bootselector-1.0.0-win-x64.zip
- SHA256 58b3c8f725846b395715ca4b9bf3c35e6a60f96879fb9de4209b03dec5c2a6b8
Overview
overview
3Static
static
3Avalonia.Base.dll
windows10-2004-x64
1Avalonia.Base.dll
windows11-ltsc_2024-x64
1Avalonia.Controls.dll
windows10-2004-x64
1Avalonia.Controls.dll
windows11-ltsc_2024-x64
1Avalonia.D...rt.dll
windows10-2004-x64
1Avalonia.D...rt.dll
windows11-ltsc_2024-x64
1Avalonia.Desktop.dll
windows10-2004-x64
1Avalonia.Desktop.dll
windows11-ltsc_2024-x64
1Avalonia.Dialogs.dll
windows10-2004-x64
1Avalonia.Dialogs.dll
windows11-ltsc_2024-x64
1Avalonia.F...er.dll
windows10-2004-x64
1Avalonia.F...er.dll
windows11-ltsc_2024-x64
1Avalonia.M...ml.dll
windows10-2004-x64
1Avalonia.M...ml.dll
windows11-ltsc_2024-x64
1Avalonia.Markup.dll
windows10-2004-x64
1Avalonia.Markup.dll
windows11-ltsc_2024-x64
1Avalonia.Metal.dll
windows10-2004-x64
1Avalonia.Metal.dll
windows11-ltsc_2024-x64
1Avalonia.MicroCom.dll
windows10-2004-x64
1Avalonia.MicroCom.dll
windows11-ltsc_2024-x64
1Avalonia.OpenGL.dll
windows10-2004-x64
1Avalonia.OpenGL.dll
windows11-ltsc_2024-x64
1Avalonia.R...ol.dll
windows10-2004-x64
1Avalonia.R...ol.dll
windows11-ltsc_2024-x64
1Avalonia.Skia.dll
windows10-2004-x64
1Avalonia.Skia.dll
windows11-ltsc_2024-x64
1Avalonia.Svg.dll
windows10-2004-x64
1Avalonia.Svg.dll
windows11-ltsc_2024-x64
1Avalonia.T...nt.dll
windows10-2004-x64
1Avalonia.T...nt.dll
windows11-ltsc_2024-x64
1Avalonia.Vulkan.dll
windows10-2004-x64
1Avalonia.Vulkan.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Avalonia.Base.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Avalonia.Base.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Avalonia.Controls.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Avalonia.Controls.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Avalonia.DesignerSupport.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Avalonia.DesignerSupport.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Avalonia.Desktop.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Avalonia.Desktop.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Avalonia.Dialogs.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Avalonia.Dialogs.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Avalonia.Fonts.Inter.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Avalonia.Fonts.Inter.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Avalonia.Markup.Xaml.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Avalonia.Markup.Xaml.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Avalonia.Markup.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Avalonia.Markup.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Avalonia.Metal.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Avalonia.Metal.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Avalonia.MicroCom.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Avalonia.MicroCom.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Avalonia.OpenGL.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Avalonia.OpenGL.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Avalonia.Remote.Protocol.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Avalonia.Remote.Protocol.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Avalonia.Skia.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Avalonia.Skia.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Avalonia.Svg.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Avalonia.Svg.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Avalonia.Themes.Fluent.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Avalonia.Themes.Fluent.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Avalonia.Vulkan.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Avalonia.Vulkan.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target bootselector-1.0.0-win-x64.zip
- Size 20.3MB
- Sample261027-lt5fbas1av
- SHA256 58b3c8f725846b395715ca4b9bf3c35e6a60f96879fb9de4209b03dec5c2a6b8
- MD5 c563ea2ce40fba7158c4c803fdfe22bc
- SHA1 9930a2c238e48cffc0c4c60e6370f3ccbfc5507b
- SHA512 129c795d7d074140c09d27a3e7124b3ca305afb5f2157e76c1df811a847f3bfbc09b6af2f1977f7cafd2942193621108b150c007746aac70d26e34e9eda321b1
- SSDEEP 393216:sVyrezybXD4l6vi6tY0K5jCw5ylMZXc5QC9c8bcoEWZLNYA3NYAUzFOR4C+Ck:ZqPl6vi6ah4lv5QC2wdPLNn3NnUahk
- TLSH T1102733FD75E784A5D142A277987EA79A6D888830BE633063153493038543ABE7FE3335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 80 IoCs
Checks for missing Authenticode signature.
resource unpack001/Avalonia.Base.dll unpack001/Avalonia.Controls.dll unpack001/Avalonia.DesignerSupport.dll unpack001/Avalonia.Desktop.dll unpack001/Avalonia.Dialogs.dll unpack001/Avalonia.Fonts.Inter.dll unpack001/Avalonia.Markup.Xaml.dll unpack001/Avalonia.Markup.dll unpack001/Avalonia.Metal.dll unpack001/Avalonia.MicroCom.dll unpack001/Avalonia.OpenGL.dll unpack001/Avalonia.Remote.Protocol.dll unpack001/Avalonia.Skia.dll unpack001/Avalonia.Svg.dll unpack001/Avalonia.Themes.Fluent.dll unpack001/Avalonia.Vulkan.dll unpack001/Avalonia.Win32.Automation.dll unpack001/Avalonia.Win32.dll unpack001/Avalonia.dll unpack001/ExCSS.dll unpack001/HarfBuzzSharp.dll unpack001/MicroCom.Runtime.dll unpack001/Microsoft.Win32.Registry.dll unpack001/ShimSkiaSharp.dll unpack001/SkiaSharp.dll unpack001/Svg.Custom.dll unpack001/Svg.Model.dll unpack001/System.Collections.Concurrent.dll unpack001/System.Collections.Immutable.dll unpack001/System.Collections.NonGeneric.dll unpack001/System.Collections.Specialized.dll unpack001/System.Collections.dll unpack001/System.ComponentModel.Annotations.dll unpack001/System.ComponentModel.Primitives.dll unpack001/System.ComponentModel.TypeConverter.dll unpack001/System.ComponentModel.dll unpack001/System.Console.dll unpack001/System.Diagnostics.DiagnosticSource.dll unpack001/System.Diagnostics.Process.dll unpack001/System.Diagnostics.StackTrace.dll unpack001/System.Diagnostics.TraceSource.dll unpack001/System.Drawing.Primitives.dll unpack001/System.Drawing.dll unpack001/System.Formats.Asn1.dll unpack001/System.IO.Compression.Brotli.dll unpack001/System.IO.Compression.dll unpack001/System.IO.MemoryMappedFiles.dll unpack001/System.Linq.Expressions.dll unpack001/System.Linq.dll unpack001/System.Memory.dll unpack001/System.Net.Http.dll unpack001/System.Net.NameResolution.dll unpack001/System.Net.NetworkInformation.dll unpack001/System.Net.Primitives.dll unpack001/System.Net.Requests.dll unpack001/System.Net.Security.dll unpack001/System.Net.Sockets.dll unpack001/System.Net.WebHeaderCollection.dll unpack001/System.ObjectModel.dll unpack001/System.Private.CoreLib.dll unpack001/System.Private.Uri.dll unpack001/System.Private.Xml.dll unpack001/System.Reflection.Metadata.dll unpack001/System.Runtime.InteropServices.dll unpack001/System.Runtime.Numerics.dll unpack001/System.Runtime.dll unpack001/System.Security.Claims.dll unpack001/System.Security.Cryptography.dll unpack001/System.Security.Principal.Windows.dll unpack001/System.Text.Encoding.Extensions.dll unpack001/System.Text.RegularExpressions.dll unpack001/System.Threading.Channels.dll unpack001/System.Threading.Thread.dll unpack001/System.Threading.dll unpack001/System.Xml.ReaderWriter.dll unpack001/System.dll unpack001/av_libglesv2.dll unpack001/bootselector.dll unpack001/bootselector.exe unpack001/netstandard.dll
