Management.resources.dll.dll 15KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/System.Management.Automation.resources.dll.dll 272KB
-
ps2DLC/ResourceBinaries/amd64/de-DE/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 48KB
-
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.WSMan.Management.resources.dll.dll .ps1 13KB
-
ps2DLC/ResourceBinaries/amd64/en-US/System.Management.Automation.resources.dll.dll 248KB
-
ps2DLC/ResourceBinaries/amd64/en-US/pspluginwkr.dll.mui.dll 5KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.WSMan.Management.resources.dll.dll .ps1 24KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/System.Management.Automation.resources.dll.dll 268KB
-
ps2DLC/ResourceBinaries/amd64/es-ES/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.WSMan.Management.resources.dll.dll .ps1 15KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/System.Management.Automation.resources.dll.dll 280KB
-
ps2DLC/ResourceBinaries/amd64/fr-FR/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.WSMan.Management.resources.dll.dll .ps1 24KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/System.Management.Automation.resources.dll.dll 264KB
-
ps2DLC/ResourceBinaries/amd64/it-IT/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 13KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Management.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Utility.resources.dll.dll 56KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 48KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Security.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.WSMan.Management.resources.dll.dll .ps1 16KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/System.Management.Automation.resources.dll.dll 304KB
-
ps2DLC/ResourceBinaries/amd64/ja-JP/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.WSMan.Management.resources.dll.dll 15KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/System.Management.Automation.resources.dll.dll 276KB
-
ps2DLC/ResourceBinaries/amd64/ko-KR/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.WSMan.Management.resources.dll.dll .ps1 24KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/System.Management.Automation.resources.dll.dll 264KB
-
ps2DLC/ResourceBinaries/amd64/pt-BR/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 24KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Management.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 60KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 56KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Security.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.WSMan.Management.resources.dll.dll .ps1 19KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/System.Management.Automation.resources.dll.dll 352KB
-
ps2DLC/ResourceBinaries/amd64/ru-RU/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Management.resources.dll.dll 32KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Utility.resources.dll.dll 48KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.WSMan.Management.resources.dll.dll 12KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/System.Management.Automation.resources.dll.dll 240KB
-
ps2DLC/ResourceBinaries/amd64/zh-CN/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Management.resources.dll.dll 32KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Utility.resources.dll.dll 48KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.WSMan.Management.resources.dll.dll 12KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/System.Management.Automation.resources.dll.dll 236KB
-
ps2DLC/ResourceBinaries/amd64/zh-TW/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Security.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.WSMan.Management.resources.dll.dll 15KB
-
ps2DLC/ResourceBinaries/x86/de-DE/System.Management.Automation.resources.dll.dll 272KB
-
ps2DLC/ResourceBinaries/x86/de-DE/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 48KB
-
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.WSMan.Management.resources.dll.dll .ps1 13KB
-
ps2DLC/ResourceBinaries/x86/en-US/System.Management.Automation.resources.dll.dll 248KB
-
ps2DLC/ResourceBinaries/x86/en-US/pspluginwkr.dll.mui.dll 5KB
-
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.WSMan.Management.resources.dll.dll .ps1 24KB
-
ps2DLC/ResourceBinaries/x86/es-ES/System.Management.Automation.resources.dll.dll 268KB
-
ps2DLC/ResourceBinaries/x86/es-ES/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.WSMan.Management.resources.dll.dll .ps1 15KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/System.Management.Automation.resources.dll.dll 280KB
-
ps2DLC/ResourceBinaries/x86/fr-FR/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.WSMan.Management.resources.dll.dll .ps1 24KB
-
ps2DLC/ResourceBinaries/x86/it-IT/System.Management.Automation.resources.dll.dll 264KB
-
ps2DLC/ResourceBinaries/x86/it-IT/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 13KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Management.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Utility.resources.dll.dll 56KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 48KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Security.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.WSMan.Management.resources.dll.dll .ps1 16KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/System.Management.Automation.resources.dll.dll 304KB
-
ps2DLC/ResourceBinaries/x86/ja-JP/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.WSMan.Management.resources.dll.dll 15KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/System.Management.Automation.resources.dll.dll 276KB
-
ps2DLC/ResourceBinaries/x86/ko-KR/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Management.resources.dll.dll 36KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 52KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.WSMan.Management.resources.dll.dll .ps1 24KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/System.Management.Automation.resources.dll.dll 264KB
-
ps2DLC/ResourceBinaries/x86/pt-BR/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 24KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Management.resources.dll.dll 44KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Utility.resources.dll.dll .ps1 60KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 56KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Security.resources.dll.dll 11KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.WSMan.Management.resources.dll.dll .ps1 19KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/System.Management.Automation.resources.dll.dll 352KB
-
ps2DLC/ResourceBinaries/x86/ru-RU/pspluginwkr.dll.mui.dll 6KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Management.resources.dll.dll 32KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Utility.resources.dll.dll 48KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.WSMan.Management.resources.dll.dll 12KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/System.Management.Automation.resources.dll.dll 240KB
-
ps2DLC/ResourceBinaries/x86/zh-CN/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Diagnostics.resources.dll.dll 10KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Management.resources.dll.dll 32KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Utility.resources.dll.dll 48KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.ConsoleHost.resources.dll.dll 40KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Security.resources.dll.dll 9KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.WSMan.Management.resources.dll.dll 12KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/System.Management.Automation.resources.dll.dll 236KB
-
ps2DLC/ResourceBinaries/x86/zh-TW/pspluginwkr.dll.mui.dll 4KB
-
ps2DLC/loadGAC.ps1.ps1 2KB
-
ps2DLC/regkeysNew/regkeyPowerShell.reg2KB
-
ps2DLC/regkeysNew/regkeyPowerShellEngine.reg1KB
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Diagnostics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d1362c1bd4975fe2ba68e6fbc33597b48415719276b071556116d56cfcaa3d9
- MD5 868d052c74b60aca6794fbc4a1f714fd
- SHA1 d29cb5a480cf22c480a2d324a5406fb4f161f230
- SHA512 e81540043ac01372d81397083b3f56b742ede4c36f9bfac9ab9be67d39a855c2b1c557f27608b47e084d33cbe321626169aca61900909c290d79d98cddcf0a35
- SSDEEP 1536:Gy0sfjiW+7MeEdz/t3ZJzVIkedwTVEwz1yMcrMJI6u5fYpG7e/:Gy0sfk7kdDt3PxIkBGwz1yMTzu5fYz
- TLSH T18DA34B0477EF0E1AF8AE0A7EB57014960675BA473F22E55F9ED2288A1D77B40C9107B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Commands.Diagnostics.pdb
mscoree
_CorDllMain
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a50a7b64e9d4493ab5fbf6b7e9f0491c0df0cd5d1e02f602f1502cbd23fda0a3
- MD5 7e7871c535247ea9307874e2dc2fa240
- SHA1 eec0e4259e7697a3bf6abee6857d0cb09583d9ad
- SHA512 a19cc860d496475d45dd2755a06b2fe31cbca4ac380122ef22f4c61197ad950a721f48369b48f696aa4c10df9a927772afab02b014afa13ab122ee58daa5f016
- SSDEEP 3072:uGw5avcUoghuthuM1isTUlez1rNKXyK0MrN/t+qQmGUU+jr52AFha2dUHhqG7cO3:G7YGZ7cOEwaPwOQcp9DaLhSJ
- TLSH T16154F71033FE8E9AE29F0AB9B47016514772F916BF56E71F4C80909F1E77B94CA12263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
254558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Commands.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
244KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Utility.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 44145af4d2011e8167e31d0b25369eca7cc1e16e69f8c03b587bcd3ff4a15fa1
- MD5 610e77e0b1281bb7ef63922a9b0abaab
- SHA1 29503068867f09d54b43da22c41c05b794d26676
- SHA512 c7ccb0c62baf655641be42e380c3596cec0a941929747c83e67d7b5a0994c971670a9ff8f33fd2ee03f3011441f743451c90b73fb5fd855eecd795248897d1ca
- SSDEEP 12288:k4FgaXFD4B9KOiC+ZPr5DFQmYEMIf4bsuU2:x9D4XfiC+ZPRFQmYEjfGsuU2
- TLSH T1A7E4811463F90F16E2FB4BB4A8B504555A77F816EE3AD79F0888119D0AB3B40CD62B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
612158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Commands.Utility.pdb
mscoree
_CorDllMain
Name
.text
Size
592KB
Virtual Size
589KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/Microsoft.PowerShell.ConsoleHost.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0401bca17d8d2ab46921934fe65ae618884910ac8f4342d2ee9f06da0c4d1113
- MD5 4a096a4b77ae0c49d3628ce164eec3c2
- SHA1 bf5199baebcf19925e6bc347c308b1a15d9d5e67
- SHA512 10ed3c1e9c0b1e70cc13e3ace4b3a3c6b1d27d2f47b88a43dc212d37a436863a2b961e892d0d46812b6ebd9ae5368ea874a33ac17ed17b80277081ad9720eb34
- SSDEEP 3072:Xt310/QfNhefeLiB+i5pNp3lOWvjR9WQwy/+mbZSLfc6c:XLRiBP33l9jnLILxc
- TLSH T15914192577FD0A29F5FF0B79687502510B3AFE666923E38E188834ED19B2380C961777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
167422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.ConsoleHost.pdb
mscoree
_CorDllMain
Name
.text
Size
156KB
Virtual Size
155KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 95c641c9bd8b40b6a3275dca2772181fa57c248f2d33c98180903f241fb8e3b1
- MD5 965ff911ac1abd8c30d1ff0bd945a696
- SHA1 8bca8c04cd1ca339a2412e0d2d9f296aa2340b28
- SHA512 cf1d94275ca3b39f729e053d71d7ca7fc21a1653dcd3dd12d7cc45c2f658e81a31ae08a4028d13fd52c6eba31c594b9a8e0afd1dd20d1e3894f73b773894926b
- SSDEEP 768:7Yxz4fbFZoTMuaPQCJiFuGEDfZT1VaVP7V2WKLbTl:Uxz4xZoTMuEQCAFuGa1VaVDV2Wcl
- TLSH T1C873C80967EB8D6BE5990A7495F011C007BEFE177E63E72FCE88009A1873758C691BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Security.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/Microsoft.WSMan.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f2a3648895f9208b929be0aa4a5d2876f637508c4670198c394ddea732346a65
- MD5 5ed84a6af55bf182fea7f38693e335f4
- SHA1 f6b17daf9a0c0493e281d7b6c61dadb57cec0048
- SHA512 759d6939fcae07037af4fbc8615068149d16bf5322aed26ff479dfb62f38ce12a0254b60c0b2de07f6adea956bdb695d1c4e1cbd9009645fa768ae47ac708a47
- SSDEEP 3072:U0mu0JKz11uPU68EsrCQhpLJc7961YGGgrtk4143aDHhL1GfVjUa6vNRM91VFO0N:Rr114grCS43aDHhL1GfVjlA691Vg0Ia
- TLSH T18054E821B3F98DAFD5EE063E7074840369B963C35870DFAFAE4478568837788C51276A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
269534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.WSMan.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
256KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/Microsoft.WSMan.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8af7b2ea211ba948944fdc9d2e8e47c72234a1497b872893eb340bf503bcc9ed
- MD5 fd9dc207646a40f715b2e3fa12ff8b2f
- SHA1 c314d4bdb1c844328a211edee932e8c7c807bc3f
- SHA512 a07bfa06e0bcd1e3435c940b8c4d10342e6982730a028df50cf929127840c877da50f346f74f8fd35ef00e3c949fda78338ba99473ed8b5f56a4ef216b8cbdea
- SSDEEP 96:Y5Sap1fDmuDfOYkuPF3+0DqQ4NVe7EUsdTp5lqbPzKx0I+DzD5hw7nWhg95Wb:YMomuDfOY1kQ4NVe7Ej0zKWirW
- TLSH T175E1850293D8C72AFBBE1737E87307922735AB16A913CB6A154171093C1778AC9637F6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.WSMan.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/System.Management.Automation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1c6dd7935a15c026f69c6f687f21b83d06c69fa089ed26b10fe2a08e68fe1acb
- MD5 6ca7d39d5e569cc91538dd29b88fdaea
- SHA1 c669667bb4d7870bc8bb65365d30071eb7fb86fe
- SHA512 dc43da507c93a121235134b7acc4508bcd45bb9084852d4d39ab508c53fc41a44d386340c303865c1200d43b0f5c1a401d98958fea9fa6ddab10c3fbd0587610
- SSDEEP 24576:N+3JJmqlMky1OVC64CZfftlMDXXZ4bwgEaJiY93bVfZo0VxHccM81rNq0Rxg/pOP:NI1C6htl8X1gnJHRfL5q0Rxg/pO
- TLSH T107D5F605B3EE0E5AE4BB4779A479101446F7FC166B33D74F2548A1AA1EB3B80CD523A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2681406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Management.Automation.pdb
mscoree
_CorDllMain
Name
.text
Size
2.6MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
320KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/amd64/pspluginwkr.dll
- IMPHASH 36f7ca9a5caab24901fb951dfddee8fc
- SHA256 da11e51b6867e233c9dab60cf0edd93410ec6c382acf853d0b79005d3735b03a
- MD5 0bb0f55d6f3b11404ea88755caa92ac7
- SHA1 dc1ecc10d10364569fa2c598204e5572dd2ff890
- SHA512 7ab43683cf67911417705da60a31a7f0cc255d1840ce9ab640d6ca86ce2afd0287fd9580f0bd139292b61b41af2c415b5dbfe0cb0451fda1e10540963d0eaf9f
- SSDEEP 3072:tQCVcDd5iviyNXMmrBi38GIXIH47dlDtXLfk+0FWvGO5l+z44tGjRKGavOBpDd/b:tQlB5iviyNXMmrBi38GIXIH47dlDtXLB
- TLSH T1AB046B013BD409AAF49F877264F1C280B277D8835B6567CB513161B82DEE7C8DA399B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
162484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
pspluginwkr.pdb
msvcrt
isleadbyte
__pioinfo
_iob
??0exception@@QEAA@AEBV0@@Z
memset
_callnewh
?terminate@@YAXXZ
abort
??0exception@@QEAA@AEBQEBDH@Z
memmove
_cexit
wcsncmp
??2@YAPEAX_K@Z
_CxxThrowException
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
_wcsicmp
_wcsnicmp
_vsnwprintf
bsearch
??1type_info@@UEAA@XZ
??3@YAXPEAX@Z
__C_specific_handler
_amsg_exit
free
_initterm
malloc
_XcptFilter
_errno
?what@exception@@UEBAPEBDXZ
__badioinfo
_snprintf
_itoa
wctomb
_lseeki64
_write
_isatty
_fileno
memcpy
