Release.zip
- SHA256 2aec030b0acb36b7a4d22ffa794aae73189c4f04afe5fa8481ec9fc7e3a08712
Overview
overview
3Static
static
3Release/Fl...tp.dll
windows10-2004-x64
1Release/Fl...tp.dll
windows11-ltsc_2024-x64
1Release/Flurl.dll
windows10-2004-x64
1Release/Flurl.dll
windows11-ltsc_2024-x64
1Release/Ne...on.dll
windows10-2004-x64
1Release/Ne...on.dll
windows11-ltsc_2024-x64
1Release/Oo...pf.dll
windows10-2004-x64
1Release/Oo...pf.dll
windows11-ltsc_2024-x64
1Release/os...ui.exe
windows10-2004-x64
3Release/os...ui.exe
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Release/Flurl.Http.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release/Flurl.Http.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Release/Flurl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Release/Flurl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Release/Newtonsoft.Json.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Release/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Release/Ookii.Dialogs.Wpf.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Release/Ookii.Dialogs.Wpf.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Release/osucollector_gui.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
Release/osucollector_gui.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target Release.zip
- Size 474KB
- Sample261027-day57ace56
- SHA256 2aec030b0acb36b7a4d22ffa794aae73189c4f04afe5fa8481ec9fc7e3a08712
- MD5 4f822b17df854f3a329ceb815e446173
- SHA1 79a78dff34b80314230b70d83127c3847ca84646
- SHA512 08fe121ea7a847af7dcb2c48d82531cbd884e3b79c2fc25f7c453113178e464f6117d5ed804cb0eece0553d13ba9b5e0a3047857496be6e9936f9c6f69050fa3
- SSDEEP 12288:GhSy4JZWUBLQmMJwgB98a30OPJHp2ee1YsUGfPND+9DNu/yktSIZNu2R32s8CaJJ:MSyqZHLQmM2gBxH3eaMyk/ZNVQCYJ
- TLSH T1C1A423E68228DA42E74C9373EC2E1167CEC84056E511370E636EDEEA7BD1FD2525870B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Release/Flurl.Http.dll unpack001/Release/Flurl.dll unpack001/Release/Ookii.Dialogs.Wpf.dll unpack001/Release/osucollector_gui.exe
File Explorer
-
Release.zip.zip 474KB
-
Release/Flurl.Http.dll.dll 104KB
-
Release/Flurl.Http.pdb33KB
-
Release/Flurl.dll.dll 36KB
-
Release/Flurl.pdb10KB
-
Release/Flurl.xml.xml 45KB
-
Release/Newtonsoft.Json.dll.dll 659KB
-
Release/Newtonsoft.Json.xml.xml 685KB
-
Release/Ookii.Dialogs.Wpf.dll.dll 103KB
-
Release/Ookii.Dialogs.Wpf.pdb29KB
-
Release/Ookii.Dialogs.Wpf.xml.xml 180KB
-
Release/osucollector_gui.exe.exe 15KB
-
Release/osucollector_gui.exe.config187B
-
Release/osucollector_gui.pdb29KB
Release/Flurl.Http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a2d5d2045f62ade4406b6f100820cb98177c0a050b38c08b0e2f3462f3dcea2
- MD5 1b147dd36c6906128e499d203cb14da5
- SHA1 415f9cc527281af97a6729de0b4a1bec2321123d
- SHA512 73b1b3e237df7048ec096cfc051e0d2477f616fdcf0a89c06ef5f17595185b8b321679eefde5c079ed99844348901cdd36426013262e1e7a3dd551ed03e00c67
- SSDEEP 3072:RipHaJD1l5kToqo5iNyOq0UG2UY/9p6WA:Rip6pRac5L
- TLSH T179A33B1563BD8B16C3AF97B9F8A416518BB2D9177843E75F9D8CB1E958A338018023F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
112558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\flurl\src\Flurl.Http\obj\Release\net472\Flurl.Http.pdb
mscoree
_CorDllMain
Name
.text
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Release/Flurl.Http.pdb
- SHA256 651d7ed59ed2a80608d7fc076506b4e5ab6933b168e8f17abd2697735264c719
- MD5 2e1efe5b9194f97e3b092ff0dd1c6c46
- SHA1 596df78cc0a05355e7b0e65df52d9b78add1a293
