aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475
- SHA256 aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475
Overview
overview
8Static
static
3Lertaro/Le...pp.exe
windows10-2004-x64
1Lertaro/Le...pp.exe
windows11-ltsc_2024-x64
1Lertaro/Le...pp.exe
windows10-2004-x64
8Lertaro/Le...pp.exe
windows11-ltsc_2024-x64
8Lertaro/Le...re.dll
windows10-2004-x64
1Lertaro/Le...re.dll
windows11-ltsc_2024-x64
1Lertaro/Le...dk.dll
windows10-2004-x64
1Lertaro/Le...dk.dll
windows11-ltsc_2024-x64
1Lertaro/Le...ce.exe
windows10-2004-x64
1Lertaro/Le...ce.exe
windows11-ltsc_2024-x64
1Lertaro/Le...ce.exe
windows10-2004-x64
1Lertaro/Le...ce.exe
windows11-ltsc_2024-x64
1Lertaro/Pl...es.dll
windows10-2004-x64
1Lertaro/Pl...es.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...or.dll
windows10-2004-x64
1Lertaro/Pl...or.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...AD.dll
windows10-2004-x64
1Lertaro/Pl...AD.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...ip.dll
windows10-2004-x64
1Lertaro/Pl...ip.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...ta.dll
windows10-2004-x64
1Lertaro/Pl...ta.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...te.dll
windows10-2004-x64
1Lertaro/Pl...te.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...v2.dll
windows10-2004-x64
1Lertaro/Pl...v2.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...re.dll
windows10-2004-x64
1Lertaro/Pl...re.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...e3.dll
windows10-2004-x64
1Lertaro/Pl...e3.dll
windows11-ltsc_2024-x64
1Lertaro/Pl...e3.dll
windows10-2004-x64
1Lertaro/Pl...e3.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lertaro/Lertaro.App.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lertaro/Lertaro.App.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Lertaro/Lertaro.App.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
Lertaro/Lertaro.App.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral5
Sample
Lertaro/Lertaro.Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Lertaro/Lertaro.Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Lertaro/Lertaro.PluginSdk.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Lertaro/Lertaro.PluginSdk.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Lertaro/Lertaro.Service.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Lertaro/Lertaro.Service.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Lertaro/Lertaro.Service.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Lertaro/Lertaro.Service.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Lertaro/Plugins/Lertaro.Plugins.AudioDeviceSelector.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Lertaro/Plugins/Lertaro.Plugins.AudioDeviceSelector.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Lertaro/Plugins/Lertaro.Plugins.AutoCAD.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Lertaro/Plugins/Lertaro.Plugins.AutoCAD.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475
- Size 8.7MB
- Sample261013-2dbq3act5w
- SHA256 aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475
- MD5 026dbc8e73a8c7965b7ded1aadd916d1
- SHA1 cebf22bccb0fe1259bf6d042cc8bc2130f54ae51
- SHA512 b60204e7e1e6aca5ab7e351e199e4bbe05e5ba2216726fd1108c4c7dc64d6dd4158512d6a6ea5f1d11a641496b06bdd6457a4da5218a3c0ace2c9e60e7c3a805
- SSDEEP 196608:Vb6jaE+P7BI6kOErbEN7/wiXIi18XRcfSzUY54I2XRcfSzUClHDyfzOJ7M6GQMNt:J4+Dq6hEnEdwi4g8hQq2hQIufzUAu+5v
- TLSH T19996338CC54FD7C8FDAE517C094935C26C5171CCB834BE6EAF01ABF49024B6A69A74CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 57 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lertaro/Lertaro.App.dll unpack001/Lertaro/Lertaro.App.exe unpack001/Lertaro/Lertaro.Core.dll unpack001/Lertaro/Lertaro.PluginSdk.dll unpack001/Lertaro/Lertaro.Service.dll unpack001/Lertaro/Lertaro.Service.exe unpack001/Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.AudioDeviceSelector.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.AutoCAD.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Calendar/Lertaro.Plugins.Calendar.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Calendar/OpenccNetLib.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Calendar/ZstdSharp.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Calendar/lunar.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Lertaro.Plugins.ContentSearch.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.batteries_v2.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.core.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.provider.e_sqlite3.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Core.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.DocumentLayoutAnalysis.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Fonts.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Package.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Tokenization.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Tokens.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ContentSearch/e_sqlite3.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.CoreExtensions.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.CuratedThemes.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.CustomActions.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.CustomCommands.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.DirectoryOpus.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.FileFilters.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.FileUnlocker.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Files.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.FlowLauncherBridge/Flow.Launcher.Plugin.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.FlowLauncherBridge/Lertaro.Plugins.FlowLauncherBridge.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.FolderCascader.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.OneCommander.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.PinyinAlias.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.ProcessManager.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.QuickLookBridge.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.SpanishAlias.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.SystemSettings.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.TotalCommander.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Translator.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.WPS.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.WebSearch.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.WinRAR.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.WindowSwitcher.dll unpack001/Lertaro/Plugins/Lertaro.Plugins.Xyplorer.dll unpack001/Lertaro/lff.dll unpack001/Lertaro/lff.exe
File Explorer
-
aab5602d90ac19cce1ca170caf6e786c42e98d0eac4e15f2dd7a6c9cda944475.zip 8.7MB
-
Lertaro/Lertaro.App.dll.exe 2.8MB
-
Lertaro/Lertaro.App.exe.exe 473KB
-
Lertaro/Lertaro.App.runtimeconfig.json553B
-
Lertaro/Lertaro.Core.dll.dll 1.1MB
-
Lertaro/Lertaro.PluginSdk.dll.dll 129KB
-
Lertaro/Lertaro.Service.deps.json2KB
-
Lertaro/Lertaro.Service.dll.exe 340KB
-
Lertaro/Lertaro.Service.exe.exe 472KB
-
Lertaro/Lertaro.Service.runtimeconfig.json609B
-
Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll.dll 38KB
-
Lertaro/Plugins/Lertaro.Plugins.AudioDeviceSelector.dll.dll 38KB
-
Lertaro/Plugins/Lertaro.Plugins.AutoCAD.dll.dll 15KB
-
Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll.dll 21KB
-
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll.dll 59KB
-
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Microsoft.Data.Sqlite.dll.dll 173KB
-
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll.dll 5KB
-
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll.dll 50KB
-
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll.dll 36KB
-
Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll.dll 1.9MB
-
Lertaro/Plugins/Lertaro.Plugins.Calendar/Lertaro.Plugins.Calendar.dll.dll 105KB
-
Lertaro/Plugins/Lertaro.Plugins.Calendar/OpenccNetLib.dll.dll 576KB
-
Lertaro/Plugins/Lertaro.Plugins.Calendar/System.Formats.Cbor.dll.dll 87KB
-
Lertaro/Plugins/Lertaro.Plugins.Calendar/ZstdSharp.dll.dll 387KB
-
Lertaro/Plugins/Lertaro.Plugins.Calendar/lunar.dll.dll 409KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Lertaro.Plugins.ContentSearch.dll.dll 143KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Microsoft.Data.Sqlite.dll.dll 173KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Microsoft.Extensions.Configuration.Abstractions.dll.dll 27KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Microsoft.Extensions.Primitives.dll.dll 43KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.batteries_v2.dll.dll 5KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.core.dll.dll 50KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.provider.e_sqlite3.dll.dll 36KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/System.IO.Hashing.dll.dll 54KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Core.dll.dll 49KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.DocumentLayoutAnalysis.dll.dll 242KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Fonts.dll.dll 1.0MB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Package.dll.dll 4KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Tokenization.dll.dll 22KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Tokens.dll.dll 47KB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.dll.dll 4.1MB