kernel32
LoadLibraryExW
LoadResource
FreeLibrary
FindResourceExW
GetSystemDefaultUILanguage
UnmapViewOfFile
MapViewOfFile
SearchPathW
UnregisterWaitEx
FormatMessageW
LocalFree
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlPcToFileHeader
GetLocaleInfoW
GetVersionExW
CreateFileW
CreateFileMappingW
GetUserDefaultUILanguage
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlVirtualUnwind
OutputDebugStringA
GetLastError
GetVersion
SetLastError
VirtualQuery
RtlLookupFunctionEntry
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RegisterWaitForSingleObject
mscoree
CorBindToRuntimeEx
_CorDllMain
ole32
CoCreateInstance
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
EventWriteTransfer
EventWrite
EventUnregister
EventRegister
EventActivityIdControl
wsmsvc
WSManPluginOperationComplete
WSManPluginReceiveResult
WSManPluginGetOperationParameters
WSManPluginReportContext
InitPlugin
WSManPluginCommand
WSManPluginReceive
WSManPluginReleaseCommandContext
WSManPluginReleaseShellContext
WSManPluginSend
WSManPluginShell
WSManPluginSignal
Name
.text
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
528B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=134, id=1, productName=Unmarked objects,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=62, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=138, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Diagnostics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 02837ac440f6ce438392fedd6577759da93860b0d650eaa71862af0c619ad3eb
- MD5 08e87e8abf7b41b28663dce817ce0ab6
- SHA1 e7ca75cf28867040aaa6a2ddcfa5894ebf25df64
- SHA512 eba40ce273db2f2ca627869a38f0e7c4098e7001a6b5ea7f7ff7bee94fd1692e8be88eb93a209653383f2d0cac2008f783f91b607a5b9917ad2442044f82680f
- SSDEEP 1536:hy0sfjiW+7MeEdz/t3ZJzVIkedwTfEwz1yMcrMJ8j6u5gYpGbe/:hy0sfk7kdDt3PxIkBgwz1yMTPu5gYz
- TLSH T117A34B0477EF0E1AF8AE0A7EB57014960675BA473F22E55F9ED2288A1D77B40C9107B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Commands.Diagnostics.pdb
mscoree
_CorDllMain
Name
.text
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d038c841763828dade30ec81fce7e492b68c12184612e290f428eedbcaa671e7
- MD5 b716c82d47b5c6c2631d1ebe7fa099bc
- SHA1 efe23997e94a9f6f2f3c4373af66a3f9d0e76fb0
- SHA512 60585459e0ddb0c06493b495d074d6509462b64ba7494bb3310b8ff6465e0a3a16df64ed46857396b901db00d36e78fcad8895a2269fc8d59e6aa36ff026a363
- SSDEEP 3072:dGw5avcUoghuthuM1isTUlez1rNKXyK0MrN/t+qQmGUU+jr52AFha2dUHhqG7cO4:/7YGZ7cOAwaPIsQcp9DaBhSc
- TLSH T1EE54F71033FE8E9EE29F0AB9B47016514772F916BF56E71F4C80909E1E77B94CA12263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
254558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Commands.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
244KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Utility.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 99b02e4e55cdcd359cab4bc3df2cbcfcdda2e595c9440633f8eea248e024e806
- MD5 2bf0e6d33f78907c55b55867470566c6
- SHA1 2306dc2fc67f8d7bbfd340251d797e956fb7592e
- SHA512 becc42588dd6c96e5bc62d3198059f486294e7b09fba618bd7116f0b9b0f8cdbb2793c014bec98da84c2c0abc2b4b05355d8551292cd49b9b03edf7010d6d95f
- SSDEEP 12288:u4FgaXFD4B9KOiC+ZPr5DFQmYEMmf4bVMU2:L9D4XfiC+ZPRFQmYEpfGVMU2
- TLSH T15BE4811463F90F16E2FB4BB4A8B504555A77F816EE3AD79F0888119D0AB3B40CD62B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
612158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Commands.Utility.pdb
mscoree
_CorDllMain
Name
.text
Size
592KB
Virtual Size
589KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/Microsoft.PowerShell.ConsoleHost.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9a06c83a249141238a0b743c6556d646e11e97e1ef36045186acb928d7557acf
- MD5 61408b3cf77b787a753b6f4f4a6840b1
- SHA1 6aadb4a32823d7e1e98ffb92d950a6ae715d3f24
- SHA512 66d2cfe77f22939350dad4c6df182f7af7fc673ee8221855c0261694a80d2dd6594f6def69309b7a5d09b482477bd2df28729aa56b956c7d1133d3e91d07f913
- SSDEEP 3072:tt310/QfNhefeLiB+idpNlhlOWvjR9WQw8/+mbsSLfc6c:tLRiBzThl9jnhZLxc
- TLSH T16D14292577FD0A29F5FF0B79687502510B3AFE666923E38E188834ED19B2380C961777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
167422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.ConsoleHost.pdb
mscoree
_CorDllMain
Name
.text
Size
156KB
Virtual Size
155KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/Microsoft.PowerShell.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6b678df45dfd85dee9454097e1d501f2fddc758f830a0091e83ee52c4224ded
- MD5 fc76265f8f526f65ae38a61cd24dff75
- SHA1 cd536d1fffec6d206e05516a47d949b11aab7444
- SHA512 d71e272cd1dc37d564dd69772baac8e92241c3650936a09deb5ea65f283899f821812261f3bca1e32ac13f3bc8726f2be72f9f62df566731eab2b032bf45c951
- SSDEEP 768:Ixz4fbFZoTMuQPQCJiFuGEDfZT1VaVP0V2WFLbT9:Ixz4xZoTMuSQCAFuGa1VaVcV2W99
- TLSH T12373D80967EB8D6BE5990A7495F011C007BEFE177E63E72FCE88009A1873758C691BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.PowerShell.Security.pdb
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/Microsoft.WSMan.Management.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8656ce1f82fa2bc1f7ec72a5dd98db2afd4fbcaf618e9bb5d3690c6955390217
- MD5 88345a32e0b3e630cc9669c40a8a03c8
- SHA1 94bb9cdfbddf77bd9019336f066868bdaf80f8b1
- SHA512 c16b7ae345d69fbdae0bd8d318318fc6a2175b9392c1c31043e3e536ecfceb4313556b2ef268bdcfd3d97af3350f0026cdf49449a36f4a86394b10609ba94c8b
- SSDEEP 3072:N0mu0JKz11uPU68EsrCQhpLJc7961YG6grtk4P43aDHhL1GfVjUa6vNRM9zVFO0x:Gr11MgrCc43aDHhL1GfVjlA69zVg0+a
- TLSH T15C54E821B3F98DAFD5EE063E7074840369B963C35870DFAFAE4478568837788C51276A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
269518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.WSMan.Management.pdb
mscoree
_CorDllMain
Name
.text
Size
256KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/Microsoft.WSMan.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d419e1b576a916ad4919c51508b069600f673470596542f017099b8af5fe474a
- MD5 d5f86545faf811ed2ccf3c6117b0ec44
- SHA1 81e12ce60e51b42cfd7db3f548397521b672c8d8
- SHA512 0f65ce344f28a5f2251a6241d510242c936f35315645c2b1761836b7ada71a7f02b2b13c8e232196e9cfce2e93e7b2eb3683fed1e4aa38ac33dfda9bc174d978
- SSDEEP 96:nRp1vmuDf0QfkuPF3+0DqQ4NVe7EUedTp5lqbPzKx0I+DzD5Rqe4CWhg95Wb:nZmuDfh1kQ4NVe7Ep0zLPWirW
- TLSH T18FE17502A398C72AFBAE0737E87307932736A716B913DB6B14517109681378AD9637F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Microsoft.WSMan.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/System.Management.Automation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1050af3ba7be5817c8170d6e2e3da2eaf1442128c1718e10b080d354fc48ad4
- MD5 a86ce73d49b58bdf2d5dd1ae1f99131d
- SHA1 df15ef97f28468de70aae45802284f30bd0238d4
- SHA512 cea110bd28ec7d47fbaa004b337d949b55bf4b1e3e7dc293cb45602ff526fca0cb897caf68556aad4a5bb54dc158147e645946264580dd140ef9fccbeba25ced
- SSDEEP 24576:X+3JJmqlMky1OVC64CZfftlMDXXZ4bwgEaJeY93bVfZo0VPHccM81r1q0Rxg/pOx:XI1C6htl8X1gnJbRfp5q0Rxg/pO
- TLSH T188D5F605B3EE0E5AE4BB4779A479101446F7FC166B33D74F2548A1AA1EB3B80CD523A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2681390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Management.Automation.pdb
mscoree
_CorDllMain
Name
.text
Size
2.6MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
320KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/Binaries/x86/pspluginwkr.dll
- IMPHASH 42e96c9d6b7177141016b69f4c2c69aa
- SHA256 72a02c5abf3506e79cbb6fbb99aeb4f44d480d3c707226bd4f6135b95e6c81e0
- MD5 2c46965e646866d37292eec4d6b0e39e
- SHA1 3de026ead09443b90e951afdaf150c6d4a3e288c
- SHA512 a36e0a865e1c71342b7af60893e776e5f223a14b1793e02bd4553f23893fdd2cf3e4bbda7dd2bc691bedbb1d59fb1380790a898f13bb11a7af26f34c8a45afe4
- SSDEEP 3072:0Cc3HVebdwA+OJyAXMmrBi38GIVXe47dCDqNvI+ZNcOiEww+4TMxVnvid:0CAE6tOJyAXMmrBi38GIVXe47dCDqNvj
- TLSH T147E35B193FD098A6D59F473368F1C745A23385F20B6167C711D622E92CEA7C1CA39BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
143340
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
pspluginwkr.pdb
msvcrt
isleadbyte
__badioinfo
__pioinfo
_iob
_fileno
_isatty
_callnewh
?terminate@@YAXXZ
abort
memmove
_cexit
wcsncmp
??2@YAPAXI@Z
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_except_handler4_common
_vsnwprintf
memset
_wcsnicmp
_wcsicmp
memcpy
bsearch
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_amsg_exit
_initterm
free
malloc
_XcptFilter
_errno
?what@exception@@UBEPBDXZ
_snprintf
_itoa
wctomb
_lseeki64
_write
??0exception@@QAE@ABV0@@Z
kernel32
GetVersionExW
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile
LoadLibraryExW
LoadResource
FindResourceExW
UnregisterWaitEx
FormatMessageW
LocalFree
GetLocaleInfoW
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
FreeLibrary
UnmapViewOfFile
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
SearchPathW
InterlockedExchange
OutputDebugStringA
GetLastError
GetVersion
SetLastError
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RegisterWaitForSingleObject
mscoree
CorBindToRuntimeEx
_CorDllMain
ole32
CoCreateInstance
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventWrite
EventUnregister
EventRegister
EventActivityIdControl
EventWriteTransfer
wsmsvc
WSManPluginOperationComplete
WSManPluginReceiveResult
WSManPluginGetOperationParameters
WSManPluginReportContext
InitPlugin
WSManPluginCommand
WSManPluginReceive
WSManPluginReleaseCommandContext
WSManPluginReleaseShellContext
WSManPluginSend
WSManPluginShell
WSManPluginSignal
Name
.text
Size
139KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=132, id=1, productName=Unmarked objects,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=63, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=138, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27578640c4629c3de010b932f54c42f8943d8bfaa624840b5c22129f30f58101
- MD5 974fa33499428293fd9f3c5806d9091a
- SHA1 e39b617e31d009673c200a414a8a5acf619196a1
- SHA512 f83948b40c3518882a760793595a44cede735ddbe19983c61b9cfab090d29840da08960f6ff852b68132b311be497f930932d10f8ecf2594d2fc7e3ddedb1c3c
- SSDEEP 192:a2AWN+7+bgcxalzMI8GFi7c34PtIeVLtC54TV5a5kJxpZ4iXWl5B:X+bRzMINo7pPtIe265a5kJxpZ4CWl5B
- TLSH T163325212A7F9164CF2F31F7536314572B93FF9B5BEA0C44D4498800A5A62DA0897EB63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82e0f3d8e71e9e5b8466952b277323e9d504a088d74748e4fbf11531f65d5651
- MD5 969090400ab94511242a2e74fadc995e
- SHA1 73dbd42ac8a0784142c782e1c60feaf3208c0672
- SHA512 8fa7cde79071e2b888f730ee922a56384895c2b6773386d71f8a8360d22e0cb7414228c4f5d4a495d750814be611b6bd7bd1a9c2c653000e89ecf9cedb788713
- SSDEEP 384:mVeknktoLAHpmOWx6ap/vX1QqakPoY3jFa93kQdqjVsDOV/EPB3B3sW82LTWlPu:WqoLAH3Wx6gP7a93kulOVwB3FsJ2Ln
- TLSH T176F252126BFD200CF6F30BB5273558633DBFF966AA50D40D9498812E26B3A7089F5723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f64f85209dcdb4767c5f58a2eb91bf1f8ff76ed38b2613ce3ac6970178fe2d09
- MD5 09c859788f5a4580974969ffaea13065
- SHA1 a360d8638b2c1f5226fd7e056e70c9365539ab46
- SHA512 dec22c76e08a0be36e9195a7b944a046d6ab8b8537f5b6104ccc2cc24679869d6f375abe7a6f4fbb61a1a3225d1332e07f172324f146e7966b46ede5340b51b6
- SSDEEP 768:77LS44s/IUJn/TMLBSdq81vO1tNgh8ldbZ744ruUwnQR9ps:0s/IKk81XsNIUwnQve
- TLSH T1073397127BFD106CFBF30F353934A8A1397FFA6AA661D42D4544402D1AB2B71C9A5B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8895ed80e64dcf0666c9c215c0b6630dbc0061b48475efac6e54a7f09b70e3c
- MD5 e6e6bf072f7fac01d2dfb019fa71df8d
- SHA1 24644d03ee249b0ebb0123abc9f73e30eab17695
- SHA512 d5d2e6b9b80bb7ad8806d0941b8f0dddfe3fb8c0a9c12c26647fcf264ef0e727b6b85f93daacdef0bb88ea985cd3f165661e16ab36e9d3ab5b982255313459e8
- SSDEEP 384:MED/DExbdEySyDCgdtxH9RsI3KfnS0E7gZBLvdPJ8dXip4vntWlh2:M8ad9uIH7gPLT4f/
- TLSH T1DD1384226BFE5119F6F31B342E3188033A3EFA766654E56EB148506D1B72B60C4E9337
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 059906686b8bf773758df8c711431f43e4fa3f5d58e301fdb712028be117e146
- MD5 94f27859c050887bea3c95df82494a55
- SHA1 059a5ae514c668af395faae72ad502542f84d552
- SHA512 eb3950cc325136668a8039d17aa1b4811feef719fb1ababaf3a0b38ed86bbbbf6085a94e2cdcf920f0e62cadafcd4ee057ea9daeb075bac2648642c4fbe4617c
- SSDEEP 192:RsPr2IF2Vj+v1SSnWARWo9Wp97cXWlFF:NBV41voou8WlFF
- TLSH T1B422C51217FD5129FAF30B352432A642393FFA3AD231D52ED845011D2A73B62CE99B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 86ebc3cfaade400a5414294a2ddc76f18b6c2502323b912c572fd7a156a1b7cb
- MD5 9daef266700d38b670acca31bc2c0383
- SHA1 73030646b65744d49c8ab6023ea34b7f680a3209
- SHA512 052fab3b659a17e4536eaab7b0209d5d386912277eabc93a5d330efd3f980b64dd950ec9f800c3f40a4fed169403e30ef93368e687efaceb5aac89d166d23cf7
- SSDEEP 384:WB+VjcqtUkdt17dSDBqbNJ38WXFAvOJWlwI:WEpcmU+17dAqbNJ38WVAF
- TLSH T1966286029BF6640CFAF71BB527328813327EFAB66711D81E51A5D02D1523E61C9F8B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 afae832e918667efd449fabf3bd6ecc7fa95e93c7e35cadee3b46182721f75bd
- MD5 13ccb1ffe3f9c1178fd677ee3b553ec7
- SHA1 1787b8943b6ca847db5f074ac7e3f0bff70e7aa7
- SHA512 92ef775773aef367b0c08907ea48d00034d1203e21027c9a370d3502bc713e89e87c68091ede14e3a8c9a763b48725e95be326cc70f3fe0f71b0673ca81cc563
- SSDEEP 6144:Is7DX1DYBDuLeUdjrZH8/H/2vNRqkyww/ZUsLx:EuFdj58Wywwqs9
- TLSH T1FF447102BBF9611CF7F30B343A3598127D7EBDAA6A50D41E5158805E1A73E60C9B9B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
273822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
260KB
Virtual Size
259KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/de-DE/pspluginwkr.dll.mui
- SHA256 a967414e07465352b1b6a2361a4a4d7efbdfffa96264e7feea6562b423574184
- MD5 e804730ef25694e34d8afffae1d96b6f
- SHA1 b0082570e22683be2f41a2136127cb9d7a6072a0
- SHA512 442bebbbbe4c0f8a0741ccbc8cedf0b93709c4ef5ed4ead2f57420745f92f8ed1bf72032a8b6d735fe723d3287183e2d275ce1936cb8368d265cf86e2fd3fc02
- SSDEEP 96:mstjvATdlEbhUhn7h+UTaiTfcO56jtgeViWVqOHq3WmG/89yc/:KKExTfz9edhK3WmG/89yc/
- TLSH T12AC1CC5213EA520CF6F61F30AEB952616B36BC92FD79D65E1650106C28B0A05DEB0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9f9a02bf5d7d81ff9c8604c18d097db7c4aea3f4742fdd9c71cf0b37fd1e5b21
- MD5 379089fde4608b9401ec95b274542576
- SHA1 4b475c3bddf1953f89e915cf65fa32ed1f5fde69
- SHA512 b884269318b45638429af524a69e2c9eabd5a6b65ce7c48996c5d582e76c6aab710634076e370dfb617b44327f595d6a03550b564b1a0de71d03577405680d55
- SSDEEP 192:62otYeumtobrzJzCEQqMAiWakK2sWlgHW:lSEJzCEQqZiWK2sWlgHW
- TLSH T18A22630767F9061AF5F20BF53B789252A63AF9B9BE32C75D10A4050C24B2D5085F6BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5c16a02e12984076810343331f41719c52c40d263c1a62c89f678e32b369dbf0
- MD5 573944e952f9d7f26d617fab908ee9ee
- SHA1 b66d598c5af6636e74f3616609a5d9c205e7ab91
- SHA512 a2d9d9dd616f8899139b4d2c8862858c39406c409bbeebd5e11575df9d31293ff5b7ddcc9ad9904bf9b2de922567aca2d1c68d2c67301ff7f0c8eac8907f3b7a
- SSDEEP 384:OF8Tz+zhGF3rushkHBbZaJQ/Q1eYMTOK6tl9vp6f6APROV0IOttZl6Rmi5uUWlFB:ONSkH+/l9vp6f66ROVQttZYul
- TLSH T1AAF2841663EC0235F6F20BB1367A61858E37BCB55A30D71E5478420D2AB1A64C6F7BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eb4303bfc7d649b7c1f32ad7b58ad584d4f83b2cea1467d7e6e19037ac2a9397
