content-manager.zip
- SHA256 67998c57fc520946f4041152dc3a1f3d5558d4da8062630e9079e31061a21f68
Static task
static1
3 signatures
General
- Target content-manager.zip
- Size 7.9MB
- Sample261011-p52eksat7y
- SHA256 67998c57fc520946f4041152dc3a1f3d5558d4da8062630e9079e31061a21f68
- MD5 82fe38727c2d9f568dc1a15fb4a8a7fb
- SHA1 e7bfc744a10eef61551f2482d98389f72830b727
- SHA512 a58fc6cfe4b1a92e854934ba5ea70cfefabe5a2769ea0457a366294e601cb03251ba3d5001382519f35a47a23dd1131de38e4b429deb5cd190f3d4a9fdfcfe20
- SSDEEP 196608:iTS9tZsAPuTjX6A8yTXEA+cfVlROnZZtvScm85I2mR:iCfuT2AjzEA+cOxvJdIf
- TLSH T1B18633554FBC659719C890B5CA8F6AA6F7638EC143F96C2381F66506C8DF2CC2CBAD01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack002/acmanager.internal.dll ConfuserEx static1/unpack002/actools.kn5tools.dll ConfuserEx - Unsigned PE 40 IoCs
Checks for missing Authenticode signature.
resource unpack002/acmanager.acsound.dll unpack002/acmanager.contentrepair.dll unpack002/acmanager.controls.dll unpack002/acmanager.discordrpc.dll unpack002/acmanager.internal.dll unpack002/acmanager.largefilessharing.dll unpack002/acmanager.tools.dll unpack002/actools.acdencryption.dll unpack002/actools.dll unpack002/actools.extrakn5utils.dll unpack002/actools.genericmods.dll unpack002/actools.kn5tools.dll unpack002/actools.laptimes.dll unpack002/actools.neuraltyres.dll unpack002/actools.render.dll unpack002/actools.wheelangles.dll unpack002/costura.dll unpack002/firstfloor.modernui.dll unpack002/hardcodet.notifyicon.wpf.dll unpack002/hidlibrary.dll unpack002/htmlagilitypack.dll unpack002/icsharpcode.avalonedit.dll unpack002/k4os.compression.lz4.dll unpack002/licenseplates.dll unpack002/megaapiclient.dll unpack002/moonsharp.interpreter.dll unpack002/naudio.dll unpack002/nbidi.dll unpack002/newtonsoft.json.dll unpack002/oxyplot.dll unpack002/oxyplot.wpf.dll unpack002/sharpcompress.dll unpack002/smartthreadpool.dll unpack002/stringbasedfilter.dll unpack002/system.windows.interactivity.dll unpack002/timezoneconverter.dll unpack002/unosquare.labs.embedio.dll unpack002/xxhashsharp.dll unpack002/xzune.vlc.dll unpack002/xzune.vlc.wpf.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Content Manager.exe
File Explorer
-
content-manager.zip.zip 7.9MB
-
Content Manager.exe.exe 10.9MB
-
acmanager.acsound.dll.dll 13KB
-
acmanager.contentrepair.dll.dll 56KB
-
acmanager.controls.dll.dll 1.2MB
-
acmanager.discordrpc.dll.dll 29KB
-
acmanager.internal.dll.dll 173KB
-
acmanager.largefilessharing.dll.dll 81KB
-
acmanager.tools.dll.dll 2.7MB
-
actools.acdencryption.dll.dll 6KB
-
actools.dll.dll 538KB
-
actools.extrakn5utils.dll.dll 154KB
-
actools.genericmods.dll.dll 29KB
-
actools.kn5tools.dll.dll 183KB
-
actools.laptimes.dll.dll 18KB
-
actools.neuraltyres.dll.dll 36KB
-
actools.render.dll.dll 1.8MB
-
actools.wheelangles.dll.dll 50KB
-
costura.dll.dll 4KB
-
firstfloor.modernui.dll.dll 1.2MB
-
hardcodet.notifyicon.wpf.dll.dll 95KB
-
hidlibrary.dll.dll 40KB
-
htmlagilitypack.dll.dll 114KB
-
icsharpcode.avalonedit.dll.dll 592KB
-
k4os.compression.lz4.dll.dll 64KB
-
licenseplates.dll.dll 24KB
-
megaapiclient.dll.dll 90KB
-
microsoft.io.recyclablememorystream.dll.dll 37KB
-
moonsharp.interpreter.dll.dll 358KB
-
naudio.dll.dll 10KB
-
nbidi.dll.dll 312KB
-
newtonsoft.json.dll.dll 477KB
-
oxyplot.dll.dll 468KB
-
oxyplot.wpf.dll.dll 140KB
-
sharpcompress.dll.dll 521KB
-
smartthreadpool.dll.dll 65KB
-
stringbasedfilter.dll.dll 27KB
-
system.memory.dll.dll 138KB
-
system.runtime.compilerservices.unsafe.dll.dll 16KB
-
system.windows.interactivity.dll.dll 39KB
-
timezoneconverter.dll.dll 24KB
-
unosquare.labs.embedio.dll.dll 81KB
-
xxhashsharp.dll.dll 6KB
-
xzune.vlc.dll.dll 111KB
-
xzune.vlc.wpf.dll.dll 53KB
-
ReadMe.txt368B
Content Manager.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4c7a1740bf1320e88b90a680b3bb26047690bcc255bc11a990149475e467a3e4
- MD5 28f19047a03f6d98007c81e20e615781
- SHA1 6f1ce2e67b36222c20a9d4a010080627d477ee82
- SHA512 00f0d50c7f538f131aa709ff14dff804547bc5b85a2a2132ddedecf7b45df7111f2c2569a5bf141fa972b21a29bc0f746e62539908773b76130e8fd425af8fe3
- SSDEEP 196608:ZPIaOoXTtCBhylknTl4nCHy4XKqm/pP02d/ZaZG97OohMud:ZwZoDtCBICnTpS6Kqm/KAGOSoGO
- TLSH T136B6F148A3FC891CE4BF4FB5B83590518B797E8B5B81D34F1918782D2A733428B66367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
aa:07:e7:df:95:3f:80:00:f3:d7:1c:fe:eb:0b:db:2d:79:b9:62:01:9e:74:77:2b:d7:e9:a4:b0:37:79:85:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=AcClub
Chains
Oct 23, 2025
CN=AcClub
Subject
CN=AcClub
Serial Number
25:b0:93:49:8c:5a:54:8d:49:b5:1b:2c:80:8c:ab:4f
Issuer
CN=AcClub
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 31, 2016 - Dec 30, 2039
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
4
Entry point