-
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/e_sqlite3.dll.dll 1.9MB
-
Lertaro/Plugins/Lertaro.Plugins.CoreExtensions.dll.dll 778KB
-
Lertaro/Plugins/Lertaro.Plugins.CuratedThemes.dll.dll 225KB
-
Lertaro/Plugins/Lertaro.Plugins.CustomActions.dll.dll 33KB
-
Lertaro/Plugins/Lertaro.Plugins.CustomCommands.dll.dll 52KB
-
Lertaro/Plugins/Lertaro.Plugins.DirectoryOpus.dll.dll .js 63KB
-
Lertaro/Plugins/Lertaro.Plugins.FileFilters.dll.dll 23KB
-
Lertaro/Plugins/Lertaro.Plugins.FileUnlocker.dll.dll 39KB
-
Lertaro/Plugins/Lertaro.Plugins.Files.dll.dll 20KB
-
Lertaro/Plugins/Lertaro.Plugins.FlowLauncherBridge/Flow.Launcher.Plugin.dll.dll 50KB
-
Lertaro/Plugins/Lertaro.Plugins.FlowLauncherBridge/Lertaro.Plugins.FlowLauncherBridge.dll.dll 197KB
-
Lertaro/Plugins/Lertaro.Plugins.FolderCascader.dll.dll 56KB
-
Lertaro/Plugins/Lertaro.Plugins.OneCommander.dll.dll 21KB
-
Lertaro/Plugins/Lertaro.Plugins.PinyinAlias.dll.dll 89KB
-
Lertaro/Plugins/Lertaro.Plugins.ProcessManager.dll.dll 27KB
-
Lertaro/Plugins/Lertaro.Plugins.QuickLookBridge.dll.dll 28KB
-
Lertaro/Plugins/Lertaro.Plugins.SpanishAlias.dll.dll 10KB
-
Lertaro/Plugins/Lertaro.Plugins.SystemSettings.dll.dll 17KB
-
Lertaro/Plugins/Lertaro.Plugins.TotalCommander.dll.dll 40KB
-
Lertaro/Plugins/Lertaro.Plugins.Translator.dll.dll 42KB
-
Lertaro/Plugins/Lertaro.Plugins.WPS.dll.dll 23KB
-
Lertaro/Plugins/Lertaro.Plugins.WebSearch.dll.dll 45KB
-
Lertaro/Plugins/Lertaro.Plugins.WinRAR.dll.dll 15KB
-
Lertaro/Plugins/Lertaro.Plugins.WindowSwitcher.dll.dll 51KB
-
Lertaro/Plugins/Lertaro.Plugins.Xyplorer.dll.dll 23KB
-
Lertaro/System.ServiceProcess.ServiceController.dll.dll 33KB
-
Lertaro/install-dotnet-runtime.bat.bat 2KB
-
Lertaro/lff.dll.exe 356KB
-
Lertaro/lff.exe.exe 472KB
-
Lertaro/lff.runtimeconfig.json519B
-
Lertaro/portable-cleanup.bat.bat 2KB
-
Lertaro/portable-updater.bat.bat 209B
-
Lertaro/portable-updater.ps1.ps1 7KB
-
Lertaro/runtimes/win/lib/net10.0/System.ServiceProcess.ServiceController.dll.dll 89KB
Lertaro/Lertaro.App.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ec6ec26db77eafd26f8db4ce1d94cbbf759f1d38f8c92e4a69d5356c35d4c148
- MD5 b8c47fa4fd130856ee5a9462d6fbbb42
- SHA1 df4440949a22be09fe8f728cc2837d0941d61e72
- SHA512 a2b6ffe463adb241c12cb621b6f8db173580cbe78883e24b12c4412336bc8479c4d2d1a2bc01ae5c35807c1ab1b33a0a53713ac878c25a4c94583eb3fef3d878
- SSDEEP 49152:RRrgvbGYBfgnIOWXknBNeamCxQfe6Y7rDXTuUEf47jrdqKctkdJth2:TyfmhiM/2
- TLSH T1ECD58D1037E8497AC0AF0739943142625674EE4663C1FBEC076EA96C2C99F1F9DA43B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2668922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\Lertaro\Lertaro\App\obj\Release\net10.0-windows\Lertaro.App.pdb
mscoree
_CorExeMain
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
316KB
Virtual Size
316KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Lertaro.App.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 1eec12d4ee24542932d542947f07e702f6ca66c16222d7f42f51c233ca69bf1c
- MD5 daa97222f457a34e76c8bd277fc44584
- SHA1 c118b01d34f1916027231785f11b856acaff4cd3
- SHA512 9b39b3dd8949bf8ec99868c9687e1d69793cc7e35108509adfbf21a86a60a50e01d2730b4f7e02a2915d1b583ed8bea9dbb5f8c333a1815d31dc9e311a0d820b
- SSDEEP 6144:5HRu7F1nQnB8KKuHbFfiUVPCXAplnnHHqCqo0P4p0Fl7RhB9SNdBDoIGAwMm:5xOF1JK4APCQplnRT0PgXGkm
- TLSH T179A46A12A25C00E9D0629B7CC5B28703A731392547E16AFB138E3D667E6EEBC5DED701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
316KB
Virtual Size
316KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35228,
count=1, id=258, version=35228,
Lertaro/Lertaro.App.runtimeconfig.json
- SHA256 63c471eca563169c6278c43cacf9f48a1c52845dff9d6ebd8c83872fd91ce8fc
- MD5 8332bcef6fca48cedb40e113fb53c239
- SHA1 5eef3cbab81983c1ff5501f04e3f883202db6284
- SHA512 004892cf7fa81f8b4a033105433d44c42285a0722151f22f10c9dc74daa8c6e0c18cddd412db46a0fe9578ab75387bede67d53c2212ff4f21f37c9ed3e1d0685
- TLSH T1A1F0E26ACA106DBB08F933BAD52AC182EB30532B20041D52B5FC081C7F776B22211F95
- MD5 SHA1 SHA512 TLSH
Lertaro/Lertaro.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2ecfc49c6fe0a869864dd0a099f4217c3d670f53b36e6871da8c4794e65e4ffc
- MD5 7156a2ccc270a4f73706c98fc22952f6
- SHA1 b1845e3a9ed47aafba8152a548678586f5344828
- SHA512 76ee3ad2921a8eafec344a0ff6abeda3079c00f1ba6347f84e801579813f2a9bf626dd39ac19e0da1f4ccda779fbd50c48a9c668af5859c9bdabbf7f540942ca
- SSDEEP 24576:OoZCygvMSCIGD1wyQKB4XD531RFKbg/NqqlGE2g6:fZqvMSrQxq
- TLSH T1ED456C8273F84A7BC9DF2739A830565DC7BBE1057692F74E2A48E4991C2338D4E447A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1202282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Core\obj\Release\net10.0-windows\Lertaro.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Lertaro.PluginSdk.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9cd3da4d7e4b6be01b44bdbce2d8b7070de6a7c99e76bdabe27e3f993358d10a
- MD5 a6fd0c6610c998f89ef3f88e31df8872
- SHA1 e53f55922c33c2b8a80484a77c04cfc9c4820306
- SHA512 bc36ef38df854b8c6d4106dda8354fc0a5a630e935e39b028708d62c54ea8f01f3a5be65c6960f01a82e666ffb9c9c61b30518303a9d5cae027dd53eb49efe15
- SSDEEP 3072:wEJQCOPEoeBM8cwavDEggala5n5htAgx3bcTO/neYuL1srVlabnean:wEJQCOPEHBM8cnhgaijAgx3bcTO/nPgr
- TLSH T144D36B2033AC876AC7DE8B38B4398955D3329F0A6013DFAB6E54F9ED1C6378516017E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
137750
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\PluginSdk\obj\Release\net10.0-windows\Lertaro.PluginSdk.pdb
mscoree
_CorDllMain
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Lertaro.Service.deps.json
- SHA256 fdeb9fe3694a5f3d2eb166a544c2e7181a3fabebe004b87a9240bd21fda4725c
- MD5 b6c2d0b0d24b5910d52008f3263739f6
- SHA1 5d3d7f988c4da6345bea02ef5f5cc935c0328ec8
- SHA512 f03419183d837fc18619db51544cfb87f61796fafe4735d8f75f9ad77fca13f6db415d074c3492f38e36672f86a528c75ccd53128c80b675bd12df2f37c08047
- TLSH T15951E215C1940FB701B653F664764392F6A6076F50041C3FB9FC905CAFF2EAA11A1F2A
- MD5 SHA1 SHA512 TLSH
Lertaro/Lertaro.Service.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d7cc811c114e31c9ad7ee8436bb3ae910e3e3ec1b5981fe6af8b7b8c8ecf763d
- MD5 5646492fbeaa00889a467feddf1692bf
- SHA1 ecda482c23e276ff176aae955bc56b61c7187fff
- SHA512 3e17767e594eb8881a92b0442fefa4ac9b51f49a64b2c59e437eea4ec74a4ce802afa822bae050d64ff7bf9d0b213c03bc20712323c11982aa8d24dde87a7485
- SSDEEP 6144:hiZbFfiUVPCXAplnnHHquqo0v4c0Fl7RhB9SNdBDoIGAwMm:1APCQplnZT0vHXGkm
- TLSH T123747A16669C44D0C8560BBC85B2836306317A2155C1AEFB27CE7C67BD7DEBC68CEB81
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32138
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\Lertaro\Lertaro\Service\obj\Release\net10.0-windows\Lertaro.Service.pdb
mscoree
_CorExeMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
315KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Lertaro.Service.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 5e11c547f04071dc0b6e94aede601550379423097ff06b0364aec25c8aa3ab47
- MD5 089b523f42eca418775e64304bb4fdc7
- SHA1 1a11b6cc6310047e5e762d9ae037f55d14cafc16
- SHA512 ed2b074b60852c5b56db5bbf5ecc6a2d5c948711da743e33e61a9b862f4030a26f7b7ad0c2341467d6f6f2c6fb54acd06000d83860158ff03cead1cbe112ae07
- SSDEEP 6144:EHRu7F1nQnB8KKWAbFfiUVPCXAplnnHHqCqo0P4p0Fl7RhB9SNdBDoIGAwMm:ExOF1JKxAPCQplnRT0PgXGkm
- TLSH T1A7A46A16A25C00E9D0629B7CC5B28703A731392547E16AFB138E3D667E6EEBC5CED701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
315KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35228,
count=1, id=258, version=35228,
Lertaro/Lertaro.Service.runtimeconfig.json
- SHA256 ff18bf5bc26d1acd5ea4cdc136cb542470c7f507f31ac96d69e37833fc9c6ae1
- MD5 1ce6ca872e3aa9bdf4e44a7b7db31c5a
- SHA1 dfd83e63f7a6fa33b002c716245d7d12286272aa
- SHA512 ed846bfad810b9339c9003cb5e754ebc4b66469d6e5f1eedcf5f46ec45a504d43546d6ee917e52c146bb961295ec732b424a586fda8d28efb316d3ead558bdb9
- TLSH T174F0F02ACA106CBB18B922BAD52AC582EB30132B20001D42B5FD081C7F776B52222F96
- MD5 SHA1 SHA512 TLSH
Lertaro/Plugins/Lertaro.Plugins.AnimeThemes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 065075fad3f2d752780fa4f852c77839337f89bcb19da3fba3e467c649762b6d
- MD5 05bb018622e0d3fe2d33ea3b6071d28b
- SHA1 f1bcdbba1806958d5a7d5afde176c35d98fa3fb7
- SHA512 5230a725f86bfd899923746306baa41dd9f8d214ee953c3bdd66c7b40f16fffdc69f4626993aedda3d60da82d85a10381755c5b42f210fcad41f915b9e889708
- SSDEEP 768:AvYB1Ix+TEHjzKhLJzjzKheVN8faUw+KRzyQVuejzKhp0DX6:kUdUjzKhL9jzKhUDjzKh1
- TLSH T128038519A0E9C5F2CE3B04F2E1B11A81317C7E7A9E114D66F9CE321C7CA15260DB6D6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\AnimeThemes\obj\Release\net10.0-windows\Lertaro.Plugins.AnimeThemes.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.AudioDeviceSelector.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 53461dc2e4fc7de99241119718e7399d86e1623e11280c7d6a59160837587ea5