- MD5 b32152df054633a28f4d5e2aeddf5f19
- SHA1 eee94d9e364f4d5e34c2464d4878c8f65b5b96f9
- SHA512 dc14a22c6065cfe2b43b80d2894166fb149a566e0d61e9f1aa2053caeed0aa42a6e008f86363bf3343c66aba150bbf97ab8b230613cb9b326cadf34d570a6661
- SSDEEP 768:zFFbjeHT41pFYrtQauJqkMWQTLwbz9omz/fGVq0CE:n3eNrtQ9JqpXKom7mq0T
- TLSH T19323941633FC0139F9F30B763A79A2900A3BF9697730DA5E4054451D29B2A51DAE3BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bcd10cafe2e9f52156f0c08275ff5c25b9e218e41cfe7cd162b844416efd7eff
- MD5 3e0109ea8ae395107ba33d20feb651b0
- SHA1 f4f3438873f155e0b5e327d4f7995067151fedc4
- SHA512 d7346e5a99656c6b8362fc67796d47e75a5bd08f783a65701fd18c5d2b8dc11c6ce746aa18c6a65fbf0457f3662d8df817e8b31333355bc7bd2ae62b3a49c8ef
- SSDEEP 768:wVF9ukn9QhlhetVxGXf1KFYaxvboRvnnr+ok1zH8f1hFX4IedkKfLRqh:o9/9QvFhZedffc
- TLSH T18803B43337FD0674F9F20A352D7AA2855A3FBEB22171D26E6054011C2BB6A94C5D23B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d22da4ecf86a904e73cf5e91d7ed7d5dd9d9f4f7ccc5064c4f0278a5aaca77fa
- MD5 c4a74fa93f0fdae5e72e4ae147fe242b
- SHA1 44e7f3e5738b3fde6a1b2db7fc3cbcbe1dc083e1
- SHA512 8987d63890062f5884cfd7707283f4967159a1f2a6f82ba14912f0841802e507479c21780f1245341bcf44e3e78f6e6a598023a63b02f37e7efed18f8dacebe3
- SSDEEP 96:VFcRKtGeDt/M3oN/F4fSHDGFg7e5GfJRDEI5+WvCRqwpFJbTp/1kWlAHW:VFmCzqFg7OI5+Wv6z7GWlAHW
- TLSH T1BA12451217FC4636F6F20B36257A27C2573BBA59D231C62D6854011D39B2B25CF92BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 af8559c03ab698bc8bc60a6035f0689842f2e009f0da7e0f8acbf5452162e3b9
- MD5 dd6902f80f16e9ebdc289ffb376f921a
- SHA1 ede0599faf7b4f94f9acc0bbdde98743c8711523
- SHA512 d904502be83662bde01adad2c87a3a773ef2740e996e60fd63255529a71bee9b9bae024ad5c4f2853d5110060bcac2c098165de9dcd278fa127fe560ee77c97a
- SSDEEP 384:XU6yrhasWOCQ+mdpeCJc79uYcKSAqwNGbWWlOtW:XU6yrEsrCQhpeCJc79uYc1zwNGk
- TLSH T10652511363FC1639F9F207B16AB993914537B9742B31E30E1479404D2632EA4D6F6BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8f27f759193dd36b728bcc20ded1a4377b5de3b55e899fb43e857fbdac495e7a
- MD5 49d669dd9f8f3d4d8600d94efb46edf8
- SHA1 a17a7f4138ff417c5607bd49914a592a63e3594b
- SHA512 dfe5e6f5ba2a27e355e33fd640c686bd52191c8b7de17bd4eb6d0f1495dedb7aa823e56ffc891feca2159c51fb67a5d2ff7a6da10fb3b29533f5e789447a3107
- SSDEEP 3072:P2P4Au292wyXHxU2lqHOIKPI4lGuo/Do+nxq5OqXjcZ6pSV2ILV:Piu292wyXxnIKPGuoPqTc82L
- TLSH T1BC44931677F80279F5F30B757A7E90948E3BBC642A20D15D2058414E2A72E60CAF7BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
248110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
236KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/en-US/pspluginwkr.dll.mui
- SHA256 f9b7639aaf79dd4b7fe97d8d47e46ce94ddc25a552c915596da656d71e985b7d
- MD5 fe0bac0cae9ad76c922a9b2cac3c757e
- SHA1 5b86e73628b97f1ea57a4aa088db09c9f36cf619
- SHA512 4ea05787719ef47eff043777d49e22720151efd3b2b5c9f204791f051825a270386a60ba2025614fe531b5748e2534683a7c9b1119ce0afa01b5f38075cd8282
- SSDEEP 96:7R2RhgpvQeD22DpnARDOXphonhnzArOvdozAWGChzA+eGOWbjT2Q9EWmG/by5Wwm:l2RCz2CpARSAxszsws+PTr2WmG/by5W1
- TLSH T195C18A5163F95618F6F63F30ADB156205A3BBC82FDB9D29D2280581D2CB0A41DEB0B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 832d7c9ee8bdbd3aee2837dae81ffbd7290f055c7b128523c56934e03e0dd5dc
- MD5 310639aaa22b09a0f1c174c2e877e05d
- SHA1 c62cf2ba3117de0ff88ec8df1fdace68e3b90d07
- SHA512 ce0e77774de7adf5026dee9b422df3d5709cad37d5b1fad5dd9549433617acfd1d1423e233dab767b3c38e0e0754970d34522826f6d4f39ff055c3ee572776f6
- SSDEEP 192:TJ2yCASrvarbbtn6QPB7rKElOPJW9x3XEHEpb1UW1ZWlu:wTAZZaElXxTZWlu
- TLSH T16A324225ABFC0A01F4F21BB4A672C217A17AFDB56A15C25E8170025D14A4E14CEBAF73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 637ce4e380da5982ae1029cad6bb25aba8b362223ec49ff06787674029fd767d
- MD5 96ac59b4280d821056213892a825612e
- SHA1 33f6062b3a631686200217622a3b4c9742f78d01
- SHA512 2cdbf47b7718171a29be4a708c2f3e2c61d0716bd1f5f94a7dd6fe96ea31e9251358b6cc5571d854f17b075ca9cba7475d03f7b8302619165503646cc5ff8dda
- SSDEEP 384:PyNzwXU8XavqkyEyy41OMQkMcrJj6g49Tqf9VOVm+Lj+WXFxaUjG9ZQZWln:mcYSk/4UPefzOV9jBVjGjQI
- TLSH T136F2512167FC2A11F5F30B756536C64BEE76BC616818D14EC024836E1AF4B48CAB6B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eae0d0e318adfd474b5aaff7ff6fe186810720dbb76b5ae82de7cc3aa73c0a97
- MD5 317ee0487b5564989590f457a078e2f9
- SHA1 614f1f2e31263ff0d26a983fcd9b6d390f71a067
- SHA512 ac3c4ff6dbef5dd65432effe216709f216b2c5f63f2f59ff15317383c10e92b821aa14de7908994d7de1517b068f6ba42a7d95be799ebc3d353ec897a77109ab
- SSDEEP 768:ZL8Dj69ReU4MMx2iirl2TAQq2UKn66VPcAn3QB:0m9b2TAj2R7E6gB
- TLSH T1A733922673FC0621F8F30B393932D6929A7BBC667524C55F9060021D1AB5B08CEA2F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 734ff6869a074bc16578b27aab62a1fa23798d94ec89ec93d4f4a1e17bbecdef
- MD5 49322019f4d18c46c55565cd2a25d3e9
- SHA1 b60905bb93cc278ffad4c910c88e4bd982724b01
- SHA512 cf42094e8335ee8626187404dd8f7d22af20b7f6cd1a09548dbef7127b8331e7bbedb64f29e0d614c4a5d713e5dc29d0a81004e843de014aa7a70c77b2d3c2d8
- SSDEEP 768:tVNrrW1AafOSahysAp6R+AoLDC+5ZBovseIcvPrHrmUmZmFm8mGmsmjBvcq:j2hfEhysQ6Qp/wknp3eq
- TLSH T13A13A33527FC0611F9F31B396872E103AA7EFD566514D65EA158030D0BB8B8CC9A6BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 63202213d06008f3f2e25340f3b78610a314eb4f2d6a702ee85b0547b6f99ebd
- MD5 01b334337d8559b2bbad4c176a4051de
- SHA1 744eec5555f4fd1fcfa303267da196de44b0409a
- SHA512 9afb30993b3a54bade256c354ffd6c21d5cc5e7418d57341d19c01362a1c860e12ec994da3b595ed63f32179edcd2d0acc5f193c4312c218ef8b56da851bfb92
- SSDEEP 96:AwUpz6JRD6MMgdmh+N/KyASYfunAKtnHnmG3TqGiw7EChRe2TpeUmZWl+:7OwdrcUYfuAu7d3yZWl+
- TLSH T17C12652163FC1A31FDF20B3610729643A576B9249138C56F9825021D2976F5DCEB1FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 893b42fe26375486e22db0817979165e429b7982889a623d84cd5a851558df56
- MD5 8aa076bab3b02ee007fa91149db9c9e1
- SHA1 0cd1198b638956827f99b63e7a35d541de39f024
- SHA512 6c2965b87b24ba44c29b318bb95bcdf5be5940c16c8afa7b25fab31bd2fcd1d6f0a891b9887ec3a2bf4a7caa11a7720e427778699fa24a904f685f1bbe1c0a8b
- SSDEEP 192:UdjbBtgr347ozSgod5CYJAGblEi68JShbioizBg3Oeq2FM8R8iAsryZWlg:dvz8aLG5KuS0oiW3jR+8dOZWlg
- TLSH T1F2B2762163FD0E61F8E20775A532C14BF6BAFD252808C18E9065826D1878B4CDAE5FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 af88b36a69dc555e07fc46557671c765f7b9b2a90c875aa22a10eb974da4b6be
- MD5 fedacd5dfe5d136126a9eb97c7699d7e
- SHA1 e967a19d88c2aa2d91654de10fbbe9db60465767
- SHA512 d6dc1b4ce5731314cfbb22e30bf40885c6fe2013a0df38608d86fcb73a436633e63a0c68217815921a346d5be4bc323173fa0e54afe72c659b1b76e1f1955c61
- SSDEEP 3072:GBzh9tFud8R1XOD8PpDIEyYOYlqYcy3RYq5yNNO/d7LJGt:G9h9tkd8Rk8IEWq5yNNyL
- TLSH T194448222A7FC1B15F8F30779B932D517AABABC653914C09F9014425E16B4F48CEA6B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
267806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
256KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/es-ES/pspluginwkr.dll.mui
- SHA256 b3d1dece77b2a86f7f36c4d889f5c016e753e5166c3078eaf59c92474304537b
- MD5 c9611bbcdffdbee698472de0c45776a1
- SHA1 827fd1d85ed3ad08aa4a0992074eda1571ac30cd
- SHA512 1c155856d354eb3b2a6a23eb9a71fe0631db4fe39da04b1fc55b1f39886009e480d310859d09f607c1b809fafccec70b69a33321daf3da76dcb442afeee786af
- SSDEEP 96:ctuTxcEfcfhPSh/ftQfLauyfmGOrjTv32hvn9lwxn5mWmG/hyxK:cYTuzz32J9ql5mWmG/hyxK
- TLSH T10FD18B4427FA1206F1B77F34AEB916A44E3E7C92ED39911E9650115E1CF0E4A8EA0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1066f179af32846c92fb8b91be82052d67ff8e214471139c668efa33645f944
- MD5 a69c6964126a222e8f51b5adb37b1983
- SHA1 58905883a22dced68cf902ba2fa54b7d11412b5a
- SHA512 ba4dceef27ab248264efb113d1e81c5d968573b3fafda18260ef243fdd256c8ff850a311fca7fc1bddba5bef5ac76aa9d7372e085812e97b5031c02aef24233d
- SSDEEP 192:i2spu9mbOiLzZB8T3tAt1RdrdctrBN8alSOjZDsLjLVWlUKL:nTCYDtW1RdJctrBPlZsLjLVWlUK
- TLSH T1BB32B707E3F80609F7F30BF6FA31A313997AF615B916D21C88A0028D18A5968D5D97F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3008d67bc7d0b185a2bd46b6c32cccfddc814e216bef0f8dd60a6dd89995ab7a
- MD5 aae6f3757ccb424ababa47d994751c14
- SHA1 f53009261d56df18ea41f5b80e8de06ac59cbb3c
- SHA512 9d5c606f27956489449545fa86b4c58fe1f5ca572de6bfcae9bbc0781c72d1c030a7837585e04c382d192e386bfc20116bff30aa6f8461a1b9f64f06d179d82b
- SSDEEP 384:/so0dji14i/PkmcPdQSnPDRqVOkcCMapnFaOV/ECgzqR7lhJ2e7WlhR:SUpXkmIucCMwnFaOV5sqR7lJ0
- TLSH T1ADF2A50213FC1725F5E30BBD663251478876FCD5F820C54D88A846AD16F2AD8DAA9BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4c8a2dd54db1dddfc366a92ca0e4946582660941fc603bf7d3a685603fc69d63
- MD5 1e83f1ab81a717d279b2ccb9cbb6f546
- SHA1 c70d121010759c5be794d369b072d47655ee262e
- SHA512 0fae7ed169ba2abd475a75d8f7e8430381198deff47ab3890f91fb54d5dd12062307b839cd8929fa6a8b0c3ae8d170740affc079dfd0019d2ce3b87226a53b13
- SSDEEP 768:w5YH2aMfbM7HUdvkoSPkjMOUzBA/HTW12jhDPzQcbZsnZr+JuAk:gfgyvkoSPkYzBAQ2BQBqwF
- TLSH T14233E81623FC0225F5F30B7EB932B692447BFD98F221D64C8884065C16B2669CB85FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a8130951cf8ce09f8a6545e9e5a06b04a28247fd4eb41da76d5c4160a5b39103
- MD5 992b93a1a7959ae26db27978cd460671
- SHA1 94eaf7a3e74f94615d67960a8469109e7196c5ce
- SHA512 2993443a2a84db581438ec9d36480dc085bc66b770e59aa9b9786ada03a4bb861b92af0ce17bfdc89949c8f90130504a96b4c1fccda918c9a483ae22eede2614
- SSDEEP 768:GnK4iCqOvsk9AvqYwH59BvtUc8LHt+y+gDk4dkgw0+SWYjOMm80AFSb/tmwKF:GnK4iCqksqESbAwa
- TLSH T19713C42263FC1112F5E31A7E7D32A643C93DFF99A051E61DA984064D0BA1EACC1897F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 11721c8ed944cd947b363fa8000306f00ca83699aa933270c1ac681ac82d1f7a
- MD5 3d312be16193fb5e75b68c62191003fa
- SHA1 7d64af869374c5849eda165185bc59d6a0a49438
- SHA512 fd31978c9773da49ed38e5ed19cdd322c9e1982f523e6ad8757e714c678c0df8f2997c2a8fbdc25cc82578a11130ed7fb46e2e18bd9fe85da22bd03a0c8c1747
- SSDEEP 96:FRBXj9ZH2DBMD5NfrimChp6CSd+vBJkhwbdlUb3BF4qs9QTpZ+Wl0kV:DBzumC76vdqTSkqsJWl0k
- TLSH T1FC12831663FC1722F9F2173A54322383953AB958E135C62D8D89011D3AB3A65CB96FF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 211eeeb4223c1516535f2d73ca86c7e7abad6b451bebf46c4d5d632434f96534
- MD5 52f982390f40c50b008054691a85507f
- SHA1 72731559a56ca2002bd67b61e058909cef5a56c2
- SHA512 4e197ead77b318070539cdedc733b5d6bc21274d57b782b723d908cad43409d981c6c7b57cfbb1716ee276ae01cf57f0e951e385a4d8a884d6b4238b57d4e83e
- SSDEEP 192:PdRb2tURR4xYf3ykMLXzPm+QuuAO6SqLFHTQb0r2lBnz/motlEvGwHoWlSc:ExKMO/dAO6Sqpkb0itxAoWlSc
- TLSH T13462B84393FC0641F7E207BA76335386C075FA69F615C24DCCAA418A0662EA4C79E7F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ca5fdaf1ed421391f2c03f424a28efe081d024a803d518c01038a56b29d0acfc
- MD5 91150e124847b711b8e6e81f9ec1c1a8
- SHA1 bfdb8cb88fdd52e070653bae3b678e468e544cb1
- SHA512 a0c4a0c24562b343c04ca4bc75b7291306f1f2e49102b36a0fa7fa27bfbad373aaf20a426a2d0c2b8ecd57ff745d2c5359642af85fb065f1414c45cfb7e96383
- SSDEEP 6144:xRCPC1uMNy7rUkkE6rT5i6YJx417w9wBDq3DkJQSL5DPQL:/CPCfkkE6rT5VYJxl9wBMDkJQSLZo
- TLSH T1A5540A4277FC1309F5F307BEB632A113C87ABC987515D55C8888458D06B1EA8CBA6BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
282142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
268KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/fr-FR/pspluginwkr.dll.mui
- SHA256 582906965b32db51d4180a4248ff77f7de42cf7beb86898ad117699757483c4f
- MD5 7aaba5ddc3f3eb071f9f4bc3a2d5adf0
- SHA1 542e86f0eb24be1bdae02112afd15f4bbd0a2e3c
- SHA512 c8ac3214be77e039d761860c56ed5bd9423641fa2ca9adf92ec6b97bdfe7f7246f91ae7a1c549dab14789a6482afd259bfc9a6550d11c50cbc84f5ce23a7e202
- SSDEEP 192:cQhCQ6rQbad2eNe4epsgxweHweFgWmG/vyKCv:R4NtWHHnG
- TLSH T118D19A15A3FA6605F2B63F30AEB801605F3A7C87ED35C15E4A50909D2CB0B45DAB4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 89cf8edaee47424c2d115478d98d2e83eb1e955d1e3b1725a685001ee6798b4b
- MD5 838bb0720023010f0e1b44b93a0cf551
- SHA1 0701af26d01c6ff3fef10902f86a194fae84ffc7
- SHA512 ebf5db3c5f6c921e0aca84bc103bb8a4658be3b72c72b811d2e5709468248b2d1f16763522a93b6df0588a6bbf461bd2c3cb6243c6324040a7822ced042839e3
- SSDEEP 192:N298op51Zw4aE1+t0QdYZCwDQ8RQ4RGy0V9t3Wlp:4lp0LdYZDDQalRGy0V9t3Wlp
- TLSH T19032951637FC2505F6F31BF8A9325112AA7BFCF9BD29E20C4195024C2595E108DE9FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c7c85d663710b4750844619bd2c4e6565ec936b22e9f4eb77388e22a475945dd
- MD5 6f3d3627bb9eb58d410e97642c372016
- SHA1 d81d0d3ed3d1099c9a2d5d57cd5470398d48e22a
- SHA512 f17dd8201c91554223ebfea00b7453ffe76151f65108a29369e4e4655f3d150eb29c3d287c970fe70cb74a99214b401b848256580564278cbcd0107cdbb8bb65
- SSDEEP 384:/ce56Wj1X/llWR/PjeGQ/Tl63xZ+FSdwshfKWOX4OV/6B3YajAXBpxPi7tSziWlM:hRYxjejg1OIOVw39kXBJzG
- TLSH T1E9F2812163EC1515F9F20BF86132A14ADE77BCEA6C18A11D8428431D27F6B11CBB5B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 815e5bdf88c9730ee73f1a51baa7e673eb27640269d83e9770e6cefdc0f3d588
- MD5 56a11fb2a07670bbbf9e2c9d0cd08b53
- SHA1 4b7d8fe608fbaccce3cee4c481566eb6a66c4b35
- SHA512 50f91532bd3fbffdd7baf4712ce53575a1fae97ab8470a2015cb14fdab9eb53118b9f7e720a1b4750a7e8700fb9d7787f8fa027f821bbfaafeeddb049588a811
- SSDEEP 768:QgY/SFtr2eDPMLKNAnKD3gdftmaG4I1M2:RFtr5DAAqta1b
- TLSH T1D033832733ED1025F9F30B793935B5845A3BFCE9BA25A61C8450031D26B6702CEA5B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a9395c6549cf33fb41d055dbd39500996687adb20c8c28cd137ba2f1517de1c
- MD5 fc3946396706ad67da9624c9895bf839
- SHA1 a5ede31194bb6816b32d3659b9c10dc4c3b45c9b
- SHA512 b7a7d468eb031970df2f2c930516618315d605f698353d5726c2e26ac9a792de2a0bcecdbbf7148cf67624aa146e2c0e6a4d41e34b84f8bca88d3a1c7a3c8a7d
- SSDEEP 768:hXy+Oft94edOLRsBC4wF17qlVhtT1iXSx3tW/nNF6IGrzd/umC++me3L:0+OF98LRsB0Fg+mU
- TLSH T10B13A5323BF81110F9F317B9A971E0459E3FFDEA6929F11DA058030D0BA5A05D598BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ffeff507e7ddaf668f129a0b7849f3a3410594807847b1cbfc8ce65e2a26034
- MD5 327aa7853b22f7eeb0603866fbf5099c
- SHA1 461ef875bda6f5543bfa5e8bdd0da9c58595610c
- SHA512 78591f8431691d4ca9eca2e547806993aa02683633609edef20f6ddcfba442965b73928f7e9d5ee45cfd6ac73fb141d2bb5b1d6218edccbb25838cba8ec4e17b
- SSDEEP 96:9g/LdYjeRD1MWGG0PM4eMSt++nX4yc4VRhMMWnvMfmgeJ57MTpgEWlJ:9gpjV0PM4ehey/oMfmgeXGWlJ
- TLSH T10912652263EC1135FDB20775103662866A3BF89DA639D12D9855120C3AB3B16CFA1BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 eaa76a597f9bc82a655a8916473afefb6cbdbd0a823f6d63509fc677e0d3770b
- MD5 d182d84278a2c9a50f42f17fc7e85930
- SHA1 53c60595df529cec826d27c335d6ec1e3d5be44e
- SHA512 868550ac7c68efca95e22837e303c4addc28aaa0dd52e377c0965cdf9c8d468b2e801a495edbcfc9c2258ddf3ecb6da28217a63151596b4b1c8d370c9019dbd8
- SSDEEP 192:/d5bEtPHke3depnCgFj3XlJmvwXLaCPGHLrhJk5uJkoaehsaLq/YdHJSWlr:pI6CUzVn7aC+lm5umoa+MYzSWlr
- TLSH T19AB2A71173E85511F9F303F661329009EB3BBDDE7D1FE11C903A411D15AA780EAA4BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 28cf1d2363f4664554eeeff430cbdece27acfa1557a85be2c908b6352612406a
- MD5 ab8823dd1abc0dc54dead1f31d00f95a
- SHA1 c28a7f37c1c4403634b98deb53ea5ded595185d3
- SHA512 1afe8dcdff00d8d25634d03fbb84397c3a364cf22a7e32cb8fe28c4d00485ef903faa3a0ef0e383e791e794b341bdd0a110ee29ae20dcd1819323b48ec68d1f6