- SHA512 d6f44a2ce22eb7b8a8965401280cabc4fa7698cd0e0346889fd3b953a80c3a7d4cce00237d0786ed44a0c4504e8fb7e0001076c395581e1df972f8b4a8ab07cb
- SSDEEP 768:IExpOaZW1wY91R569w9rskrWGheyjzhqqAAqesE:IEXOUWOY9jOkjdjzhq3AqXE
- TLSH T1BEE2F80BE364A76EC7E55A75D013235113B9D942B68B0F2F625CFB302E9632D5EC324A
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/Flurl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1c25f0dfdfe39768961bc9928a09c6f7cc663914adb4b5ecfe96756b02f73e99
- MD5 f76bc3ba936c93410990a08c587fc903
- SHA1 ec9504fdfbdf1c60b1f2e020300d06144b646afe
- SHA512 398f0d1949b817105d5f787c2c00b78e051403950ee5c8ff564bf95c571eeca2a36390b07beb6c498e88e0d0f68544a0e93a3bb373ffd7a738f22d9bf482a9f5
- SSDEEP 768:AjKDG4kxmtztbVpTZbG0EjdUxVwRbxYEEy:AmDKsztbVpTZb3xyVxYdy
- TLSH T1B6F22B4C73DE5313C3FE02BDF8E5546457F2E26A7813FF26AD98A1A9588339007846A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\flurl\src\Flurl\obj\Release\net472\Flurl.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Release/Flurl.pdb
- SHA256 601d97b865b763275ada909b7f5203d94e14d42c81cf4e7be407b0e3f187d166
- MD5 9681675884f2063bd4c95ea677c23629
- SHA1 534c16e0ac0871fc2972c5d9253382fd3b642f38
- SHA512 f188a2874d6dc8f290cbac7f03a6b92f26e314e7da3ba6c7bc4802dd70d7d13b4670a101b581f9160d3cb2252b48957429344064fc684eeed07627b303ae2d5f
- SSDEEP 192:1YAIw4goQYAIwlug6uoqjGUTdZkJ5CM/hgPVoV5thZq5tOdQ8bmUoTV1olT:2PvPvPQuzqrRZM5CkgQ5t3q5gu8CUkVO
- TLSH T15622B61BFB018F19C905053198A7433773BC9109ED5B9F5963F8BA65BCCA3E9426239C
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/Flurl.xml
- SHA256 b0b6fb923037c278386660f558167cb37e8bd4b478493fa695d587a7abde1501
- MD5 e07b94ccfa4a5c0239e9f807e5b60e49
- SHA1 6731b604c1a6d6d87fd472a20431b05932542a7b
- SHA512 8d6c4aa8a67e357ea326f828705f46c67c7e56b25f67be03f9181ad8fdc1b510a11ec4f2ddfca791ff795d87bdd0747eed2517a9946e203efe6b074e292621c3
- SSDEEP 768:9RvRqWmckRhRsOi170LIhvqRtYau0vRU8Rnj8iJf0VrXhiB8kIXvyET5UggdR:9RvRqWmckRhRsOi170LIhvG3vRU8Rnj3
- TLSH T1D423EC287AC25F01487201568E98F4D4FF685D3330197CA6B4CD7EA39F7ADD6A2BB850
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3598cccad5b535fea6f93662107a4183bfd6167bf1d0f80260436093edc2e3af
- MD5 4df6c8781e70c3a4912b5be796e6d337
- SHA1 cbc510520fcd85dbc1c82b02e82040702aca9b79
- SHA512 964d9813e4d11e1e603e0a9627885c52034b088d0b0dfa5ac0043c27df204e621a2a654445f440ae318e15b1c5fea5c469da9e6a7350a787fef9edf6f0418e5c
- SSDEEP 12288:rktg1lrjC8rjICqbwNjR4xq7iiX19K7Df/SoOKQrIB+jfP:rggD7PIEjR4xq7iiXTK7D3So9AIB+jn
- TLSH T177E4395133F89E1AE1DFA774B4708A2943F2F40AE2BAE74F5A45A5F92C937504C047A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Apr 22, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
672442
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
649KB
Virtual Size
649KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Release/Newtonsoft.Json.xml
- SHA256 f32ed922fe5b22dd693e160aee4f0dcab753ebd740bed40490ae4179274b4b49
- MD5 ed67ac96769018255050ac0829ca459a
- SHA1 b80fc9a5f7049703e752bf65fcce881ff93aa521
- SHA512 77c769fefa227a7f2dde77e4c5024a52b1b6e7a8dc81adbd1c1538a4324a94ffa006e67202803f080ae2e13bbc26adfe403f7e12f0140cf0cf43892f2101bd27
- SSDEEP 6144:XqqUEk/RikjaG0rH3jGHdl0/IYHJpgVIeR0R+CRFo9TA82mIKj+sJjoqoyO185QH:DU6
- TLSH T11CE4E12577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/Ookii.Dialogs.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96402cf84229d0b8bd65977f9c3faa44766b1cbf864b541e21024c30fc1d4436