11346446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Development\actools\AcManager\obj\x86\Release\Content Manager.pdb
mscoree
_CorExeMain
Name
.text
Size
10.8MB
Virtual Size
10.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.acsound.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5032e47dc1ab4472ab791f9ff69b5bd3be9e95bde7f5565a030d2a2eb9cd15a0
- MD5 f1d4a72e4db63f1e10988ee7363e7b92
- SHA1 fa17a86bf6600c34cbc10c865343187cea47acd2
- SHA512 4d64e2a99f7da8ec6f5a2fa90116770f8d473989468465a647521b50c6f80807745a1c84b3a1f1170b2578e457a3ac84937b7d5a388f6588c6ad9e3253a16df2
- SSDEEP 192:8MjDqvJ8L3tNX8cro/79g0OkK+p8Lj/Nq1t21flEgMALXylgIDtigz3y:qqrt5Mf8vSt2BlENjso3y
- TLSH T1EC52E84EA3EC4336F97FABB6697212510F31FF22A422DF9D158C90495CA33440B22B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.AcSound\obj\x86\Release\AcManager.AcSound.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.contentrepair.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22562f3098e20879251f11a61a09e3dbee4613eb0eff9ed56636b210338b3184
- MD5 1e223a6376d4c4c5a31758d5361dbd34
- SHA1 d327418507aae1a34d0265e296fa869d5c0c949e
- SHA512 41c4db869d400b89e7d6113c1e8be7543b719dcbc9149341f32d2dc5e4e476082fb571efae0ffb8d128a827a50a2ce757384d380a486f74187f55480ce3336a5
- SSDEEP 1536:wL9U0fJ4DB3W3SmsM9wfq/OENLLUzf9yhst4:wC64Ah+q7PUzWf
- TLSH T1CA434B01A3FC4665F6FF7FBD6DB492954B34FD4A6432E30D585820EA09973428E21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.ContentRepair\obj\x86\Release\AcManager.ContentRepair.pdb
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52ad74c28c5ef39375ade8a5e9a0df66ada3ef397c8e306ceba9dad748870134
- MD5 b33535d3e55e4eee661fe729a152c9dd
- SHA1 c598e60c689c8f0a3ab8e784d8bd7e8361638369
- SHA512 e2d7fc1e1ad0627f699e67ae49813ed96c1a6bac7eab26c11405c52fb510507922dd167a802d4fc5b400ad6c984ac57a0a869b24a49f6912ef4c667a268c2151
- SSDEEP 24576:HBTZPF0WXiLNLktN5D4ieUnuqAGxbDvHjUHzLMtJRpgcCnczLQAxdg60Sf:hFGWXiS8DqAGxbDvHjUHzLMtJRpg6QAq
- TLSH T18B558C4173F8862CE4BF4F79703044209B397846B9A5C78E689D2CAD1DE37468E5A7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1295082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.Controls\obj\x86\Release\AcManager.Controls.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.discordrpc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d39442dc358c0e2052cff27968172bbc9f3e731c0ca6b9252fa1c993f853215f
- MD5 11bec1ede45aedc9b18e1ebfd8605829
- SHA1 7ab265dc4326da75ce633b9df2f9ce17e972a0ad
- SHA512 6b9f472364959968b5779368f3aa9bd667600bf72b4127a02cf553a49fb3d0fe8c4975635b0321497129ef75dc086f768957660c8fed0454e5a86c16dc76cf34
- SSDEEP 768:qw4dWpRnzne2Yo+tuEoarWc7UHknUJtD+1/cX:6dcRzxYo+oE5F7a0UWM
- TLSH T18CD23B4C77DC8627FEBF6E7AA97052434775A72A7412F74E188C90DD5CA23808901B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35698
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.DiscordRpc\obj\x86\Release\AcManager.DiscordRpc.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db23046a33604d20b3e2dd8cbac81dec19adb2f8cad5e215d8686ae460964a22
- MD5 8a606c23011a1bfebdbd457891fb0220
- SHA1 90fafabd6948a89d89f53820ba472b4ae080e4d2
- SHA512 48b432ee7dee8ef0fde47e7be22c2926fcef93aed7444183e5dcf8af5f8779c9189fa92a329c1ca2541628eb6c478a565fb775767d362a58dab5a6eeeac40f00
- SSDEEP 3072:1BzgGmpPHPmTklWeA+yByioAfgVBAJ3Q4i5uVt8C/5axoFBN9Yg4:jzgGiHieIhfgVBCA4i5uVt8C/5aSFBN
- TLSH T18404D49C3644B6DFC86BCD768EA82C64AA60B477430BE343A45716ED8D4C99BCF051F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
182398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.largefilessharing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2cb39e0f8a34b4ee548f229df52826a5bb3bd3e3be1371718d230a86b86885ed
- MD5 42fcea4f440e01f20c12bd9ee3cd8d3e
- SHA1 8bef06b74bfbcbfc1089ff266245a540849cde4c
- SHA512 6feca065b2a602187d53b916b2cde971bda9c53a1385227abc90e054ec86f5db400d2969314a48eb430ad11f7c9f6103689c8c148e7cd57ea22694bbcff8132d
- SSDEEP 1536:z4QcugzCRuhSoFs4dYREYW7dUFrZV4PZMuu8Uq4pY6+QEZQ4qnQ1Ut:z42wrFhdYHmXyuuRq4pYrit
- TLSH T1C0833C4573F85A13F6FF6FBEB9B452400AB5FA179C16EB8D184C95DC08A634088A2377
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.LargeFilesSharing\obj\x86\Release\AcManager.LargeFilesSharing.pdb
mscoree
_CorDllMain
Name
.text
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
acmanager.tools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e9fa4735bf6e06f4a246e816c65dbd9186fb4bb9d06b327193cc7edc0733899
- MD5 87476fbbe8e8002feb98f0a0bc1e2b1d
- SHA1 6b2b2b10ca5ce127ecf58e0426ed872034b5a3a2
- SHA512 3f6c353bf0bd71c1798a7595edf8dfe0484ebccede91a5efc8a238113db76722becc12a06990fa4a1d3f6fc47b55227e4da1f28ba81ab65fc869ce3ccc28f965
- SSDEEP 24576:hpiGfPN3wcBEqLiBZLlgo9tTW8BDDlcwuYyFJ8UblVKXkUvgvyQHpNvb5E:h5fF8goPiKhujblIkUvQyk5