File Explorer
-
bootselector-1.0.0-win-x64.zip.zip 20.3MB
-
Avalonia.Base.dll.dll 1.5MB
-
Avalonia.Controls.dll.dll 739KB
-
Avalonia.DesignerSupport.dll.dll 205KB
-
Avalonia.Desktop.dll.dll 13KB
-
Avalonia.Dialogs.dll.dll 185KB
-
Avalonia.Fonts.Inter.dll.dll 1.8MB
-
Avalonia.Markup.Xaml.dll.dll 48KB
-
Avalonia.Markup.dll.dll 37KB
-
Avalonia.Metal.dll.dll 13KB
-
Avalonia.MicroCom.dll.dll 15KB
-
Avalonia.OpenGL.dll.dll 55KB
-
Avalonia.Remote.Protocol.dll.dll 58KB
-
Avalonia.Skia.dll.dll 100KB
-
Avalonia.Svg.dll.dll 49KB
-
Avalonia.Themes.Fluent.dll.dll 559KB
-
Avalonia.Vulkan.dll.dll 164KB
-
Avalonia.Win32.Automation.dll.dll 85KB
-
Avalonia.Win32.dll.dll 691KB
-
Avalonia.dll.dll 4KB
-
ExCSS.dll.dll 339KB
-
HarfBuzzSharp.dll.dll 34KB
-
MicroCom.Runtime.dll.dll 14KB
-
Microsoft.DiaSymReader.Native.amd64.dll.dll 2.2MB
-
Microsoft.Win32.Registry.dll.dll 22KB
-
ShimSkiaSharp.dll.dll 153KB
-
SkiaSharp.dll.dll 112KB
-
Svg.Custom.dll.dll 717KB
-
Svg.Model.dll.dll 143KB
-
System.Collections.Concurrent.dll.dll 41KB
-
System.Collections.Immutable.dll.dll 22KB
-
System.Collections.NonGeneric.dll.dll 23KB
-
System.Collections.Specialized.dll.dll 17KB
-
System.Collections.dll.dll 51KB
-
System.ComponentModel.Annotations.dll.dll 24KB
-
System.ComponentModel.Primitives.dll.dll 16KB
-
System.ComponentModel.TypeConverter.dll.dll 116KB
-
System.ComponentModel.dll.dll 5KB
-
System.Console.dll.dll 34KB
-
System.Diagnostics.DiagnosticSource.dll.dll 166KB
-
System.Diagnostics.Process.dll.dll 82KB
-
System.Diagnostics.StackTrace.dll.dll 9KB
-
System.Diagnostics.TraceSource.dll.dll 19KB
-
System.Drawing.Primitives.dll.dll 36KB
-
System.Drawing.dll.dll 5KB
-
System.Formats.Asn1.dll.dll 37KB
-
System.IO.Compression.Brotli.dll.dll 26KB
-
System.IO.Compression.Native.dll.dll 916KB
-
System.IO.Compression.dll.dll 43KB
-
System.IO.MemoryMappedFiles.dll.dll 25KB
-
System.Linq.Expressions.dll.dll 430KB
-
System.Linq.dll.dll 95KB
-
System.Memory.dll.dll 6KB
-
System.Net.Http.dll.dll 513KB
-
System.Net.NameResolution.dll.dll 40KB
-
System.Net.NetworkInformation.dll.dll 31KB
-
System.Net.Primitives.dll.dll 69KB
-
System.Net.Requests.dll.dll 105KB
-
System.Net.Security.dll.dll 208KB
-
System.Net.Sockets.dll.dll 117KB
-
System.Net.WebHeaderCollection.dll.dll 10KB
-
System.ObjectModel.dll.dll 19KB
-
System.Private.CoreLib.dll.dll 3.0MB
-
System.Private.Uri.dll.dll 82KB
-
System.Private.Xml.dll.dll 747KB
-
System.Reflection.Metadata.dll.dll 108KB
-
System.Runtime.InteropServices.dll.dll 19KB
-
System.Runtime.Numerics.dll.dll 83KB
-
System.Runtime.dll.dll 10KB
-
System.Security.Claims.dll.dll 13KB
-
System.Security.Cryptography.dll.dll 207KB
-
System.Security.Principal.Windows.dll.dll 49KB
-
System.Text.Encoding.Extensions.dll.dll 5KB
-
System.Text.RegularExpressions.dll.dll 344KB
-
System.Threading.Channels.dll.dll 28KB
-
System.Threading.Thread.dll.dll 5KB
-
System.Threading.dll.dll 12KB
-
System.Xml.ReaderWriter.dll.dll 5KB
-
System.dll.dll 5KB
-
av_libglesv2.dll.dll 5.2MB
-
bootselector.deps.json21KB
-
bootselector.dll.exe 381KB
-
bootselector.exe.exe 271KB
-
bootselector.pdb24KB
-
bootselector.runtimeconfig.json1KB
-
clretwrc.dll.dll 310KB
-
clrgc.dll.dll 657KB
-
clrgcexp.dll.dll 692KB
-
clrjit.dll.dll 2.1MB
-
coreclr.dll.dll 4.5MB
-
createdump.exe.exe 70KB
-
hostfxr.dll.dll 371KB
-
hostpolicy.dll.dll 370KB
-
libHarfBuzzSharp.dll.dll 1.7MB
-
libSkiaSharp.dll.dll 9.0MB
-
mscordaccore.dll.dll 1.3MB
-
mscordaccore_amd64_amd64_10.0.125.57005.dll.dll 1.3MB
-
mscordbi.dll.dll 1.2MB
-
mscorrc.dll.dll 131KB
-
msquic.dll.dll 512KB
-
netstandard.dll.dll 5KB
Avalonia.Base.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1f0184b616adb0f03dd75b0f5f116aceeb5b5d9b9f3f245e56e0c58a2273f5c7
- MD5 c660fec2741c47f794b4f8bb2c44a9be
- SHA1 d35c1a021997c56eb528732ddf446dc8a2c9f071
- SHA512 e382fec5c5f87551a46819e9777df209a7ee22217a7701bc6339d38c6fb1d4b3320b801a43ea6e01b8e9b827060027b5a28d158bb7e43194782313f92242618e
- SSDEEP 24576:C1eZNCJp5xvYYjZaHX7GT4G63Rx2/cinWvIXHfwv:CSCJprYYjZaA4YIC
- TLSH T13A75181273DA5F3BD95F07BAE07318101379D6A6A391D35B5369AABC2D837E00F403A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1586990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5821b88d43b12e102122e0e2e853b95cdef54b6b84b8eea85e588d677e6cd8aa
- MD5 a74170ef1cc2045a6ba3d4a715915810
- SHA1 489d6a110a46b8c6ce350aa916e4aa077aaca789
- SHA512 f67938570840275e2ff3cf55cba4d088c1e0725ff3934f4ddee5a2ef95d859726dec0ebc84bc0eb7ce540f5b1fc8f8b941009b1f5f2468d0fb3197be1579bce4
- SSDEEP 12288:OTxqCHF2MCl75FwGPH3QPriL6FM7abdH12SDR7O9EX:8xSMIwoQjiqM7apV2SDZO9EX
- TLSH T18CF46D5A73A88B2BD9DF4277F0714854CBB5E4469BE9EB8F6601B2EC1EC33500C4A257
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
762734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
737KB
Virtual Size
736KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.DesignerSupport.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5b6a02f84e0891dbc69ac19cadf044d51d2711565d5214322e5653cb58c0a8c
- MD5 c9abac1f9df29a48353f85a8aab35e27
- SHA1 19ac1f5e8410c11185b6a58bd7cb413dab2a12d0
- SHA512 93a03d28875b6cf2ca5432aaa72b80513f87ed2f6c0d8a36e50bf95771cf95ebd168cd15b374fe74d3aa10741f36cdc825f6007fd475421bbe55492a96ccaf96
- SSDEEP 3072:TuwiS/pM2h44ufl6rmY5a7smavmHYXRCJdqi8YlCGJ5RqHfNumwB6BUPy3obIyBI:qmQ8f5EayqHfNumq6BusyB9x
- TLSH T1A624E04113BC4633CEEF8A3AB0AA31420732F5576EF2EB8A1BACB5D91A573510750767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
215426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Avalonia.DesignerSupport/obj/Release/net8.0/Avalonia.DesignerSupport.pdb
mscoree
_CorDllMain
Name
.text
Size
202KB
Virtual Size
202KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Desktop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 732fd521a07c84ea4f8b6d8645dc10f573e960a075da36bab28f7d505a1f7c72
- MD5 3e1e577206449073555d964256d11798
- SHA1 73e76c09440c5cb75dfda729b720a3e16c2c37b5
- SHA512 8a20ae92237cf3fc3abe2a4cff0a1a6392d7aa28bf5c154954ce428e2bf1775be061b0367cde970035e46b56c8a43be4b6b99e287abd19ae952b788cac7c09be
- SSDEEP 96:Hu8ZZqivbD2z8UWmmz4PJ/yJ/UnyHeqnyHeczqnyHeDnyHednyHe8nyHe2BnyHeL:OMMi+zpWDwAgY6DMZPGlGaFHhTpBxK
- TLSH T13352A6D493046263ECD38A33B5FEF9926177B692ADE28B556330734AC826B340F52F15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Dialogs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f9653d7d08134d6de2f813df96151ccdc89df0c176fd375fda024aa6acd1df20
- MD5 7bb51bd37d3fe7d80f14dc703015fbe4
- SHA1 9f8c31bc2223e631ff10ccebd1ad0e31819e089a
- SHA512 df44a00607f4c124d7522bd889b4000e2144b228ba25392fafdf01d3b203abfbf4724e5506e95f71870125566454a7400804f488574f49094f588bb61919dcd2