- SSDEEP 6144:Zz3keKoicxWy9NqJB0/Nv6GOQR1yjdw5DlqOzkJ/LB:1a8Nv6G1bSpl
- TLSH T18644823677F91114F9F30778A636B009AE3BBCEA7E15E11C5015024E16B6B40CEA9B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
265294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/it-IT/pspluginwkr.dll.mui
- SHA256 f140202831c2f5c264b192fbaf3f718212ef49685096ba602ce124c46e49ab09
- MD5 3dc518102144007eba2eacfb3dcbcc63
- SHA1 6a08bd7cb25e1a79cbb15793a46b609a9b6cbafa
- SHA512 993d3c0026079cd45e7e1fe386e3271fb71515b2f7a63ebbc4fb2f833dcd094b7c2d242de8278a6fd4ffb27ac751bf647a4cfec87c2d1c0b859b304e064a99f6
- SSDEEP 96:ie6q09ccJq0TlwJ4Jq09vk4Oh/1h3R71P56eOSmOLjvRdS/zakgkWmG/eyxy:iep0S70Kf0gTtmqm+RdC2k5WmG/eyxy
- TLSH T17BC19A5263FA1609F6F76B30BD7916204E3BBD82ED79C25E4290145D2CB0A65CEB0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e513a537c7ccd53f3600769374ccd030bc7ab7fa396355afde1c13fc5a514616
- MD5 1ebf5c7c290f95aefddadf6bd85aba6a
- SHA1 914c7893391d85a997269b44e4c2a44d666254d2
- SHA512 d010d2f9db78309b03cfeb37cca1127ce4c0944efff9bc1931210419b64576dd96dace875eb3aa0cfd7bdbed1fee4f099009e533a1da2987ba4f667392370ac1
- SSDEEP 192:424BFbIJCEbvP/LfsqIn8RA3mG0UPy4ZKqfm9WlgHW:mijTdnU6zJWlgHW
- TLSH T11152301DE3FA541AF5B25A721C3DA691F632BC17ED22E63E006CD0186D70B9CC464BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52bd361ee61509b0a036934d12f0726d297795d04835607009cb6715dfd14c33
- MD5 0cc0948fbbf6f9c0178295f40f297e42
- SHA1 7429be2b8b6b039dd5375ae8ef4cdc3f31f4fc56
- SHA512 cf85804147651b7973706d31b2744c188c9e16cbbbfbbdba7946cbd935649bcb0f01673ca59cbee51caebc3cc93a2214e62abd01544db3bbfde4faac1db62ff2
- SSDEEP 384:fxlIEjlsKmqcQWe8QUi/vKGh/BBAGxDlJhKEcOVx7+Ie3cwC6WlFoW:fxlIBtk1wGhKEcOVoIe3cwC7
- TLSH T1E503202DF3FD0826F8B20772183851D59D39BC5AED22B23E942EC1289E71B4DD964772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6dd69227c7b0b2183d4b02b479ec6f56b01a19b74b025a7f6a3ed42b790ab589
- MD5 b1da035674ef347dbf2cc419b13f28c6
- SHA1 637d99ab8030ceb7817537ac967c54569b24f7b0
- SHA512 e30f8f1d0ff6fceffc27b01ec7ef919f40c12f06ce620e76422f1ca6c43c6c4fb8ca2b8549015b731c6a0dfe39271efb5ea5507f77c49ab8661945ef67acd438
- SSDEEP 384:Gc7fj7tWtDQtgUOOQCwMAb2gNcYnVhLqOf8fDQBAST+WlMDW:VjRWtZUGMAb2efoa8LQZT6
- TLSH T19843432DA3FD0429F9B20B332C79A6D4A937BC1AED22B13E402DD02D5A7174DD950B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3e1a63823375e7c3eed6b8c8060bfd9d38cfe58719406a7cd6905b70a2ea4ac3
- MD5 43aae19661aa77358f7191a16b786d8e
- SHA1 5ebfae85d643265f0046a31b708e56d917ba059f
- SHA512 215fe52330c4814628435cc627cd7c8587de8b419fcdb8ae514e300f5f031a89e65dc5df8c8cf1028ff1200becd160a673a3c6c2eeb6c2567446db68639381e1
- SSDEEP 768:WUJg/a72h+Vzh6b6hwQJSPY1O/HPUtmIKXHwlxw6cIbvU:WSiaE
- TLSH T1A023402DA3FD042AF87257325C695684B83DBC5BEC22B23E512DD018AE71B8DC450BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7cffe58ea127da905a1326ad15b2e1b8725bd79330698ae877dd3ad3cf556637
- MD5 5ce705fce0455b202edb01b7b8408164
- SHA1 63b5e3be37610c7491d2d51453a083deffddcdf6
- SHA512 60d4e26ffaa98b22b340e26d8154f719dda1921503b57e7493a51a9eb124c5ad1e81e2db105ff5ef4885a27cd3e0e6492856f90ddb34ed2cee173f2c9c0ff5ff
- SSDEEP 96:nExOJ9LwLDJMNrxJYAk1vZQ/LLceU3DGSDBN0OKBbKgcKltQEkAdsCiPMqEogRYr:nEmjVQqUnLN56jWlAHW
- TLSH T15E22523D13EC0926E9B207721C3922C5693BBC1AD532E53D543DA02DAC71B1EDA81BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38d302b41c7cb5ed5f63b1df6c4f4757d27b6d63e437206c7d559f1ff4c16fa8
- MD5 08b4089d36990c6809d393d3e9a897f6
- SHA1 09759e60b90ad6d486bb6ae047d4fb41c0478ccd
- SHA512 d6dbe9f09ff800881bafaa71a729da9a6b16c70dca0f88f2c2404b174998b0361781f37baa9fa92d510ce8e99a2c2025604897628840e800e0c34b11769ae626
- SSDEEP 192:Fd8bztYNuCmL5UEHSM3xfmALW1YW1YnkftA9we32Ozk33LwWlOtW:ICU5UcodfYvhWlOtW
- TLSH T15F72522CB3F95825F86107B318BA51C56436FC2BFD22B13E106ED024DE31A9ED5547BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7af08674cf78b3f5092d860398723dcdc6f456cc4261363e5393816902fef30b
- MD5 7417e98487c116b869c769e10be2a0e6
- SHA1 d8cbe7b394db9dbc8c7adbeac79ff542880ec10b
- SHA512 bbc398bbcd5f58682d57d7314538e00c1ac470748e20e442b71155c13f061ba936302f3e89fea32e237229fe4ee5d9ba3b43a9ee799b2a458a38c0cac1c64b26
- SSDEEP 6144:6brnMpgpZO/gI2JXvlqFldWxE8BzoW2rjjzSGzPgLxqob9vlaZL:kU/qCldWxE8BzoW2rjjzSGzPq12Z
- TLSH T14364312CE7F91829F8B207726D7965C5AC36BC1AED22F13E402DD02D5A71B8CD860776
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
304270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
292KB
Virtual Size
289KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ja-JP/pspluginwkr.dll.mui
- SHA256 bca46bf8932429054442fb1ec63647ebb676b185cd8d9d7fbf264630d6a44efb
- MD5 9d9ba72f8055e192736d205ec74c4459
- SHA1 cddd705440bbb26305ce429b213574c7d3288df5
- SHA512 d2e1720379d621e1a06bb4a09d00d86bde591ce5b7a9930f4068b023195ec76e286d7e392bfc78079395d827480d16d49946b6e6801dfe705b395e6f1a318f35
- SSDEEP 48:yuBvQzYmJBAJnSWJHZW1EwkPhph5xZB5Iozou1GrogSnq26/xq26MqOnOM59pjHJ:C/Ahd9DhphLKOIFZgZMbD1WmG/by5Ww/
- TLSH T14991114827F6054AF0F64A74BD70629813BDFC60DDA2425D2A98700A38F0157EFA5FFA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f3b51e86f60ae8327737e56b67a440e73d5d45f45510a331228aab3488d2f7b
- MD5 9b462bf360caaf360fb29a67ce973684
- SHA1 046ce25a7bbf78f40669b09e4080a2b04e813044
- SHA512 2d8c7cd2c6e401b1a162d7f022b0be632a728992bf07aea990275f1e2602b2399e7b658a974edeef313470856a38b8cfd02c9f7aeb3ef4354199a625e02863b3
- SSDEEP 192:t2GmPgxe12YHqhqXlgC3wu1A6627vWlgHW:MD1OhqXlgC3wu1h627vWlgHW
- TLSH T1853231A277F95549F1B30FB56DB5B21592B2F836EF23C40D88404E4D5CB5A8089E2BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4e7dc132bca9a386296a858c7461f725a8303fbbaebb8a2ef1f2d2ab3871288a
- MD5 1e10834927b87185f5c1945d7d2f5c8a
- SHA1 0b1751205c23fd65dd7988c33eff7181418f2ab4
- SHA512 4d5afba45e43276cbfdf4f65d8ec21b428d26e425b449b97f30c1d70511b3945e9fc6491a42d458fb4319cbabf5c745d2e10d1d8857fffa48db05fb769e1a295
- SSDEEP 384:WYsNrIveW/g9n2S7IlqDvmQ8qWI0WP8/BrhVEiCxM3OVZgNtQSZ+Yl7EWlFoW:xW+QX7IlqjMrGM3OVSQSZ+Yl71
- TLSH T1FBF220A273FF1555F5B24E761AB4F5048A72FC66EF23805CD8408D1D8DB0B828996BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5bdda21661412734ab6a1d2facddc6649af296e5b911865eea66bbb448b65e4
- MD5 5580bf633ed611a5d147a1c6ba4f4dab
- SHA1 41c879c19edf8499a329e677e6d77342301e9918
- SHA512 cd6c8883cc406b83e9d9b75856f2a01fede1f316fae912fd9fce060d12086e0e521a6691cd5354b653d5a380e239fb97865396687ef9a9c0c30196947a01ceaf
- SSDEEP 384:4uMt1EE8K4xAwurICLIUMu9rcDgAkIcQ/es4DX6Fte16MjYfC6DQalPi3WlMDW:w1EE8KIh4Mu9rcDaIdX4DGwjT6DQqit
- TLSH T1CD3331A223FA1165F9F34B7629B4B59443B7F826EB73805CD8404C5D5CB5B428E82BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 32a2ce2a1217632c2dbf85a8dd6aa97072ce4c6fd97e16e122698e641a5b4809
- MD5 b5bb559ce8c88302adcf2f4f21393f18
- SHA1 6e22d75b0d6883bda03d23d4c7f182f97aa04194
- SHA512 199efd8c029e3474ce799dff4692607a3a02428db0e236312c1dd6be26b423df5b20acf233b9ae780b676c5d214f7a0d0a810862a91fadc7dff7b68b7c2510a2
- SSDEEP 768:h2lUoxVh+JXkYdaiNI2p7PKLk22jqesnQO/5Dzw0raiCamO:h2lUoT+JX/at
- TLSH T1B613546237FA1995E5B34F342DF4B1415BAAFA3BEB67C00DA9044C1C4E78A4188867F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b996eb87a782ad1c764a1b8857e0399c6b02635bd2be836c7af0db53ede9a55
- MD5 8d83b8c66f8567ebdc12384238798358
- SHA1 dc95847a00c7fddac6df74b6fbc56a37afe61c5b
- SHA512 7e5062c202eddde64d1649356dcbcf8a486587ff94a040597f6b635e417fe306295afad7eb345ba3e69c86667f6d8279b80f903f6bb527ae17bc96a06f57ccda
- SSDEEP 96:5E80J4bdD0Mp9X6LKJerDv1lcFdLZk4GgS0zZCCgdj7DZj5Bfpk4n+32HhCjjb0F:KGB6vrcmd0AapDWlAHW
- TLSH T17112856223FE0662FAF24B7214B6B1851277F926E333816CDD40091D5DB17968E82BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9a30e9209e44909a76671461d636056b41665038bf0ff35b202cd8c73b9a640a
- MD5 58754e96e9edad1b1d49ab449ce5984a
- SHA1 b69fdaa40008840cb47ffb4e2aa760e45641d513
- SHA512 597da4b5af2b8fe2e946631e7b50886b57051a772be25d1ef9cd19648a0d2f8418edfcded0cbe16afdf7aeabf907161cf235a9fe2ca65f87fc86435ba07e6f33
- SSDEEP 192:Odabkt+gO0UxnDk7/YWTMWvrigSSEBGx1Xp3KiWlOtW:p0ki/YWTMWvrigSSLrrWlOtW
- TLSH T1A66242A173FB4689F6B68A752EF1F645C263F837DB13841C69404C09CC74A828996BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4638088c2db752ce0a571815b35f87432ea41c564b2e7aca8d829f8f57dad43c
- MD5 4a5fdb7c106b83bc10d2e14d31c02899
- SHA1 fcd8d179eb4fb130597dfbd35eaa64357caaffe3
- SHA512 242fd5447b6d6a3e97b3de24ceae8599bc23d2d42630ac91a4c428f5811afe436bb85a128531134a23adbee4ce005f019062b05c39aba171388ab8a774256695
- SSDEEP 6144:mkTRjDnkA97CIKOqMVY1V6RO9+Yys1EU05b4W1NtWShdYqaouRBaw23LfYL:OINVyouRBaw23LfY
- TLSH T1D75440E273FB0658F9F30B7529B5F5148BA2BC66AB63C01CD8008C5D8D75A818D927B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
277390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
264KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ko-KR/pspluginwkr.dll.mui
- SHA256 93d71c6ca01265827a01c6945380d1eac3be7803a51807b204dd32e346f0d7c1
- MD5 f7a4bebfca13f3ded32fa4a7e21662b4
- SHA1 c1c3c01d1577c9b8eca6d4561cf3104f32227f12
- SHA512 f6d410831172a0a6f30e865daf9f1e28c937c7c0d60419a711b995627351cb12004394b2caab06e822f86e1d3d620c0ba00bdae350f366d04f7a348037bc748b
- SSDEEP 96:P/8OdV6LTV8hvhBwdFtrsOIpUJHrSGWmG/by5Wwr:PBdEH6uFtrDzWmG/by5WI
- TLSH T14C919B1657BAC119F0B51B30FEB003A1973B7C83ED66115E9A50702D28F0256EE70BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 19d109272a83018373b7fb8d39c57228635667f216de4f32de041d1b04aceb96
- MD5 09be2212547f4d28846ccaca9f823566
- SHA1 10fecc43b2e26a3ad9f029ae0d6e9472081f9891
- SHA512 a939861377f4c77392dbffe4122f4843a639b2d82156c7622f9b0ebbee1f1c7525592bdbb81fdbffbfa368b399c4ce89702cdb7c5490752008249d2d0f096d32
- SSDEEP 192:Z42EUgqE01xcrbW15VDZh8Ux5WlL+skWl/:YEYW15VdeS5WlSTWl/
- TLSH T17832770667FC0604FAB31BF079339617A5BAF9769D21C36E8065065E28E4E01CDA7B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1cd3c3762141a48041cf0020afdbb4c46e2fedcf80e9d06036b5acbbe45cedcf
- MD5 dae7c1e6d8370974fc035e2e0fc3d7d3
- SHA1 3c612e4bd0077260c84a493bac66a7a0979e035e
- SHA512 52a32728dc077cb2fd18fab24a86e07ed83fe0792d31928c037ee9c712ccaac4f9eb8dadd78375d2df655df1cdef10a46cde7f7d90a97a312e48bca0d8308939
- SSDEEP 384:jZzKmY4TZ39To6xRwXaQvAu2dfbGmy19f9AtHOVswfSvWvOJ1dWl2:EF4TZ3J2qHOV1C1J
- TLSH T105F2732123EC1728F2B70B722E326647AE7BBD795D10C16D8421471E5AF5E44CA67B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0e8d50d4b6c42afa17a7fea0085fd6d3944b62229e86e62e59d90263a44d5d0e
- MD5 861f0065b460639be07a8596ae224e53
- SHA1 3c3bcac38ce475e5ce3ac6835229cbc8d2f22cfe
- SHA512 47ad31ebc58d32c38cda6411cbc86034bdb3dc1a9011fa66ed33c46aa755df0f6837378d05c79329b2a9f70037da9609140be6e9d423d5d61d7a2d3c2132f780
- SSDEEP 768:Ah8R5g2kCbO16McgGW5OgxXJJ9+SOTJtt2W:rbg2k/B8gCpDV
- TLSH T16F33942233ED0264FAB30B763C32FA550A7BBD2A6D25C59EC015060E5AF5B41CE52B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac3e7bd72a91ad4f7ad39f3b1a10fbbda2b06fd6db693524566fc78749d34896
- MD5 44ff580bf11dffac5de65433c996585d
- SHA1 62e26897a7d867bd364da3376a74498b39ef8d50
- SHA512 46ea89ae1bb447297fa0c6b895e9e5ad9aa4c528ad59573f79836847532bc8fac5a0be6962b27980672285c1bb5b89f83c77c9b510755e4c37b7e55ee132ac6e
- SSDEEP 768:RFAs8EbQleesBvP0xUT1pr/wDgoNGxOrU2c5Wq57mYteKWUQruHkyU:RFA9veesBEKT8uHkl
- TLSH T1E813A3353BF90160F9A30B313D33A4026E7FBE765910D19EA109460E1AE9FC1CA99777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d3390977ad1b1567a77e7689e496375a6effbd88e7c7a23aebaedc17caa0d68
- MD5 33ebb9f54d61f2570733d81419c2155c
- SHA1 aa42206fbd8e1a46517bf6f2dcb9832bb2ad5c84
- SHA512 15f08e9950ad180a2d38c0e2a5269c0c876ffca73d8e3f345937644c9e15b4f0b21b4902ab93f667844477403c58b6ea2956dc39b70783d5cefa911697f15bee
- SSDEEP 96:vmKGDRDYMvWFdSlwIlty/wSK/wogbUHLil3LKPjkRx3N3lLuDbXTpQuiWl7764:+SdSlhlw1BoGKNiL3lsMWlP
- TLSH T1AA12772217FC0735F9B20B7278326743653BBE189935C59EC815010D6AB6B55CEA2FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd5a8eb588a9220ae3f5c7887023aa2dc250b80428b39d40e2035384a41714fd
- MD5 cbf8af99fef6019514e00ca1026e396c
- SHA1 4e5eda6b7bec802caae15327a41a58a7860f93a7
- SHA512 fa3845fff84e02e44fa7ccc6cf7b0e7f5d80c3041c190c0f881e5ddfe1807383346c8649fb26b91f2210917dcd17eb1610a75a8b678c7c3ea1bbfc971b9d0648
- SSDEEP 192:asedKbxtfXeVBJ5GM0DraKjzK0kBU+oRKx3P1E/XMoVzO/tb6wWo5jv5Wl9:asK7WM0e0kB1oRwPodVzybjdjRWl9
- TLSH T115B2962133FC0726F5A32B729D33964AB96B7D752D15C15D4432820E68E8B88DED2B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8be40fa77d0e44bf95191fc59746a29a4eeab628c508b42da3d4f19153f78806
- MD5 1e7bad6b6dc642ba4e64a0451359e9e5
- SHA1 ea7e6194014c376326a3cbbeb2ecfb6bb724624a
- SHA512 73aa77ec1454b3ac81378572031b51069a5c226c8a16d586762764e4e9f6798ab4c1ea70eb4872e9b73dcf2e878e0b54fcdcc7b0bdd862988347f432f3642093
- SSDEEP 3072:swjd13J4VPYdA5hgMChr8WNa1xLPXy6YmCVEV1q5drwEq2Z8MUxrM7bLi+:s0d13J4VgQua1n1q7RGYL
- TLSH T1D84483263BFD0365F9F307B16E36A9069DBA7D296D10C05E9019060F56F5E80CEA2B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
264206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
252KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/pt-BR/pspluginwkr.dll.mui
- SHA256 f3a3553d520d96b7fcfcc6a0ada7c0578bb2501d781b888dad8c85264a639959
- MD5 767918363f99b8709f83ee4b4dbd51c9
- SHA1 473fb06bd4d7000a0617e0a1ea87c8589d3a567e
- SHA512 67a9e5dd6b594b3bcb63679439b29a675a9ce0b05b3125315e3da51ab3b8d7c505b1a2c09aec5e8989d5ed89439c665d1bcdb25761ff6677e7879d494ee236d4
- SSDEEP 96:ersvr4k2DSp3bC8CC0hvl/hVFj7FjKGhNkFjIZOM1ajtaPmPPtSvCWmG/EyI4xK:eIzL2XLdmupyaPmPPg6WmG/Ey5K
- TLSH T1D1C18D422BFA1206F5F72F35AD7916604A3F7C82EC79D25E5250116A2DF0B42CEA4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c9ce689e67b8cbbbad82191ff4b24a91edd53b9d495e10ef57c3c2001bd0b10e
- MD5 7ceb06d2e03121d597d1b2939e1aa0fc
- SHA1 63f1b0c5e71b80ce1bde394e2193d20c468bff23
- SHA512 e4f1cdf590b9e265883a296d14d9322c83034dee38f60ad86a54b62dd4e299d9252a0e1bdbe8977270018e931155aca4b27d125c09ceff27726e8935d80634a6
- SSDEEP 192:c25VpxExSUvrdIsKsoKsX2myxKCuW1lNcUS/uG/9ze0Yn/iGRmUDJ8AtGTAAg+ZZ:XqzSHPKsm54CuW1lc/Bze020UD1t3W3
- TLSH T1D0B2F32153F9148DF266B677D8287A097CFBB4BD3F39831E1460292E34F2424867D76A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8e11d9197db20a3c15475ce3c82b143301c7565710688464ea97bbabf9bfa30
- MD5 d2c5a192ac4270764f8b63ca28c5bb79
- SHA1 31765eb837448fc5097494d8f3d9bd3bba6634c6
- SHA512 2ab87d9d6fff1ac21b3625ae91b8e7ff5cf84060c585c90421cf4f81c379293c163e4205ad79f749935a61ba5c09c655a08f701e28a93354850cf0c30559aa00
- SSDEEP 384:NMS1a7mkxAbMR9XyoBVj85gG5pNRqQ7GRnvvqOQVlqg+yOJg1dB5ut5Tx5M9u7Pg:+hD9l6QE+iOV1UXLU53VBe
- TLSH T16613CD6153FD249DE2617537D824BA092CBBB8FE3F66932D04142D3E38F2520867A367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 370203dd0c23360d0753a45bfc3564c350983aa1a992b6199827a2c2cd35841e
- MD5 10f011129c0f610445281d12b3f0d813
- SHA1 db8b49dd075cf5c91170b6d3bcb670a40edefa0e
- SHA512 551d3a9dc60a03f4c75defa5bf5ee77fba6ab3bd6edfbef1c557fd62cd1f2cbf1155206c44d393d5d98dc62fafaed922a59730c58692b9aaf3f06fabb18945cc
- SSDEEP 384:bh548i9uEHuc1ovnQrltoFsMeadXc0p66MoQbXigFCLn6Zwt1cZNqsRuOLu5uXud:9vwzomKd9MjHG35ypSTKFZHA9Z3/9T5