- TLSH T1FBD55B4673F88F25E0FF6BB9A5709125AB71FA4B6792E34D1144A0BD2D72390AC40B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2787822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcManager.Tools\obj\x86\Release\AcManager.Tools.pdb
mscoree
_CorDllMain
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.acdencryption.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b534ab585bb6227a715c70fe3f16ffbf5f66e3bd1c0723cea0e7bf4221cda36c
- MD5 67adb36b27cefeb03d20c81c0ab95099
- SHA1 c742931f520da674b28ea4bb4c24b616a6137f39
- SHA512 7fd6496ad7fac47f3cc78badec9d639d66305170a1c0b2a1344e6a8af2af3736d669120978eaf082bcafd7e1d7287ec0cd84a041ded81e77b48640b6f498aa9f
- SSDEEP 96:ONdUtlWX4mjb+WiT0mquwSdTQY7Z+c7hBhRlhpfWcp5NbFK:OHcihChhwSyY7kc7hBhRlnucp5G
- TLSH T1BFD1A41167EC8771EEF70B32ECB6916157B0FF68DD23A76E0C4405066C2AB914972771
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12090
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools-internal\AcTools.AcdEncryption\obj\x86\Release\AcTools.AcdEncryption.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 582dcb46c218c75baf68efd4c17ee57776cf9fa4fe89fe04f7e11b020544c6c8
- MD5 a254e7e4fea50f2e9d512e66df84799e
- SHA1 b70423dbcfd348c48326f60def52e6bea27ce4ee
- SHA512 ba3cfe70f233cb7464cfdb6073d22f2ac096d46d89f1e39ae43b4b713871a94b12e3f66f5042a45a25fb14039ac8a12428da2e92a2c09ba2b5a8b4e27b961af6
- SSDEEP 12288:h22vUppTddsG2mgpTAyNlsJ9O867kqSq2zhZ1EtZ0tYA:TUbymGtC9AyZ1EtZ0tYA
- TLSH T180C46C257BE89922C5FE9B75F8785D5953B0E109A67BE74F3808E6F60CC3B508C016A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
556798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools\obj\x86\Release\AcTools.pdb
mscoree
_CorDllMain
Name
.text
Size
536KB
Virtual Size
535KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.extrakn5utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 08cb74218f39e6e4281b2da75f19593043d112324c5c4f96cc27c9d7e2571ad9
- MD5 041dbc04a48138a8036d203f2c78f082
- SHA1 4cc4870e6b0de36b6473c36fb3309620fc194783
- SHA512 083a165d6020947851676cb6494c922d65628fd506f34ef470d4ee51dc492c978d9acceee6da6704f243ec8aec24f5489f8b0b29162f44c69d528f9c37a62bb7
- SSDEEP 3072:h1MuSoK3I5kupyjR7xRfgLI71O+O8f5rrrI9Suz/b3OBYDrCZw093B0tpDyll:h11SoKiHk7xOLI5n3+Hrb3O2g
- TLSH T1C5F35C3973EC5A92C9BF6FBBE4B810294370E51BC5AFF78E5C4C24E909927521912327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
163650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.ExtraKn5Utils\obj\x86\Release\AcTools.ExtraKn5Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
152KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.genericmods.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 666b5bfb089c16f306af2414cac9f73382601be441c8cbb798ac75a70ab4967b
- MD5 7a09d679b747df11dedd72457f4c83ca
- SHA1 524fbcef8e6fb3b5c397b37f0cb116104bbe92b0
- SHA512 7469adb028680979d41358b3bb50aad8b43625e45fdd4373405be4def9c909cbe80453ab5743ef308c22d16a899e52cf90c38d56aa2a9093543ead100fc918eb
- SSDEEP 384:ec5rsXBY2jEGpFQILHA3pgZYiEOrHKtV3KdDVkV4GlPu5kPFSytvtMHeCDCyjlmn:ec5oXBFjEAQFWOOrwV3dibEEpRFC4mV
- TLSH T19ED23A423BFC4372CAEE5B7A69B5A1910BB1FA67E903EB5C1D8C20D61C52B4006217F7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34878
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.GenericMods\obj\x86\Release\AcTools.GenericMods.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.kn5tools.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c180ad15053b2c5c1cd6659a3d2b802d60135a65b59fe26a7e3d19bf0450f625
- MD5 1c7d6c9ded353d044ae5cfa9603130aa
- SHA1 b463c0805715bcd0ff13969b388a3c9a49513d7a
- SHA512 c02ed2e231cf7f3c4bcaf58fa7d91ab875ae547d6aa46d4d21a0172db737d41d7ef5c788cc7c912c203bbf2e2d8b07264cf00ee33237bcfb2377e3ded6af3c41
- SSDEEP 3072:YXwoXwKQe48caWjbALaMwd2eaBoPAZ8sYgdKJi7r61:Cw8wXf8bWjbnZd2eaBoPAZ8sYgdKQ7
- TLSH T198041E9D3654B6DFC85BC976CEA82C64EA60747B430BE203905716EDAE4D89BCF140F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
193822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.laptimes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a34194c9b2e141006fefb8141acdb2585b5b3c3e427377a60f341a7c5ba49565
- MD5 cb7b168296599d0b8312242c08ca2e36
- SHA1 d7c6d4cab416d574d1b422322372f88ee0300c85
- SHA512 b446b5036215717f46a764f3d79d25f883b870cc41812c69ca58cda0b1d5b137f583017d36200061e5cd3f45740bf43407c55414aef9b670050556535c0ddefa
- SSDEEP 384:7aYJUP/YScTW2mOR47oKNfXY3ovqnM3Vdxowj7kbR2e:zJoY+sRGNQ4vTSbRB
- TLSH T1F582280D6BEC9366CABF0FFCD8B1019407B5EB53651BEBAC4CC966A56C677110820B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.LapTimes\obj\x86\Release\AcTools.LapTimes.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.neuraltyres.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f8c3ae0d36f3909f34d1ebf52c348b105f8797dda8a5332cbdbec26a50569d6