- SSDEEP 3072:0XlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPt3/yzBuNOIOU7og2FnLYo:2qXpSIE6Ey/SmWUMxFn
- TLSH T14304F601D241AA3DCAD2E2787C7DB3BE0975F429FD9A652730D5AB3149C4910ED28BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
195262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
183KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Fonts.Inter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3f433e2e025ba12a181787cf01c0b5d1d22e23d7edd678980cfa352d8c5fafbc
- MD5 0c8dbe13d885276a389f72299ace018c
- SHA1 7dae9b5d2ceb5d780e57659172def3ec1729bf6e
- SHA512 b16bb865af6c95d06d1e2dfe76316d31327fbc371eb8477c86b4831b63dbfd991322217fe8cd2749c574d10caa6075c283521fd8bbf49bfbbbc794e34fe73a51
- SSDEEP 24576:unKxRWxB3jL6wZHqBm/3nHDmHH7EFmIYRMxMmABlNGwBcDDLxYVTvAnYiRUVOGX:/iEm/a71rsLmVTYY0UVOe
- TLSH T19A957B13F363C35DC9172D3A87A2C7A0B363BC913B12E10ABB283A55C99B1B84D5B5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1898030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Avalonia.Fonts.Inter/obj/Release/net8.0/Avalonia.Fonts.Inter.pdb
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Markup.Xaml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ba06e059311a697ac23aa6aaa44e77d3026d8143e46cacf9fbbcfba542ede461
- MD5 ec719014a7927a253fa1327a6c8f02b4
- SHA1 b35ea08a50913f23ca4e634ffdfff53cf8238387
- SHA512 36076dc7bd8ba4053c1a7bca619574d4832fded764dfef87bd72f959a3a279f428b94c5c8b3a7d2560432cd55617eb2553e2e6bf0dcd8cfdd6726fc799ff45cc
- SSDEEP 768:qCixeCa13Q9a5s4p1h1XpDSHV2Axdp/buJS/3UYZ8M8KPJ7K:qCiJo3Q9WpNk7br/EYk
- TLSH T173234A55A3548333CFDE4A75F4FCB504033272962AF2E74A8F2476D94A9BF610E90726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Markup.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9a510d40c76c0e8bd411ca92c5f499694f6bf4084829237fb0153d2fd5cbc7b9
- MD5 d27951927c2f88bf050adb0e1c800c1d
- SHA1 24ca9d475e7194c368cfc4f65ab33451cdb70544
- SHA512 960104d1afffd0fbf4ee4c5fedc05d32909a9876c984c0a1497343071f65be38f433b9bd46f75534a7edba0e9269040fe6f3684d06fa95221e164d039881381d
- SSDEEP 768:ygkF7FphY40eexQpWHh7l2ASWhccYZ8K2ZMgPvJ7W:yzFe0WB0cYx
- TLSH T193032A6063548227FEDA4B36B8FDB4621672B6DA39F1EB465F3031CB4413B610E51F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Metal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d15adbcf7fa16e8df644c4eec83502f6a7f39150278b1cfaad31213bb6aa28b1
- MD5 6fafb93c6fdb96f8d2ee095fa9be976a
- SHA1 7750d2d8e62342d5549aff993e298635ede97f39
- SHA512 e4b5c63eb49a117eaf324101a066c333687a83930bc0b72687ffb94f9217317e210cebad45f95af02c967c09b15a11c26c125af65fabe5bdacfe5fa0101df4c9
- SSDEEP 192:oYZl8o659N+23RAgY6DMZPGlGaXRJaL+xP:lZaQ2dYZ873
- TLSH T17752B8D493042163ECD38A33B9EEF995217BB682ADE2875567307346C867B300F66F19
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19710
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.MicroCom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ec4d6da75ff5a973231cc0c8bda4a700c5637b7f9a0a9ade3e5e73fa1a33e986
- MD5 7dfa07e4824946c3bc01d1a9783c9445
- SHA1 e1977356dfedd770c0d79b0878f985f348a0be71
- SHA512 a5e56065bda049f734414eba2127b7de4a2641aa8fa6b0ee78cc674815c62c788cdd2545464a201548f2e78e8a6592ee0f8c49c4979c9dfe1abf91a0f1e01ff4
- SSDEEP 192:tRZBT4PczkwpVAgY6DMZPGlGBFbans5THhM9lxF:HkPc4wzYZ8MS
- TLSH T19862A5D593141263ECD28A3275EFF8D2523BB682FDE28B5566307346D826B340F62F15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Avalonia.MicroCom/obj/Release/netstandard2.0/Avalonia.MicroCom.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.OpenGL.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 34f6dc35fe12c657156a7b4c58ed1c9c9897e5ad05ba82f5a8f5a34df562321b
- MD5 c412488620a222f3006268f6f8590190
- SHA1 54d88b085c33da770f12aeff9808b8c45948052a
- SHA512 44543caa1150ed629412c664c1b1e19229e7039570d90bf1814dbd2bb8fec15400a419e4372591d8bdde8b81f7e3ff463f130489cdc3528ddddb3b695ea15b31
- SSDEEP 1536:CTpTpTXRP9d9IcOXDHGXWv4fFZgcPV1yRPls6xHKqYs:CTpTpTZGHGXWv4wcTyhYs
- TLSH T15A43D601B3EF1212FE764BBAE4B8B6895336B5E174D7FB6D4510616948B3B10C702B32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62766
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Remote.Protocol.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2a950796ba6ca69fca0f01f61f7a41e5749db313ef495e362b67d81254804b3d
- MD5 c13cd7833030d8072055b19cba1ea41b
- SHA1 496bd36f43db047c611ac221169d60760c8fb02f
- SHA512 abb29be048b1a4ad1971bcb902e5e20e9e6b5b947926a140b6f23625b27a32125dffcf8bf6992c1cc2c558f444d66c8ca2a1a31201a233f49862a0d8e495aa9f
- SSDEEP 1536:NHOAsmZUsVaMBX88NyL4cIW8WwsgKQb8IK6K5YA:07mZl/BX/N44cice8IKr5YA
- TLSH T1B3435B61930C973BC9DF44B674F572134336F34626E2EBE15E5CA296A95B3400F20EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
65390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Skia.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5141f2945532bb5d3f2abeac8b105ce0d75212804da650453a9375cb54c5c58
- MD5 a750732c4968ba6a6317f105dcf2d716
- SHA1 0394c8020e23dc60a94d48341806d3789e3a81c1
- SHA512 d418f6b6ea2ead517e0368eb569c9640c659121a1c35c5945f3cf9be80aab0d8c375c9dff359b64523c68bb6a96167fa5fbba9d1d386e7677e35b7784babee59
- SSDEEP 1536:V3WhsK06gI17jjRwMPbPJOFXjerp/+Qe3kX3qa9eJduYn:xpK06/17jjmeLJOFqr1+Qe3kKaeTuYn
- TLSH T1D4A37E5417AD8A3BDACF463EF0F874410772B353A5E3EB569E84749E14A33A00E583A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
108814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
98KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Svg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b53b2d8051c908ff8c8181d4df804a80e03f44b7b990a9468f8cf570aa69269
- MD5 2bae60cd72e75d0e09ae088012f6f7fd
- SHA1 4ce0ef7d6dc82813af8f817a2c54761e8ae3d987
- SHA512 ab7a48e72a838b79dece9bf75de4dc90fbe37475c54f4113563d0e63a6a4de79f709623ac633205071c98e5cefa41c618465f60e190311647027b32b52d35455
- SSDEEP 768:YRNySMlxFYGHWlxOtfmcXi3W9OpntrXGb2GL9pqC5r:YnySMlxFYoxEsiAQrWb2GLbqCR
- TLSH T126339E8B5BBCCB2ECA4E8631B0B109144772D3432523FB5B5D9979BF5DAB7C02214396
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Avalonia.Svg.pdb
mscoree
_CorDllMain
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Themes.Fluent.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e024fbe502dcd1e690754a13b399e42ae21d0053a749449b457e17408ebc03ed
- MD5 a65b90332b51db116281a0a5c52538ba
- SHA1 3717f7baefccad8ae0805b8645ac9404d482eb16
- SHA512 69f1545a3a15a8f3a5525320db140217ee58969463aeb04e587725cbc6b3ea93c53b2637763882e1b5898125e36478ca2297b334d10fa23f6c455bf50eb3d69b
- SSDEEP 3072:BaPda6O86M31QB0EeUShT415/msz8HUsfEPcBURAwrdb/lMReIBcNPqv3+g5oePg:BaPL1rNUSR47J8W19cQOBbQ1Sv
- TLSH T117C452B122960952D239BD7B89FA15507C71F12A3583FE482CD05CF90A63B926F13B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
578286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
557KB
Virtual Size
556KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Vulkan.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b990da164ba35406ba83e102aa26518b4b6985e24407937f0d74026d0fe85b46
- MD5 b6491cc95514a6a4f458e4cee4fadfbe
- SHA1 b0334269603a722370dfe6c46ec4a4d248416315
- SHA512 866380c5ac454ae5c938c1bb8b63008326733e42e5aff7f91415858dc54fe8b351361a5d96e04c42cbcf20b9a86e7043415d86b7835881d086918cb85f473dfc
- SSDEEP 1536:N0z3lPurGWZbzVrzhDMXZ8iEUndOMNbD4nT+tAS1H1JASFQFUoPyWpAZVN+ws0Xb:N2FuaWV9zhjwcMNPQFUoPGkwXLoYp
- TLSH T13EF307117528B653D93A0A3974B3651546907C87B2B6BBE6C8C3C2CEACE13641F3D6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
174462
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
162KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Win32.Automation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a20643b8af0125d020173acd1b3eb355562fdae568574144210aac958d1a4b5b
- MD5 a1d1c7016f1ce2dcc287122b1e83fdca
- SHA1 ee10a11c8d88853c380cb0709543baf8ac4f313c
- SHA512 29bf94e08c30da63d42e70c8bdbec7499d972f052fba34e2c8cacab4ae085c81dc3179b79acbbfda70401895369586ba1e2b7c22fdd24d3555a2d6d70cdbdad9
- SSDEEP 1536:eUUHLqGMuWu78PGvSsynLa+5Uf1CviFjHYf:vU+JC8ASsFJ3HYf
- TLSH T198833B90B3141F06CEDE4A3F78E5B8058EB079D774E2F71A4D64A5A4CCABA110B4179D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
93038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.Win32.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ccf56193e01ce365bc99035cfde882e0cdcaa248819acdba494b0d0b00e4f549
- MD5 b2095d2bcc3a7d70f560824212fed91b
- SHA1 66859fc508a8035c530bfae4fc30758d32cd776a
- SHA512 c4fa2871f67f8aabf5648ba28904a1eb2896860de2f201d17c867a1db2cb3894b496699f640815bd52860d1f7dcf0042e78855a578199ab68fcff1d62a9e5228
- SSDEEP 6144:jxtLPerdKoRR0B1hPb0S5W3bys4nnPfLNjU4nkc40hA0X7mtS9BZ3tkAwUXzbkD3:FqHXy19W3+sxX/gHXitE3tkAvb
- TLSH T109E43A0243A80B3BD2AF0775B1720402F6FCA54AD3D6766E584D75AEADD6F107C4A3E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
713678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
689KB
Virtual Size
688KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Avalonia.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b474dd831b8fb2d5b491e2cc2d3687d99fdaaa4dbfe857d4bb5761a9e5e78633
- MD5 b60a2d67ed086006c7b05bc302b1ec26
- SHA1 bc54e369be18df6d595e07c9c7096593fff31e15
- SHA512 3b58900a97f13f4badec1cc7c514d0f32f5d0d55ebbf0414818ee75cfac4cf26b432e48ab144d62855135f12212e6a3c6a8dbf453bb9f40a7cd3c1b4a54be4d3
- TLSH T1F48150568BF40326FCBB4773EEB71A824274FD61AD728F2F0C9122461C566344E32B26
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/packages/Avalonia/obj/Release/net8.0/Avalonia.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
988B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ExCSS.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6572632bc96ac1dc283099060f6561f80a044adce24e160be464596db09c253d
- MD5 e46eecbab8be6d40372ec207d75d89a9
- SHA1 9c8606c091aa113e0f90b361c7ef5c1e7f6a6d29
- SHA512 4b0512a9b8643c8ee8a627d2721e06c0a94ab5e083d90c1187e1b8979d498328936ed1dd06131b0f45014f974237c6ef4dadbe0309d834cc893f2898a4c6e304
- SSDEEP 6144:ZQO4yuHZMcyF21OIjMRadjvGzKFLghdV2AA66cfll:bcyF21OBejvxJ4f
- TLSH T15C745C2423F84A3AE6FF4BB5D4A4951884B4A43B76E6FF9D2850BDEA3C423D15C10673
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
352666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/ExCSS/obj/Release/net8.0/ExCSS.pdb
mscoree
_CorDllMain
Name
.text
Size
336KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
HarfBuzzSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1ea5dcba55a6a3b9254423f8d19c2cb16d0bec31e03d2177e2d210cca2ab9b11
- MD5 01dc617f60f8576c9c6ccb9449829ee5
- SHA1 ebda7af6295fb4f1012ca3e28fd9e31f415278ea
- SHA512 653a50620a330eef93f5bfaccf2fb2bf665fbe363f1fdaaa1bfd22b64165b1e316c85ae64e5a9fecbdeb8702e7d0ed598d740652ba365d018e6655eccfce018d
- SSDEEP 768:GPAl0lu2QiKCoFoBupeaP8yexyk+ye1M5M88oa9:+Alsu2h6CBu7BIyk+yUMK88o
- TLSH T1A6F22B0197DC9722EFBF1D7AB4B70A4247F0E182C123EBE12A88917579837D45AB3395
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\bootselector\bootselector\obj\Release\net10.0\win-x64\linked\HarfBuzzSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MicroCom.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 59839e18e46b06ab23b633944ae3c3b552a300c5da389da870dfa980bcef93c1
- MD5 c27b01d179ab856b42e910496fe749f9
- SHA1 448412817480d6e20ae7eb2ff9250c69ed4ebece
- SHA512 30416fd4bf5554e6b575aff59787ae1078bafa529c36cbe51b05026691851a0824ab648d4d4d2ca4bd26ddab680eba95595e9cd80ee63230abffce799b36dabe
- SSDEEP 384:q5NX9uRskVFcxaQakfIut5vspHczY4DtcW8GsW:SX9uOIFAxtiHOh
- TLSH T1D7523B076B8CC237CBEF077E58F202864776E6047812EF0B34C8715A9D57F8956627A2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/home/kekekeks/Projects/MicroCom/src/MicroCom.Runtime/obj/Release/net5.0/MicroCom.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.DiaSymReader.Native.amd64.dll
- IMPHASH 91991fa58b73d2cf2f8c8572ce8c77af
- SHA256 7f8dcf37d9d66eae14c48a79fa2fcd447bd0f38a21be0203a9c4a89398aacf28
- MD5 a71cd05c01f0fc603c0bd782516f806d
- SHA1 c15e261d5e7318875d324d28ab70a883cd434c81
- SHA512 ce53f6dc1f02889ed6fb1f8df226f9badbb039f79505cdbd599a00a32b6617da5e19f2ad7f76bb8134b3ccad39fab2209ed8ec6ae42cd30402c4e450fc19fa88
- SSDEEP 49152:jH+fGgFyzuNiG6H0n8D1gkrz/OAyFAopdrq/c/:+GgFQq8DT/ZyFDN0c
- TLSH T1A4B58E87A6E841E8D57AD178D667520BE7B238010320A7DF42A4876A7F37FE50B3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:0b:b2:0f:5a:ca:15:8c:05:03:a2:ce:dd:39:82:f6:48:3b:ce:ca:41:3e:99:cb:21:70:fb:06:10:08:2f:d6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 27, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 16, 2023 - Nov 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
143392
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\Microsoft.DiaSymReader.Native.amd64.pdb
kernel32
GetLastError
FreeLibrary
DisableThreadLibraryCalls
LocalAlloc
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
LoadLibraryExW
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
CreateFileW
CloseHandle
WriteConsoleW
LocalFree
FormatMessageW
GetEnvironmentVariableW
GetTickCount64
GetSystemInfo
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
SetFileAttributesW
VirtualAlloc
VirtualFree
DeleteFileW
SetEndOfFile
OutputDebugStringA
DeviceIoControl
MapViewOfFileEx
CreateFileMappingA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
ExpandEnvironmentStringsW
GetFullPathNameW
VirtualProtect
VirtualQuery
LoadLibraryExA
GetDriveTypeW
GetCurrentDirectoryW
TryAcquireSRWLockExclusive
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
GetNativeSystemInfo
ole32
CoTaskMemAlloc
CoTaskMemFree
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateNGenPdbWriter
CreateSymReader
CreateSymWriter
DllCanUnloadNow
DllGetClassObject
DllGetClassObjectInternal
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Name
.text
Size
1.8MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
342KB
Virtual Size
342KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=174, id=261, version=30795,