- MD5 af3ea21db9ae02530fc2eb1b4d10d1e7
- SHA1 62aca01818e436d03de044ea27b1e4d9662ef1ef
- SHA512 4337fd572ead9a613bc490389313edef9aff0609fc80a45be297884381b251cc16fbba4f810146005895679bcb51efa9f99e5b894fb43b4c75e27c14ea2c3de1
- SSDEEP 1536:WgoPByuyAy52V+gExdXLq6ZUc68h8O0SB/XBboIawOUP05bKLh8sm6b0+a:WgwByu2IV+gExFd68WOxXBbcv5oS
- TLSH T102A37D36335C4BB9C9DE0EF8E91555998330E9442267EF1B8885B2791DB33518BA32F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
110874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\ookii-dialogs-wpf\ookii-dialogs-wpf\src\Ookii.Dialogs.Wpf\obj\Release\net462\Ookii.Dialogs.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
100KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Release/Ookii.Dialogs.Wpf.pdb
- SHA256 79cf93a91e544284c81db679190e3f39f2fcbb932cebd0ef8471bfcc2204f7bf
- MD5 b7fe55a993c5ac07bbe335265dd4a701
- SHA1 46a22bd3020eeecbe018aa234e5c9bd25ef54ad3
- SHA512 aa0196a2135aea89cb7865353ed1d98fe8a053e777cecf51c9230d9b5c53b3152952bc51f23676c77070494b62f62f34291878dfb10754f4f571e23bae33083b
- SSDEEP 768:KX0jsb7ydQlBnlXGiicySo5Te1oH9w3nR:1u7yin2Cy5TeU9wXR
- TLSH T109D20C93E6588239CB151F7290F3425BB5FCE00067878FC762B4A779D091B4A1F7B968
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/Ookii.Dialogs.Wpf.xml
- SHA256 9a4d68199313c26ec34b48ea68418f2014d96e3812e6c2f09b8b56247f881d2c
- MD5 2a5a04c4dd5b896a9993281e0d5f00ec
- SHA1 f05f78630f5d2adbe4fbf5d30ca2534a258fe249
- SHA512 8465f8c4b14921671e6e215010dd7b48dd48ad14895539ff994c682ce704866ae2385276dcf61e1b189fb72e48993c399968bc3d5a256d0adaca955294ac94d0
- SSDEEP 1536:HdkDID4DRDaDgDbD6DxglHhsq/iWnIFYH0Tx:dDxglHhsq6X
- TLSH T11B04111477CD87224CFB0A374E09B084FF214977812EA665769C5B2B1F3BC565BBB0A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Release/osucollector_gui.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 78d865927d102564c25210573649b81ebe18eaffaca8433174b8ee1d31928ccb
- MD5 b0f22af9d8a6b74a45693f68495f2d0d
- SHA1 1f06dd1cf27ed21ae376212fd9a843204d67b7b1
- SHA512 449704c06ff3798a600c4e0b7d1063eb32cd25ff766d4f19850aa7e6147e8f380be71718c8f9aa7c8920c36abe70b1f931e5eb601ecef2b8d33af04e06dba63a
- SSDEEP 384:7keVeD/i31Bi54dVbidkeOV0EYMSXwLYxgZty1I/ELdRGx:7jiEVrOwpmT
- TLSH T1E7623B95B7BC8637CDAF0B3A197752804676A3879956EA4D6CCC118ABD233050F237B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20962
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\in\RiderProjects\osucollector-gui\osucollector-gui\obj\Release\osucollector_gui.pdb
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Release/osucollector_gui.exe.config
- SHA256 f82338e8e9c746b5d95cd2ccc7bf94dd5de2b9b8982fffddf2118e475de50e15
- MD5 15c8c4ba1aa574c0c00fd45bb9cce1ab
- SHA1 0dad65a3d4e9080fa29c42aa485c6102d2fa8bc8
- SHA512 52baac63399340427b94bfdeb7a42186d5359ce439c3d775497f347089edfbf72a6637b23bb008ab55b8d4dd3b79a7b2eb7c7ef922ea23d0716d5c3536b359d4
- TLSH T1B4C08C4940A8BD278E334B235752C52AEFB073A3A424140CF02FBA660F3128D865737B
- MD5 SHA1 SHA512 TLSH
Release/osucollector_gui.pdb
- SHA256 14226e3fb689c028dae02ea1acf486f5ed61a07a7f828cddf32cf93d95c27e96
- MD5 95d2e379ffd000a6cc4ca63b35da4e76
- SHA1 79257fb6dad6cd1863f8d2e3d9a335816375d3c1
- SHA512 ca0629d3a7d374e6dc1b9c98867f40253537e6a35263144421346e6c628579b3e0356198a78590ad31dd573fdd09a015b2ae17aa6b999a52ab20655942c588df
- SSDEEP 384:v4M+yclsU3ph6ub6ak35fBb6a91xoQoYF:v4M+yclsU3m5j
- TLSH T11CD2EDD0FF40C1B2C4EE573C26A74F5AD672DC826E995A4B32B47684EC726060F913E6
- MD5 SHA1 SHA512 SSDEEP TLSH