- MD5 66d0a237f1f3a28ca8f0379d19d893a0
- SHA1 d1992caca29b599390bb8485dace85cd970e3c3f
- SHA512 4cbd4abd0f434cd1a8f0450c95b21e4e30151e4531f1214bc8d3b54167ecaafd7c91b4b52da7b0d18baf41d6322ac460942a04faaa5157295c6d9406ce4a25a2
- SSDEEP 768:6s0oibIueu8EZTHYDU7kPC3Q3CKybtpY2W/nRX5Roxr+688IqZWxFnJ6gjT+V8O9:d0oibItu8EZjLk8Q0Y2W/nRXzol+68fO
- TLSH T132F23B09B7EC7723EB6F1BBE5AD9A0454335F8136412EBDF2C8C50E9092A7914D107AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.NeuralTyres\obj\x86\Release\AcTools.NeuralTyres.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.render.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 937dc4e1769788442d8fe810b097e66bd4794d11eae00b42a316a50d37a4758a
- MD5 33baa76bc2b8997b02438ba91eff2309
- SHA1 010e846b08f531a62ea040f7ed5261c31c1258d2
- SHA512 adce92f2b43151781472dd24bf7b6cf5f5fbfe329d32185b5c195fad969696860274765bb437987e9a6aeeb10e000b63bc3e6fcbdce0f1bb5575a8a9d9f640c3
- SSDEEP 49152:ygkbutLMFV1D9Sev4fPNvUx3FYF/vaCfn:ySev4nNvU9yF/
- TLSH T15995DF6337E49A3AD19F837A94704C2583F4E6596286F39F065AF1BD2CC3B918C18763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1881806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.Render\obj\x86\Release\AcTools.Render.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
actools.wheelangles.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dc7c4cd10b2e0a25357336ca6edc1277808cca8c52d45d87cb41786042bf8554
- MD5 5f4d4daa146b14613b19f1252fc82575
- SHA1 92b187000e4ef9272a769b17925163288cbb1fe4
- SHA512 31a83bbf5fb6eacca7fa3a07715443bf2a3c452b2565e68982754fdb0eb3b22c5cc758bc593f8d15c298d7ef4692e5af773ad32fbcf1a7457ca3f90b56c2860d
- SSDEEP 768:n9H3+UE55fpcezHPRbP4uwlzsxTLqHOrki3NtN1NdWmvesa+3MBOM1amoIo6wCM:nYFf4uwlIxTLqKl3NJNdDdfmoDh
- TLSH T1123327442FFC062BE6BF1E7DB8F251530E70FEA33522EA5E1695279E485279098107F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\AcTools.WheelAngles\obj\x86\Release\AcTools.WheelAngles.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36b7f832b1510accb1b1636dd4c588f59a5b2b85a555c0e13d25efb23329503b
- MD5 5d6056e02771114eb946c6637bee6c31
- SHA1 a35c10a32940a387b06ba18af54c7008f2eaf1fd
- SHA512 3b8dc1fb94e3e754f098083fa624660cff859ed12e486c022aca86d4e5c224bbb9e79a51a90634cc9776a2dd15fdfa97f3e6b6b9780422fee695527b5de27f39
- TLSH T1C981742193F80676E9774BB2ADB743112375F960DE36D72F064161056C237544E32B33
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10130
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Code\Fody\Costura\Costura\obj\Release\net452\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
firstfloor.modernui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 64bf7f7128cd764e6cbbaef609e8eddbd4aad9f1fb11630c0e7d500368dd5a73
- MD5 efe7dbd7cd941d4ee1e703dc99b6d64e
- SHA1 543ca1e03ff45ba09bea8c289c87c1039a809fa3
- SHA512 20146fa23259561c76bbbd1bc88bb42734f7c06403e074dd81f4bd74cf01fa6b05e76d9c3dccee6679f95fb548dcd8f4632a559fb47883602ac84da75922d85a
- SSDEEP 24576:b2i+Dys6Qae7bXFOEjoW+DiacbnYEO4H3x/lW4tT9EP8QPoUI7Ae8ZJHvHZPL5sO:izp7bXvokYEO4a4tT9N7Ae2JHvHZPL5t
- TLSH T1D6559E8033B88E2AC5BF0B78B8246569E731F81597D1E71FA49D5ABD1CC93424E407EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1297202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\FirstFloor.ModernUI\obj\x86\Release\FirstFloor.ModernUI.pdb
mscoree
_CorDllMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hardcodet.notifyicon.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ff1781b13697746afb16273e77cec2accb8250a0c8238d95d4840391cfb8233
- MD5 19a7b24aa7b0571a7275c871074029c3
- SHA1 3a8368af2139cba5e3a74424c3a7566ce5981b96
- SHA512 563e572bafc0bae10e0df3a44b835bc648b3781217c89477e67e66dba24fcf6757b19b84dd281c0172e8771d9a890a15e8637d63df78f1846218115c52c827be
- SSDEEP 1536:Tn5gJMjd1gS6+/9PZzKrgqO5mFpGQXiJJh4JZsUEeTVVhXDSsxSg34:T/gu/9xJqtT30J2ZsUZT3Zm6L34
- TLSH T13A93CF8523FC8126C6FE9A34B5B523208331FE527A71DB594A80D6381AF77C956903EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102098
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Hardcodet.NotifyIcon.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hidlibrary.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d209557220702603dd34f5c060baf8bb2ee4956fb5f833c90e618333cc9d9458
- MD5 eaac31f6cb4b87232f415e1cb3e3652b
- SHA1 dbc1c5f94d1a99542466cbba497347fb6b79e938
- SHA512 4aa75cefffd35f46369c872ec44a685286ffc81f55fedbb64832e3db30088bb8d98622f52a5ed20ac229f7046654af16c9481013fc0c7149e7af089cd16b0f3c
- SSDEEP 768:G9z2zzuUlNpJg5NsjguAaK88hCFxSrJYtbLqLBz9zkz:VQ5Ns4LOk9cLqJmz
- TLSH T1D8133B64279CCB33C7DE1A7DB8A287005BB4D65AA302FBDE4B8CA4A53E577D105D02D2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Development\HidLibrary\src\HidLibrary\obj\Release\net45\HidLibrary.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