count=16, id=260, version=30795,
count=9, id=259, version=33731,
count=52, id=260, version=33731,
count=7, id=257, version=30795,
count=195, id=1, productName=Unmarked objects,
count=126, id=261, version=33731,
count=31, id=265, version=33731,
count=1, id=256, version=33731,
count=1, id=255, version=33731,
count=1, id=151,
count=1, id=258, version=33731,
Microsoft.Win32.Registry.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f862ca14381452403553a2f6e3257d8f95114f962005cbb82cdfbee8db199504
- MD5 a6835f4a7fd6b89b0f0ec8dc0a0cefb8
- SHA1 9bcb436bb75a5f09d501709a9aecd72f7ef42227
- SHA512 c0fb68fd21ead7fe3bc583c94de6d49006d69c669f1e1194e856f577ceb656f53979ae4be9e6866ebada2a903019444d6fdcf4955301174c2a42b85106c69e1b
- SSDEEP 384:T8NkLRjwr79fN1vglZdEJHiP7KHIoWIuvPHxN+WnWLGW:T8N2wrpvglZdtPGwpvvxs
- TLSH T125A23B01ABD4812FFBFE0A3F9CB2A1548276FD455E02EE9E45D802875A27BC49172721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ShimSkiaSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 75454712ab2aef35d74f32476fb942a9cc66ab52d86ac379e0b18b75f080c99d
- MD5 862144cca8e7ed6cfcdfbc301c489561
- SHA1 7ada1a89775ff5f0ccc94f304c456ed7568145b0
- SHA512 946c1d21e9f36dd514d279bd4888d6505cdd56b0e659eed789d15e4639c46f905688bbe50c8292c1124d27fd96442523bcaaa83e6da988d7f77a3730dbbcfebc
- SSDEEP 3072:CTGGsMpifwGU6KbcH3wjU9d5aMgCiBRThrDL68zMEHay:C5s6VGUHM9dgMFiBR
- TLSH T110E30A51B3B9851BC7CD9139B0299A18C369E55E32A2FBFA9F05F8F76E933020440D67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
162806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ShimSkiaSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
151KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SkiaSharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e8228b00c057cd58fe09b7d1529d6b72f330fa1f1ffdd56ac6ff9c8bed1dd26
- MD5 914f1892509ba841680b35f5d4e63984
- SHA1 2b06e3b7c129cca7601510b710b900130a5d1827
- SHA512 72693756f792d31baf60471560604d87c1b6343e2bba10b7c549f6e465b3cda11caa56d378e5a938b7dbb511066d0d4c53ef050d86280cd9de81208e91232684
- SSDEEP 3072:FCoS1Ynk0VS9z6GKxDsE660T/ckMA+MPnfq:F5nk0VSJCi9z
- TLSH T13CB34C0557BC852BDAFF1A3AF0210E218770E586111BE7BF119EA1F43797780C9A17A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
120222
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\bootselector\bootselector\obj\Release\net10.0\win-x64\linked\SkiaSharp.pdb
mscoree
_CorDllMain
Name
.text
Size
109KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Svg.Custom.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9bbd9213ce662b3b88917bd28d81c90b216211c92cd398c8559e086295f39794
- MD5 101bb0ade2c5d56896306b8cee0116fd
- SHA1 be524a5d34d58bcf3bf581e34abe395098b45196
- SHA512 b4124753c20e3265b78ccc0ec957f0c25fa98901fef1782883143012ffe600a266febc965c64bbc113b019782aceb1716f73072570790a8a2005ae1f886d4d61
- SSDEEP 12288:e34ieIMqdhI9m0Lb0s/kvUV1jnQxZdlCG3pFb6KtXX2nrfSNT6v2q6wwTnj1Eagm:HieIdjWm0LevUV1jnQxZdlCG3pFb6Ktp
- TLSH T19DF4182864963133C63E6738B8641D28EFB1CC4B65599A793ACC44A73FB772548433EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
739298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Svg.Custom.pdb
mscoree
_CorDllMain
Name
.text
Size
714KB
Virtual Size
714KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Svg.Model.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8fd59b26fdaa52076fb91d2e169ee3d1e295a7a8f7db0b1567c817e8d1f50dd4
- MD5 432d15bb61a4fae21546fe50ca06b69a
- SHA1 e172d6d3fe2fbed162f5a017d816f10193189509
- SHA512 d5907f96bc0c0e8bfa07f549326a87b26c61102882d525ba7c820552af5a620d4fb337c89e1beabafcf2b4876c22273500d2bf3b738a256864083600f6104e30
- SSDEEP 3072:Jq6rppNvuT7AivONjCvVyedIJ8PRNhb76GzqFE4meA1oJO:Jq6rpPuG+iJ8Z7HzqF3meA
- TLSH T1B2E39E1863A98B3AE64F5BBC7070101C17B2D203E663F3555D9D687E4D6BBD32608AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
151086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Svg.Model.pdb
mscoree
_CorDllMain
Name
.text
Size
140KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Concurrent.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 187f571db9869702ea0249b4cf06be6f4131f708d133e5a5f790ff75f9277053
- MD5 59688d3b40b607be0812a2359b7a9d18
- SHA1 d8ae594a3015ca80bc1d51fae7b378845270fb9c
- SHA512 e113141559045344a170360cd8f94184f0c34973ab443ed12445fb8fc37cc1972a0e489b2106e691f0b4647c68f516e49a1685ff40408895a73389d3becd4c28
- SSDEEP 768:VGKbN0k48VDU+U6nr7Igh43irbcC7/IyGWwtMSjsmjB/+P:Z0Ud5nnh43iv7woCagcP
- TLSH T1DB13090137DC5766FAAF0B37BAF595E40573EB66AA13D64D20D822994C33B000FA53A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db61731214a41da418537bb60d2fdc6e719e09f4ba0999d3e5ccd294406aa033
- MD5 6fb8d4c95b60c0dd00ccd7ceebc03276
- SHA1 c47136357658f1d11bc0b52bbc8a5ca2a371b745
- SHA512 effc7321c5e8306dd6d01d34dedd7c39103647b8747a994f03c742fb0421347f4239e68aea5458e8367fe8ff556424a2fae04aef5f4122b5c5ac0c101cbbf88d
- SSDEEP 384:laNmUajkMqFhFmVwS5uuTObQwll+lQoYlvZwjs9izGg7X5Wr0e7GJ0zROjIYz7p4:larMufmuSA++06AQumw0+RU
- TLSH T1D3A2C70173DC5331FEFF1F72A8F250A00774EAA1A827EA6F22D896499C7364459B171B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
27518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.NonGeneric.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 47912e6b2a471570ae8d1bb5de7124b042f1c58c77af819978e2b38229d19ae1
- MD5 4ce474c2f8493e79fdbd16a9a65bc0b9
- SHA1 f9dae85e7c22ee0df2853cd8d63743ac02187887
- SHA512 b0fbf85e09fc13a571e1b8474aabee5ee7077310b03fdf6c3dab32650bc0ece14a2eeaff5e5c00524fb450ea87a7c47b6c2acdb1b34171adfeeed2fed12ec9d4
- SSDEEP 384:Ph8iZAcTOHTkOTRh22JVA7hnXMIW5j0qFVez7Woy9yy35Lf6t5YSPx3b6lWPFoW:PhjZKQOTRh7AOaQIt
- TLSH T14DB2E604B3EC433BE6AF0B7B54F7515207F4EEA9AD07DB5F1409004A9D67B904AA272B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.Specialized.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fa2523d9d21321b6ba4a7928716f5784afcf75f99e608f8c9b3e10f2bc924f0b
- MD5 61c40f5821e4b4ac58286ac2122f3f2d
- SHA1 e32356bc654fab45dc9d6468260c542dd9117349
- SHA512 3c7f230295c2c6d51e7acf255a8ffcbd82bf6388c2978363b28c3fdc622c062878ccca4ac24cc3bf5bf5088b82e17771a6cae289a291bc5de28cf95293129502
- SSDEEP 384:8MPUS6arLQhlodsZZy0YAYvUlHDrYaa8wj8GJxaaS7W9cO2QKEaxO6r/A16jlBdc:PPU2dN0Y3mGbJcBP7yUj
- TLSH T11C82D515B3EC5332CAFF4B7658B702914BB1FEA47D12DB5E1454918A5C63BA00B32B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Collections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 497d068c0838e289911c1e390e94482dc5eea4f019a13ea295669134e3cf5ad3
- MD5 24bd1a363c4915a009e431dd277f849d
- SHA1 ad60a670d00823559ab2a97a24de3566181bfd73
- SHA512 da081276ef45b878c0f33c702767f2211fdc3c7d64c87c556d8814b8e988db178ad7658e488f09686ce4e45a3d0279b910e19031804dc35f481e4234e67f923e
- SSDEEP 1536:E0QXnhY9Vzsqofbm6eD+3C8pC0Hc/NnRLikK:EdXAjofb1e78oYETLikK
- TLSH T165333A01B3CDA736D6FF07F3B0E6C55093B5E2A36913DB0E01C992959863B410BA667B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