- MD5 974a92a66cc59935d5e5148d77064b77
- SHA1 bb298a307b3f1d0c69037bd4391f0c668bbff719
- SHA512 8d48b9ee09bc837cf4631b4e6dbb3fa8e3efeb21b7d2bad140ddc947a133ed0037f1658d203e60a1c371d9b79a2186aee690be215d2ab11a91468596e8765e94
- SSDEEP 768:B66AMxmPH+lUbzh9vjl/mFuaGK+rKMSs2wli:B6bfXh9v1K+rKMSRwc
- TLSH T17803EB6972D46B33E5CF4EB3BCA540C263709BEF401A9B0C669854259D2FD013B62B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\AudioDeviceSelector\obj\Release\net10.0-windows\Lertaro.Plugins.AudioDeviceSelector.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.AutoCAD.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 38b4b26cc1eb42a197116ddd0beee91e38cd3359522166814ceaf172fc0fcc8f
- MD5 0b5a47f3dbb914608f6f2716ed243975
- SHA1 5728a3dbb294aeeee6cd4d4eb7a6bbb4e0d6f99a
- SHA512 1806da691c592e66c1ea4a74a46938b273eac615db96689a934663bfef8e5290aabb59583da368c72d71297cd97e18ce68a866424bf94941a9fef08f91afa759
- SSDEEP 384:VrJBT/M26VbYa2DiODcMscM887wWTJ3S+E6D+AH8jLQOG4QYo:VrJBT/6bYauAP/JwWT0oiS
- TLSH T150622B44F7C84139CABB03B9659B0BA273B1EE15C966CF5B08AE503D1C53B571322B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\AutoCAD\obj\Release\net10.0-windows\Lertaro.Plugins.AutoCAD.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Bandizip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 56e7da7b9995d8705ed6f8093bc1f563c2a3399ecdab3cc06a4601e80639c561
- MD5 c83fc98ec2f7ce3a4bea0fcbf18abdc6
- SHA1 651c36993b22e8dbc2bc07424c6f5d1b952fa6d2
- SHA512 746ec7f4ae2146bbb5290c3fb1efedc9f721d0c1a3f2af6efdfc8337a7280e48992dc6b2ec68481ade681a916b773e067a0a2481b017b6e38b8fe3f7cf65d058
- SSDEEP 384:o9g6JQpYfdVL+mbjDQYaa6hs+MMSLVrjEkDAVUuvwCdKjUUY:d6JQqf7HDUamlvwCkjUUY
- TLSH T12FA239B076C6462BCFEF0EB9119A128272B5DF318717DF274EAE70191C233961236766
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\Bandizip\obj\Release\net10.0-windows\Lertaro.Plugins.Bandizip.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Lertaro.Plugins.BrowserData.dll
- SHA256 7e43d7e660165d606392b4980e91fea66b34d2fec54971c56198677cbcf54927
- MD5 1e44c7ecc3946eb67834e89d376ab7ec
- SHA1 4a702b48550c9e3a1a5d6c8517bd714d2b08f9f1
- SHA512 7342941a5e8e328e8f1ae178240883a45a5d5cfdf43968b7921fca36b35f3548b63c311149ea5ef8691149393c3fcadd68328449a39311ebc365cfdabc051c1d
- SSDEEP 1536:1a0gsYZtS0Pbw0Ncxi8/9nveX5uO29IX9QurX:LAS0PVN6i8/9nveX5uOa+H
- TLSH T13653190923DC6713D4FF3BF16774D0613932EB468676CA0D269F60080A2BA592F65F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\BrowserData\obj\Release\net10.0-windows\win-x64\Lertaro.Plugins.BrowserData.pdb
Name
.text
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Lertaro/Plugins/Lertaro.Plugins.BrowserData/Microsoft.Data.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b98d957462be432895b00dccca012d3c127e118d3d4262418014b92c7bbd66cf
- MD5 51c88ec46d02e5fcbbae32f7efc816bf
- SHA1 84a39e0cbedf0865db4392fedbce618e1ef3bd48
- SHA512 d4bdcd07b9dbcdee78e093bdcb464059e104e535d97e4a64231549afc3bb345c2b497a0b09bcfd8444f1eb12e23d14641144dca3e9c71aa8f21d0dadb584fa58
- SSDEEP 3072:ZPo1U7KHI/FRmHsG08CrzqWLvVtly6SGBSilr7DSILSAQSIgdGKCxFm:domLmHsG0DGWhrZS43IvKCi
- TLSH T1070449B4035C6543C7FFCE32B0B96C824734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8a:ea:1b:31:a1:c3:6b:82:9c:7b:88:9a:67:68:60:d4:ed:91:4d:a0:e1:9a:eb:c9:88:e7:eb:5a:83:fb:1e:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1d:4d:19:c8:4e:d7:0f:57:48:00:00:00:00:02:1d
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:23:4f:d9:60:24:53:cf:fe:2b:00:01:00:00:02:23
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
172314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/efcore/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net8.0/Microsoft.Data.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.batteries_v2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ee3c6ff4d39171690d6ff6f84b4d876ed038ca28e39bb6e74995f52d2aacf8b
- MD5 490b696311f4231b4ea185037f14cc55
- SHA1 13d2acd8fac09fd21fde551d9e1bb1a3c468b1ec
- SHA512 469057350a35ea475382f5b3557c0d779f1b1420cd97f0cf6b872a411bcef821696017c218f1a1c0e56507a12603e5ce7c1167274582a4ab06fcb7d247a91197
- SSDEEP 96:9aMe4wcBcI/Yz1SOx/K9hENAA+dKmDbw:02HoSkNAApK8
- TLSH T112C1A861E7E7823BF57B9F73BCB202014334B921DE23AF3F4D81421A5C225589A24B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.batteries.e_sqlite3.dllimport\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b72c9dfe1479a568d6b84e249eaf949e76c757888f8056fb6ddb9c0480e0dd25
- MD5 ef29daf8897d26c6c518b4c76ea8ebb6
- SHA1 572deaa7c06253ce66ffa28550a43c04b68604c2
- SHA512 f4f6c8de29f0b9596c97c813154c908536978899d0a25cbc40ded05786bf34371d84127aa27b173addad74008eeb8ef5f0ac7a5ac01d7415388421df6ae2771e
- SSDEEP 768:NXptZis0cewNbQoWf8kYYt8mFI37khpDFZ4cfT1o2d9P58zG+2s4JnXqrZ:NF0cew5Qbf8utJI3IzFOYrPizDP4VIZ
- TLSH T1E433A43187969A29F8CE1770683E0185E675C51483F7DB1BAE94E4742E323CB46A21FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\net8.0\SQLitePCLRaw.core.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.BrowserData/SQLitePCLRaw.provider.e_sqlite3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d6cb90de643c6b4b15f973d1e304f7dd91e8bf053c35013e4ea095d85b53655
- MD5 d07c2bdb14875d31f90eaa75d3270d11
- SHA1 b3d8325cfd85908a1d6606471aa6198e7d6553f8
- SHA512 4466b3d6b85629b49f24ee0926d7205af063703893d0514d164760c918d34e328f2cb8c8a210e44ffe747696883339ea54d72fc88fac2a408a4bcf42bc76f275
- SSDEEP 768:PgIQUpZmdWSUpeWRKMFgx5HCJW0fm+aFIkPI/7jaxqJqsqiWv70:oI+UKAfm+aFhPI/7eqq7T0
- TLSH T107F276D6974F6A38E19C07327C730E8992B8D391FB731717AA53D339ED626884D403A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net8.0-windows\SQLitePCLRaw.provider.e_sqlite3.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.BrowserData/e_sqlite3.dll
- IMPHASH 97c1b87ef61ad7e5bb505ad47c49ba87
- SHA256 6ad8e149f8ce3ed3716402b4b3a2268ebbdc7b64391b5fafed747e03bb1b9418
- MD5 69c328fa39ea2c7fb76f924420b81fc0
- SHA1 af3819d6a91ebb518de7099a6bf7046725aec165
- SHA512 8f51a2c904e9732afa8ceb182cbd6a511aca9e387a276cb828cdd232242dca08e6650737ab7338656229ccfde734ec8eb15e351e56f0243f81a71cbfbe46d160
- SSDEEP 49152:InpyOe5K6DJRA7oTIYPdAKM0hIOKc2qUVrN4Pg:KcdAKM0UTqPPg
- TLSH T1EA958D47E3B900ACD567C27885175717EBF2B0051725AADB52A08A652F23FF21FBA334
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1501232
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\sqlite-builds\sqlite-builds\cb\bld\bin\e_sqlite3\win\v143\plain\x64\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
GetModuleHandleW
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
RtlLookupFunctionEntry
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleFileNameW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetTimeZoneInformation
VirtualProtect
LoadLibraryExW
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_db_status64
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_preupdate_blobwrite
sqlite3_preupdate_count
sqlite3_preupdate_depth
sqlite3_preupdate_hook
sqlite3_preupdate_new
sqlite3_preupdate_old
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_errmsg
sqlite3_set_last_insert_rowid
sqlite3_setlk_timeout
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_free
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_truncate
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3changegroup_add
sqlite3changegroup_add_change
sqlite3changegroup_add_strm
sqlite3changegroup_change_begin
sqlite3changegroup_change_blob
sqlite3changegroup_change_double
sqlite3changegroup_change_finish
sqlite3changegroup_change_int64
sqlite3changegroup_change_null
sqlite3changegroup_change_text
sqlite3changegroup_config
sqlite3changegroup_delete
sqlite3changegroup_new
sqlite3changegroup_output
sqlite3changegroup_output_strm
sqlite3changegroup_schema
sqlite3changeset_apply
sqlite3changeset_apply_strm
sqlite3changeset_apply_v2
sqlite3changeset_apply_v2_strm
sqlite3changeset_apply_v3
sqlite3changeset_apply_v3_strm
sqlite3changeset_concat
sqlite3changeset_concat_strm
sqlite3changeset_conflict
sqlite3changeset_finalize
sqlite3changeset_fk_conflicts
sqlite3changeset_invert
sqlite3changeset_invert_strm
sqlite3changeset_new
sqlite3changeset_next
sqlite3changeset_old
sqlite3changeset_op
sqlite3changeset_pk
sqlite3changeset_start
sqlite3changeset_start_strm
sqlite3changeset_start_v2
sqlite3changeset_start_v2_strm
sqlite3rebaser_configure
sqlite3rebaser_create
sqlite3rebaser_delete
sqlite3rebaser_rebase
sqlite3rebaser_rebase_strm
sqlite3session_attach
sqlite3session_changeset
sqlite3session_changeset_size
sqlite3session_changeset_strm
sqlite3session_config
sqlite3session_create
sqlite3session_delete
sqlite3session_diff
sqlite3session_enable
sqlite3session_indirect
sqlite3session_isempty
sqlite3session_memory_used
sqlite3session_object_config
sqlite3session_patchset
sqlite3session_patchset_strm
sqlite3session_table_filter
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
258KB
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=147, id=261, version=33145,
count=46, id=260, version=33145,
count=21, id=259, version=33145,
count=3, id=257, version=33145,