htmlagilitypack.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4b41dea3b725f426cc6b59b7ba2f654b4206f4f22a530f35f32f8e2974053b32
- MD5 366de2b01eb91fd2bdab0eaafecfd40c
- SHA1 2b66d395d2047a1b1873456ace095d837b484cb3
- SHA512 e3c0ba11047399c216441f57018fa5ddc1d1335bea22f6df9a154ee3051c9048100ec33a46995a64815f7bbcbb0b8f9f5a8fd0e0738ce4ed005d02e08590d710
- SSDEEP 1536:nNfrnJNjFp0IO156qjs0lPykuCEBlFXcglELWPGr1Y7KGYDpSSv0Gxi:nNfvF7O15VsUuDBcwwpSSbi
- TLSH T16BB32A15B2FB4723CF9DA6FFE4E4506947B1922B7103FB4A4C9870EE98623D14926E13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Jonathan\Desktop\Z\zzzproject\HtmlAgilityPack\HtmlAgilityPack\obj\Release\HtmlAgilityPack.pdb
mscoree
_CorDllMain
Name
.text
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
icsharpcode.avalonedit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2bf6079c143f177d954731db2ffde515bee8fbd6261e0d338ba8e7c8df1ab658
- MD5 d7467d0156f22feb4b22cc5f74d7bd60
- SHA1 bcc1d959786ba4253491b67d448f97cf5ad709ed
- SHA512 f13092a4154524226900c8f3089ef776932cae601cb21cc10af1111014aef97a1183a2344da3f5b8f5b9fbe8b4b420412d79b71e97a1b4ed2ec384b502ba1c28
- SSDEEP 6144:64Gybj4PJqJZD0JOi0Av5+ENJzHLeDjN3kNHjoJAo7gOfwlflvuSn:6i4PwJZ1szeDjKRWwl5
- TLSH T165D43B29769C5A2BC2AF1777E1711105A3FBFC46726ADB8F284476FE29837134C016A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
600750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\GitWorkspace\AvalonEdit\ICSharpCode.AvalonEdit\obj\Release\ICSharpCode.AvalonEdit.pdb
mscoree
_CorDllMain
Name
.text
Size
580KB
Virtual Size
578KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
k4os.compression.lz4.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 781eed9f4ea0d61d336a6e771ddf0979193e304f894da9999bfb7316ebff5c00
- MD5 a94106d177dccae3143a77aa48fca695
- SHA1 5053514bfe5c3a9c6556f26bbd1aac55ed74c27f
- SHA512 912da19724b598c67ad758a3556ae6e3d26b1026ee9eedca816f97c26445e6a784ca816249cf25cf60e759282918ebfba17bd4d81522191013a38d047f3aedf3
- SSDEEP 1536:vXvFZyTTb+xFnafu0jmtMQEI2rKNQ8S7rSYnqLFel:vXvFZyD+xFuu0jmKZI2rc/YnqQl
- TLSH T1B7535C6C5BEDDB36C88C07B9509981CAC271D227E243DB2B76D888316D837CC485A7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\K4os.Compression.LZ4\src\K4os.Compression.LZ4\obj\Release\net45\K4os.Compression.LZ4.pdb
mscoree
_CorDllMain
Name
.text
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
licenseplates.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 feb848e578909ad22637dd1ab56fc858f45095bd1a7dc8865da04d0afeb98975
- MD5 45ceaaf9276b0fda89d6e1d8043d98fb
- SHA1 71a68f99a333e7b45add0631a5435519d3755641
- SHA512 fa4ada4e026e02d082f01b41f21e764514c5d3b70bde45204dcb2b1f26b385ba7ebc80c81b043dcf72db798eee9a31220a8549200420e050c1ca2b72e13c603c
- SSDEEP 384:lPOsl8tmWco8L/4meu2ZuAvw8mkpNn2/zvBwxZ9HjCPn3aejYx2KjhEevLLTz:lLutMoI/GZuAvw8mkpNn27kXDCK0eJjV
- TLSH T1F0B23C197BF8A237CEEE0BB964E201510372E556B903F7583E8D70DF44A7B841A017A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\LicensePlates\obj\x86\Release\LicensePlates.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
megaapiclient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8aaac4693169b77eda6ae21e512b08cca528dce38aa08fd8d9b87cdd8785e07d
- MD5 4e6e1f6b2581a87bbcd90ef103a49c52
- SHA1 075d01facc33ab9a38167c9a8d78f42ba9a2d447
- SHA512 48633eefa8ce977bcfe7cdc8844a69d5b26a89547149a55514cf6c6f7d550a760f4fa7d5aacc7f7d762c6d8ad684555614c55548c8eb0ac3fbd30003bdde6ad5
- SSDEEP 1536:vkiAmpgUL8920YM3sD81oA4LFgd3fflItwL/5:vkFmp3L8920YM3u8oAtd3GtwF
- TLSH T199935E397FAC8367C76E4B39E4B242540379E1B63402EBD79D41B8A92D13BE12A017D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\GitHub\MegaApiClient\MegaApiClient-4.5\obj\Release\MegaApiClient.pdb
mscoree
_CorDllMain
Name
.text
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.io.recyclablememorystream.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9b458979f8b56a3c81731ffb7b93fe50b99cc26c5965d6127656ac0390f82f6e
- MD5 6e6954ce4fa2742edde7eb6d2e674c3e
- SHA1 3649d885328f3fa466abbd72ff8a1602d93ca1f3
- SHA512 5d83fc5ad59bbae482672e3a846738615f7151fa63b059b3dd55bea6ff03793622a797c81d73d31eb89967e09e8f475d4c4e54faca1e87db4a9f7930360d5321
- SSDEEP 384:stogu8xcMjE0oplMAt1u7WVoMqZUkKMkROT4oLzARlex4f9d9/GJ2/wW+iFWqD/r:SC0opq61u7WIC3K9LUbfzDDvDvP
- TLSH T1630329145BFC4617CBAF3B70A9B496921B7AE6C27822D7CE1808F5DD2C07BC24511B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6c:84:2d:04:e3:f3:91:ff:84:68:13:ca:ef:1f:1a:40:74:b3:64:33:ed:99:93:82:42:f3:1f:a7:0a:0c:e8:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 10, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 15, 2020 - Dec 2, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:3b:12:1b:92:23:52:02:5a:a5:00:00:00:00:01:3b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