58318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.Annotations.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8d78b7f82f4af9720157cda933fe823ca0dee6d9f75f4e459d83dbef06aa5e2
- MD5 451c65c991410dd604fef1ef65c9f924
- SHA1 bfd7a91769098c9bd1b9f113a93bca6d721a7417
- SHA512 7021eadd4b9bd0508b5d4383bfb1a9502559c552aa5a3a8b34fff138743fbf6512e80916270f751aa7e74c4fcb3e3f947f1f9a3a7cb174ea7bd440c93a53313d
- SSDEEP 384:Sa0I3IiyBjvjYBaGhhRPkGO4cwR6JOaOIAfrTV5Nh2CxM8sdTP73TTZgZFg+MV/W:l+zy6JOxNpM8swcYC2AMC
- TLSH T181B2D815B7E41239FEF70774AA39E9984AF7BC987A22C65C258C005E14F2B404BB2777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30350
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d4bd6d101cca248eda4f027b43acd388f4c02698b6e31b6b6a9b5d36d0dc00a2
- MD5 43e13152af2b658265e9fba1dd7859df
- SHA1 b3457474b4c9f0c02c43fd4fa8bd2d7a977496e5
- SHA512 8ca28e94c9bf10d8738cac284f77cd8fee16ae39d487c6d2d9687d48fa150622b03c3107f6fb15c648cdf03842269ff6a280e3610b22a458a6f99e98de899281
- SSDEEP 384:XMhI1YFtRG1xI1L8d6Lm+IszxDgTc/MkP6oNrFgWnKZW:YWYFtCAdOo4
- TLSH T1DA72091133F84336FBFE0B792876485102FAFB54AA53CA5F45A8984F0A737411662B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.TypeConverter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5ca5a10ed9337526b6097bd7de6f0e8c0f5993c777eec464ab450c012ab536bf
- MD5 df7e3367a48725c5199dbb5809fb8607
- SHA1 6a56f68b2b3fddd0ab48a86fa403026910b69d74
- SHA512 f4112de453520f4697b765c73199777458e7c051776465939da94daca545f0783ed80d2a8d5d74178b60744e996ce6fd615cba6172ed795592bc6b092e0b32f9
- SSDEEP 1536:Qd9pQ6PMnbiU1cZpAtgKLKW5JiKXTQsRdpEmoQWv/9JBOxddzJaO/luReJyFs3HJ:Qd9pQ6PMbiU1cZp6gmJNWRfvZMfVA+p
- TLSH T171C3192837DDDB59FAFF8B71A97840148735FC632412EF4C1580146A09B7BC92A637AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
124446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
114KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ComponentModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d266e9007979bf3c3e47ac404c8611f8ed4d4892936a88ac82c6c1b283bee767
- MD5 020b41fea8b4566f6ff1f947257222db
- SHA1 c2e3035919643dc02cfdf3546776fe606ae65ed8
- SHA512 b54f71398f78473a61483478c1cde2ce3ec6213883a8b9edd93bc7507eaea5ccd01b789fc7a5f60ab3e3539a4c9af874e83d33e6929c79a4a28c31d94606a1fa
- SSDEEP 48:6UNbjOsKpl3lv86VvWDfIf+O8gl+IvOTi1BRzDmDVZLjpyWFZWOTW0KwW3aWx5WW:N0jJ86V/+AlxvB7DmDfLLW4W1W
- TLSH T1E1C1A421E3F84333DEB24B72ED63A705637AFB10DD13CB6E4255520A6D16A085A30B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Console.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 12929eeb3032b10b5fafbfd366f808a29cad438a28a969f6a2b898714a7f6eb2
- MD5 29344195db334688b03292150599ef2c
- SHA1 27d07cbb2745f2e8c120ed0ff4f6e213f1cfa829
- SHA512 8a469cb137bcec93ac8757b3ab9d29870410b3aba3601bef4633f1b09f5d3ec8fa6581822a343b78cc4f888c9b3612adf6fc7550f7b985241a4fb26e32cb823e
- SSDEEP 384:2lZ34u7+VElHphveypokwO4SiwWjw2Yd5zmXhlNFOavVgEw6UzosBJdTrogc8FNt:2lZ34u9lJNoe1WAfmOFBXdTr2Zmma7
- TLSH T187F2170577E0812BF7BF0B302976A549D736FFAB2A23EB0D4452544D1B43B648762BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.DiagnosticSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 534e5262e5b81a206f925902d70ec5895c6746ba99dfab996bb419e1a1d57deb
- MD5 130cdb37b6abdd66b4197fcb3f9df8f1
- SHA1 1825708a49b9814e4df3dcac38ed57a5ee338c44
- SHA512 8d9d7042f792f1d751c53c9da86b2b310195263df0d512c231455096fd764a98e396cc3b4cc42b71500900e683b579deb00ededfc452b0cb61f3309caf039c52
- SSDEEP 3072:O1a7VoJQvKl36bConH0dlBTk7HpXI/wouaE/j:ya7VoJxl3CHEojfo
- TLSH T117F35B5473FC4626EBFF1B35E87040060BB6E95BB926EB4CAE8854DD1913BC06B113A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
175230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
163KB
Virtual Size
163KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.Process.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 533636aeab51bdadd7d6b6653cd11ced8140c844afba4e42831ddb4cbea7c86f
- MD5 63c5d8589536a9310f825b4d36f783d9
- SHA1 32aa6e59d201a1f902c14273849c09d0ebe3e25b
- SHA512 f4e59ef1661398688f6e82a120215923a281a966dcbb3dda5f45a4c9e2776cc61c90d267f4206e9e5e43a806c891cc898972859cd1a54046c06d28b0c87d970f
- SSDEEP 1536:L+t9VoGw5CrgJG2ckEbOsvv+YIw2gFNEyjb3lJ/lot3okgU/Nnn8:KrBwYSckWOTYIw20Eyjb3z/lot3okgUm
- TLSH T16E835C2173EC421BF7EF0A79347065024BB6BA5B2A22DF5E4954859E1F837C18931BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
89566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.StackTrace.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c432fc669e9462ac4a649e2c24b53e86c81743faf492658ac850bbf9b16cea2
- MD5 9c83840e43b9cc7fbb1c78f462356b3b
- SHA1 ccc09df8c151e12a5e8cd34bd5baa25c8f92249f
- SHA512 7444ddbb52a44c13cb35c3cd2b9fa21c1ace0f04a5d98f7c08d9458ca08d3d670bd61e489852ef754b784359236330db9699843f103f29db37553f7e093123d1
- SSDEEP 96:FwXPDprW/t7jYlOL8JCLI61fGyggWD66Sy8BVhito/jIR6IH+E4d3xvl6fVa5Dmf:FwtMslk39I6Ny8BfC6IeECxd6kWn9gW
- TLSH T113121A16B7C8D32AECEF0FB9ECE2820117B0AE109496DB590AC4520BDC63980677175E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.TraceSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7538a9d96af69d00575c1303ae5b8c841eab044c3c124090eedf1238b4b1ea0f
- MD5 556a0d7696349ec7b2997d3a38c03173
- SHA1 1607e719708db93824fb9ade3cbc8703201d818f
- SHA512 810eb2f1021c5c6a438b0a108a0ec8e5bcbe8d5b0138add19205aba24db85df47765aca0cee2c9e9af9f07cff495e068202fff057b0af80828ebbfbf9c1a7b26
- SSDEEP 384:oKAvQo5wI7m0TMmoJa0kX22yU81oHtwjcqWmN7W0U6F5SWejhOW6BqJyWmQoWP8i:gvQo5NK0TMm/02L8ImVuUce
- TLSH T129924C05A3DC833ADEEE0B7F18B152A047F1AB666D23DB1E499491995C23FC05B32763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25486
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Drawing.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25388d023fda8795941c3e88af7a9c90c28609a9956dce92f16ca4abeb67724a
- MD5 408edc06d755ee75a0518ec1c6097bd1
- SHA1 a1a3dc85cfa664883a0ffe20c410274351f41ed5
- SHA512 f5a70e53c61a03a8927b9adc316e9815647461bf9d24bf4f63350f0fff3facdb9f23e0bf47be2d096074834b3247bcd40976da11d19cdb2077592c2eaea30085
- SSDEEP 768:BFA3n+PmC9JskceCL8sub6K0T6nF7a33W9AQAJ:vWe7skqL06K08AJ
- TLSH T1D2F2C670D7A8D26FFBBD3B3558F25660853277866747E65F0AC0904DE23279C02A01FA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Drawing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0ab2b86a304f54e043edb76d35f4f891c25e7633ab494be940f54b2a2703ee0b
- MD5 fc2b475d1c8b6ad9da21277ff4ff78ba
- SHA1 532a1a5f5da1c5bdcdec4ade31c15d52dd34de6c
- SHA512 b0dc3a02befb947953d5bd846690504663ab8ad4ed59cc9112cbfe4eef77bc71ec6fc9bdbc2f59d7db44ae1433d2af1fc11bad6ef6eafd97e0832e58f10ae609
- SSDEEP 48:6updObqbmOnABpNPadCz+zDO/g+IvHpTPTNPRzDmDVZLfTY3ZW9zKcQb35Wmq:ZSW0HNlz+zD4gxvt/DmDfLoWxutW
- TLSH T124B1875453E8033AFD730B32ACF35A4553B9FA54DE63CBAE1186520B6C16A24CF31B26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Formats.Asn1.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 097adaa12272a18d38e42bd2c517019031b4a0cebad5c45ba5f784168006bc2c
- MD5 8c0cfee759d68de464232f8f2ef7bb74