count=135, id=1, productName=Unmarked objects,
count=10, id=259, version=35721,
count=14, id=260, version=35721,
count=32, id=261, version=35721,
count=2, id=260, version=36248,
count=1, id=256, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,
Lertaro/Plugins/Lertaro.Plugins.Calendar/Lertaro.Plugins.Calendar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12b2038bc1344ea5ad9f44a3e16b30c3a98c4feba7753d8f671840072f7785ce
- MD5 5bdecf0829fa30ccac38b2ba57c4bf4e
- SHA1 e5a42a6d4553f55bb871d3e8c4e6db999fbfdd6b
- SHA512 4fe9fc9593d226e611ea8cebd4840d7bc65020f1952e3f45f6b7e1886a6aafd63f7c142405c71d13adba5dc9583fe67218dc96b3812b3598a6e046666fd8c9c6
- SSDEEP 3072:MJzPFl74xuqFl1j+maW1aTGTJqu3aqVp8pOywLcccnJHn9e7/WXWWUBV6EwQXflI:MNd5EYUg7v
- TLSH T14BB329647A594A33C2EF0775D03180421772BFAB5903FEA80F9E7A5448EA78341696FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
113574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\Calendar\obj\Release\net10.0-windows\Lertaro.Plugins.Calendar.pdb
mscoree
_CorDllMain
Name
.text
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Calendar/OpenccNetLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 075187cabd92043af0571c2cb3b4204bc6ddc2444244ec6c1c4b1620897dba0a
- MD5 1325aa7cae97ab7acae549ce34edaca1
- SHA1 efaff235a0470293e2699036ffe11191ddb246d5
- SHA512 168e38441547029b0ca35a07e6a8606298b3139cfa6c125199cd34723ec16f9cb840fb2cae898e30e815b8de1b5b1e379d7ed4fd5e0462664fce2efc33684541
- SSDEEP 12288:5cX1eXo8Xp1LL6ln0VUO8jN1QAqyKV4I50P:sUZ/iJ33QXVn5y
- TLSH T12DC4029553EC429DD19F993D76B0901887B0E413BC25EF8BAE7CBAEE04237607401B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
594874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\codes\CSharp\OpenccNet\OpenccNetLib\obj\Release\net9.0\OpenccNetLib.pdb
mscoree
_CorDllMain
Name
.text
Size
573KB
Virtual Size
573KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Calendar/System.Formats.Cbor.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3a627be756ca02d45a46f8d4470ecc8f55f7ac6a9152ed38d6583e194210dcc9
- MD5 242a06cebe95107bceab9b425b179728
- SHA1 80d5cfa578cee1b6cb1811a929d2eabfa249b8de
- SHA512 d6f9a3342006ee8ef9b9eb6761706fbe04510e027f03d96e4bd074d766933e164be1fa7d86dd00fb830da74bc623fb3e979597463826c99e24de9fa7883fa920
- SSDEEP 1536:Wb8aTqtDv3yH5y+MWomrlziFvTb2NIV4AMwCrJezBO:YqJ3a1Xrl4SIuAMwC1eVO
- TLSH T1F69319416BF9572BFAFF2F74A4F460264A3A7CE6BA31D79D4184419D08B2BC48860773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e7:97:69:b6:29:39:a8:08:34:6d:31:23:4f:16:6f:bc:eb:07:74:ea:65:2b:fd:46:05:11:60:a7:a0:19:9a:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ba:1f:3f:19:f7:c1:75:bd:7c:00:01:00:00:01:ba
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
84738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Formats.Cbor/Release/net8.0/System.Formats.Cbor.pdb
mscoree
_CorDllMain
Name
.text
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Calendar/ZstdSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b285bb9f59928becb8e048bf2a75e872f6555f8773d7b72386a9f77f447f425c
- MD5 fad83206b5b3a7659e9ae57ffae1deeb
- SHA1 8673f35dcda4d93930fa8382396de6de8e4b9572
- SHA512 2e5ce80c55123a066ca775aff6ad021c26774ccbac1245a8192be747eb2ef6a790b12ba38ec1ad4b36cf16aa14247d8fa2d5d5af5165cf23809d0be6a2cff18d
- SSDEEP 6144:shqWsozinctOHXlxnMm+o63eYhwRRi8ZvnuBjwvfW8VG+r/vZSfvx4HMZ3tCV:0sPnlnN6uYhco4ovx
- TLSH T185844B7A73C99B66F64F8B708065049AC5BA9026F95BF39F6CA8C4E86D053D4DC04BC3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
402158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Work\c#\ZstdSharp.v2\src\ZstdSharp\obj\Release\net9.0\ZstdSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
385KB
Virtual Size
384KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Calendar/lunar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ad29a079529a69c211333473ba696e61e5f54c32a7422ee31c5e82121723688a
- MD5 9caf220e849fcdda2f2b7c04a0d481ef
- SHA1 74a69f172815c4c34c41c7d1b798f27750c3f507
- SHA512 36fdacd987865c5b8b8df7533b51ccbade64caab1a6bb9013511d3f6546dd3867f807816d9b5e1c79614839cbeee2f9e1c3f3f0ded8276848eca4bdab7703a1c
- SSDEEP 3072:pjetMrq4u5Qnp/iUzsdEps9BcF9RT/LeIsXb+KMNfNuNEZuPC9GNMNfNuNZkKiAP:otMrq/SMLBUvTLebXb+hdQe2b
- TLSH T1A294C73D5968153BC2BBD376CAC55913F4519EA73158FCD8A8D303AA4712B82B9C223F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
368814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
406KB
Virtual Size
406KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Lertaro.Plugins.ContentSearch.dll
- SHA256 e48418071fc9cddca0c0eb6483faf92f9899c87a5b15aedbf1d016aeb7cb5fa1
- MD5 26ce09cced4cbccdea3c8ff951c9bd50
- SHA1 787025dba45f72504bb68df9b357160e10ae129f
- SHA512 e1b8d2cd046a5926d68580bfe7c95a314bd2a981f3b088b518cc4da45ba4868f2059512a724af30e11519aec4c24451373e61f23903cc7988384bfdd1a903883
- SSDEEP 3072:4wOMcAv8xSYKdjIU/HeSyYTkFcbp0plIIx6MCE1gfTCc3uhJw:AlSYo0UfeSrmdplIIx6MELiJ
- TLSH T1F0E32B2422D8061BD1FFABB455B961D04F31BB25A831E78E1D9E62ED08F1F814A7137B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\ContentSearch\obj\Release\net10.0-windows\win-x64\Lertaro.Plugins.ContentSearch.pdb
Name
.text
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Microsoft.Data.Sqlite.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b98d957462be432895b00dccca012d3c127e118d3d4262418014b92c7bbd66cf
- MD5 51c88ec46d02e5fcbbae32f7efc816bf
- SHA1 84a39e0cbedf0865db4392fedbce618e1ef3bd48
- SHA512 d4bdcd07b9dbcdee78e093bdcb464059e104e535d97e4a64231549afc3bb345c2b497a0b09bcfd8444f1eb12e23d14641144dca3e9c71aa8f21d0dadb584fa58
- SSDEEP 3072:ZPo1U7KHI/FRmHsG08CrzqWLvVtly6SGBSilr7DSILSAQSIgdGKCxFm:domLmHsG0DGWhrZS43IvKCi
- TLSH T1070449B4035C6543C7FFCE32B0B96C824734AA4BD5D2D74BAE40E5B93923745AE8129E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8a:ea:1b:31:a1:c3:6b:82:9c:7b:88:9a:67:68:60:d4:ed:91:4d:a0:e1:9a:eb:c9:88:e7:eb:5a:83:fb:1e:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1d:4d:19:c8:4e:d7:0f:57:48:00:00:00:00:02:1d
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:23:4f:d9:60:24:53:cf:fe:2b:00:01:00:00:02:23
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
172314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/efcore/artifacts/obj/Microsoft.Data.Sqlite.Core/Release/net8.0/Microsoft.Data.Sqlite.pdb
mscoree
_CorDllMain
Name
.text
Size
160KB
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Microsoft.Extensions.Configuration.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb45286fa39f58b9e74b6346e31034e00031170169ee11fd0a15f99b6dca0b56
- MD5 5cd2b689a84867eac5abc07e9fa6b23f
- SHA1 434c69050f8427206d54f69eec771cc8c741f992
- SHA512 0ac58e45d3f314dd93eed95b2fe621fd265524c451cf54ee79465167014f252b36d6489d32330ce2a4b8bbb06355a9ecec258313d9f26d0a0697d0342294e2fd
- SSDEEP 384:5J5rtAQhkfuUIbQearO9vaTG/dwSzRjz67MsTFOTyWsENWIOZlNZriSR9zcJqBAO:r5KQhFFbQe6QplR8rr9z8qBD
- TLSH T135D24B5683AC9323CDBB2E35E8B4C8552E39C3D76801EA5958ADF0494DA37C05772B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e3:c3:71:d3:bf:94:0f:50:31:20:83:6f:45:d0:c8:f2:e4:26:6e:85:17:cb:58:a1:c0:65:a8:26:ce:67:d1:0b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:2b:bb:00:50:ff:4d:3b:9a:a1:00:01:00:00:02:2b
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
23298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/Microsoft.Extensions.Configuration.Abstractions/Release/net10.0/Microsoft.Extensions.Configuration.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/Microsoft.Extensions.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 67642533eb87e8dadeb9026de59ff4b66cc9bf35c0cfbedfef7b79bc6d8b30bc
- MD5 f1f83d3f3393c329c882fa8741527337
- SHA1 df4a65e7ceee84aae59ba93fd2f9489dd448ec03
- SHA512 1a3bb92fabafa6705eb40cccb447e2ac1096101abf2a06949986ab66e7460d67a155749aa083fb7c400cadcd8f8737ca743991947d7a55d3faf1a4f981a0fbe9
- SSDEEP 768:VipZy7/jRFQLfvJ4dBaYal6et/dElz1OkytW58cZM7uijK1KNHHy09zYO:EMjjcLfn9LtFEp1OkytVc67uijK1CHyK
- TLSH T12C134A51A3AC8323CFFE5E31A4F4C1550A38C7AA7952FB5B52C890A16D633C45B2263F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a7:86:be:38:7c:e2:ad:7d:88:51:69:ec:89:33:64:ae:12:c6:d4:50:90:01:b2:1d:81:e6:e4:89:48:bf:d3:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:9a:a1:ee:dc:27:e2:f8:b7:00:00:00:00:01:c7
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
39470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/Microsoft.Extensions.Primitives/Release/net10.0/Microsoft.Extensions.Primitives.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.batteries_v2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ee3c6ff4d39171690d6ff6f84b4d876ed038ca28e39bb6e74995f52d2aacf8b
- MD5 490b696311f4231b4ea185037f14cc55
- SHA1 13d2acd8fac09fd21fde551d9e1bb1a3c468b1ec
- SHA512 469057350a35ea475382f5b3557c0d779f1b1420cd97f0cf6b872a411bcef821696017c218f1a1c0e56507a12603e5ce7c1167274582a4ab06fcb7d247a91197
- SSDEEP 96:9aMe4wcBcI/Yz1SOx/K9hENAA+dKmDbw:02HoSkNAApK8
- TLSH T112C1A861E7E7823BF57B9F73BCB202014334B921DE23AF3F4D81421A5C225589A24B76
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10770