34798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\1\s\src\obj\Release\net45\Microsoft.IO.RecyclableMemoryStream.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
moonsharp.interpreter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1db76110f21698639f55d28e21bddb536c0c497ceb741dee49fedcca9bcd1588
- MD5 699cc514aaf6f46a51f4ed2511274d8e
- SHA1 7e83cc467941d335c9b19ddcc28ae7319f5e3928
- SHA512 bd0b5545065585fa7215fe25627ad10f94dc8b124ee5a9c278478a03e45ea24a730ecf6b0ffff96fb59e81f900a05c3d22ef2a34a1586bb4a121344fda11a8b1
- SSDEEP 6144:QUJj6CVrONhcwlfwBCX5yJq61H901drh/IqqwAt:ZJjdrkqBCpk1C/r9tqw
- TLSH T1A4745C3567FC8A1AE2EFA730E47404098BF9F817766BE74E4D44A4E91E5334298213B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
372010
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Z:\git\my\moonsharp\src\MoonSharp.Interpreter\_Projects\MoonSharp.Interpreter.net40-client\obj\Release\MoonSharp.Interpreter.pdb
mscoree
_CorDllMain
Name
.text
Size
355KB
Virtual Size
355KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
naudio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e912b951c90708553db3c90c600c28a1aca7dc7713080ee8312a0536ab23d4d7
- MD5 031f114f237d84f95220bf867ee289f8
- SHA1 e0b781432e75d2adb18104133bb4322d4e083a79
- SHA512 4f0e21100c98dfceb31efb8b3faa3d9985f3f4699a1b7b45443902e3d40654c59d4e6bd2d8279515e0f3ee9ebeab6b4d42005f1ef62373cec505421674835639
- SSDEEP 192:X7xve7xBv0vOQ9mOI4NbKn6tKpU5XoVt1fO5LUnUlqfaAMnfkhwPj4agd2sM9veB:BcYOEMgleEoVDOMaAMnf6wPj4a/veP3p
- TLSH T1C522E711A79ED336CCDF0BB9EC63129013B5EF6065239B2E26CC125BAD637054B2176B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\NAudio\obj\Debug\NAudio.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
nbidi.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb8c6923ff00a9ec32ecff01e67af2e9c9620051de01cc9d9eda09ff08c4fb25
- MD5 4f388ff5f625885c89a7ce83746e4218
- SHA1 c933c85f2dfa1d1d72c76ab58bf7658ba25f0f53
- SHA512 2245ad598fc4a2f2e0a1fc09c215b77de958b646329ac672edb24884ec7cc72844b7030063421f801ce1f16f8e0975a7f61816975e890c441f00811e2c34bc66
- SSDEEP 6144:m6xrl6gz5BuK2UybtuYTRMeq00RMrHs5e7FEmVGhRtzXaZMgZs1VENU:m6X1w3fIgSa6f1
- TLSH T1D064B431B70F56CAE7DEC73EC9A6931433E18C480CBAD7BD8D8A39CDD8253516A42865
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
313694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Itai\Documents\SharpDevelop Projects\NBidi\Trunk\obj\Debug\NBidi.pdb
mscoree
_CorDllMain
Name
.text
Size
300KB
Virtual Size
298KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
newtonsoft.json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8ecff736f35bbf751499efd43839da020452afc8ca3435516abe821e691b4e88
- MD5 984196e96f92a1d640e877c530551845
- SHA1 21dcdb00c6f31f83fbd9cf1845dc425aff17f7ff
- SHA512 e94d031c4ea7c1f7beb2beb5ae2d8bd9f4a655d411d07e7c2f07d43748ad26743f0c20517a2bb693addec4f63790741b9a951c043e7234f3b89333d7bb0b1f46
- SSDEEP 12288:OUGn1nz7qTxWv06ZydWMfGPXB/eNRCyQEMhr:bGdz26ZyfIB/erC
- TLSH T1FAA45A1223FC8729E2EFA772F0340A545AF9F816B2B6D78E2941D9BA1C577608D50373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
493838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\GitHub\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Net40\Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
474KB
Virtual Size
474KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
oxyplot.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f26a61d2d085a226a1e8f86da1568124745ed8631fd0e094b6cc133738db8eae
- MD5 9f98fae75f3277eee100dba0257a4aba
- SHA1 c182696f1bb17f6f4f01e5a630b29d9946834afd
- SHA512 e9297ac88a75e592e118f9dccb63824106ecdb896a3cd616b94ea6478c3c02f480d2a1dd7f96c66247a4c2e671096b6f4361bf4a50dce63fab23aab0dd4e4d13
- SSDEEP 12288:a1F7uQ+ipsaryyWP9PWqgSa8G/zYcaahNO6Q+0:a1Ssyypd8G/2ahNO6Q+
- TLSH T15EA42A1D27EC977BCA1F573AD0B0142962BDD10577D2F7EB8A40A5AA2D87782EC041E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
485838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\oxyplot\Source\OxyPlot\obj\Release\OxyPlot.pdb
mscoree
_CorDllMain
Name
.text
Size
466KB
Virtual Size
466KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
oxyplot.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 760fefddd0489e5d7d54ab3f02a4c0082308b1c648647f39d7ed51e6f01dce9f
- MD5 73fd78eb95ecdfcc8b4342966025512f
- SHA1 455d7a2ffac4626e655f0ae8d407f7294a90b49f
- SHA512 17e2bfe95333633ac0e4de304f8a47cdef73c55fe75dd7ccea990f56d56b42b4c4259e481e691293368dd1c0d141771f590cbfe0efb12df1c4daa343583ec6b9
- SSDEEP 3072:X938P3++PAclwfTFPhwucw7Rk93AWGC7dNE:CPh4TpSfKRUddN
- TLSH T185E3B6F57379CE28C79E1770B8A427344730AA23BAA1C39D66D493FE418FB02A5512D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