- SHA1 b771a2e63c21f0c374b1acbf95ac015dceb4afa9
- SHA512 7c2c19f60c465e3f12f8407e336182b81fa6a550bdc9c0f7be8b075d599225c598fedd85ff51d5510f9413ba6579b92a466832a1c627c1b2912c703a95c67a33
- SSDEEP 768:SHlqE6d7NqfL6S5vrX3sGlM4eU34ROcw4FuutSzNtRE:0udpqGS5vrXvP4ROcw4FugSzNtRE
- TLSH T1B903E50CB7E49326F5AE837291F84A464579B862C2C2C73E08D6510CA617B838ED5F7F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
43534
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Compression.Brotli.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb08ca87617cebdc87be2e17e11fb57cfba274bafcc564e1542069502135e4ac
- MD5 11de96282badaf583641ee9c7de1c06c
- SHA1 4513149096572a58e9d58aee3961735cad9c0da6
- SHA512 f2c0a42ebfb3326487a0e2978c16d38e53b6617c1d47512d1cc0ae8bf80a62261339e3a63660ed1943ee4abf61d3a5448bcc828ecacc065d497989ab53dc90e0
- SSDEEP 384:e323s/3o4V7sMEJeI9lHaaSPBcHDv48Vva05HYyw0lhfIeY6MiCEofSob8LlQWJr:v8LV7CJeKlh48Vvd9jbPD2
- TLSH T184C22A0167FC5117FDBF0F7A6AB55A290A77A8423D07DA0D784811D926B7B8099F0373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
32190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.Compression.Native.dll
- IMPHASH e5b5b215ac0ec6a15c010ab37d7a8d0b
- SHA256 62fc3b3cf113a4a368036e5fbb42dbfa3d3a04ff358e0a29ab94ac097910cdb7
- MD5 e07029358892c40d44c84071ddff6b86
- SHA1 9598c6c537b6dcc3f554bf3a77c84f8071533828
- SHA512 8d1800c62b678ebed4a02fdb708d94300fa2af1db6d8456f7e7876f0de5e96e272171490eafc5d373c5fe37637fd8d6a5f7baad076efe4032d2d9d60601ae6e9
- SSDEEP 12288:QM9debqLD+fn54nfLmbdHLpf8PXTw05nmZfRxAHhlyG8V8S:POf5uf6pO0AmZfRxAE
- TLSH T103159E4BD8B3533ACC27C07989A71336E73571A853108997B25CE9353B43A541BBB3AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ed:cf:4b:78:0d:ab:15:e2:72:d8:7a:3d:cb:8f:35:95:ad:a6:e8:a1:d3:f9:ea:94:c5:15:06:4a:73:88:df:b2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
413328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\native\net10.0-windows-Release-x64\System.IO.Compression.Native\System.IO.Compression.Native.pdb
kernel32
HeapCreate
HeapFree
HeapAlloc
HeapDestroy
GetProcessHeap
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
api-ms-win-crt-heap-l1-1-0
malloc
_aligned_malloc
_aligned_free
free
calloc
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
terminate
_initterm
exit
_configure_narrow_argv
abort
api-ms-win-crt-string-l1-1-0
wcsncmp
api-ms-win-crt-math-l1-1-0
log
BrotliDecoderAttachDictionary
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetMetadataCallbacks
BrotliDecoderSetParameter
BrotliDecoderTakeOutput
BrotliDecoderVersion
BrotliDefaultAllocFunc
BrotliDefaultFreeFunc
BrotliEncoderAttachPreparedDictionary
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderDestroyPreparedDictionary
BrotliEncoderHasMoreOutput
BrotliEncoderIsFinished
BrotliEncoderMaxCompressedSize
BrotliEncoderPrepareDictionary
BrotliEncoderSetParameter
BrotliEncoderTakeOutput
BrotliEncoderVersion
BrotliGetDictionary
BrotliGetTransforms
BrotliSetDictionaryData
BrotliSharedDictionaryAttach
BrotliSharedDictionaryCreateInstance
BrotliSharedDictionaryDestroyInstance
BrotliTransformDictionaryWord
CompressionNative_Crc32
CompressionNative_Deflate
CompressionNative_DeflateEnd
CompressionNative_DeflateInit2_
CompressionNative_Inflate
CompressionNative_InflateEnd
CompressionNative_InflateInit2_
CompressionNative_InflateReset2_
_kBrotliContextLookupTable
_kBrotliPrefixCodeRanges
Name
.text
Size
408KB
Virtual Size
408KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
484KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
524B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=259, version=35207,
count=10, id=260, version=35207,
count=32, id=261, version=35207,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33140,
count=68, id=1, productName=Unmarked objects,
count=37, id=260, version=35217,
count=34, id=264, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
System.IO.Compression.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dfcaec993703724f77ba94b52cd38cd80c1fdb9fa3dae0191326552960afad82
- MD5 475cff04f4c75095aec35202b21a2527
- SHA1 d4898f79b40b8ef07694a9a74e048685e4fb10fc
- SHA512 509a69d4b7da3b4f388327ed8e19297af5fcb27404e91e4abc54ed73d6411727591b777471bcab9c088056b5310a9022edaf90157addc0fae837787625c7e261
- SSDEEP 768:HcVl8vNYpuWrm6goUTCFnMK7b6JT4o7vIs:Qdpjm686MK7b6JTr7/
- TLSH T1F8130A4993FD8137FA9F4BBA6A71911643B1F9213A03DB4D584C90DA39637C48A923B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.IO.MemoryMappedFiles.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d288b7ac90f35e9af445adac798d32d66dd1bcff7ecd5cdbc76f65efdceedaf
- MD5 aaf35082b8607c5cb4b4bdf83083a166
- SHA1 6a835fe1c39af9fad7afd9c39e3cbaaeada106a8
- SHA512 a32dd3e6e855c2935aab6e279c8f0744bf416816ca4cff0ed778ae916dd83b03b47d249e05d76b7bf1219524047d66b5d8708e924791fc0034198d6c5d0dc455
- SSDEEP 384:8KhvSWoiLAQ2Yd5zb4N3lwFIVGXdpFGyYXTh9+gwn5jvWVJsW:8aoGfPUEXdn3inwVQ
- TLSH T1F9B20702F3FC422FFAFF0B74AD7242444235B8DA5D12DB1D4999900F1657B984AB1793
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31086
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Linq.Expressions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b8a9795b889c84d161dfb3a2f9bb33cb014b010d0a95e375514f9d8c5c441de
- MD5 b2b508cb41398fd358156bab80df89d3
- SHA1 c3ba994f8cd9acc1f7456245dc347c4c0c25fea4
- SHA512 be61155bce96a108b866e94809e0ac623c4b7089b83453898a8882dd46e3626dc07440275968cad943b8b6fba42b5d3a07f344231b7d40a53eb7d703c5de1fcc
- SSDEEP 12288:F4RcWT91/9x7EsdZJFFFFFFX7flfllllllllz6FT3DXFvTvFFFfF9FFFGFF0vvvz:FcH1Vx7ZZFFFFFFX7flfllllllllz6FD
- TLSH T163945A2027F88F2AE6AF4774A07118488BF2F44B6E5BCB4E5C107AF91A07381DE555B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
446254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
428KB
Virtual Size
427KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Linq.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7486175979ce77e883bcaf9b6d40fda754f5656e09c8b157dab2aaabe22ab475
- MD5 4208ec1fd44bd178314cc930afc7fc2a
- SHA1 63bd4c08544c220a5c23878b043e70b0fce2dda7
- SHA512 314a84477e065331e9f95faba1c1c894fe613cac8ddaa10338c4c3cebf087b090a3ac7fb0ac453cbc04598f5ef3e41a2f2eb1726a0bed3860fdc2abfaa1ce4fe
- SSDEEP 1536:tSi+6Zof4wO8qSL4RSAwwcyLzPxprbOD8TN:Ei2fTO8WSApcyLzPxoDA
- TLSH T1E393071D62C86732D5BF4AF7B570108B8770C2A7D90FE788EDDCAEE118A379158A9131
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
102798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 226c11ac1c531b01fcf0f748bc3779966d30b0b25f3c52778d6159dea5258b94
- MD5 c442af0a86e6064750b5cf150688be85
- SHA1 3715cc15e608fac6d222f39c6f0317d91a33ecf2
- SHA512 ed18a1244a5f9512d86a2d56d2a6630432d0d609fa5b99d8713efd23eaf292785b38c72d56d0290528c5bfc9c2f404efc782ec68b41520411a4d7ad3af673ea9
- SSDEEP 96:4VaMjHasVM5yDoAtOf3LFMiA8DmDfLO43WrBkW:4VaQHasVM5yptS7iq43WrBkW
- TLSH T10DD16125A3F80335FDB30B72AD7292810A7ABE60D837DE5E0595410E5D62E248E72F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Http.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7e4dded6fddc46827c0cd45099f5f48e170d6f512a0b31a9ccea5d29e695b1be