- TLSH T1ED53E02163ED60ADF272763BE824BD057CBBB4FD3F79921D0414192E39F21108A69767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 439226dc2dc11148eb75e4189f2ae050496653792249c1dcbbe09da25d8ed75b
- MD5 051f4174303ab894570481bbf1b2e81b
- SHA1 f06758daaaab9e41eb30dcb90a9f97df56b8194b
- SHA512 0dd8aa20c75703eae27b90f9e0cc903a6cd73df4df7e5f2a68b980bcb09f17cc523f76ce5d0c9efb38b53330b4fcb9334ba30f9464ae7cfcb0e0cffab5602d37
- SSDEEP 768:680QGdO0r/zieXxqEsfCgaCpUKBge0Qk2TGLUy9l6JDeTJLQCLccFeYkkh:7eO0r/zDqEs4ZVh
- TLSH T1D643136157FD54DEE261B63ADC14A9053CFBB4FE3FAB931E1514193E29F2020C22936A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 00f30db97fc76bf1245348d7faad92efd5a1879bbf20b1496d61e0d0cfc28e47
- MD5 3f11a2bc1fcae799ce854cc176cdcbf4
- SHA1 556ae39cbb4c112daf21183c081ddcc5297f94a4
- SHA512 14b973bc8bea37e6b6fc7e4fb959592572403900b370ac220340b1cdc9cdb591cf2aaba0f682b10580b49bc488994912bc993f54f5765d3446ab840c35082b58
- SSDEEP 192:GDn3zgbSriXtDYRezgBA7tjDRX+t1krGJNYXW/f/Wl9N:wn3Ub+iXt8RqgBA7tjt4NWlX
- TLSH T1D532332113FC20AAE261B23BD8287E093D7FB8BDBF79931D5450192E39F22108766756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c40bb83f9717ecb4b92a855685d0e09da77bc5adf4868099f171e5d18d76d49e
- MD5 b36780651a90e19d155c20ca773bff5c
- SHA1 ebe479eeed77094751b57acaaf4feb432e92ec62
- SHA512 7fb7f00f2a3a3870f9773911ed5a97a0d604e1b11a7fb5ed3dc6528ad36b9aaef0aab8bef1b0ff99ad01493c98e75f1f5a1d49c3a75af3432630f9d356c45cef
- SSDEEP 384:vpZzGwJogIVgNg54aukJogI3fPVqGciqudwx+f20GPgxYhHnOgUJr73oFuFtR3wD:xVGPzgo85Gu/RfY3
- TLSH T15D92CC5153EE209DE261B13AD824BE0D7DBFA4BE3F7AA35D14542C6F34F20208679726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 92383dd12794a1ad31b42984eefbeeff08adac14e149b747f73cf524078ab95d
- MD5 8811518ffe3c1b270a56d85c106db9a3
- SHA1 1d11a03ea3195daf1817d898dc2aca1526ea12fa
- SHA512 7ad49dbd2432654a6b76dec0d54681736a1dffbf439d83a0e7ff83f4bb92d1bebfe63ddce9d716a1606594d7fdc0a00804f6b70e38aeafa1559574b566eeb4fc
- SSDEEP 6144:usV2II5MNA7TsAvmeLz/FGUXdT/V5/ZOx+tfygj7RnV4XpbMdYZVgNhQGjqQrJ+i:5V2II5MNAHz/FGUXdT/V5/ZOxSfHjtnB
- TLSH T18774E06157ED509DF162B637D928BD097CBB78FE3F66D21E00142D6F24F24208A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
354030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
340KB
Virtual Size
337KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/ru-RU/pspluginwkr.dll.mui
- SHA256 e7e776440d8344c7b2148ef84eb72823c7fd19f34e05f3aaf416fae6dcfdd7a2
- MD5 7cb490cedf62d10b11a56e17f4a66017
- SHA1 7dcdff07edd1c9c5166e2482121e8215fb7ba371
- SHA512 bc5add39cc4d406dc9a9af284ff36dc626d6e5293ea59d36973812a1d3e18d23ba5f108ff754f46f37dd912530b1878570b4b6d0f4b798ccfedde7c7afe1ebb4
- SSDEEP 96:9qCTy/aoCTyXvSCTyprC99AKhY60hsdfkfmOJftOd51q1bkps6lOi9WmG/j3BzyT:9dCmoFDdcZm5abKlO2WmG/L1yFR
- TLSH T1E1C1890FAB799519F065D6306FB205E60169BB01AB1456CF9B4F3D2930B8136B730AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b97ae0c239ad103b6a20f6e91b2c8f2ce2ea8baa511e165432b9bf5f45082e9c
- MD5 549f90141bffd7c2bf3208a0050fef00
- SHA1 d1aa4d551c8e941d38edb1542695a1f6179f9c4a
- SHA512 8ec628fcd8b04300359498f4c473c6f7009a2ecc4f787bdb5146f4cc6f321953fa4db16ce8d1f4d182e5cb7b23ac2bc2e92b98e05cb7d5af5b0436f44f292cc7
- SSDEEP 192:XAjG2K9Txv1fnry21IeVQmlfUa7EcTD3anjQWlxLW:XAjgxxnDtVQmiXy3e0WlxLW
- TLSH T14A22630263F9294EF0B32FB46B7A8A6DF43AFD76EB21D14D51A0115C1C31AA045B6B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2996f0c3354db11675315f40ee71a745320d067ff1747543e39664f1fb00e448
- MD5 9a8c7f83d382564be41eaef4dcdc6858
- SHA1 5204611038bc98133d8213dfffc2f4d727e5c746
- SHA512 8f54b9d8c9714b76dcbe703a272459b03db39b2d4ea241eab251d647730c578b663b838cae25c9112b800fe56813dfaba4c2365373a2a239a63c207067711cc0
- SSDEEP 384:449vjE+l4ne3JytPTQD7b5AnlFPUEcCKnJCOVNeg/p40au5WlFoW:4+nZyl+kOVb/1W
- TLSH T152E2930223FC1CDBF4B30EB566394519B83AFE776E74C20D5961465D09B0A94CAA1B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 14e0607cc334fd1ebb9e010108d57298ccc894f169a61bff08cab2bb64bee032
- MD5 904e4cac66f4ca49fe57d4fc5dceebb5
- SHA1 7b5baea9a61df59cab29393f94c6530e960f42bc
- SHA512 c253bd79cd0beb5aef3eb052e8ba1a21fec0d8a48e1adc0334b4759daa7be30a3c338bb16a7730db316823c7aee5480c8e34b439fe80a214a10be99bcc6b7cb4
- SSDEEP 384:vA3MQldjIt4/+vDnYbQMc+WiYx1RzkB26vOsOY/4e5aWoxUB2TH0xUus/WlMDW:AMQldjItsaTM9WY2/fM/oxCuHzusF
- TLSH T1FD23B62223FD09EAF5B30F793A39A5A8653BFE26A735D05D4951061C1E70A01CBA1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1984e0262dbb60145ab5a074f830f003de061d544aea265b1476646c3eec6a3a
- MD5 2976cfc55e6c888b957aa9985a44737c
- SHA1 01682bc868a5ab55a6f8c3dc91f6ba7a497f8cd4
- SHA512 0294b1536b4791ec59d3c15be53e4f7e2e6af166e3b4a2cba59a935dd4239ffa8910ab8e05ea923d4d311f17b27ca83a0d74197296b48237c4b6b3d4264e845f
- SSDEEP 768:nslqYkIU6j3X1YIhTIQO0J13gtKcSNuKYtWEZsusttr8/AdpxpnDtQhvM4eOq1cT:nsnH1YKIQdDE4vzDFKT
- TLSH T16603082123FC4899F2B30F7A2F365059A93FFFA72139E15D69404A1C5E35A04CA85B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 32447770f274bfd4542a168622441b8b94a3f21f85f697ada89fb26b4fa06cab
- MD5 69e6ef6a2c8893750e794a1b80fdf4f5
- SHA1 cff90594fee8597353a04c28f1650b97bbbe8ab1
- SHA512 3d6b7096630fd1aedf3e2c8a4e5b024dc8e1f6cd62dedb04e860f6a82b9101f6779fc1628d6b65ae612ffabf3e6ee5d00cf4a9204d9c6a52043be3012c813c89
- SSDEEP 96:KNb8GRDyMxniyseqm1dhSaWIOrZt0w4dSyBl+lb0xpSTpvmWlAHW:aniRKdEIOLuBwZwJWlAHW
- TLSH T1A812942213FC0A7AF9F20B36157B62855637FE15D631D62E9A50011C2EB2715CFA1BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2ad02f316600b3ccc06c62c84f2492f9675735abf0d49825c1f882ad7b76efac
- MD5 d4998b98a78d675582e7e960912fddee
- SHA1 8f6e34e1a1ffc38571fbe73c50b83c2f0ea8de83
- SHA512 1d1ee1b469a2caf8c3ecdeeb1acbcc8e64595e8141b91df7caba885e58269342e3d9c569ea528a868f0bd715cfdeb70dc982db9a0d3d580ddbb7c4375a5f4196
- SSDEEP 192:Sldkb8tqWx5G7SDkhmI9C9gjqXSMg8QNDfxonPKw12tpWlOtW:Sx3ISXSMgPfYPR2HWlOtW
- TLSH T18242704673FD2D9AF5B60BF46B7B815EF436BD772A26D21C8A60414D4C309428AA073F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f3ed26652179484aa23f563a23015c53522f9a5f1c4e2c9d46ec7f67bf4fb1d9
- MD5 975fbe91e3612d146fbe9d5b8487a2c3
- SHA1 19794d5d71a2a46b0f94faeaba4f7c17464bd7cd
- SHA512 63d277686986393b13d7d2241fe8aab8965feeb51278907e0058ebff8f010d590f31fc0972f0c8d62f081ad6584412ca87a171db57102fd603d11013475cd193
- SSDEEP 3072:srkxwJFuLSWOSDGHKvIape9ev2EHBV0aNad2aqdjMcCwLU:srkx0FuLSxSDCaBFNV0JqqcPL
- TLSH T11B34A51277FD199AF1F30B786B3A8468FC3BBE765B24D05D15510A0E0A71A44CEA1B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
238014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
228KB
Virtual Size
224KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-CN/pspluginwkr.dll.mui
- SHA256 f718e3c6d8672bbd410149cf32b30aa0a221c7536daeb77b781ff968006f07d1
- MD5 a51e53570201d69e5b1832ce2964b922
- SHA1 672252bc3220bb709a074765ce544612ca6ac6b6
- SHA512 6c0fe3f72defac396675d5c9e47cd32be80dbac7a5ed53408d064578691a40bc2aeb82e8af0d694ba4c03494e96a833fda72d9b87a3b8ea83b388a1466a02a5e
- TLSH T1BB815E4917B71115F1B50E34EDB542A12BBD7C53FE56522EDA54241928F010BAFB0FB3
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2236c8a4f63c0822408043a32f31cb03816bb2936e1022330514d1a67abcf6e8
- MD5 784ff52e0fbaabc782b56fdade813d77
- SHA1 b25257043562c2c6985042cc6cbf92b5cce1e87d
- SHA512 62ca276c2813f7f61aeb2333c406209cb8a638930da6b0a0baa984b7b84490ad1e59504db00f167e526b62a8c547cc8a684a98fa83631f23e5e2eed1c04e601c
- SSDEEP 192:r2BNOSYuG3PhP4baGV5PY99bQDpPTD+mB1YWlgHW:hS0PeBEmBTNB1YWlgHW
- TLSH T1C022951223FA098FF0F39FB42FB5465AE53BBDA2DD66C11D9160144D2C31A148AE6B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd72affe5ff01de8be23532b891f7ef94f5eb98b1f499cf3d4ef604e556d5b01
- MD5 27664d8865e6add9693fb8dfc328fe42
- SHA1 b6498d2eaa5e267591d6f76cf66a9fc58446b340
- SHA512 139a0db683d476800de1ab896478f6355facd6d9f46acd532ed0a65532aed85e117578fb9723a96b73a38990bd9bd7c4cbf2231d023dba751c1e7bb249684ab0
- SSDEEP 768:+NRZYEm1HlmKHLys2fxHwKtHLKOVFrO8:+NRZYEyFPes+xHw6rKOvrx
- TLSH T12DE2735623FD092AF1B34FB067795029CCBABDBA9D20D10F4814524E1E72B109BB5B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b975564e2b9fce41d08118f54f5f7ee1cc23f6a6e4751a118c43069912f00a62
- MD5 290b540a51f4127b2909cfa86fc637bd
- SHA1 287da120721984a427f4cbfbe878bdf145c37e40
- SHA512 db8296e89207c5ec261dfe4c2647793c1e0b9943b815d3a5c8b1ea22ee7c385ff1cf699839ac3a8af463c74d3530a1e4d49c3315e914564d6bd9ae0a60abb213
- SSDEEP 768:ZnP/RTCmc3yMH3moLFa17WmR0x7s+J4AoyeMx0:ZP/4mx1pR0H7oyHy
- TLSH T19823962623FE10A9F5F30F353F75A5A8997BBDA55A32D46E9544000E1EB2601CB92F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b9f71b02fc24435e6d7042c275bfce4156e1e8a88ecf1a21d5e2496ad32194a
- MD5 9f2a600d7cbad30265252432fe01f4e7
- SHA1 6020f0cd37a8d75a2d32e8547f85bf9608dff940
- SHA512 ec5d610b68d07ddf86dbf03aacdf3aceed8042ec960a01ce8c5fc094c8c7ee7f1f6a97067d9f8d80324549a595acf8599c192529e3517aec43552e1d092648bd
- SSDEEP 768:gRHIh0wNG/IH12NA4wSiJ86klOk+aa05HzXxK8i2e6pqt91YPI1H98P7KE:cHIAAV2NpI1HG7H
- TLSH T1B803902227FA495AF2B30FB82F316144D97FFEBB1861E46E6498090D1F35E018981777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5c2f391dbb8dcd78c00828d40f8a7f1811702cc4d22265e77ee88793d425986a
- MD5 a6e33bb2dda13af7da1faf6032746ab6
- SHA1 7df099845ab5d31d2dc84b86d27259893e0bf2c2
- SHA512 020d1ec012c7548580058531971f02fa9f3e1b8812eab5cdaa22296bcd65bbc851931ba75cac1b02b8f52b65e85db8175c7988b4c4a425b079d054058f0212b8
- SSDEEP 96:XMXvPDsMTy6vI1LM2WSKupfAVdsN+B8WWouSetv4viOlbNVR0kTp3Ob5WlAHW:4y6vKLMuKZ3sN1WpAv49ZhA9WlAHW
- TLSH T1F012842213FC0A7AF6F10B3625756389543BBE99D231D52E9C65010E2EB2B15CF91BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f847c09e9d27277ff9307b7188f46101111366e1bb4f550dd4e357e76309cf45
- MD5 7686c0b2c047e9e42d14abc1b3c80085
- SHA1 f947967ed44429d3914bc3158b3f061e30364c4e
- SHA512 5e563246e614a648b6cf4b152847c148769fb25639ef51ad6e540b4406bc54502a9605e79b2afa11e10a434b939ba2a34946fd16795bf3d76011bef4fd0e12ab
- SSDEEP 192:GBdTbetAIXFy4snUk3KnfN4nJs0fNg+nZdcVY7C08xoKe8Bh2DeCN5WyWlOtW:GwU4sFKnfeJs0fJZdexoxOvCNvWlOtW
- TLSH T14742848963FA099BF1B20BB43B76402EE476BDF76D36D11E5964008F5C32B5189A073B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e8a28cb1d01992625d9c3aeaa04e405ba2b86ab08146d8afa6f0f2acbc18d165
- MD5 85827bc39288d14abbc99f5a7710d16a
- SHA1 bd16b8b29bfae4f564d0d17dbf0d7b6baa661965
- SHA512 ee0eeb33e601193551b6c76452f1f74381651852c3648706d32cd17336212c9beb869f26333109018c5dbe290a5229d23f204cfab29ca5e2753b8148f2a99862
- SSDEEP 3072:6kLZCMVcW+4bZo6d4b/BzNLPCfD0hWgqMXIRGp5fYVFLL1LS+:6kLwMVcW+4a6d4bJhPCfiqZRv/1L
- TLSH T15934A24267FE166DF1F30FB46F7A9159CCBB7DA95E21D06F6508144E1A32B008AA1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
236878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
224KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/amd64/zh-TW/pspluginwkr.dll.mui
- SHA256 a72e334270417a851d23aa4fd28e6fdcde6ebc7372d9f17d572a59e660de8c71
- MD5 1fedd3ef84279e9a3ff931f0d93d7ae0
- SHA1 bfa886e5fa3db1239d7be0e94cd9f58b6c11d0f7
- SHA512 cf8bb119a8e4c1932b62edfd9b1620b5b7b12e6d785bd29ffbb02d9556e8ad8864fbeab221368b781bed07f29876172124c163d2a0e53f648ac00a7c862cb2d4
- TLSH T13F818D0517FA1149F1B64E70BDB545A227FE3C93BD6A121E9E94241978F0006EE74FB2
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72d5ee85120bb8affe7c6a99cd0b739080e296f8cb6c7d921edc200119b0f22b
- MD5 cafe9a0a4413e5d5862e86251a0c7576
- SHA1 c522023938c7d30424e340870e3da7ad714a6e9d
- SHA512 6887a035bbfadf8598da1e4293c77337392f5d8fe2312aaa42e23fb7333897086c3a5b5827bd7983e2c9ea82e180154dfe11816b5fdfbbe5116cd866b5dad144
- SSDEEP 192:E2AWN+7+bgcxalzMI8GFi7c34PtIeVLtC54TV5a5kJxpZ4sXWl5B:p+bRzMINo7pPtIe265a5kJxpZ4MWl5B
- TLSH T1D8326312A7F9164CF2F31F7436354573B93FF9B5BEA0C44D4498800A5A62DA08A7EB63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 797a63a3024052cd59e0206fc68ed1d882330e6282eba5fa2d4f3cdaba251d96
- MD5 7089c32b641ebb640a31529f4c912960
- SHA1 a82bd7042af8c0490be218b9e135e7cdb5ae8f61
- SHA512 30a3ed7cca92774a5a991761d09ec587bd6463af2bf9cbd3a668da2d86fbc750e4a8b195eadeb312925ecf3612ee9767de6faca332e4d06e2893131bc7ce6003
- SSDEEP 384:3VeknktoLAHpmOWx6ap/vX1QqakPoY3jFa93kQdqjVsDOV/EPB3B3sW82eGWlPu:pqoLAH3Wx6gP7a93kulOVwB3FsJ2eg
- TLSH T159F241126BFD200CF6F30BB5273558533DBFF9A6AA50D40D9498812E26B2A7089F5723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cd9eb6c88c5f963b3b150d067da7de1f463fae29ffc244ecef2b29a4135cd890
- MD5 98f78c7cd56bf68b25dd4b606291e550
- SHA1 462856bef68fc75b17cd48e1d07926d01be89a44
- SHA512 df3d61f88552137708e60dde230af92b3bb7b32a77e29f583edae7f1d5265a9120bc73d5f775774b00cebeef5ce2665606c9292562e23e02ecc1dcb4e5d32aa3
- SSDEEP 768:b7LS44s/IUJn/TMLBSdq81vO1tNgh8ldbZ744ruUwnQk9p6:Us/IKk81XsNIUwnQsQ
- TLSH T1023396127BFD106CFBF30F353934A8A1397FFA6AA661D42D4144402D1AB2B61C9A5B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 008b2542ada0d30d1dc2c78806feeea224075ae106030cfcbec46ae93fc68520
- MD5 481d1831d77bda65babee873a514cb49
- SHA1 e7c4aebd3e55c703b6a6ef7fb4e72264af48288b
- SHA512 6d34d2b8de768bd56063172a01cd57b4970fba20c0c234f271a21d858fc574cefc802f2a930df17353e68f3cbea1420ca1f0a626d0045caf4d199df53f231fea
- SSDEEP 384:CED/DExbdEySyDCgdtxH9RsI3KfnS0E7gZBLvdPJ8dXiInTWlh2:C8ad9uIH7gPL6R
- TLSH T1B11394226BFE5119F6B31B342E3188033A3EFA766654E56EB148106D1B73B60C4E9337
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 886106d5de2b8078cfbf6f40391b3eafced650e39ab8479050b518c211745239
- MD5 c741537a0542e73bc044b503ed3fc0a2
- SHA1 2a07b960e45d357c9f2cc72f59a9c305ec92203c
- SHA512 8517c74f798b9c8bc507de2dc70736f9efe98bae51e4277f2e19d0538393937815f4730eb8ee065a8afad8faf0634bd7361670aef9ea28bf3cb0045dd236beda
- SSDEEP 192:SsPr2IF2Vj+v1SSnWARWo9WpylcXWlFF:QBV41vooyM8WlFF
- TLSH T11C22C51217FD5129FAB30B312432A642393FFA29D331D56ED945012D2A73B62CE99B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b3dddd146ca685361971812b55648f4f80886a517d4dc0356e5608fc4f46569
- MD5 c5860083b59f7016a72a95816c973907
- SHA1 53aacf75ed8a6893b03ad7422c3db8990bbfb601
- SHA512 a96fd6fdca6111eb0f7f79dfbcbe3ed8e14565598cc6dac85fd19969dafc32c2ca93d84c96a42492da65b2fcb448ed856273f97248cea23376720bc114be4559
- SSDEEP 384:sB+VjcqtUkdt17dSDBqbNJ38WXFAvjlJWlwI:sEpcmU+17dAqbNJ38WVAw
- TLSH T1D76286029BF6640CFBF71BB527328813327EFAB66711D81E51A5D02D1523E61C9B8B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d88cfae84438472315c1a2469e9fb5435a0659cc501b4eee85deb7122df0aac1
- MD5 a999237d66ed6576efcf72951cc078aa
- SHA1 095dddb378b7294be154da48c882203d236f8f9f
- SHA512 ea9236984119d1cae864399208fcc0b2a2ad1728d4ab552066f4c328ef25697cdacfcc9cb11befb65524c53cf0d8bf1c8ac60aa15250731908490c8ed4573c12
- SSDEEP 6144:gs7DX1DYBDuLeUdjrZH8/H/2vNRqkyww/ZUsLr:MuFdj58Wywwqsv
- TLSH T1B0446102BBF9611CF7F30B343A3598127D7EBDAA6A50D41E5158805E1A73E60C9B9B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
273822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
260KB
Virtual Size
259KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/de-DE/pspluginwkr.dll.mui