149246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\projects\oxyplot\Source\OxyPlot.Wpf\obj\Release\OxyPlot.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
138KB
Virtual Size
137KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
sharpcompress.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7293d866e34c189641124ba6d68766ad793b19dbafa5c5c3c59d3d0a97e9b370
- MD5 a8cc292d376ed04878ff093aa76096e7
- SHA1 70f41bf2baa694d4393d87b721486b8783b65ade
- SHA512 81216204df4a6c381f1dc0302c003a7f9341ed7dac4d1dcc156ebd7d645832ee8b0fd2201fd7863f8d50fee44f91a68c1bec4fedc2f13c1ee6899ffaac1c930c
- SSDEEP 6144:a7zxs/S0wm/zFiGGVieey5jL/P+qXj6DNlbQN7QTW5c9vgRQ0aZYNZei:GP0w3R5jL/GqX+hlbQN7JcR1mZf
- TLSH T1C6B47C1037EC6B2FD6DD47B1E0225C6DC3F1E1696687EF8B99407ABA1C97B418C006A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
519662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\sharpcompress\src\SharpCompress\obj\Release\net45\SharpCompress.pdb
mscoree
_CorDllMain
Name
.text
Size
518KB
Virtual Size
518KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
smartthreadpool.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 27f4e01100886d0a425eeebee3c803bd6132393df87026d19e7b7b7a64442474
- MD5 6ef7779d2552efa5fb43984d4e731602
- SHA1 a73b79196a0d3a3d9d76d8a7192e8a48df74900d
- SHA512 d35e927e76fc9bc4663b42eff6293f9e333178f9c67f3ea518210acb31ed550e8ceb1413eaa71f78c6968a1775085646b16863f0700cf27e4301db8956b45713
- SSDEEP 768:8WmXz98qbYpyeI3xCIsDhuXCiP4i5I0NSXO1Qf0NeiQEWXh91nqbu4BNWsgyKJOz:8W7eYpDnWxR2GeXBnqb5BN+Kw5H4B
- TLSH T1B6533A2447EC4B9BDB6E4AFD99F515A907F6B3863263CB4F8C48E4A82C533810867317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\Dev\STP\STP.git\SmartThreadPool\obj\Publish\SmartThreadPool.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
stringbasedfilter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 39b25a5f73618d3dc3391b43562ef0fc223346764a10bced69106368bf4dd7d6
- MD5 39962091c09d0335fad78a0c22cfaea2
- SHA1 9800b20d42ba6af5b06048daf14ef5d24caf980e
- SHA512 a237471e77eb5e20f3e03767a6cd9c5b52d0196378b5228ba596b05fae489b871290a051cfcc5d58fa5e73fff8cdde56b060bbc0fc0ad63d52c2d022a75cd0b9
- SSDEEP 768:cEjy8uybMh9sBy8eaPttQJJytsksUda2UuR:cb8uyMEy8eaP19V7
- TLSH T1FCC25E11A39CC23FC74E0AFAFCA1065047B1D2976013FF5A5E1CB2942FAB39966459A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Development\actools\StringBasedFilter\obj\x86\Release\StringBasedFilter.pdb
mscoree
_CorDllMain
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2e3949fcf3a3b3a20bb9a568a4da582d9a90d64f34c0bdc07c9029bfe8f1858
- MD5 df29f9a876f042b588bd291d5dd7bef5
- SHA1 d23f11cd8f96af1e76c847260f9ba6a32e62bd08
- SHA512 2dd463513ba5dcaa04cbf3c7d12e44e705ca31d889bab5360264004527aa25995c10dcf3511ed1c5b62d9e67ce57f5585e82197b0417587912b4081725d88e8e
- SSDEEP 1536:Xxi8ae06y7Q0kSutmvEmFk0pBa/+h8k/6jY2F8andhqABtX5y4W2IMW:x0vDkSutmhFeYq3DqAn7NIr
- TLSH T15FD34CA42BD9EA67CB5FCC70F0245155A730852B4652BB7B1CCCB4F16993BAD240C3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:77:5f:34:39:1b:70:a8:1b:14:ef:a6:df:e2:33:5a:8e:94:de:b8:0d:fa:24:3c:c8:71:b3:7c:cf:d4:5d:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:1e:0e:bc:e5:4b:16:a2:03:1b:00:00:00:00:01:1e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
136282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netstandard\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.runtime.compilerservices.unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3cadcb6b8a7335141c7c357a1d77af1ff49b59b872df494f5025580191d1c0d5
- MD5 9a341540899dcc5630886f2d921be78f
- SHA1 bab44612721c3dc91ac3d9dfca7c961a3a511508
- SHA512 066984c83de975df03eee1c2b5150c6b9b2e852d9caf90cfd956e9f0f7bd5a956b96ea961b26f7cd14c089bc8a27f868b225167020c5eb6318f66e58113efa37
- SSDEEP 192:erLXx0hyLsbb3rxVj7WU2WLTYoW4GD5dHnhWgN7acWlbAkWD7DiqnajKs3WoHpZ:Ih06sbbVVPWU2WPY7dHRN77RGlGs3jJZ
- TLSH T18F724B45CBEC4607ED232B7085A8D583FF38A3D75816A32929C5F67C0C9A7C5AF21638
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5d:cb:7e:a5:69:25:4f:af:a8:12:26:de:6b:e9:9e:73:3e:09:68:df:fb:5d:fe:9e:c2:d5:81:e1:60:48:4c:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 20, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 4, 2020 - Mar 3, 2021
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:2d:2e:4d:41:ca:63:65:33:a0:00:00:00:00:01:2d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 19, 2019 - Mar 17, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
13198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.windows.interactivity.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4aace8c8a330ae8429cd8cc1b6804076d3a9ffd633470f91fd36bdd25bb57876
- MD5 3ab57a33a6e3a1476695d5a6e856c06a