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.batteries.e_sqlite3.dllimport\obj\Release\netstandard2.0\SQLitePCLRaw.batteries_v2.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b72c9dfe1479a568d6b84e249eaf949e76c757888f8056fb6ddb9c0480e0dd25
- MD5 ef29daf8897d26c6c518b4c76ea8ebb6
- SHA1 572deaa7c06253ce66ffa28550a43c04b68604c2
- SHA512 f4f6c8de29f0b9596c97c813154c908536978899d0a25cbc40ded05786bf34371d84127aa27b173addad74008eeb8ef5f0ac7a5ac01d7415388421df6ae2771e
- SSDEEP 768:NXptZis0cewNbQoWf8kYYt8mFI37khpDFZ4cfT1o2d9P58zG+2s4JnXqrZ:NF0cew5Qbf8utJI3IzFOYrPizDP4VIZ
- TLSH T1E433A43187969A29F8CE1770683E0185E675C51483F7DB1BAE94E4742E323CB46A21FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.core\obj\Release\net8.0\SQLitePCLRaw.core.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/SQLitePCLRaw.provider.e_sqlite3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d6cb90de643c6b4b15f973d1e304f7dd91e8bf053c35013e4ea095d85b53655
- MD5 d07c2bdb14875d31f90eaa75d3270d11
- SHA1 b3d8325cfd85908a1d6606471aa6198e7d6553f8
- SHA512 4466b3d6b85629b49f24ee0926d7205af063703893d0514d164760c918d34e328f2cb8c8a210e44ffe747696883339ea54d72fc88fac2a408a4bcf42bc76f275
- SSDEEP 768:PgIQUpZmdWSUpeWRKMFgx5HCJW0fm+aFIkPI/7jaxqJqsqiWv70:oI+UKAfm+aFhPI/7eqq7T0
- TLSH T107F276D6974F6A38E19C07327C730E8992B8D391FB731717AA53D339ED626884D403A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\SQLitePCL.raw\SQLitePCL.raw\SQLitePCL.raw\src\SQLitePCLRaw.provider.e_sqlite3\obj\Release\net8.0-windows\SQLitePCLRaw.provider.e_sqlite3.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/System.IO.Hashing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cea6795cf9f7b139b2215ff6de794a6f6e44e78640fb30fa4c0d5fa8472df8e5
- MD5 492e3acb764164f3cb60028d9b879108
- SHA1 441ec8d7bb783fc36497bd7d4409807dde09aac8
- SHA512 f347ff8bcf58ce6b4ae0f5d3f1d4cdaf4e41c567945baba60f7eb64f91c9c44f701e55b35c4e9e7a8c7a38751f4d32c91bf1a3410927362a4af77f020f655220
- SSDEEP 768:8JbXk3JmKGWTFUXgL1aIHnf8ogAE0I3b2PpJ/1nvB6AbigFd6V79zTFbHV:8xRKb1UogAb6bSph6AXd6VRzTFJ
- TLSH T1DF436D839B98872BCD5F1D3760316695077AC2AB2E53BB8671E894B41D473C98A103FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:bb:c9:f3:e8:0f:3d:53:c8:7d:49:7b:1d:d1:a4:5a:a2:47:65:55:78:3a:4c:90:5e:1f:fd:db:3d:3e:94:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:25:80:c7:37:c6:cd:aa:77:49:00:01:00:00:02:25
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
48386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.IO.Hashing/Release/net10.0/System.IO.Hashing.pdb
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cbdd1809ee0f4ba617900845d182e5e67183377fe5848a8d9d1222b3c395116b
- MD5 5b3146415dacbe0813f49e231ddb457f
- SHA1 4c1d60790607b69c971334218275fa1d54e89cfb
- SHA512 e34c4bc1875abe9e605912c72a2b3cc5383a2bf8c60d01cd4b262cf33552d33f1625a6aeef2ffee96ee444c6976090b222c23c31b5a55ca7903db1d4d2d4f598
- SSDEEP 768:EAl0AWg89ny79wSbj1npI0KQJJX8aeZpIw62w1a9aN5+UGLwH9CQp3NUtp:EAqAWg8arFeaqd6T09zUGLwH90
- TLSH T11933F95E27EC8237E75D2B7DB4F1281407B0E13A7622EB4D9D4968E99803FD06D147A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\src\UglyToad.PdfPig.Core\obj\Release\net9.0\UglyToad.PdfPig.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.DocumentLayoutAnalysis.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0d1e237eabcb2c741fc7ab7b26c255af6f5751d1cd7e86d7ae613611f79bc88
- MD5 ad7238fac876320592ddc49ab8a99521
- SHA1 feb59d72e7d67cc0ef725ffb907d54582b8c168f
- SHA512 a0553cf85be2ddf654aaa330b37e27f98309feb8c956ab0830deb3b0ec80040d6cf7cfa1693fedd29c38c0d4994fca7a824bbec8c0de3c72c791e2b6e7f74873
- SSDEEP 6144:fIcw+ufS0IQ7fYx5nFL7UrtBGaRcN86IvAWF7mb:2+uqKpBGaXNNF7
- TLSH T1E7347C006729AB2CD58D0F7AE480993549B4E94AF41CFFF85FC4D8DAAC237426509B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
253806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\src\UglyToad.PdfPig.DocumentLayoutAnalysis\obj\Release\net9.0\UglyToad.PdfPig.DocumentLayoutAnalysis.pdb
mscoree
_CorDllMain
Name
.text
Size
240KB
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Fonts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 30521d2aa02252c0097cd3a9b12832368d5c925e1ccb4bc3a5735671bd3d2e1e
- MD5 e674a4806b152fbe6e99b64ee6623bfa
- SHA1 6cb66555a2329b43a4d592fea603eebde7c870a3
- SHA512 2b2bc96d32db55909e00c121d8b85728e501b95973d91041597db581f4228451243c8e3c89bfe34344e82de2941b48849e3289e880d9a7e2e71e4172c9f15351
- SSDEEP 24576:lTZlSccsmXctcucJmgG2Wxw3T1VuZZIz:hDgGAD1Ve+
- TLSH T1B4354168238BC543892B096664E7422B76D9FA1B9DFF3B5CF0FC798C0986924D245C1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1101426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\src\UglyToad.PdfPig.Fonts\obj\Release\net9.0\UglyToad.PdfPig.Fonts.pdb
mscoree
_CorDllMain
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Package.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3227f79347329b57e50745d2ade1deb7ccdfe57da1d382796283832aae6ea41a
- MD5 bba83689daa48f34716b0f360b099c16
- SHA1 5176825434e164660a185939816e6c3608042d25
- SHA512 ce71bdc45b8333c7b647167400b89b67ba7467c90281d7d1f4ee7d89e395c9557c96a20fb4dd43a7b3a790253021e76fa600b748d9bceafc5a82a24668ce8aec
- SSDEEP 48:6oAH6XXlXnAavmHa0+PDRJvaLqBJsqlq3fbcEsCJshBbsD2jj:jnl3RvEsRJvk6sp3wLhB4u
- TLSH T1DF911E2153F80325F9B70BB2ADB663811B39FA11EEB2975F488253061C02F645E31F71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\tools\UglyToad.PdfPig.Package\obj\Release\net9.0\UglyToad.PdfPig.Package.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Tokenization.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 539d0ca2c7981b9eaf8541e17434911042f7cc73d3abc24962994bb99472ed3c
- MD5 6bbc08f4d63faa27bd79e83b46a2d6db
- SHA1 c091c209b581d56ea3e7ba2d231e38ba6a46ed7a
- SHA512 754522ddf52ec5f3db10a65d20804f90d92b2e8159ed438e9e50a553da034921de87d8381cff7898285fe3a3e69b29461e553cbaa706664214c463c0e3937c3b
- SSDEEP 384:9L/PGDnBbN+lwcn5y+8nnxpU8dJfhwPEnJXT6bfO+vcO1QjI88QQ8p7zEX:x/PGFbIlwcnvqrdJfi+JXT6y+vcPjuj5
- TLSH T153A24A08A7E8C336E4EF5BB978F225400770F5179A26FBC85DCC60C61D563694922BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28442
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\src\UglyToad.PdfPig.Tokenization\obj\Release\net9.0\UglyToad.PdfPig.Tokenization.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.Tokens.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d6fbd73a520bb961ffcc98030ab686f43c88b03f5b059ba11e3781e0f091433d
- MD5 f97c68999baba2c9b3786ee47733713b
- SHA1 91d4048069ae9a4aacb2e5266f71b2d12b99703b
- SHA512 0f02adbdcc0c042e48e4caf5fcfe18271c64e38f4ef298aa019da7ab5ee795e95200b98b8acd1525e6d85d63559ef2d83de581acb4cb5450d590fe56598b32a7
- SSDEEP 768:tXS9B8gvN6H2kNyvJ0jS8Kxchp+AxDqsxmpdHTYcy9UPkCiMI1JY7lv:tXS9HNg0J0jS8KaKwusxMlYUsJY5
- TLSH T1D22381C436EBA524F2FB5BF19AF650104E36BA172DC3C23C16D815C80B5EB869911EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53274
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\src\UglyToad.PdfPig.Tokens\obj\Release\net9.0\UglyToad.PdfPig.Tokens.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/UglyToad.PdfPig.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c47abebdffebb6e48a1d40f4c22ce5f673c57558ecdb3187841b728112dea279
- MD5 21dd386b9035265e83ad79dd3842f9cf
- SHA1 0ebd50f312c285712bb45bce7b4c1ebcfcac2efa
- SHA512 cc0bf8f1ba21e99a1edddcefc49347f6c69f051ba4d0c23aa2fc7b93ddca47aa5f93e1097817dcf6f7546f1c7ba1a2ce27e1a53f1c37120485bd0e1dd17bb55a
- SSDEEP 98304:vyoYFGLiF3vK+aKdY1Owc9e1/K7Lgil8rJVVYD7wQa+lKdc01/q+e7c1V9:vyoYFGA3vTaKK3c0xK7LgiujYD7wQa+k
- TLSH T10616B9B6C8285CC4D94BF5BA54340CE3925EE67C110AC38B73A8EA73BF4B12D7987951
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4255754
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\PdfPig\PdfPig\src\UglyToad.PdfPig\obj\Release\net9.0\UglyToad.PdfPig.pdb
mscoree
_CorDllMain
Name
.text
Size
4.1MB
Virtual Size
4.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
948B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ContentSearch/e_sqlite3.dll
- IMPHASH 97c1b87ef61ad7e5bb505ad47c49ba87
- SHA256 6ad8e149f8ce3ed3716402b4b3a2268ebbdc7b64391b5fafed747e03bb1b9418
- MD5 69c328fa39ea2c7fb76f924420b81fc0
- SHA1 af3819d6a91ebb518de7099a6bf7046725aec165
- SHA512 8f51a2c904e9732afa8ceb182cbd6a511aca9e387a276cb828cdd232242dca08e6650737ab7338656229ccfde734ec8eb15e351e56f0243f81a71cbfbe46d160
- SSDEEP 49152:InpyOe5K6DJRA7oTIYPdAKM0hIOKc2qUVrN4Pg:KcdAKM0UTqPPg
- TLSH T1EA958D47E3B900ACD567C27885175717EBF2B0051725AADB52A08A652F23FF21FBA334
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1501232
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\sqlite-builds\sqlite-builds\cb\bld\bin\e_sqlite3\win\v143\plain\x64\e_sqlite3.pdb
kernel32
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
GetModuleHandleW
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
WriteConsoleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
RtlLookupFunctionEntry
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleFileNameW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetTimeZoneInformation
VirtualProtect
LoadLibraryExW
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_name