- SHA256 d66044b5206d983868006903cfbafaaca4006f3a91484d7a2f377e861b45cfa0
- MD5 4fbe6439a14f20873f896806791c442e
- SHA1 578bd0351b1f6d36f0d313551f65f63e6bb3c6bb
- SHA512 da7b9d4d8626d715766655905849abd139124b3a8f44cefa9f306bb4aef2f7c2808892a282f4dc9525ba07b5747232bdaef60418aef2d6832f208f755a07d7f3
- SSDEEP 96:hstjvATdlEbhUhn7h+UTaiTfcO56jtgeViWVqOHq3WmG/89yc/:ZKExTfz9edhK3WmG/89yc/
- TLSH T1B5C1CD5213EA520CF5F61F30AEB953615B36BC92FD79D65D1640106C28B0A05EEB0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ab84bc0dde4b7c8e4466d9349b9aad2d75dd941ed8c7a72b32aaabe7e5bb175
- MD5 65b27c38dbd68efec636665fdbf4d1ff
- SHA1 75b655e75bddf33a2510b2136641b2930ddf260e
- SHA512 c067f7af798b3bb73830750353ae9a6ccaf3e369b84d71bc138adf92c90d497d4f7b283df5a8f204ecb5f44d5e9c966db70389285e19b4e112ca6947fb22e6d8
- SSDEEP 192:E2otYeumtobrzJzCEQqMAiWakK2P1WlgHW:jSEJzCEQqZiWK2tWlgHW
- TLSH T18122650767F9061AF5F20BF53B789252A63AF9B9BE32C75D10A4050C24B2D5085F6BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a03c757d031c0afa6e3ade5772bc510b551010ef8d7141caceb2bd0e6fac0263
- MD5 10c9c4380c4b403b95d757c4517afd5b
- SHA1 139599fe7622a1b11e9090094e3f1fac9ceec7ba
- SHA512 8c410fa6d38b27e40340fe6c0a803cca0d927264bd969654d0ae080e61f9f08268360ae843d08390a214f5bfc4cdf538595f5de3e9172d2e7cdf2e9c1d136c8b
- SSDEEP 384:9F8Tz+zhGF3rushkHBbZaJQ/Q1eYMTOK6tl9vp6f6APROV0IOttZl6Rmi5zBWlFB:9NSkH+/l9vp6f66ROVQttZYzO
- TLSH T1A3F2841663EC0235F6F20BB1367A61858E37BCB55A30D71E5078420D2AB5A64C6F7BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 20fddec8ad062f29715fe79b4f841c5d60d9cbd20658dd8f954ce1fc9cb0a39c
- MD5 b49c73024458fdb80ff14970a84f334b
- SHA1 8d470e565159a66c82150738a12c689b4a380c6c
- SHA512 5763fb282ffc62a9bb4f719296ebb78cbd709ecbb9b99e7b54a80b935a71f8bd446fdc31a5e82ab62d53d7a190cac92970e47693cbb0198e14405c5562f263d9
- SSDEEP 768:FFFbjeHT41pFYrtQauJqkMWQTLwbz9omz/fGVqLCG:N3eNrtQ9JqpXKom7mqLl
- TLSH T10A23942633FC0139F9F30B763979A2900A3BF9697730CA5E4454451D29B2A51DAE2BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e31cc6fd1456805da7270cc9862cd7630b4dd1b1381a03475948120a4aefa3af
- MD5 fa7b959a0f8357d4262c1f6c1262878c
- SHA1 357a4eb6c92b0e843904d416a48c78dc4203edda
- SHA512 cea09aa6ad6f9c2366fc8f94ec0aacd8a28eaaaa9320d574dbf5eca6f6549dc3e04b08c2f84c7dd48b54e043bfca96c73393b96827fdd2800e12588e134c3ce7
- SSDEEP 768:dVF9ukn9QhlhetVxGXf1KFYaxvboRvnnr+ok1zH8f1hFX4IedkKfLpqT:d9/9QvFhZedffy
- TLSH T15E03A4333BFD0674F9F20A352D7AA2855A3FBEB22171D25E6054011C2BB6A94C5D23B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
36734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7407d39ae762862d6c0d4a22aa6d600fedf9bf12bf2f70c84dfb81c9dc9e8e5e
- MD5 462d0b841e939094840cfa61c990410f
- SHA1 4df28d53c9ec6e1e95519f16d7d7b215c037a9cc
- SHA512 ddeb461bdfcaa274b5110999df109feea560982ccb72d854397963f477421e7bd591111a94ae2e840aeee7e4b3577e04b3aa09dd1156bd6d0154971d3e72dab9
- SSDEEP 96:iFcRKtGeDt/M3oN/F4fSHDGFg7e5GfJRDEI5+WvCRLFJWTp/1kWlAHW:iFmCzqFg7OI5+Wv6ZxWlAHW
- TLSH T1DB12551217FC4636F6F20B36257A63C2573BBE59D231C62D5854011D39B2B29CF92BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9b00226e794eb170bb6af49479d7e51d9946c2f00803b26c6d5008794a2b6b93
- MD5 cf0707e9d2a9bfa3d0b3ad60a1e8cf43
- SHA1 0e846974772ea728efed9de6fd472befedd67008
- SHA512 756889851b99a8b0e5a9f853b8ec58e93b03d128e000d9288331d666f22833dac13bac328e6558938a5e4987add80d8b2785c794568b78246a83ccd255794273
- SSDEEP 384:rU6yrhasWOCQ+mdpeCJc79uYcKSAqwNGSWlOtW:rU6yrEsrCQhpeCJc79uYc1zwNGE
- TLSH T16B52721363FC1639FAF207B16AB993914637B9742B32D31E1079404D2632E94D6E6BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2e9e74e216e6a52ab692204ef41c3009b1fc84e51735d9368622fe83a66922a
- MD5 1edd1805695d0359f26427ae951f8c49
- SHA1 d4773123e9a60d514355faecbeafc6d9972237e0
- SHA512 289b36c93a5390701f07a15307835fb4fdf07e8dc505e4b73b4ae677a4822ca6b1edf80d07fbd97949ff82772223872bd0467050199726532755be8946c03342
- SSDEEP 3072:D2P4Au292wyXHxU2lqHOIKPI4lGuo/Do+nxq5OqXjcZ6pSV2ILOD:Diu292wyXxnIKPGuoPqTc82LO
- TLSH T14C44931677F80279F5F30B757A7E90948E3BBC642A20D15E2058414E2A71E60CAF7BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
248110
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
236KB
Virtual Size
234KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/en-US/pspluginwkr.dll.mui
- SHA256 751e0d0d27bd88f64f086db693a0fc51542c933db66697cdc126a6be965fd803
- MD5 012bf55f300e3fec25f5034f35021fab
- SHA1 85d34c7e682c9b2e87075fbea5a2fed94aa0ba91
- SHA512 2e0481cbcc4b902118c9054fe8252ba10abea2ada0312bbd0bd39323267a4de2129616b927fb6e33af21e093e9459c6508dc132661b80ad35eb366bc3743aae2
- SSDEEP 96:pvvR2RhgpvQeD22DpnARDOXphonhnzArOvdozAWGChzA+eGOWbjT2Q9EWmG/by5a:f2RCz2CpARSAxszsws+PTr2WmG/by5W1
- TLSH T19EC19A5263F95618F6F63F30ADB152205A3BBC82FDB9D25D2280181D2CB0A41DEB0B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d7887d699e78f25a9df31f0d650c56dd7eabd63e851e43b13f67bdcb9e5cc025
- MD5 45b885022ca7573950a0f828b15d412c
- SHA1 28cbc8a31399d4bcc7564a26a82916923d23f549
- SHA512 5d6663ab3613b02f0282751d4413ae52699ba6b83e0f2337cea430d07620f3fbdbe789d9c5dfc91fa1f3cf9e8691aadc6563f3ffe6e089cf75a84c0c3f70ee3d
- SSDEEP 192:TJ2yCASrvarbbtn6QPB7rKElOPJW9x3XEHEpb1UW0pZWlu:wTAZZaElXx+pZWlu
- TLSH T17A324225ABFC0A05F4F21BB4A673C217A17AFCB66A15C25E8170065D14B4E14CEBAF73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2cc008d69723da5b3f19df15f46f0752f4a3fc67f14d11d5effef76bbf87475a
- MD5 279131867e2ba6a90a70e87831bfc950
- SHA1 760c8ed12f507db439575d73c77dcc0284dba14a
- SHA512 0e1ed4fc3d69c9dba3d1fd65ad131a890101552d1555f1e467a28e2ca997c130565a4e0c8a481d72baa25b6102515c886f189e213966ec6fd06abdded98306c0
- SSDEEP 384:fyNzwXU8XavqkyEyy41OMQkMcrJj6g49Tqf9VOVm+Lj+WXFxaUjFZyZWln:2cYSk/4UPefzOV9jBVjLyI
- TLSH T189F2522167FC2A11F5F30A756536C25BEE76BC616818D14EC024836E1AF4B48CAB6B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2134b5c3e70d40de375d9918fd81ef4bc05d3c429aba9cf1716a3983cfc0e823
- MD5 3fb3ea616e8eafb58a8a0f0203ed1137
- SHA1 8d9810352616d862258bc9dee381a07b8735ef71
- SHA512 7e7805a8c17f06d0ca9c092cb869d073f5adc149b1ed1573ee7b73691151feea2968323d655a496856870a4cc4ec49b591ef9deefcb4fd4f67cc111579d3262d
- SSDEEP 768:jL8Dj69ReU4MMx2iirl2TAQq2UKn66VPcAs3nB:em9b2TAj2R7ExXB
- TLSH T11333922673FC0621F9F307393932E6929A7BBC667524C55F9060021D1AB5B09CEA2F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c666fab5234735544993306d618c1dcaf9ffa4137a824ffb0b3346f3abea209a
- MD5 8e33c3edca1b996413dbd74b5878a317
- SHA1 a98a63ae3915a7e81c552f74ea103cad35ab6ab5
- SHA512 c6bde6570c79f2d0e0d31e91ebad88e6da1fa73244970102f5151e5761a7a37958f29a41a7ed31bea8942eabdfd6becd30ff12de6350c36d8799af0ec15a3d6d
- SSDEEP 768:vVNrrW1AafOSahysAp6R+AoLDC+5ZBovseIcvPrHrmUmZmFm8mGmsmjBa9vEq:N2hfEhysQ6Qp/wknp3rq
- TLSH T13613A43527FC0611F9F31B396872E103AA7EFD566514D65EA158030D0BB8B8CC996BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 725ca21a7b590b19108a10b77255d2be753ddb5b2807dbf7b0ad77cc8eb37a3c
- MD5 21eb8d4b4b4126a5ad4a820523ce1f12
- SHA1 099b7bbaed7ef824a315696b4300dd6770fd71cc
- SHA512 aecc66ed20c833c365b3811771a527775fa3e5c8789f1b6bb98ef295224efb03d767e4c246cacfe76b61ff5785694ab82393e7ef61c57a6fd0f40c4a1e6ceb0f
- SSDEEP 96:xSUpz6JRD6MMgdmh+N/KyASYfunAKtnHnmG3TqGiwIc6hRe9TpeUmZWl+:oOwdrcUYfuAuA3lZWl+
- TLSH T13312552223FC1A31FDF20B36507296436577B9289138C56F9825021D2976F5DCEB1FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 130fcdd04d8c6124c2b43bc22227b620d474a45a3bad9d63287133145b60e6ba
- MD5 8e4466d8cbad799dd3b18d9491867dd2
- SHA1 f3b0ca41ea63e7fc24fd219b540006b4f36f0cbb
- SHA512 d4355b456764ce35dd111919eeeefa861abf0a991cf393e7361f01be2ebdcd335e8010172a74899beca4472f63e7ba4e46a58f53a5eb2aa1e4a0e682ed784dd1
- SSDEEP 192:jdjbBtgr347ozSgod5CYJAGblEi68JShbioizBg3Oeq2FM8R8iAs6qOEgZWlg:Ovz8aLG5KuS0oiW3jR+8dxsZWlg
- TLSH T145B2662163FD0E61F8E30775A532C14BF6BAFD652908C18E9065816D1878B4CDAE1FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19870
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 61bbb5a0bd349e5e8a45771ed2b4ea7b91f72b602ba13ff8443d194a73969db1
- MD5 ef46f83947f5d8906e6e03acc489b747
- SHA1 f4302d0a53a9043355b78e29420b02c8c0e301a2
- SHA512 c060a4ded2fcbd119ec54e166cc075b1583b50726a4c06fccfbe8f4dcc5c9a68a9f2df3f41559ecca67af755e60b2f8cbeb297c6965526d11829eb9127ad124e
- SSDEEP 3072:MBzh9tFud8R1XOD8PpDIEyYOYlqYcy3RYq5yNNO/d7LLGe:M9h9tkd8Rk8IEWq5yNNyL
- TLSH T100448222A7FC1B15F8F307797932D617AABABC653914C09F9014425E16B4F48CEA6B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
267806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
256KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/es-ES/pspluginwkr.dll.mui
- SHA256 45db4d2decabdda3f765241f539d0d339b1167d672eaf86e269ee03917451461
- MD5 e2a12ea5c40d520b8ef3441f2e4fc05c
- SHA1 2f84a463653e139bde64d396335e95046d50175a
- SHA512 b0aaaadb1cb8f0cfed9d97dea2aac15dee395cfebeba5028b824d215db1366ea59c180e1bc892b05306f117eb27a5d265c97595baa248859b767673a1ec52ece
- SSDEEP 96:8tuTxcEfcfhPSh/ftQfLauyfmGOrjTv32hvn9lwxn5mWmG/hyxK:8YTuzz32J9ql5mWmG/hyxK
- TLSH T188D19C4527FA1206F1B77F34AEB906A44E3E7C92ED39911E9650115E1CF0E4A8EA0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3c37810b289943b69160c0c897135bd327b27c0d6a62696298b9b70665f06697
- MD5 5973eb8fe2930e8c7915b645c1af66cd
- SHA1 974fe0ff91c8b43a1ca187a6a2b2fb7ebd840c7a
- SHA512 0676840ff3ce9de82dc4605ac8c8b96b27df5f2e044c62cf5643ac890059993d0e5fd58dbeefbe63f87e67a28635dec041d6231c1e910172a7693d023731e43c
- SSDEEP 192:N2spu9mbOiLzZB8T3tAt1RdrdctrBN8alSOjZDsLjLrgWlUKL:YTCYDtW1RdJctrBPlZsLjLMWlUK
- TLSH T1D832A607E3F80609F7F30BF6FA3193139979F615B916D21C48A4028D18A5965C6D97F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 457ebbdc76de8b342be57d764825797b344537073ed7cd0115ebf95f0049c1d7
- MD5 3f255cd2855ec35c0c76e7161051b58a
- SHA1 402021d5211e6fe1bd4f957b61b3f6b6cf76098c
- SHA512 82b9333aedcc22590dd664a9eed3d049dda27553a969ba22fdf2682450b6e6b6a11166cf6e325fcd04c40f6c8245520b1400407546653f2fb289fceb3a1ffc76
- SSDEEP 384:Wso0dji14i/PkmcPdQSnPDRqVOkcCMapnFaOV/ECgzqR7lPeSWlhR:ZUpXkmIucCMwnFaOV5sqR7l23
- TLSH T1CCF2A50213FC1725F5E30BBD663251478876FCD5F820C54D88A8469D16F2AD8D6A9BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 55e820cea35fc8a1c9cca589b6a9611b8a1761f3f8c008d6a4dfb7ec92123938
- MD5 205b8e500ccaf001eb039fd10d1077f4
- SHA1 9c97867748d42b3df56ee14ce03a612f8faa760a
- SHA512 1869737c19b0bf68314bcb935f5e49a7ef504f89b023eb55e1c5de8be4f62957c8671a938a39aecaacaacb99d04a4f313ac45152ff8a46b92c0b5aea04a9984f
- SSDEEP 768:15YH2aMfbM7HUdvkoSPkjMOUzBA/HTW12jhDPzQcbZsnZr+JhAl:HfgyvkoSPkYzBAQ2BQBq/Y
- TLSH T18933E81623FC0225F5F30B7EB932B692447BFD98B225D64CC884065C16B2669CB85FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 64ee0e018bf30a3e5e14ddab30a1866710070a1029c52194306b5c29e99ef60a
- MD5 a6113cd45a7484c372adcfc927921910
- SHA1 ab4f8cba0b5b3ff4ecaf6662fa604ce459394c21
- SHA512 0928336d48fbd0b6d394e8231e132547a4d92340a164e1fdcd99843cb79abce1d892e3ad113ad0a319c1ea25e21f8f165ed670bf83ed36d57af4b2ede4d6d13e
- SSDEEP 768:DnK4iCqOvsk9AvqYwH59BvtUc8LHt+y+gDk4dkgw0+SWYjOMm80AFSb/tmwcl:DnK4iCqksqESbAwU
- TLSH T1F413C32263FC1112F5E31A7E7D32A643C939FF99A051F61DA984064D0BA1EACC1897F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4c88b970d8791400a59c145fb9f50d9c202ee35fdade89bada6a60a2e1d9133
- MD5 75aa7a42b2e72b9514c319131e85b0ec
- SHA1 a0ac99644977fcf605be4f6058674bc9379e4379
- SHA512 88f04462c69087d5a6fa655eb704b5618196e6f42bcbbf5a5df480a9c79ae98f51fbf7c6f0961ec72feb38a8a37d81879ae193f4f2147f865e765e55ec691ca4
- SSDEEP 96:zOBXj9ZH2DBMD5NfrimChp6CSd+vBJkhwbdlUo4qs9STpZ+Wl0kV:KBzumC76vdqTqqsPWl0k
- TLSH T14012831663FC1621F9F2173A54322383953BB918E135C62DCD99011D3AB3A65CB96FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56256bc42ef102dc94f9abcd794b747d2c4df92b9b3fd57270ded65cd8793c43
- MD5 5b76015a43e3b18408c1e95f7cee73cd
- SHA1 ad8e08068e983d732e0adfcc7278ce3e3c259bd3
- SHA512 45013ca657cda0ec8f08a6278c05d60ff9e1561f3acb7b431cd071ebf77d58aef5d2b7003c65f490f0c8f9ea62f2dce049d9e1fe74454914296e564559ef9fb1
- SSDEEP 192:MdRb2tURR4xYf3ykMLXzPm+QuuAO6SqLFHTQb0r2lBnz/motlEvT8oWlSc:HxKMO/dAO6Sqpkb0it/oWlSc
- TLSH T12E62B94393FC0641F7E207BA76335386C075FA69F615C24DCCE6418A0662AA4C79E7F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8010d07864b73d244a4bb3d4954b3059593c7bae99e8c6110a76c5a6d783e925
- MD5 a361703f91c6f30da5fd6ed64802000d
- SHA1 a11f4188fe21435c7077509bd15781fa3fe76fcc
- SHA512 73c8f591ea7531ff4b65935d5a4d90620b33daba7178393aecd4dc29a196e149713d0eec6da64386dfcec02e0ffc9e75f9dc11da22bca481d36940b7938977d9
- SSDEEP 6144:QRCPC1uMNy7rUkkE6rT5i6YJx417w9wBDq3DkJQSL5DPQL:yCPCfkkE6rT5VYJxl9wBMDkJQSLZo
- TLSH T10C540A4277FC1309F5F307BEB632A113C87ABC987515D55C8888458D06B5EA8CBA6BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
282142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
268KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/fr-FR/pspluginwkr.dll.mui
- SHA256 77632cd0eca1602e8114c553d1a797e2d4d2498b2d8bbd7dbb5d401ed5f6a119
- MD5 ddab5672f3bc1e817650e92cc09f76eb
- SHA1 b75f3d82f2df7d099d13159a25e5acbbbf62b78e
- SHA512 fc3c3bf3f546b1545e08f92812dfa258fec4754becabbeaf50a018cacb3ca03ae6fb7e66c61df3064a57e47d7b14ac57bda0a5096353d8c2fae9aed803146511
- SSDEEP 192:cQhCQ6rQbad2eNe4epsgxweHweFgWmG/vyKCv:R4NtWHHnG
- TLSH T189D18A15A3FA6605F2B63F30AEB801605F3A3C87ED75C15E4A50909D2CB0B55DAB4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c2ec66eeff1330090bc10104cbc6ae44f9dfcc95ac30003a851e96e767bf128e
- MD5 63b82c5a6cc0d84574ed92a8faf73192
- SHA1 2548a8d18fe6184a15b395fb4ad545767f18e8f7
- SHA512 6af26df895eb05cf3fd3f677ed8e4154fb8d1b5f9e53a821483e42a36520a2f1c76a08c0b9c71cc689c6a4b6f44a54ed961f88656bbdb0e84af40b7e26d0da7d
- SSDEEP 192:v298op51Zw4aE1+t0QdYZCwDQ8RQ4RGy0V91Wlp:Slp0LdYZDDQalRGy0V91Wlp
- TLSH T18332741637FC1605F6F31BF8AA321512AA7BFCE97D29E20C4195024C2595E108DE9FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 26bbe1a779824043e975f86114424ff729f7b441d99ea99d96403d8995011dae
- MD5 8c9293b72ae821509f45216fc46844b3
- SHA1 e197efc906bb8f6f447fa2ff0ab8df71287cb709
- SHA512 45c11b09d9b8a213b86dc268f4da492049a5d9a79cfb98ff17260f1ba8017f950d398a3df7adfd266de1ef69e0efa4fc9cd352074b655f56d48bb4f6d6c82d76
- SSDEEP 384:pce56Wj1X/llWR/PjeGQ/Tl63xZ+FSdwshfKWOX4OV/6B3YajAXBpxPi7tS3xWlM:nRYxjejg1OIOVw39kXBJ3r
- TLSH T12DF2812163EC1515F9F20BF86232A14ADE77BCEA6C18A11D8428431D27F6711CBB5B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e323b659773171e55b6435434dcb4da1a75e2c3b4b98089ff138ce93c4e7e00b
- MD5 bd8243e248d2a513a2c1381027db0e2a
- SHA1 e8dbcbd167cf5a45cd858d432b73d1b1661e1700
- SHA512 577aa9bf0b40f30ea95956cfd578b0b3d21fc0b98a418a6d910a5f22e9312398ba36a340f72a5f514431c2c95c9e96eb22353e61349545e17c4645b88543c8fb
- SSDEEP 768:MgY/SFtr2eDPMLKNAnKD3gdftmaG4IvMi:9Ftr5DAAqtavL
- TLSH T18733932733ED1025F9F30B793935B5845A3BFCEABA25A61C8450031D26B6702CE95B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 33472adacf4cb3caf19ae3fa62f35d31a5ad47ae52461eeaf44065dd77f2f79d
- MD5 6f802c6f4bd924d23a4755b13d83a4ab