- SHA1 dabb4ecffd0c422a8eebff5d4ec8116a6e90d7e7
- SHA512 58dbfcf9199d72d370e2d98b8ef2713d74207a597c9494b0ecf5e4c7bf7cf60c5e85f4a92b2a1896dff63d9d5107f0d81d7dddbc7203e9e559ab7219eca0df92
- SSDEEP 768:6MazwAgR8/XJ665bKZdxuB8DCuL5enM7JxKjuMlZCZN+R0E7E:63wBccZdxuB8mQen6JxKjrlMZgR0Eo
- TLSH T18603F71073EC422BD6FF0A78B87562200675BAE5B953D39CCE88D1EE48A37D049A1777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\ExpressionRTM\Sparkle\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\Win32\Release\System.Windows.Interactivity.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
timezoneconverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e9c35108e4b0484fbb28006294ede97698803e18aae412f37e87e8166953430
- MD5 33dad5df652e4082d3d9312135f364fb
- SHA1 06712a445a0c2c5f1f8b470a34f86fb079879388
- SHA512 883b6bab6c1bfa7ba45cec2e2ad8adea8ce184822f16fa3a5910b99bc459c3ca478cdd4fdf01b46c317ced395ada30837ae7a9402c3797673ac0762332c870c4
- SSDEEP 384:5jBUtfZcutCE1hXcyVADOQ+rpMi98kOjvRodUDfZryc4RfXIXC6++QYxwhj+cTsE:5jBGXtC9ByUDfZryc4Rf4ynY++cTbff
- TLSH T16AB25C54E7EC9732DCFF2BB858B6A2050330FBB19C21CB6C989872455926B1495707BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Dev\oss\TimeZoneConverter\src\TimeZoneConverter\obj\Release\net45\TimeZoneConverter.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
unosquare.labs.embedio.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 765cb5686c2a833775b9a9418bf9077021007b727ef94b287c461fad999ae7b3
- MD5 e379ae5b75fe158b62daaa23aef5bce6
- SHA1 302b144f04cbfae95892916a4496cd1487d6df3c
- SHA512 aaf890b99ebe5daf7fa004220ba9a0a8630c5216c0a5e697413c079f4ac3c8e44d8eba47f8339f17d39a31889ecd118a33cba8e056c8f8f644dceafb98e98ee4
- SSDEEP 1536:1FCNMG2NLtHFEKvzccnc0/xAnCdsMqu25GhDmr:1FLGAvzccnc05AnCtquzY
- TLSH T18983914537ED56F4E1FB8F7DACB135050A7EB84DE815DA4D2C1A208D04B2B7AA852F23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88506
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\embedio-master\src\Unosquare.Labs.EmbedIO\obj\Release\Unosquare.Labs.EmbedIO.pdb
mscoree
_CorDllMain
Name
.text
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
xxhashsharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cbc0d23b9647bf7f7da1ee73c0c83c4d587f84fb6f786a69feb0414cb0d94e43
- MD5 5d7633de49d95f74b130733f33cb831f
- SHA1 17f384663eb71e012898e31bc1875ce636348063
- SHA512 f22ead90e39f17e716bff372ee1368b1d6b8c40663d8d0ed0cbbd27022b246bbb2c02f4fcca7cc754a7babc06dd6269653980e3351d8d1cd177340938b9ec090
- SSDEEP 96:f1cJfiQ5PWuUUDKPAa0yFvhYaJtWWRBDKtOjM5z:e7OcDKp0wvqPW/DKcjM9
- TLSH T103D1701457CC0733ECBB0B7E99A7121B17616F20DD62EF6D489C06195891E642F33BEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\nori\Source\Repos\xxHashSharp\xxHashSharp\obj\Release\xxHashSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
xzune.vlc.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 29c9e6e62f4d5424f8dd6580477f078a74207f39e84099e68869e5f96a8fa3fa
- MD5 fe59245a7a7273511483607c750b96db
- SHA1 cc5aff2124e949c691c1bec56adc533d1d9075a8
- SHA512 f8b7c9544e8bd41bd98e8d256fac0a34206afffa701f62142bd50944296076fc680299468db20d0cd2f6e8cfea893a1ef0643c3b33c2aad38a129bc0df73f426
- SSDEEP 3072:0vxHKw7PgzguQpJksQSS+p7XtJmMGRQtZsqpEBmQX4fJlZ:eqigzguQLCShNdsdatZsqpEBmQXY
- TLSH T157B31C613BC01EE2CFDE4E7AB022406942F4F7426436D73B655CB3F86A9B384446B5A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
119966
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\xZune.Vlc-master\xZune.Vlc\obj\Release\xZune.Vlc.pdb
mscoree
_CorDllMain
Name
.text
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
xzune.vlc.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 23b749b8c6fb27c9ac92e6af1aafabb726e5641756c07dc38b00c5d1632ceada
- MD5 ff191771159c4674e061e71facb77d4d
- SHA1 87151528b9b4301b376f2d96ca0c6ba38a494b38
- SHA512 68f43f2803108aa620bf99a3ebd68f98278f3bbf4a3274dfc1ae6a96bb99604d440fb4ce5d6e3c0e67a766752213f32b6f654c7c4f9bab82f11146a00cadbe23
- SSDEEP 768:JE1Z5zk7c3AfKGkTMjY7zUwnIxWTDcds5yhESrkkNAxaBDWZ7chjXa6:J6k7cakTtzUwnZx5yhjrkXZ7ejZ
- TLSH T15B332C7057284B6BCA9F4639F464662141719F863253DBA9EEC4A0FA2D5B38D0E04BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
59974
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Development\Temp\xZune.Vlc-master\xZune.Vlc.Wpf\obj\Release\xZune.Vlc.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ReadMe.txt
- SHA256 0b960a01f72962e47ef2da6d9117b05b361b3ece33b913ec6c605422f741b357
- MD5 9359da33f076b8c30fa7c2adff9a4421
- SHA1 17b3ea5c1db51b96123d26f235c18942d433b101
- SHA512 e3ddc2a10b6c8e20890c5dad1ace9ecf3bc6f955e0565cd58960915da9a5a2f0779cba8d7f13dee5c6190c2032875a22f4d50d98fd468fe054e81ecb273742cb
- TLSH T112E068AD400D1260CA52ABF9B295E450A626540FF9BAB82E28DE42392B876C50C9E545
- MD5 SHA1 SHA512 TLSH