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_db_status64
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_error_offset
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_clientdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_is_interrupted
sqlite3_key
sqlite3_key_v2
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_preupdate_blobwrite
sqlite3_preupdate_count
sqlite3_preupdate_depth
sqlite3_preupdate_hook
sqlite3_preupdate_new
sqlite3_preupdate_old
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_rekey
sqlite3_rekey_v2
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_clientdata
sqlite3_set_errmsg
sqlite3_set_last_insert_rowid
sqlite3_setlk_timeout
sqlite3_shutdown
sqlite3_sleep
sqlite3_snapshot_cmp
sqlite3_snapshot_free
sqlite3_snapshot_get
sqlite3_snapshot_open
sqlite3_snapshot_recover
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_explain
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_free
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_truncate
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_encoding
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_distinct
sqlite3_vtab_in
sqlite3_vtab_in_first
sqlite3_vtab_in_next
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_vtab_rhs_value
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3changegroup_add
sqlite3changegroup_add_change
sqlite3changegroup_add_strm
sqlite3changegroup_change_begin
sqlite3changegroup_change_blob
sqlite3changegroup_change_double
sqlite3changegroup_change_finish
sqlite3changegroup_change_int64
sqlite3changegroup_change_null
sqlite3changegroup_change_text
sqlite3changegroup_config
sqlite3changegroup_delete
sqlite3changegroup_new
sqlite3changegroup_output
sqlite3changegroup_output_strm
sqlite3changegroup_schema
sqlite3changeset_apply
sqlite3changeset_apply_strm
sqlite3changeset_apply_v2
sqlite3changeset_apply_v2_strm
sqlite3changeset_apply_v3
sqlite3changeset_apply_v3_strm
sqlite3changeset_concat
sqlite3changeset_concat_strm
sqlite3changeset_conflict
sqlite3changeset_finalize
sqlite3changeset_fk_conflicts
sqlite3changeset_invert
sqlite3changeset_invert_strm
sqlite3changeset_new
sqlite3changeset_next
sqlite3changeset_old
sqlite3changeset_op
sqlite3changeset_pk
sqlite3changeset_start
sqlite3changeset_start_strm
sqlite3changeset_start_v2
sqlite3changeset_start_v2_strm
sqlite3rebaser_configure
sqlite3rebaser_create
sqlite3rebaser_delete
sqlite3rebaser_rebase
sqlite3rebaser_rebase_strm
sqlite3session_attach
sqlite3session_changeset
sqlite3session_changeset_size
sqlite3session_changeset_strm
sqlite3session_config
sqlite3session_create
sqlite3session_delete
sqlite3session_diff
sqlite3session_enable
sqlite3session_indirect
sqlite3session_isempty
sqlite3session_memory_used
sqlite3session_object_config
sqlite3session_patchset
sqlite3session_patchset_strm
sqlite3session_table_filter
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
258KB
Virtual Size
257KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=147, id=261, version=33145,
count=46, id=260, version=33145,
count=21, id=259, version=33145,
count=3, id=257, version=33145,
count=135, id=1, productName=Unmarked objects,
count=10, id=259, version=35721,
count=14, id=260, version=35721,
count=32, id=261, version=35721,
count=2, id=260, version=36248,
count=1, id=256, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,
Lertaro/Plugins/Lertaro.Plugins.CoreExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f6cfcad159511e30d6019aa7bdd894ecca3d6cffeffa7f5e29576489a00b96bb
- MD5 6fe32617da929ba93e08e57d666ca62c
- SHA1 2e38fff03c2a6e7c179358adb49ad230ee03d540
- SHA512 6b6e19436993cfd44b09418dea45867c1c8a4492a60c7d4502ba373f5205023465fa0d351633d8c706b31df7310b8aba61818af84000bfe87ecb1f03cdae3866
- SSDEEP 24576:VgXqZOhHUEiOmB/qCSmS+3KrtkcbuJtiv:uaZOhHUEiOmB/qCSmS+3KrtkcbuJtiv
- TLSH T1A6056B2C26C40977D8EF87B1B54956C371648E97E6117A1C87AFC0081C9EE2F98F19BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
802370
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\CoreExtensions\obj\Release\net10.0-windows\Lertaro.Plugins.CoreExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
776KB
Virtual Size
775KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.CuratedThemes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 df1526262854470eda0bdf4c53fee3d4eee2600a5976e1edfa49514474c13060
- MD5 6cffc68a03c2d9b106091bbdfea6b964
- SHA1 bf080583443396d52ba27180b70513a856695ecb
- SHA512 19439a2b13006b6761a0045435f062951b01d35e47dc0bb4086d4dd56d3bc9b039539adea1059b68e80526135c09b34dacca32bb7406e6f0014bdfceb26f8700
- SSDEEP 6144:lPoasNark9nTlJvQAX1YQ4ppQ3d+oFInpKGi5Vtaubvi+2Te5zbB+F3:lPoasNIk9nTlJvQAX1fdjFInpKGi5Vto
- TLSH T1763409CDE198D5FBDE334833EC614940553A6E669D130A17FCDF2628BC9100B4EAA96F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
235818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\CuratedThemes\obj\Release\net10.0-windows\Lertaro.Plugins.CuratedThemes.pdb
mscoree
_CorDllMain
Name
.text
Size
222KB
Virtual Size
222KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.CustomActions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21225fb8db8d9da61eb83df5e2739827896995637b88236ee71b8afb45cecc1d
- MD5 38ac74358c05a79c111a6bf55b0c88ef
- SHA1 0c7bca902a38cb996bb0971c4f04839bcb4673f0
- SHA512 b44bc12aa2cb717992c5821cbf6ae8898c304493ce63337dc49f9700c3b2d1d51bcf22651067c452509cf4b8ba3e56976830327949772d8b3148875345f2bfbd
- SSDEEP 768:BH7F7Twh/GepsJsl4L4C3BDbFeHYHSfc5hXQ5Z7qTDNf:l7VTJFbU4HSfc5hmZOTDNf
- TLSH T142E2C71922B46BB3C4978BF2F5AAC2EE2175CF976801D71C867DB0084C7B9054863F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39002
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\CustomActions\obj\Release\net10.0-windows\Lertaro.Plugins.CustomActions.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.CustomCommands.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 36722b663039b78248f9a4e04e5269661b7b7c7ce81f52e19da00bea380c7cce
- MD5 d8220e50bad330379326bffc3a8d1932
- SHA1 4258914f33298922f871db4538d94ba25e63e661
- SHA512 5bb1979a4e5ef8def7e203aae3763b4fc4cfeadc6c56c4f4b58cd473b032e8b145244391038ac0cc6668c1d2d4d939d59e5537672a04bd83bb6445d60effd9c1
- SSDEEP 1536:XK/BDS/UbpvcCe2my+U5yQ0XzR2zDXbm4:XK5DBbBcCe2E4yQ+QT
- TLSH T11733E81C12FC06A3C9ED0BB16228C45E26F5CF537A10D70E0AFDB614189AAD6D561BBE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58562
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\CustomCommands\obj\Release\net10.0-windows\Lertaro.Plugins.CustomCommands.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.DirectoryOpus.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a2ae6a8d199f98219e83dd60e6c47529d9b4d0ae0692f6243bc5fcef052046c7
- MD5 3e28a0514eec2847472cdb3425b6969c
- SHA1 b904e5e30a23ba338ce0756f318106c6c415ee4d
- SHA512 8b8d6d595411fe40c08630a33e72ccb4af40a640fd1f354d1259dfde73e27db7df8c85730b192eef85d4d5094b69d3c67c0e86088db1af099ed773c25857adf9
- SSDEEP 768:+lHIFxSxBybyBUyYutO4Qcv/rBrbirLBFh9wG8O1D10bQYWB:OuSxBybyUumcHr9bUH9wG8e
- TLSH T1D4534B0877D83264E5FF16781764558823BD9BC79106EB2C3F9D82881E32B724BB177A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
70166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\DirectoryOpus\obj\Release\net10.0-windows\Lertaro.Plugins.DirectoryOpus.pdb
mscoree
_CorDllMain
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.FileFilters.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7fe44e708812dd17ca60e0a8cd5712395814d2a1e1e64210c1938080316ea466
- MD5 e9eddb8bea9ef8715c3b46417e769e0f
- SHA1 3111c421077e4f74e0bff8d03a52f9f6e9edd90e
- SHA512 98dd913b38a139c40fb19f085cd7ddddcf33aded3261d3f2d43b7c76c5749b8e812c37d46dc1e396c39f346cf7d5faffeb79181ea038aaf6cec386363b231dd5
- SSDEEP 192:Tlq9WtxJuFZbVnfqjm2TFBwVN4EKuaQGNE5jaM/WDQ6rSDZ8MwOjzdksS1Osn41N:TU9N/xnfkVTFBHtQTlmoSUl8fDCe3
- TLSH T1A7B2D64912D0889BF0F986B9FD3CA5413831FE825931A51DA2AD61094F4FC1FC6B3AF6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\FileFilters\obj\Release\net10.0-windows\Lertaro.Plugins.FileFilters.pdb
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.FileUnlocker.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 407babbd4adf039dcb101e8700c733a910870566b3c7b4d74fdde472aa40e891
- MD5 a1d272cd3e0ee20b7b51c8ef5b78ba77
- SHA1 aaf3ed4e21171e5c0340f879bf90203525eda8bb
- SHA512 af4e2b5e49201f0f0a7a3b7386196efa246a1514d31611039983e7e29a233631ac05c408c1d4a126ec953c64572c3aa73dd5200b1f36d0331689e5e2328fd880
- SSDEEP 768:bpzKxkv4MHpfy2RI6fHnNZ0j/EIydCaQ:bpzVZMiNN6EJ9Q
- TLSH T13D03F90423BD0723D4FB8B713CD714D20670EF226711EA1C55ABD29D8E6F5928376AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\FileUnlocker\obj\Release\net10.0-windows\Lertaro.Plugins.FileUnlocker.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Files.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 58fd0871012df16db576ef9e8f1b5b34375f2ddc6e5206d03679b30dd03eedbf
- MD5 ae08b151e9b0fb847ebdc8ebc185674a
- SHA1 63100e80186d8f8bd3d4db4bae5be88a6fd3a95c
- SHA512 20744fef1116fdf37e78befe50ef228074e57adfbe1efb9e3a243d27f713d674512861da9efad3ffb54fe8f338b3397715ed451f3139fe8e16c68902becdf77c