- SHA1 2d9006bfb7ba2a9df83c6aeed7d12f216553a61c
- SHA512 ef65930cea087613312d77534c7e0e84754d76dbb07d15eba75955beeb9ffd24d6fec8e8ab604ecfeb222fecd55a31a0b77b30cd1d65ae1a91fbb45cee0f1e04
- SSDEEP 768:TXy+Oft94edOLRsBC4wF17qlVhtT1iXSx3tW/nNF6IGrzd/umC++mjc:u+OF98LRsB0Fg+m4
- TLSH T1CA1395327BF81110F9F317B9A971E0459E3FFDEA6929F11DA048030D0BA5A05D598BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 370dd2fc4226c970af35d095352654559d010cb7e1c6adaa401f8215cd4e2a16
- MD5 f91e13610c7a080f11280308b56526de
- SHA1 c3abf975130c29e4f62d02b54365092c21386b1d
- SHA512 0bd478562ef0f404eef327b80a35c000c5354bccb34767812cc4c27e477e941018a4d93768445132b2a8d67491bda6e9b3539c02b2f72c25bcaeda8eabfc1bd3
- SSDEEP 96:ag/LdYjeRD1MWGG0PM4eMSt++nX4yc4VRhMMWnvMq9SgeJ57VTpgEWlJ:agpjV0PM4ehey/oM2SgeXVWlJ
- TLSH T10912642263EC1535FDB2073510366286263BF89DA639D12D9815020C3AB3B16CFA1BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2aac6be582ab743f87cef6da57d4fa861958801d9e9f8f19bfe693efa33a8877
- MD5 7fc2e60e3996cc402f807e35b5be2a52
- SHA1 fbe5d1ebf1967551cd9e88a227338aa395da8e61
- SHA512 f1c6494c4e2b69d56dda17edfe4aed97b7a8774ba9da780b36783dea45e6d4bf4db9f0611843730400ba4e86875f87bd2635d6e1f1cbe87a5c2bcdeaef140b62
- SSDEEP 192:fd5bEtPHke3depnCgFj3XlJmvwXLaCPGHLrhJk5uJkoaehsaLq/Y6EGJSWlr:JI6CUzVn7aC+lm5umoa+MYkSWlr
- TLSH T190B2961173E85511FAF303F661329005EB3B7DDB7D1FE11C903A411D25AA780EAA4BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 100150cd0a16bbc1c1c8baae86b4875daa2cb2ce7bfb75f6c0c3835e2e8d3015
- MD5 4662c18e6305a84c16d96bf071603abd
- SHA1 5d8ff77f45fc42feb71e26b1d5f9ab4a9d80a0bb
- SHA512 d131aac5d617fe535f3a7ca51ed724c2b4c9f120ecdb3eb4404745f14de6785355bd90a269e32cfea23940cd92340ebc43d325aa7f917472157f6108be5fdf1f
- SSDEEP 6144:3z3keKoicxWy9NqJB0/Nv6GOQR1yjdw5DlqOzkJ/LC:Xa8Nv6G1bSpO
- TLSH T1B844723677F91114F9F30778A636B009AE3BBCEA7E15E11C5015024E16B6B40CEA9B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
265294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/it-IT/pspluginwkr.dll.mui
- SHA256 6b9d072429b73fc37a824ef005992849337c241459761dbad6a66b87af953569
- MD5 288c54e422ec31a910024808702e2b0b
- SHA1 8495332914b12725f5cc790bcd63ed08bee5eb49
- SHA512 4b8801eab3527e2256fb9461752eb146582a0f865e4f1ab881ce76fe19a07bfdb5a4598747db25a513cd1bf94516174fd2282473d28fc1077eea3020b7756001
- SSDEEP 96:De6q09ccJq0TlwJ4Jq09vk4Oh/1h3R71P56eOSmOLjvRdS/zakgkWmG/eyxy:Dep0S70Kf0gTtmqm+RdC2k5WmG/eyxy
- TLSH T162C19A5263FA1609F6F76B30BD7916204E3BBD82ED79C25E4291145D28B0A61CEB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2053bb2440d43c500b9b6b84d11e60c966b46be628d49f4668c5adff1eed2bed
- MD5 aed2668c02a350389868eb531b9b49a9
- SHA1 de50b192abd59a777ce518256abaee3935631975
- SHA512 fc3df857627c37ce06ba2a69aa626eeac794b7b7f75b334ea8c4c41d85ab56a333c959125d47502994fa6dad6274e39891c6cd56ae1350134c750e58fcfbd3b8
- SSDEEP 192:t24BFbIJCEbvP/LfsqIn8RA3mG0UPy4ZKqf57uWlgHW:LijTdnU6z6uWlgHW
- TLSH T10352201DE3FA441AF5B25A721C7DA691F632BC17ED22E63E016CD0186D70B9CC464BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a8358278dbc879db17de4766249d6b1bdb9444e528b6ff3806ac4cdb3266888
- MD5 ed2e957b56ee4b66b605f0c08ba98eba
- SHA1 89863eff47d05df735ad87047a5a89439fbff8d4
- SHA512 f293a34302e71290c7574d05c45b282562a23450820d029de3d745d8cfe91ac1f429acebfcf0e87979262636889ac8f8536f127df0191e21141404c06d540ec4
- SSDEEP 384:gxlIEjlsKmqcQWe8QUi/vKGh/BBAGxDlJhKEcOVx7+Ie3cwMIfWlFoW:gxlIBtk1wGhKEcOVoIe3cwfs
- TLSH T127032F2DF3FD0826F8B20772183851D59939BC5AED22B23E942EC1289E71B4DD964772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a72416125878a2a35e3c7d2e5a5abf4fc6a065447944e081bac8ea51ffd4f959
- MD5 8f672561209ac91d89dd23df8acf4618
- SHA1 63b864adce88f5628dd8e6c59d54086f03b83dbf
- SHA512 9f38da69e143a98093f413e82ef56bbb00089ffde283df44947750fc691d935e455dbcdc51a4fc7f8e6e153ca0bfadb51a3c47e6a976017a3a85067ed85b7f85
- SSDEEP 384:dc7fj7tWtDQtgUOOQCwMAb2gNcYnVhLqOf8fDQBaST2WlMDW:WjRWtZUGMAb2efoa8LQzTC
- TLSH T16A43432DA3FD0429F9B20B332C79A6D4A937BC1AED22B13E402DD02D5A7174DD950B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 742a1ad90788171f9de835297793d3908e6730c061d9cdb58aa84dac79073304
- MD5 b506aa33166f3c07825900c945b9a92e
- SHA1 7dc46fe573c21a2618991f443a42c549f7d1a535
- SHA512 7a7b41f37f6608d838c52863d019db3a9c5d2c570710a8cdb76a38da121ef36435601f5d7d11baf8c6f58b6408bb014e85ab3b0b84e9212fdf1d82dcf1b4b841
- SSDEEP 768:fUJg/a72h+Vzh6b6hwQJSPY1O/HPUtmIKXHwlxw6cIb4l:fSiaY
- TLSH T17223402DA3FD042AF87257325C695684B83DBC5BEC22B23E512DD018AE71B8DC550BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 edf899cf2f2885cfec322a50f91d8626af09c24c39e6a91b9d8f24ea86334fb9
- MD5 e5b6c9e12c5b7e94dcd6bc64054b6ed4
- SHA1 eef5ec465904fc53eec01110ed43d8bad1435104
- SHA512 f9595c0b92cb3ee4ae6b78dec59d1e8620802afb1c990c4996773eef46f6e977742fa52f0612ac60e00dc3e0a4e48d49c4075fa14705deff43e86212eafbbf0d
- SSDEEP 96:qExOJ9LwLDJMNrxJYAk1vZQ/LLceU3DGSDBN0OKBbKgcKltQEkAdsCiPMqEogRYQ:qEmjVQqUnLNkEHVjWlAHW
- TLSH T1B222743D23EC0936E9B20772183922C5693BBC1AD532E53D543DA01DACB1B1EDA41BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 79269f7a8238e2ed4f1d037a9f051c14a16e290b051e94eeb08c3c4a85ffccb6
- MD5 cd3b32d8dee64d72f22c67a0192a5243
- SHA1 43f2d7aae45fdc62559c6b69333660175cf2b82a
- SHA512 316ce8a9015ae6f8515b3b7db4aeba0fc6feed0b8e1b0f39993dcfded779636c0b5d8aa33f3248d1499b2a57b76ed3e6d262662bb6eb4f57becdaff0a7f84bae
- SSDEEP 192:9d8bztYNuCmL5UEHSM3xfmALW1YW1YnkftA9we32Ozk3gfWlOtW:ACU5UcodfYv5WlOtW
- TLSH T1FD72512CB3F95825F86107B31CBA52C56436FC2AFD22B13E106ED024DE31A9ED5547BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2ff008965dc66c0abf0dc0e2e9059a0dfb01d3eae1fd7aebc3b3fcf4cd24a5bb
- MD5 468ff3bbbab338917432ce9593c049cf
- SHA1 f7cc5d7b927bbeeb14d0bbcb87c6ac44097a7be5
- SHA512 9bcdd278097318633fea77dc5bdf9402fb876c9f9c5e431f6306614854ebc3d983af55475e2857d4162760e72a4c5447ad979f5342a2368f26e77feba4394011
- SSDEEP 6144:WbrnMpgpZO/gI2JXvlqFldWxE8BzoW2rjjzSGzPgLxqob9vlaZL:4U/qCldWxE8BzoW2rjjzSGzPq12Z
- TLSH T19064312CE7F91829F8B207726D7965C5AC36BC1AED22F13E402DD02D5A71B8CD860776
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
304270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
292KB
Virtual Size
289KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ja-JP/pspluginwkr.dll.mui
- SHA256 3e6d21c728c08b4a189d3847c12527e8c88f49e4f5c844e693a80501c0c0e03f
- MD5 8fbeaefcfd1f73317fccb564e488678f
- SHA1 c67c2a157d2fa8eadc070a883cbbe78057df591c
- SHA512 ad10d39650f2640ac2e252e1b0d9eaa78159be50c88e10d3eb51a9e5fa472bcab074fa8346b8894be113edbebd55dda54b5c4e0019ebcd4cbdd7a219911fdc96
- SSDEEP 48:yiQzYmJBAJnSWJHZW1EwkPhph5xZB5Iozou1GrogSnq26/xq26MqOnOM59pjHZWg:e/Ahd9DhphLKOIFZgZMbD1WmG/by5Ww/
- TLSH T14391FF4927F6054EF0F64A74BD70629813BDFC60DDA2425D2A98700A34F0157EFA5FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 45794f9daebf701379a1a12edaa5900b4387b2ffc9cd19f06e473c54882611f6
- MD5 78cfe233756e7b9d17ca23aba672cd08
- SHA1 b724c65ca19e5488a75649328b62dd340a346157
- SHA512 eafd39d6e0983212c4aa4c142a3869191578d98d217ddb79d42cfb050b2587cf2b7aee811f4355ce5fce30309dc8078d56f68cdd4d590791c93fae6b5534fad8
- SSDEEP 192:d2GmPgxe12YHqhqXlgC3wu1A6627JtWlgHW:cD1OhqXlgC3wu1h627JtWlgHW
- TLSH T10E322FA637F95549F1B30FB569B4B21592B2F836EF23C40D88404E495CB5A8089A2BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 35c27abdd21837ff72ffca86838f344dc02ba543e3fb818b81920a2dc02ad79c
- MD5 71813e927bc7d09084de9a876389b10f
- SHA1 0cf6e07906704a2ef7c835cc0fe504f1a212bc4d
- SHA512 37d7866526a6587f862627c833e8c07a24176f40c72cdf0a1bef6f9215ed9af5d5d33fb02154d1946f14eb3fd916c2114ee7d1972a01827488fb527b1d0b293c
- SSDEEP 384:ZYsNrIveW/g9n2S7IlqDvmQ8qWI0WP8/BrhVEiCxM3OVZgNtQSZ+YldedWlFoW:KW+QX7IlqjMrGM3OVSQSZ+Yldei
- TLSH T15AF230A273FF1555F5B24E761AB4F5048A72FC66EF23805CD8408D1D8DB0B818996BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6b04aecc7eec766ce479830efc3816a786dba43200aa4861c7370cce3918cdf
- MD5 3e98f9f04b80401e477573c6610d2b26
- SHA1 ae29d3b6bd105099eaa403caca8c65b4b97b9ccc
- SHA512 aec0d9236f236c01b5bfecb43227bddea23825fdb7b4b76d4e61e57f0f620714fa972f82b76957486c771a03d9b1de6d4e7db813907737539e3dfdb5efb52f0c
- SSDEEP 384:CuMt1EE8K4xAwurICLIUMu9rcDgAkIcQ/es4DX6Fte16MjYfC6D8lPilWlMDW:21EE8KIh4Mu9rcDaIdX4DGwjT6DQin
- TLSH T1503331A223FA1165F9B34B7629B4B59443B7F826EB73801CD8404C5D5DB5B42CE82BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f916ae9a3297b3a770459bbd1fcf0d38086f32d73da7495aecc50358cd4dde27
- MD5 fd9cc70f86f0c637eaa35dda2c005884
- SHA1 a145c70e78cc5d44422b085090f8821c73bb121f
- SHA512 25ba28635fa7694f829d64c5451211c54a2eb5bab22a3d6a17ac46d58eab3caed5204df20de05a96198260850635dd1981f93cdad02c86695681c8c95cc6a119
- SSDEEP 768:92lUoxVh+JXkYdaiNI2p7PKLk22jqesnQO/5Dzw0raiCa8z:92lUoT+JX/aS
- TLSH T11013546237FA1995E5B34F342DF4B1415BAAFA3BEB67C00DA9044C1C4E78A4188867F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c01f85367acbf76e86628ad63a6b7f29bb20ab47be22303575d00b4c2289a1e
- MD5 92ca280769a30e00f3bd46308e4f8c84
- SHA1 f395cb4164072944a0280a1c76db754964c9c41b
- SHA512 4990de9ec30dc35adb68ccd78bba3e27c8b5d886fc49a3445564a79a6707f536f46a6c873754016667ecc238380aa746842bd907d995efba223c901d4c940232
- SSDEEP 96:+E80J4bdD0Mp9X6LKJerDv1lcFdLZk4GgS0zZCCgdj7DZj5Bfpk4n+32HhCevub1:bGB6vrcmd0AIoWlAHW
- TLSH T10A12646223FD0662FAF24B7214B671811277F925E333816CDD40091D5DB17968E82BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1abfae4c83a9235f44073b911358655e33ed40c19b320f20cc5025fd9daf402
- MD5 fde10c85a89a3fefdbb89fc32c026fc8
- SHA1 638982dd1c5564b65b391d5fbd8f3f06febe37cd
- SHA512 4800a83bef56b58c8312414773fc4a39e7c49d7b860ec1006f5755fde0606d7460afd87f13681bfcf0b6e62656c0f65c314f691dd3f2e9ac4220241378817430
- SSDEEP 192:7dabkt+gO0UxnDk7/YWTMWvrigSSEBGx1Xp5OWlOtW:40ki/YWTMWvrigSSLriWlOtW
- TLSH T1FA6241A173FB468AF6B68A742EF1F645C263F837DB13841C69404C09CC70A828596BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e0cb9a8bb12e3a540d6cb830448091efb143d36719b2cf0732ff51f9729d6fb4
- MD5 62c29c8b842b58fb5046608789dd09d0
- SHA1 be5c3c21451d99fa78c063a47d539a05a158ec1d
- SHA512 ff84ad00de980735de81bb336de1dd31d451458ac2283f0384877f55c5de98d7ff2c85e52ba52956893f5eb803b73ad83b75d1423d46fdfeb7878c505d0a5020
- SSDEEP 6144:bkTRjDnkA97CIKOqMVY1V6RO9+Yys1EU05b4W1NtWShdYqaouRBaw23LfYL:nINVyouRBaw23LfY
- TLSH T1C45440E273FB0658F9F30B7529B5F5148BA2BC66AB63C01CD8008C5D8D75A818D927B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
277390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
264KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ko-KR/pspluginwkr.dll.mui
- SHA256 386c5e4ae1a247ec710dfc952d027ebed59533060ee216c15de34907f6571477
- MD5 a360773895b75b5de71b98fbb3707818
- SHA1 fc7879669f45cd199db9b1308070a068465cd424
- SHA512 24c0f26ee8fcc7a964da62587315be1390de24c2c5c838b7f181050f8085aaab59b3345513b1d3f8d20bc49c691ed2543124dc5687c38827d979c13b04551aef
- SSDEEP 96:t/8OdV6LTV8hvhBwdFtrsOIpUJHrSGWmG/by5Wwr:tBdEH6uFtrDzWmG/by5WI
- TLSH T1E8917B1A5BBAD11DF0B55B30FEB003A1973B7C83AD66115E9A50702D24F0256EE60BF6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 35648e13b9e37c5ba24936b469b679947da49cd4ef22bf96ba8d9b996096fa19
- MD5 5f1b2056ffda8b3493edaa4fdf383dc7
- SHA1 856d04a55bd9818f74c64fa66eb92a2c5e7b4dd5
- SHA512 50d78d5bd650a26ec4249407b10608f244512950430adf81cbced37a4d1d8f9905e0ac479e279ea7a8d95bee40f07a529baa4c1492645ed2651a0b6a6b95b501
- SSDEEP 192:342EUgqE01xcrbW15VDZh8Ux5WlL+0Wl/:6EYW15VdeS5WlS0Wl/
- TLSH T18432870667FC0608F6B31BF07A339617A5BAFD659D11C36E8065065E28E4E01CDA7B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16670
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 232e1cc2b340ddb521a4163f9e5657bfe7040ebe54d6909ed601cf716e78095a
- MD5 9b35501836f451877f6264055169b567
- SHA1 73deb1ec6389db423edfc22d1f8436811fab1677
- SHA512 178bba99555ef8fc06e64f32967d1c9035eda3354983dadf799a344a98e1d95eface1403e844f4f7348ce7210a219e8cf167cb3414074adbd7c119ff18e9f3ca
- SSDEEP 384:WZzKmY4TZ39To6xRwXaQvAu2dfbGmy19f9AtHOVswfSvWvOXEWl2:lF4TZ3J2qHOV1km
- TLSH T196F2742123EC1728F2B30B722E326647AE7BBD795D10C16D8461471E5AF5E44CA67B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30590
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 afaee672113e2cb0fb6d5dfc9bb4d00ccb002b5ac90cbc15c827f638e86fdafe
- MD5 5bb59d5372913b315ccbbcfff5fd74ae
- SHA1 7a93bd9ed2796c4291fe7898e0475d144d46a1af
- SHA512 73592c4bb4ba69b201232b22ccc959b5f28c416c0e0425f6c8e8fd0ec1156abb96421b35adddd1886ed3c1edc89830c561bf7a4b19f5bc46597cd44c23691415
- SSDEEP 768:Yh8R5g2kCbO16McgGW5OgxXJJ9+SOTJtp24:Dbg2k/B8gCpbz
- TLSH T12633942233ED0264FAB30B763C32FA550A7BBD2A6D25C59EC015060E5AF5B41CE52B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38d20b842b6742f610015589399df3743a50795a34e4a08dd19257a59f570161
- MD5 378c94f66a55d5a45726bbd5cfe27e99
- SHA1 f401e5c3a9cb353522adcccbaed924b4a613c305
- SHA512 fa3781e7dee88e2b491b87972613061674ac10f9817ef0f58cad08b1c4ae72552b897f8c5678851d3804cf6aa14a2821252a2d6497c9fcad47706c94d8ca4a81
- SSDEEP 768:NFAs8EbQleesBvP0xUT1pr/wDgoNGxOrU2c5Wq57mYteKWUQruHk18:NFA9veesBEKT8uHkm
- TLSH T13913A3263BF90164F9A30B313D33A4026E7FBE765910D19EA109460E1AE9FC0CA99777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96bef278572a3aa36bd9c783a7b3d44a103d95556cc4b14014a071e3b636ec0e
- MD5 a7d4b0b8a34d3827b47ae4c41328575d
- SHA1 1e08316d6299481ce586f2b4b59bc6744c672ab3
- SHA512 953dc894a6e8410a74f1a5d6dcfbf108b977536fecfd9ff17dc348f1ee989da779d33f9d056bdf7c26ee650569fbca3115457dfc1af2e53ecb3d8b6bc5366cb7
- SSDEEP 96:rmKGDRDYMvWFdSlwIlty/wSK/wogbUHLil3LKPjkRk/lLuDbjTpQuiWl7764:SSdSlhlw1BoGKNiwlsYWlP
- TLSH T1B012662217FC0735F9B20B7278366743653BBE189A35C19EC415020D6AB6B55CEA2FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 57d6c2702e1de24d6ba78e1f1ee31b8255a24d06b1d0976d13df441d6c05b70c
- MD5 53a7c23f525204ca5995a71e323f0157
- SHA1 107dd794c1b6ba4809d2e57768079f1427d7cf1b
- SHA512 ccccbc4cae3c40d599a6cd625a7f6e6642f0b4dcec31d6ae7ff87552e3b975228fbab6d6e115174846c5f2a90cee4e59eb85fb9f0a848a8470f9d115fb178c38
- SSDEEP 192:AedKbxtfXeVBJ5GM0DraKjzK0kBU+oRKx3P1E/XMoVzO/tb6wWo5jvgWl9:AK7WM0e0kB1oRwPodVzybjdjIWl9
- TLSH T17EB2962133FC0726F5A32B729D33864AB9A77D752D15C15D4432824E68E8B84DED2B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d67dfc064486cdc214b28776b322beced301094e4834a6097e6ec8611f9963bd
- MD5 cda7ac67ef94e8d1b94ff8fcce4b0b16
- SHA1 00a3d6ab0193ce96c3c1642ba02ecd6d5c285681
- SHA512 c49758376e56b1c70603ffbecb30cf1381cec3a1ae191cf8e02e86336bddabbe5b200ce9032d5e631771762ddf6d727eb40c4c0e5388098405a7229dc6d34ec5
- SSDEEP 3072:vwjd13J4VPYdA5hgMChr8WNa1xLPXy6YmCVEV1q5drwEq2Z8MUxrM7bLiB:v0d13J4VgQua1n1q7RGYL
- TLSH T1444483263BFD0365F9F307B16E36A9069DBA7D296D10C05E9019060F56F5E80CEA2B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
264206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
252KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/pt-BR/pspluginwkr.dll.mui
- SHA256 bef3cd4561b110f26ff18482019a18ec59525840da56e09ce2fcb9e8a8c1d712
- MD5 b14c24e55eccc82f93926d0abada2203
- SHA1 f8a3f010feceb10aa4fcec6304895d23ea438885
- SHA512 42665645d158e66e446d55105c98c72818fd0d5eed812a1f46fa1fd9b683d92d1fa1f58742dd7c0aa540619961806d891b2d113b76fd4da1e097cffae0c6b635
- SSDEEP 96:NFrsvr4k2DSp3bC8CC0hvl/hVFj7FjKGhNkFjIZOM1ajtaPmPPtSvCWmG/EyI4xK:bIzL2XLdmupyaPmPPg6WmG/Ey5K
- TLSH T143C18D422BFA1206F5F72F35AD7916604A3F7C82EC79D25E5250116A2DF0A42CEA0B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0f74348a0208b1d03abf7189d740fce3b23858f27573b8a7226d06dc9dc74569
- MD5 b1b06c60d9610ed3aabd904e5c4e7ffe
- SHA1 4e0649fc4130b36a907397db97bf53addc85a3ba
- SHA512 3ffd985270f69fae8f8a4b40eb7a6ea36fdfdad6a1a53594511427a6c5fcecc820a94e2d4d9f55b6b8dd3be69e00a7a2e21540a82a79130d49d1c641a0ef89f8
- SSDEEP 192:e25VpxExSUvrdIsKsoKsX2myxKCuW1lNcUS/uG/9ze0Yn/iGRmUDJ8AtGTAGOE+3:FqzSHPKsm54CuW1lc/Bze020UD1t313
- TLSH T185B2F22153F9148DF266B677D8287A097CFBB4BD3F39821E1460292E34F2424C67D76A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20094
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7948fec198540f0443729fca8ca1ec9fd552a13e84261b4c6f2ecc3ffaec7bc2
- MD5 2a6d4b7d866611fe657053211a1e86ca
- SHA1 460428d6416bafb2818d464a9e6aafe0578c32dd
- SHA512 e8a1a7f157143036cf1102ba0d314f6a63ed8da6d49c260b2883f747502fa1aa44c4ea83ae8e57d2bbc1bec565cebdd3debf9534823a360da443157ec28d3156
- SSDEEP 384:AMS1a7mkxAbMR9XyoBVj85gG5pNRqQ7GRnvvqOQVlqg+yOJg1dB5ut5Tx5M9u7P3:7hD9l6QE+iOV1UXLU53D9
- TLSH T12213BD6153FD249DE2617537D824BA092CBBB8FE3F66932D04142D3E39F2520867A367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
38878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d1602d3dca159c305bbb54e2b642bc6e345912570e522fba4d7dbd372d6f7eca
- MD5 1a4bede59291d99747d2ab436dee9e65
- SHA1 32385f19322d90a28182373270e246d8ab11a07b
- SHA512 d569cc3222deb64d0ff382913e338ffe58eb05459e9f970ad6682f78ee0d385c9237836f14e2a1e5baf4bf1455146b080b4146adc11a2667e994804d916d5c20
- SSDEEP 384:0h548i9uEHuc1ovnQrltoFsMeadXc0p66MoQbXigFCLn6Zwt1cZNqsRuOLu5uXuJ:cvwzomKd9MjHG35ypSTKFZHA9Z3u9Ta
- TLSH T1DE53F02163ED60ADF272B63BE824BD057CBBB4FD3F79921D0414192E39F21108A69767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9d9c22708b57b1fb0da9b731ac8760908e4dc8552b5d98f92e362c4a5a3029e2
- MD5 f362675787440d740f88eb0f88bb4657
- SHA1 07c228198945c95ed3861b6027a2579686fbceac
- SHA512 7219bd8513f0b85b21ba655f00d5638382f12ff7e2afc1f8b39653ffd1f1051cea1f4711d4258e3a750a324af6be7128a72cdb996bb3ac0c984f4696fb29a4fc
- SSDEEP 768:080QGdO0r/zieXxqEsfCgaCpUKBge0Qk2TGLUy9l6JDeTJLQCLccFeXBh:xeO0r/zDqEs4Z0h
- TLSH T10243036157FD54DEE261B63ADC14A9053CFBB4FE3FAB931E1514193E29F2020C22936A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f7afaabb48b21a7e5d6bd0533c2e68443c0ab324e3ee25f9bd416a1802433685
- MD5 f4c7c0181129be334d023f2694ece118
- SHA1 900e259234b9943ee01bfd99e803466f0375a367
- SHA512 e1c4eada1cad1446127033669ce575ae7fce706606fcf1d273c035c57044036a285927efb374df096e2a87304308ec1fa7d8caac6603783981bd55f4c037d87a
- SSDEEP 192:UDn3zgbSriXtDYRezgBA7tjDRX+t1porGJNYXW/fRoWl9N:un3Ub+iXt8RqgBA7tjt4RoWlX
- TLSH T1B932442113FD20AAE261B23BD8287E093D7BB8BDBF79931D5450192E39F2210C766756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16958
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e2fa605101a3648659caa1780c94b449721fa3a73861cb78dfd0ef2b38e692fe
- MD5 9b5f7aa1cacea5ea18d61548dbefebc5
- SHA1 91b8504d06599165096fc274a466a5b9a149a734
- SHA512 569f0873638b0cb704a5a6e0afb895b7d930395d317e09c7e8794c28a7762ee646b303b3dd078127c51b4b8a909c5566f0873ea515d4cdb433ca93dbbf584ebc
- SSDEEP 384:7pZzGwJogIVgNg54aukJogI3fPVqGciqudwx+f20GPgxYhHnOgUJr73oFuFtR3w2:dVGPzgo85Gu/RfYK
- TLSH T1EA92BB5153EE209DE261B13AD814BE0D7DBFA8BE3F7AA35D14542C6F34F20208679726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a23c69384f523300d8c2921a4e96a2373a6ca97af1a4afe53f10a37e58ccd766
- MD5 8d8ce21e443690b99c89588829d4504c
- SHA1 8b8670ddf6a1c41632a2401896c6a8767fe6b986
- SHA512 d276280608ea86d0e632cd86d72746b76f8f3c75346376ca42ec1516ab1d6319b9d1b58b437133f535741098fd3568f1578e499de3b36653007aafc3aaa6fcd5
- SSDEEP 6144:bsV2II5MNA7TsAvmeLz/FGUXdT/V5/ZOx+tfygj7RnV4XpbMdYZVgNhQGjqQrJ+i:YV2II5MNAHz/FGUXdT/V5/ZOxSfHjtnB
- TLSH T1EF74E06157ED509DF162B637D928BD097CBB78FE3F66D21E00142D6F24F24208A3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
354030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
340KB
Virtual Size
337KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/ru-RU/pspluginwkr.dll.mui
- SHA256 f141212ece110ed2dc2932958cf10fca36014b6e13d9e6d25ec4981c57bb1886
- MD5 2bde90611df09038798ec59e1644af6c
- SHA1 035b1a151e5bfef0023ae478067ea911473d2ab0
- SHA512 2563a29d2f6ff2fd24b8c171b976a7ec0864c049245cd4e412bc00b921b73e3c30c8d3fffbd37871c5cb00cd051627ef9604bf1eb94a2020068e4e8fea7e143c
- SSDEEP 96:dqCTy/aoCTyXvSCTyprC99AKhY60hsdfkfmOJftOd51q1bkps6lOi9WmG/j3BzyT:ddCmoFDdcZm5abKlO2WmG/L1yFR
- TLSH T1FFC18A0FAB799519F065D6306F7205E601697B01AB1456CFDB4F3D2930B8136B730AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5f0bc95fb445b88535e4fbc4f148a85397109c8bb69460292ad22e3bf5bf831
- MD5 a59701196f9802ec65d441bc4096908b
- SHA1 50e39e75a7f68211ba56c889b55f7c9269a76b34
- SHA512 b7bee8efaa92c440da11fd613de65b9c1c1126acf95551ab2cb08f9e60286e3ea46837816666f9a731fd83b30c918e9b1470808aff054684ecb9d2eff91537b2
- SSDEEP 192:tijG2K9Txv1fnry21IeVQmlfUa7EcTD3anjYWlxLW:tijgxxnDtVQmiXy3ekWlxLW
- TLSH T16322530263F9294AF0B32FB46B7A8A69F43AFD76AB31D14D51A0015C1C31AA045B6B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 affde10692d33113341100b0113e0a0b0cac612b5cc692fed4477686dea87231
- MD5 ee3b9e95555b6bc365539c95204f1c60
- SHA1 d87a2c7ba5967b909201f1fd2f049bfc6aa307c0
- SHA512 2be8e55524de34335cd2464e335ae735889067b2f2de4d27ba1d885621bbafc40a4aaa9108976301e5d3ddbad737898ccd1e9dae9c9127e35841d3d3efbc0bac
- SSDEEP 384:f49vjE+l4ne3JytPTQD7b5AnlFPUEcCKnJCOVNeg/p43EauiWlFoW:f+nZyl+kOVb/tz
- TLSH T168E2930223FC1CDBF4B30EB966394519B83AFD776E74C20D4D61465D49B0A94CAA1B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96bd3760a22cde2e4425e4b23bc40c74aba7a1f6bc850bf7fca472657f18a094
- MD5 931679e03db075b32a61fb6d823dc976
- SHA1 ecc4eec63587fb628b5c959b67bbbca681357f80
- SHA512 f74cbbd0ce4a87ab584480b5007652eb559e613062145a09be02ad9cf109eca81cbe3bd5f23ab63d8fb65edc2ce275e7334518941a1bf09214d35eb679c39251
- SSDEEP 384:sA3MQldjIt4/+vDnYbQMc+WiYx1RzkB26vOsOY/4e5aWoxUB2TH0xUu7LWlMDW:zMQldjItsaTM9WY2/fM/oxCuHzu7p
- TLSH T18F23B62223FD09EAF5B30F793A39A5A8253BFE26A735D05D4951061C1E70A05CBA1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 66718d970c5ae06961110d61bee26d1db86e1e13cb62bde3c24917d589693cc3
- MD5 1f6b0e6c4852a18dfe97e01ca712d91d
- SHA1 0b98597774221277e70704b4fccb96419d2e4f63
- SHA512 7f9d0083759eba96d896a437eed25d7c8e61fe48fab056b0b85ae716f79756b1fac35473fdbc54492666659e7581188157ecf3375d4e343cf2e453c2f2c81a6e
- SSDEEP 768:bslqYkIU6j3X1YIhTIQO0J13gtKcSNuKYtWEZsusttr8/AdpxpnDtQhvM4eOq1cC:bsnH1YKIQdDE4vzDFKrG
- TLSH T11F03092123FC4899F2B30F7A2F365059A93FFFA72139E15D69404A1C5E35A04CA85B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e20f230f6f6825923a4c525cfa712a7ea2c886e7f8ecdea6eb8b3a71367b73fa
- MD5 df9e6d30ea765d87bf16e79f6e275dc0
- SHA1 855c7a17f8f9d133be54375a6b8556429e54d22c
- SHA512 908ccf95f9f1d60d17d68f2e5dbda7bf4a0f04f17619061613dbea1cb5951c29b71e29ed509351fa559a5bde781f52515a6967dd5941e0b977399fc9a0fd39d7
- SSDEEP 96:RNb8GRDyMxniyseqm1dhSaWIOrZt0w4dSyBlVKElb0xptTpvmWlAHW:5niRKdEIOLuBxZwgWlAHW
- TLSH T1BE12A52213FC0A7AF9F20B36157B62856637FE15D231D62E9990011D2EB2715CF91FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4ae42458b84c35847b4d0dcd84f76c209ab8689a3c39c7e440b9ef720ac594e
- MD5 865ba48f9238e35854af2f56638c5c5f
- SHA1 d92e0fa5afef81b0bea05287c07b63528e66ed10
- SHA512 464c5f134bd16063c109c43dfcb31e7c75170459cd221aeef5c714d5aff75f6984f5fbe01e32f8f199c4a2db9b5f12b211dc394b3f593064c3c44b6c611997a8
- SSDEEP 192:6ldkb8tqWx5G7SDkhmI9C9gjqXSMg8QNDfxonPKhpWlOtW:6x3ISXSMgPfYPSWlOtW
- TLSH T1C142604673FD2DAAF5B50BF46B7B815EF426BD772B26D21C8A60414D4C30A418AA073F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3917f9572984d0dd2ab36a7d4927378312d8c9ed13b1aa5cb356f922a035ecab
- MD5 b70436b5530d522a1bb52ba9a5a59516
- SHA1 ce3647e28fa3312894b465963d2d75963b2c2b43
- SHA512 1a20479f7f2cef82bbbd79f8fc269fcae59a87d198086d2fdc7dde9ebc2f865682c6d2cc6835a7386bef7f650925c95a9f6cd58d949c162a1c99164f659a8a44
- SSDEEP 3072:urkxwJFuLSWOSDGHKvIape9ev2EHBV0aNad2aqdjMcCwLv:urkx0FuLSxSDCaBFNV0JqqcPL
- TLSH T11634A51277FD199AF1F30B786B3A8468FC3BBE765B24D05D15510A0E0A71A44CEA1B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
238014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
228KB
Virtual Size
224KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-CN/pspluginwkr.dll.mui
- SHA256 3d387593bdd5f5556272114c7c2f23185950f8863bfcf36128e274916ce74f2f
- MD5 ccf47b47ac83ee7d7833cc293048ed39
- SHA1 faf8039de0b4ff4f861624eabb528dfafd232bfb
- SHA512 8c323d0bc305fa7999c698c398a46d6ddaf6d4ced0ea28acdc786f7ff36c607ca6d274013dea51a9ea215255d85485bad31e733ddc4af2b804c5e1b763b69e76
- TLSH T15E814D491BBB1115F1B60E34EEB542A12BBD7C53BE56522EDA44241928F010BAFB0FB3
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b6993902b238664508679f005ebff1a69b0dd8e00b635f1d57b5bc1ea0825f1
- MD5 193ffbd6e48b56e91c7839f4d49369fc
- SHA1 c2c328896e054edb4cf11836ea2f4643cfe58d68
- SHA512 32f5859e84ab18e36fed08b2bbad8c40dde8811a788e4740b5f815e97945792129165f87af8a19079a9b02070eaa62ec59fcf4f4eb4094a21294bd8b5361312f
- SSDEEP 192:a2BNOSYuG3PhP4baGV5PY99bQDpPTD+mlWlgHW:6S0PeBEmBTNlWlgHW
- TLSH T1AF22941263FA098EF0F39FB46FB5461AE53BBDB2DD26C10D9160144D2C31A148AE6B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 55b81199467f0c2af0dbe33f0c3fb55e4163b5ccad32a1c250319ad98ca1b025
- MD5 683558db4f4468d684e06ce6040c1ac9
- SHA1 93c734fe86ac06dc222776e6391ead406c565d9a
- SHA512 13ed546cc4572e2363e5991d105e76f11c1d81f1ca072b7adb75d26bc4a50a22546f885fc68ff220ce72fae91759478580d378694ddebf9f2346aff014c0dea5
- SSDEEP 768:ANRZYEm1HlmKHLys2fxHwKtHLKOVFrFEX:ANRZYEyFPes+xHw6rKOvrFk
- TLSH T1D6E2725663FD092AF1B34FB067795029CCBABDBA9D20E11F4814524E1E72B109BB5B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Commands.Utility.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 411edfe1732ae9b09fe156022849864f3f5085c2bcfa6f66f6ec23599dee4f57
- MD5 e6bfd026d53e2a05e0b6c629518ca446
- SHA1 5b86348ddc6a8a15033db1de90ca118a64f3e28a
- SHA512 811295ea2b9150fa47e75593bdc7a33d92f56db527b572b583e29a9ecb224ce7faf35b70a983209671087d32eb5acdbc441dbbcb806cbc153c2e1b45de5fbc45
- SSDEEP 768:RnP/RTCmc3yMH3moLFa17WmR0x7s+J4AoyeRlu:RP/4mx1pR0H7oyUs
- TLSH T15623952623FE10A9F5F30F353F7595A8997BBDA59A31D46E9544000E1EB2601CBA2F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.ConsoleHost.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bd368ea760fad948be96122eabdf52f66e540638f03366958a9af22a7bba393c
- MD5 0f3f756e2435df526ba611c619c00500
- SHA1 188d2b0ec618a400a8addb0082a0b9b4106b1815
- SHA512 d2bc823d60fbd88e679dbf319b2c4ef0703616e36aed87140de80cc23f79c5615185c4c3ff1d9582ff8205d87b93b9f7698302699c80b2ca6f450da643b68340
- SSDEEP 768:RRHIh0wNG/IH12NA4wSiJ86klOk+aa05HzXxK8i2e6pqt91YPI1H98Pw0G:7HIAAV2NpI1HGwX
- TLSH T18D03912227FA495AF2B30FB82F356144D97FFEBB1861E46EA498090D1F35E118881777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.PowerShell.Security.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7fe78a8add2fb42331fbbbb8f9bcbe315b3b015443d79f998c6521ff5acfe8c1
- MD5 8b935597bd8606e17a401d00388aaa81
- SHA1 d83ebaddaf274bba59fad3c5529b5ea27d7140bf
- SHA512 5a5e6b44053f3fda849fed8beccfe5f9311b29b92f9817bb309ca6d4166e04ae635d1433fad54dc04e9e13a50d0a05f9f998cfccbfbf90728344bc83a9222d8e
- SSDEEP 192:Gy6vKLMuKZ3sN1WpAv49q1HGZhp9WlAHW:v6QA3squE4Gd9WlAHW
- TLSH T19112832213FC0A7AF6F10B761576238A543BBE59D231D52E9C25010E2EB2B15CF91BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/Microsoft.WSMan.Management.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1aa02e8ba57fa87222eee602cdc79d4a98ed6b12ca426ac1b7b31aec61771efd
- MD5 b9ba0d104a0ae98a80c47f2a2a3d7869
- SHA1 43cc95db35c6a5ba4a142344ed82046259dee115
- SHA512 1d0433e28c925fa9874c0138c7555dd8219eb74bdf1b68a24815cf49c68128ec07b1028b1a5811a8750a20ec71547b6ba85c175b79b267198405739d2e158ddb
- SSDEEP 192:pBdTbetAIXFy4snUk3KnfN4nJs0fNg+nZdcVY7C08xoKe8Bh2DeCWWlOtW:pwU4sFKnfeJs0fJZdexoxOvCWWlOtW
- TLSH T10C42848963FA09ABF1B21BB03B76001EE4BABDF76D35D01E5964008F5C32B414A6073B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/System.Management.Automation.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b59d246f0b15d5ddc2a2a6f946de85fc3c19093bc184d116ba3b759e328d7a00
- MD5 3f3674a84cd4db493ee3358984979cbe
- SHA1 4c3114d0c31d29f8e67c1de8479188da884bdd98
- SHA512 ac23c5c076a9b631f531f887463bc1ed2f16a4b11825e49a20560c2e96873c38a54f13bdab4d4b9a3ab7dbc8ca1d1ff22d2cdf0b24b695eb5a1677956b951af4
- SSDEEP 3072:ykLZCMVcW+4bZo6d4b/BzNLPCfD0hWgqMXIRGp5fYVFLL1LSH:ykLwMVcW+4a6d4bJhPCfiqZRv/1L
- TLSH T13E34A24267FE166DF1F30FB46F7A9159CCBB7DA95E21D06F6508144E1A32B008AA1B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
236878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
224KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ps2DLC/ResourceBinaries/x86/zh-TW/pspluginwkr.dll.mui
- SHA256 4e35e9458d86ac20c072f90a7d19b4cd4fa08ed9e9dcf44f77c7c4f98002f0da
- MD5 ff6752b321a062fa60e4c94133a9db4e
- SHA1 df31768f56ccbccd6ab8a0c9ab2d293893b0a419
- SHA512 b61a8459ea172749c247aac764bce37fa9e436d85704983fb74bb494c1376bde5f290740304a131f1c5c5f6823d002412603cda004a2ba8c62c8424c71b8a5c0
- TLSH T16F819F0517FA1149F1B24E70BDB541B227FE3C93BDA9121E9E94241979F0006EFA4FB6
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
ps2DLC/loadGAC.ps1
- SHA256 85e84b9544d4b794d23b4d19f9010778bcd8cce2604b0fc3dda7cc5579abb5cc
- MD5 c852de1df1474d82fea09236e42c137f
- SHA1 cbf36c1b0e112d134285ea6aade12b95088a32d0
- SHA512 e182a11e4c795dd08ea05b4fcaff946552a0a4306105c5bf7aadd669432f5458d13f5cd319a59f4a82f80f3a0b03e728c80bcf03b2484491f089d3b57e7b50df
- TLSH T1F05142616E8BE3309AB20B498E018945ED5900A9C65B5844F7CCE75CFFF520D4770A7F
- MD5 SHA1 SHA512 TLSH
ps2DLC/regkeysNew/regkeyPowerShell.reg
- SHA256 757c0bb5ed05b97a7b0046459791828c151dd7e3b283bc646ed96dc4aa2e37f6
- MD5 c94a31c58da3e2fcc3454161e4248905
- SHA1 533c83f950b8ee8361ab2eee79f583e79558cb3a
- SHA512 90d0374b4e140b43d029bf1a5c14e7d1cfc897080c31cf26d3701b5651ca0ff0dec82d68a91373a328d551eba9086c60942e5704cc54503c0788b59bb403df01
- TLSH T17741030123F62104F3F31F96FDF5A8210A33BD60DE1AD5DE11900A4E06F0968E832BAB
- MD5 SHA1 SHA512 TLSH
ps2DLC/regkeysNew/regkeyPowerShellEngine.reg
- SHA256 32c4b1123bc931b9d81a72bda699ccdc106c41504f649bbfa3d348e4be323561
- MD5 64c4621ec9f06ec7093b8834538ba0ce
- SHA1 b134f815806445bc17cb82a3568a3024d61fd058
- SHA512 6177389e5cc0a98443f83064a0f5db12a4399d38d3e38d213a2daa6cba0395af72852f4d90921a44bb72b3a0510e8ff7ef2d2848535d0f295374c1798cac07f7
- TLSH T1E2119D1413F62204F3F30F99FCF469654A32FC21DF29E2DD12900A0E01B0568E872BAB
- MD5 SHA1 SHA512 TLSH