- SSDEEP 384:D8R3iKNSvUEuzPo75INW1Tbc1wx5kdBpH/kJGa:DUnNSvn7GWxc15BpHyr
- TLSH T138922A1532C0452AF4BA67BA667576C033B4DFC6C613AF1CDA3DC0052C5BD692AB29F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\Files\obj\Release\net10.0-windows\Lertaro.Plugins.Files.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.FlowLauncherBridge/Flow.Launcher.Plugin.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6dfc82265527c46ca0bfc5d3e22cb0029b0bcbcca9d4831d8875da64bd898d3a
- MD5 1a00db42229c05f6459a357b64e413bb
- SHA1 b5aa7d7d7dd27bf1552a0a7c08e0a179a717a89e
- SHA512 a23d961d5ebb0d341104c176679a13dc0ade6d5e2ff9b2c23f5f82e1d2cc2ec323becfca945af4bd981c5c386a2dffef6edc9e2cdfa644f2927e07de872018fb
- SSDEEP 768:SmWgSjbsY/Yutv/8wXrTMLELOgBOHcAGor25t2Xk9bFuOnyEQyOGizh89n:JW9MfutsiEI7ocAlCA09bFujEQR981
- TLSH T18F331B71176CC66EC7FE0639F4A5066403A5D24A3C52FFBF8B58B8693FA770A11120B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\FlowLauncherBridge\Flow.Launcher.Plugin\obj\Release\net10.0-windows\Flow.Launcher.Plugin.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.FlowLauncherBridge/Lertaro.Plugins.FlowLauncherBridge.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75ffbe94df3d37052eeebc1067678ef601f460980d938b44bcfaf50bb59ba9fb
- MD5 974229795aa1d99f9715d7cf15179676
- SHA1 3bca1d4f17fa3efc81ce34854e8ca7c613a3abe3
- SHA512 66969d25f3fe918648eccb34d5505aa34bf6690f0122fd28191b91d8eee5877d467ff6c5bfb45c2896eab3374112da52d64b6b74a00ae52f4f9623fa1566dad6
- SSDEEP 6144:tZRCTd3Se5Yq1kauqdKkOtYNBvybGry89bnPAv:tZRCTd3SQYq1kauq8kOtYrvybGu8u
- TLSH T12C144A1423A84A06D2FF4B789579249213BBA75FE474EF6C8E6DA0DC0F2F7151821727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
206862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\FlowLauncherBridge\obj\Release\net10.0-windows\Lertaro.Plugins.FlowLauncherBridge.pdb
mscoree
_CorDllMain
Name
.text
Size
194KB
Virtual Size
194KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.FolderCascader.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cc08d41344f0fa1382566d5b81a6ce9d4c0cfab0f60afe0fd33a237337be14c1
- MD5 c40080ca363a0479a205de13de1ff4ca
- SHA1 a6cfc02553cdcbf7d920407513b41b1a45d2d9a9
- SHA512 6b73916760bf4177df41e6df82462dbf28b156c1220fe3f3c20cab8651be1397830347082b60fa137ff14700a0f838f055d9c64be69693a359f98b95d5d94c61
- SSDEEP 768:JlhyYZpX9lxCuM8t+3BAL7naGnTdWCg6fprpOtQzbSjelnYWJy:bx7Gq7jTdWCg6R42XSNWU
- TLSH T18F433D09D2F6063FE5ECD3766A35BD061C34AE068530EAAC1D49528C0DDE6E6C7E077A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\FolderCascader\obj\Release\net10.0-windows\Lertaro.Plugins.FolderCascader.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.OneCommander.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8356693ed9ea4b216f3b6374ac153676ab92ca30b94f8ee5e5491d2590152402
- MD5 ca4572b133943cbd8a9728219fd954ee
- SHA1 9c6b5d3e1d1502c0b1e4e7a939ac54725e297196
- SHA512 edb3a0b4addd3755e9c512ee85505190edb2662cb3ae1587a61c74e890ebcabebf2d7642092a7a28cafb2097548e3d680e5908f19a84671aa7d01a4b214a9d5f
- SSDEEP 384:+kq38YZINg2W932IXWwvbc1wLwInhDkCedDR9HkF/rsd2A7jgj7:+NJ+gJZ3Wgc1IwInWCSDR9HkF/AdX7j4
- TLSH T120A2FA0822F8451BD07A0BBF59B57FE123F8CFC1C613AB2B2ABD28645C16D591E2C670
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\OneCommander\obj\Release\net10.0-windows\Lertaro.Plugins.OneCommander.pdb
mscoree
_CorDllMain
Name
.text
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.PinyinAlias.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 059b94c87001e611d6fd25c5e0913f57b5e167d7ec1d5c676cc18bc2f452a1a6
- MD5 2ae35bde4c259092ead34c206b8fd1dd
- SHA1 2b04367e4de6869d87250d68cb6e8f60dc80c600
- SHA512 68812fea832f5768fd82fe772bb325c624c66292fc45c1a360276e9b8688ce7f10d91e5532c1ff175077d1d0c32189673f74481488451b757634c56eea65bd3a
- SSDEEP 1536:wTKVyjsRpfGEq0cjueCAFBhsuotECp5/qiYOq0qa/w1V9/jRhzX:w6QUuEq0cj+A3botECDqipq7b7fj
- TLSH T12A936C5231C0D123EAB827F2293199E01336FDA89F87E75F458672ED18F2766DF22161
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
97162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\PinyinAlias\obj\Release\net10.0-windows\Lertaro.Plugins.PinyinAlias.pdb
mscoree
_CorDllMain
Name
.text
Size
87KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.ProcessManager.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12887f167b30827cbe2079bf8332aae4c92f80ede913af502ff6b12c2b4cd7cb
- MD5 4ae9ad173ce9029da877944089c6a3d1
- SHA1 13a4bed979be922c993fb48876d931fd942b5a65
- SHA512 6120dc5616f86834fe085d31fca0843a951f3cb102dd7e3fe405c6dad15d82e42672c074cf3f2a498755b01f3246350378dddba23375b0136ccf517eebc39e7d
- SSDEEP 384:eDQZMITgjzTViAOBTFeYvWEZwj3WqHgX5WrD+5JrGJpzMRyUNK8reMjns0m/fpAn:IQWIsjzB5havr
- TLSH T140C2D70A7BDC4B22D8FE4F37B5A2108336B48B53D533AF1815AD81254D5B6260A71EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\ProcessManager\obj\Release\net10.0-windows\Lertaro.Plugins.ProcessManager.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.QuickLookBridge.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 922300923385f6c35da44dd6ed62c91ff2b3e575b9cba11a21f440cc4de11b86
- MD5 a1c031a7df76c2f7b1f138ff1ec008d1
- SHA1 bd80833c164276092dd0eac48dd0ba180dbf3d24
- SHA512 803aa5bba9a68092fb23da55ef7fb682e2d395cf8b97bc203ae0c136f95e1c4a8fc0c7e76a6cdb7de4f56f7d327033b315d933376ade5b13375cbec685e39a7a
- SSDEEP 384:MHHwiv4caxMjc/A2MYc3u3AJ5tdWOzg1+Yz1rm5jETxB2OVgK/j:sHNv4cauYWZIQ5jEkKb
- TLSH T1CBD21AAC73E84B1DEAEF06F55E984F412274BB4AF421EB3C957940062C6394609E1FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\QuickLookBridge\obj\Release\net10.0-windows\Lertaro.Plugins.QuickLookBridge.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.SpanishAlias.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a7614195e5f49b4607c1d30c88cffe742bee774ca8206add5af51936ac5389cc
- MD5 041eee2199e0ea8b384866243a0769a7
- SHA1 90d8f1bcf8a58852eeaec88ed34bfc8c80a9eac3
- SHA512 4c6dfb1a17f6276fc85ae1fbf091ad2dd46836b9d7f3c5bf6cb70cf1dd106fc772d108b6819cc9fa3cb0393af0a43a5ffa7f994e1500cc68d1bfd78cea70eec2
- SSDEEP 192:EOYcZllxKV84o3Hj9faxLpgDqkIrzRGOinOLTc2D/DwOKa0/u0a2t:/ll3YOaRYjdc2t
- TLSH T1E922E80113B48E2AD9750B73F9A79EC137B4EF41C753CB391998471ECC929276A32638
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\SpanishAlias\obj\Release\net10.0-windows\Lertaro.Plugins.SpanishAlias.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.SystemSettings.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8da7b2144a29a84c199835765382aeeabf00aa70e2928b9c498c6b6048840b27
- MD5 f8b749f6147b9d04959d94cf18ac41ee
- SHA1 f478a597a296bc2d52e6ba25a50008651aeab157
- SHA512 d5201a24aa66b8c5050374c352ddfa7ea6fa306d44ea665fb96cec084f0033595233a53f8022dcb5c0411853edbb41243bfcff5044f860ef97118b2ae7f51035
- SSDEEP 192:Itpcb16vubGJ7VifKVYmXjt/+hD7aFiGTVrzFBJDt+IRsTNs4LptsZSe2Lsa/+hy:NxeuaMfKyrGT9CyRZm
- TLSH T1857219502B94D52AC9BD07F2BA65DFC168789A83AC12EE3C15DD1042BCE29C517B33BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
22706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\SystemSettings\obj\Release\net10.0-windows\Lertaro.Plugins.SystemSettings.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.TotalCommander.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e01eb0fce6a7c967031e925910de8b6403e8a815f7e133815c3d5174bb5f68a7
- MD5 3cff2e79323d7f757afebfe943b225b6
- SHA1 56f54995a937c646f99ed2e50f60399017ebb505
- SHA512 6d0abee0e0ed0366f3814e9632eb9e71d739959c7f27d89a4b17f692f391f04b4b9a54e52e5e32f09211d698add73fcf60322223fe5b9e5895157bfe35bbe90a
- SSDEEP 384:HQNWYMAYrQdvwuQLYSdv+H91wV0EwgYvpMN+1ioq6/d/A0NY/SwlUxTifaxSEED/:woYCQvXRSkbee86qC+wBkBJY7MpvHr
- TLSH T11F032C1CA3E85616C0FA4BFD63945EC223F1DB42E516DB671EFEA4010C52AA62D2533A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\TotalCommander\obj\Release\net10.0-windows\Lertaro.Plugins.TotalCommander.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Translator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dd319f85ababc055d28e12069f6a0021eba9e5692f47d8827760a48aa58e4741
- MD5 42b6876558a0b432de98ecba292eb304
- SHA1 e0a1fb41287b0a5dbb2201a25639169cf9258b07
- SHA512 f6ee92bc780195b392ead315670b943c1f1b43ca93b9f5a1837decfebc76e9071358bb98b1a035b445b2446df7ffe9f43a00b5f562dc6e9fbca9434a9ce13550
- SSDEEP 768:yAVr8U0WmSeMcjCBKecU4rAHIvj0ue0jF5i/zyfE02hFSwS4:yAmU0WXejoA0gj0b0jF5i/1hoX4
- TLSH T14013C71432688722E19BA772ABD418C031359EDBD532DE1C7B4D0446ACF7A8F4776F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\Translator\obj\Release\net10.0-windows\Lertaro.Plugins.Translator.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.WPS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d016bfab352107985fe9c547b8104ec47c79dbd87057123bc1c1e4be81167e7c
- MD5 38bf9d2600ec6727866b32177533fd89
- SHA1 6e7268a6fa0143c7e4596c83a77634997cebc762
- SHA512 12c2ecd3314af46bf9ab9ed1493c8778004f19ca85fabad53607d7fb73e801f4182d07883f7e123d736ed23b0eab8f5d89f4bc2553a019153219242e99f3a3d9
- SSDEEP 384:o/jWu835OllygsCiF2Imse6ZnMdbhpwj7cbAUVWg6W861FKG:o/6O/ypQrFVWgD84FKG
- TLSH T16CB24B85A38C1625C5FF077EE8B526857730E776B503CF0EA1EC54246CA3B940B16B75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\WPS\obj\Release\net10.0-windows\Lertaro.Plugins.WPS.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.WebSearch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 060a2db2acde864dc66d83fb0b17abb6ce8b0bc005a7056b2d70af5ce84dcc44
- MD5 285d6ff06202c7dbc57bf787f7350eae
- SHA1 4e28d07428ae5d6e0c7fc7667f3def5bd775be6e
- SHA512 d74fceafa18b7fbd1f14bcbbc26aac083537b337421584bd1cc3f35eef50e816359371a01efe15fe3d556e45d5d4c44ed93fdfe5b65f9a7e39b96ae1aa7362a8
- SSDEEP 768:icvFLMd8c5Uy40Mrwxz4yKq7r39hHLIs+:iQYGwxz4yKqP3L+
- TLSH T15B23A12C15548B2BD0BBCA759ADD80E3B5B25907E432EF8C25CF56510806E136DD2FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\WebSearch\obj\Release\net10.0-windows\Lertaro.Plugins.WebSearch.pdb
mscoree
_CorDllMain
Name
.text
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.WinRAR.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5584e73f761dcf9578ae8349a7f35ff92932b0722027dce893e357f71dc1be8f
- MD5 7495a238995dd858d02a632a9a264208
- SHA1 d2c8c636b58199cd1435655d17b33934f62c7bb2
- SHA512 e67e6e1657449522a7c7c80ed534772b43314af31fc4c2375b2fb331d3de3646e94de4e4242a417c6e8e969603bd759d4016275b3c16e7cf14dce9db489ac664
- SSDEEP 384:5iiGX89EqAFYIFMM/pPrjEeAf4rPPbKaNMm2:hGwoi4rn+aNy
- TLSH T106622B945AF44733C5AB0B3C39AB378173B9FF649603CF764BADC4268C127964662321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\WinRAR\obj\Release\net10.0-windows\Lertaro.Plugins.WinRAR.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.WindowSwitcher.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4530be5c9f5df82016bb21d2bb24d71b223675a486c770ed98891a59527279cc
- MD5 db565ad89de11550ef7c72f63c06da9e
- SHA1 fbfa22953e159226b21ec386b609204e0617b3d2
- SHA512 e9e3010e7c0c070d9407e01283069f220233576815398d08f72ea0a0d1034ef5ac3bbbde7a4d58362625d1085c4d17d88a12ba476d609b5e86ba65884e415306
- SSDEEP 768:wKYcUvrE+u0se8xdwrvDnaYSIiuhMEQrkrLBqS3xPaMXjPIdVP:wKYcUluPe8PwrbaYKGM7wrLBqS1TEnP
- TLSH T14033392262A80B32C5ED0B71746BB3909370DF35A41EEB99476E1059ECAB70349717FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57598
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\WindowSwitcher\obj\Release\net10.0-windows\Lertaro.Plugins.WindowSwitcher.pdb
mscoree
_CorDllMain
Name
.text
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/Plugins/Lertaro.Plugins.Xyplorer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6ac3781a93783def092ac21c5a118c3faa4e2d9de75c2779da757eae3e053e45
- MD5 0cb116718fe8cc861fae8d0cc7a9adc7
- SHA1 a503021d88f7041d7ee2455fb47eae0838c6f7e0
- SHA512 582fe09af4a88496f79fd8b066d15b0016ea7b1911b97d409714b985f9ef30b24a3ffa17be50f49370e03675b9d9639794d45d2210a9ac3ef299b7972ced0d01
- SSDEEP 384:HroBuWuupXR0kBz2TEx6CyojtHNANai8S9oJC4l4WwdMej/6+8iotGfPr3WRZegs:lTYNAIiahSWC3L6+8iotGfPrmR0gBqgg
- TLSH T161B2180427C4121DE9BB0779DE692AC026B4EF92CD23DFBEF7BD02290C269AD5931571
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
29566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\Lertaro\Lertaro\Plugins\Xyplorer\obj\Release\net10.0-windows\Lertaro.Plugins.Xyplorer.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bcd63c1f1e896e84056f3d7047e483b5feaa80fa890267f54d8594c71894dff2
- MD5 9b8378b1d45a8ba35ccebb0c88ff1cca
- SHA1 ae9d68f9ea5047c33c54bd3edeea65532650dfce
- SHA512 d7527e69f87c8569d21807757c00e5e0c1fb1f447d5386b228f95bd3388d9e102764c0bfc45521fb8e664c7660414d7c80f740a92497be0ce7e299c217a79ed3
- SSDEEP 768:fL0xiH87vHPEugt2B7/ANIp74JNN92D1NltYSSPO59zk:fgx3bHPEugoAap74JNN0RYH4zk
- TLSH T1F2F23C218BF847F9DDE30AB06DB283654F3676C21E05F61E25AC900D5AE3FD887B1619
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
07:f2:3c:8e:bc:63:e0:e0:79:f0:3e:7d:27:e0:bd:49:22:43:e5:82:cc:8f:f5:ad:46:f3:82:6a:51:f1:bf:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:21:33:c0:35:fb:d2:0f:21:a4:00:01:00:00:02:21
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
29458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.ServiceProcess.ServiceController/Release/net10.0/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/install-dotnet-runtime.bat
- SHA256 882ca44e8285a991e470120dd60f5e1dc613ee8f216487488fe8ba8193a67967
- MD5 d8293691145dbd9a516447203db4fcd6
- SHA1 748ca2316f41a9ed9aa935fcf84050a7d246b796
- SHA512 a356a21318a5c6a7a2c5c84b0911cbf2b39211b3dc9dd1a29d2bb9c7e5046080616ccf0f05a16f1b80073bdcb9f50e48e53ed936bac5abf1d7dcf573bbbe5d78
- TLSH T12051B51B63C002F69C61A63B666FA2C7D34CC47316D32BF57CA1816B31194AB107B6D2
- MD5 SHA1 SHA512 TLSH
Lertaro/lff.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cc7f8f70ece53abeeb81bff737198b8ac04bcfa6f5385a67e8bd21876585e1e5
- MD5 229cc609ae9c12db9ea2904c5fd831c3
- SHA1 0eff2e48100f8e04aa313f04cfc86b613f66e5d0
- SHA512 31d465c103e97dfacf35c20b4689bdde61549f00358492fac6727092c25a4f8ddeb4f456f4bb4d6a6bb2c43579646a5391e6d6a593e49e26454c85fddbf37062
- SSDEEP 6144:dt7CEw3qbFfiUVPCXAplnnHHquqo0v4c0Fl7RhB9SNdBDoIGAwMm:3Jg3APCQplnZT0vHXGkm
- TLSH T1F3747B16624C44D1D41A1BBC85B2936742707B2151C1AEFB2BCF7CA6BD6DEBC18CDB82
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48842
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\Lertaro\Lertaro\Cli\obj\Release\net10.0-windows\lff.pdb
mscoree
_CorExeMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
315KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lertaro/lff.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 b3801093e84bc0f85f32606188e14ee0fe4336de434ae2819b9a1dac4169ffca
- MD5 877b46f447e923485558c0a3a9916eaa
- SHA1 52f3c254ce014dfed061fa04cfeab297b757c75d
- SHA512 9dfb35c4837ecc295b6cf7db6c9ddcdde8aa50f384d770fcbfe8b509b2b0f5c0cb367148e5851159cb7b89368546e3cd688cb7d7d5fb673603fef000bdc1042a
- SSDEEP 6144:EHRu7F1nQnB8KK0vbFfiUVPCXAplnnHHqCqo0P4p0Fl7RhB9SNdBDoIGAwMm:ExOF1JKCAPCQplnRT0PgXGkm
- TLSH T14EA46A12A25C00E9D0629B7CC5B28703A731392547E16AFB138E3D667E6EEBC5CED701
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
315KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35228,
count=1, id=258, version=35228,
Lertaro/lff.runtimeconfig.json
- SHA256 96bc2946dff8790400d652ec7f8de7bb043e954980d59470c112788b68a1fbd3
- MD5 7e4444b5a3e3cea574693f055f944011
- SHA1 04dfc98aa994475e2803241a1d55bb4277dbb8da
- SHA512 2fd5e7ffd3b12c6962d3ed7d7b99fa09b870173623701690cc0237529c32b008e219e48818a0bc4b6962fba2e3d161b8fa8ce38c03467329b0ddc9e58ef0ae8b
- TLSH T1BFF0276ACA106DB708B933BAD52AC182EB30532B10041D52B5FC081C6F776B21111F95
- MD5 SHA1 SHA512 TLSH
Lertaro/portable-cleanup.bat
- SHA256 b585774b434f3552e35737ea4ddaf8a3eaa98c41d69a81c3c99606109cb5dcc9
- MD5 0b855ecc7c93288134c8a683c042fa4c
- SHA1 872b256fe63df2236e4940a2e3bcff3f439b7e3a
- SHA512 ecb02bb772d23e681a51469a08f0ed0ff6330ee5bf89d6a3b7201b5310691413c38ff7edec828316322befd387a4c27ce1981a1b9ee609fdec96a3ed3915c7a0
- TLSH T1F251857A36490B7155F6CA297C6DB253235E508F40713DB0B6FE916A6FC88898BF81C0
- MD5 SHA1 SHA512 TLSH
Lertaro/portable-updater.bat
- SHA256 f74ae7e2e701095718036623d4dc659995856386924874215dc4a990ec4101e1
- MD5 185ed69c0025f6aebe4efe3181588e0f
- SHA1 2e124838abb38c5bd98910bb1a214d742deefe84
- SHA512 b5f38e1d25c72f0e855e3204e2cb77d71fc7a11c0446a3915e582fc3d81bf5f39a96f8eff7ba9783d5599d0fda33dfff27caa8e4ffbd52e33ae08221511ea769
- TLSH T193D02354C255B31D6D17943D15D311E271D5C0015309D6D1B1D0C25E46CE11ECDC41CD
- MD5 SHA1 SHA512 TLSH
Lertaro/portable-updater.ps1
- SHA256 371fd9d009353f16e354ab4c66538da52a37bf8da9b88aedd2aed788d850a96d
- MD5 254956e4b81265ddc9074745014f1841
- SHA1 6930961e6d3deeecd8aaab29d0d28f91a042ed8f
- SHA512 0f0b204196e1571f3efc0ea182ed6afb61e50e42460de917e6ad4e0bececb0ed227ac81466825781fb37a96b3139c7f8bed166496fdeba1cd4a7014456091d12
- SSDEEP 192:opDurebb8WJDbNT0RhFCyT583ymceZh/1TKwmliOsCKJlxXcrCyMU03my/oHmOyp:opDuCbAWRbod5qmAvCulxc0p3my/FpNl
- TLSH T155F1B71A25C040BB4ED7A6996841338139AE00CF951F6E34FEACE3D66FE49345BDF684
- MD5 SHA1 SHA512 SSDEEP TLSH
Lertaro/runtimes/win/lib/net10.0/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ea5a19f84a144a74962d5060e63f65e10ecb32614f70acad33ddf7cfdb28f2c1
- MD5 e4bd432ba936de6830ee4ff1530f6cc5
- SHA1 30d659db7a40ea07b6270dc9d342df466cc24ee7
- SHA512 bf1da1870758039c08eb960c805ef01e093db6c2dbc9072fa2ea91c0f7c31d62c17d4542323922c6fc4982758fb43c7e6f0ec24645127da2b4db13b5c8260c3d
- SSDEEP 1536:YFHyuKWI+pho0Yuk0wN7lvxG1TbUcWxYN0+aVz9zTK:Yw8I+p6Rf0wN7lvx+uxYNvIz9S
- TLSH T15893F70163FC076AEAFB1B787CB161520A35BD46A935EB3D16C841AE09F2BC48974773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1b:20:8f:05:91:ff:b2:fe:53:73:2c:39:b9:ce:a2:86:4e:f7:b2:41:2c:56:2e:11:5a:c7:93:e6:55:b0:61:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 22, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c8:24:3a:c8:1e:4d:93:88:bb:00:00:00:00:01:c8
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:E002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:29:0e:d5:64:2a:b4:97:f2:1a:00:01:00:00:02:29
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
86866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/runtime/artifacts/obj/System.ServiceProcess.ServiceController/Release/net10.0-windows/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