- MD5 16534107302dd79dcab4ae8c133202d0
- SHA1 d9fd1a7e571492203aa6f7d2e9296c3acae79b8d
- SHA512 22fa322e025c1a3005a1febeda041c311a22d1b698cf794910359d07948b73be5fa2c23f95c3d3bbe801d7989f54c8d1ce919025f90f353cb20fe470e096ce29
- SSDEEP 6144:ruF8cSmUF0Lbsx+UUlIyZoYgquzACP239rIl5OEsxwr+ww2d/0k+8c1kVVkoXiWc:rAFSmU4b6UlRd6zACOIOEmBu+Tnoy
- TLSH T130B45B4073F44B13F2AF9B78E0354919CBBAB9966A51E78F588894EE28D3784DC50373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
531134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
511KB
Virtual Size
510KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.NameResolution.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3b19e18d975f51aadfdab35dad2de1cc3d3b590f6346b7fa0248c8d59c854cb6
- MD5 b4b120adc3a90aa84f50913149f6742c
- SHA1 bc6982c2a7a7375b8ab78cf49b8390271d34f9cf
- SHA512 9e9ad22a869645b980e6d4bf311386d0c360cd07192586b424ce4efff6fa7a050906e6b311aaf9cd7fe8c60973a6be7f5501907a53aa33fb15241e700bd85bcd
- SSDEEP 768:R9Hg8MKBbA85B2Q+bKMlaEBKGKnYT2GOFF0JpMh+N:R9jLB88n2Q+bKMla3GKnpGNcAN
- TLSH T1E1136D00B3D89732EFFF0B3968B191581379A6965D12DF5C2884165A0EF3BC16B21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.NetworkInformation.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab4ca014c2a2efe147b1983013e4faeb357290337abea5655440315c0e7cdc04
- MD5 10e2ccc4806898ddfba1edceed98c8d1
- SHA1 d5b19ee774433c130450aab292d77e31403f803d
- SHA512 edf39911b29130776bb3e2a7be01f978c67201c97efa126e5a481760a003c9edeaa4b4dcc7a1656b41b4495d269843de4a79d158021cb1d17ce56a73de59e369
- SSDEEP 384:3JK2sdUNJGfI0cyx7nUSRmnUZqOG+MR7f7/eAv59ujTfUFbSw1SMEolRwv7yCjUk:3JK2sjfIiOUZZLs3N8fgn9CyCN
- TLSH T122E25C01E79DA73ADAEE0738A8B126060739E4803617EFAF16DC555E5AE37840B31773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
37326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Primitives.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 560cff12530d64832fa32046bf008614de79272221d4c6f76df52f43825c8183
- MD5 3efa5ffa0280a04bd669781c3e69fd06
- SHA1 b9ce7857e90ab0067be6c7995cfb89f89b71203d
- SHA512 42d7e742bc0d85652c46b0c081ada2b317cd89b8e5575bb78d4123866ff510f62bfc9f21f8bce852565579f43b1e5fca6d994d221e495c476dc36f516cff237c
- SSDEEP 1536:jtHjwVc6BwGeq5R+LUrNG9DvZoWZ0s/MkxLGFobhZ5mc6cGx:jtiFBfEpvZoWZ0sUkxLGFolHCx
- TLSH T144634B0033E85B2BD3DE0B7D646062240772EBA36517FBAE6CC4799A0973BD14A117E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
76366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Requests.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ac085165193c8e4dc4383c8bc67257d76759cd18428106f64df49c2ad9297313
- MD5 431b7ad94a8d898422d19479a4de9dcf
- SHA1 405eaebfac7110201b8bc48ba4aacce544e246b1
- SHA512 7f0dc75a669ca0bbef0d03e1540daccc871b75e9061927a08d32b9e967776b82cadc8cbe28b218000e8f81aaacad7c35ff088f8f3bb05505af729dfaacd2d113
- SSDEEP 3072:WrkpLgYvV96zh9uNXqc4zygBG6zAWYPNsbtCxpoJorC0:W4BSzeV4zVxzA7Ntxp
- TLSH T113B38E2573E80A2BF7EF4BB9B47151104B76FBE1360BDB9D581068DD18937C18A623A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
113470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Security.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 16f71d92b09b2260ef6755966d19d46abb12fbce6ef2935f68b6a0ad6588be07
- MD5 cdfc4dcae97f942b37dcf0711a5a3887
- SHA1 70b12b709d4c8aa5d72b85425f2032fa1fc1285f
- SHA512 0ac99bf8e2a1094f9279121c5e36b4e53a53513113efef4906550f6eb65ab129a011f963c2a0df6924234f414717ac64156cf287b9f377bce79bca11034f4418
- SSDEEP 3072:/D8y+t3ft9B2TcaH2OWRNPhgQ86d80O+cdKvbuGfw+B1LOyaED5:/DGth2TcaH2OWDX86d8ZIrLOPG
- TLSH T154246C7073F66B79F6EF5735E8349040867EB6CB6E2ADB8C184840DE1853B8196253E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
219070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
206KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.Sockets.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf28a51b36979fbaa33230f703c469bfcc35bc9d983824747b45a075656326ee
- MD5 b29e5e5897da2f6d2f10782a566100c1
- SHA1 a172db8588b332a311b1f1fb9975553f2175949a
- SHA512 6acff87a14ff629bb65b76f2e7b005ee212d3a92fb550e49b42d05932c1184a323ac36bc9046e3e9870d1e56423a62b6ef78a5c8525413690ab69a747ea6708a
- SSDEEP 1536:JnoxHLfpO98klpR1O7cp3GEf5xOUWUj5+GlZsrELTNzKUsbuGh6EyeQvUnVHp:ylO8aPPOUXN+GrsrEdsbuGh6EyL83
- TLSH T124C34B6473F80927F6BF0B79E8B422845B7AB8965F03EB8E545414EE19537C089623F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
125614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
115KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Net.WebHeaderCollection.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 947d5b89aac89107b70fe53be2ea670b39189b95d9eaa24e2a74a0cd2cc682ce
- MD5 120f9892cbadc9197ebd7e26377dd5fd
- SHA1 58a7cbf6da6d676504b69e5864a5d1f8042acdb1
- SHA512 0401bc3bf3a47ad652f455bd7b5b0c37384e77ead2b89c2fa7770e89436adb46bf0365ad3f9acb6cb139cb6069e00779ae39e13e747a5f18fe1b1ea8f3916841
- SSDEEP 192:wsMLIEzrA6dUNH89yanJdY/qlaUxLE3bZWJGlW:Y0EzrACO89yanJdkqICLebZWJGlW
- TLSH T10222E805B3D45336FABB0B7A5CB3628552B7FB507C52DBAD5894000B6CB278007F2B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16142
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.ObjectModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5c126595c5f1cc2eeca33d274ad33b97c4c087397dcb6843839c9f91ed47143
- MD5 f5c24f2eff25d3696fba35f4552cc893
- SHA1 67cebe1d1ed63cfe38b02fe0ce73710d6d8ed32f
- SHA512 06773fbe2928de4ed8aad0ad4f401252fdbae57b8ea5d0a77669b28f509bc98c0697c0ba2c4f962776918b2d707e7e5d90df908c47b26e2cc1facee7c763c8f1
- SSDEEP 384:rA3pL6rshHrCkq+qMuMFQ0CQBq8kGPMGamsVL0FRtaFtmjIONgejh5Cp3DGH0140:rQhLV82p+KSTfw3
- TLSH T1D792F80277D8533BDAEF0B76ECF610908632EAD6B813DB5E1265440A8D637115AB1B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25358
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Private.CoreLib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 028e486bb6027de6abc7eacb069f99cf057daca4c284f120b1c745c831585ed0
- MD5 8d6b5f4f8f55b8e3d9f69aadbb5d38fc
- SHA1 9206a6b95f682b803771dd52aff6256dea3e61e6
- SHA512 5f8f45ad5816e761206c2ca747f49b093b15ca45434e61b2c6d3a8474ba7aa3b796329905b2323677790414869c48211da53e81957ba4624f1678c77ec07c1fc
- SSDEEP 49152:j6p55dfLP9+DD/KBgcCoxqm7t4KpoAkxZxmcBH5f/:j6p5LfLP9eDot7t7oAk
- TLSH T19FE58E10B3E88E2AE5DF4735A0B584156BF2ECDE2742EB0F3149D6E97C56B805E112E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3129118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Private.Uri.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 357dbb5eaca655849d036deae213d8d6e3406166715a25c91abcb0d8ba1494b1
- MD5 d81427a827abde7f14f54052c5646c59
- SHA1 fb1ec521ed0069493a91402f92db9c87833f2ddf
- SHA512 65bf67c5b47414079c698740db37ca8092b40ea8d02e52f68bdaa7b536ee32a818b10fa81dc3cfbc71a08335b50438b29f48fa3479de089c1f6919c0db911859
- SSDEEP 1536:mTqYprnYGFr7XLGvsIG/MjbrX+AqSS3mE3tzw0cospSfF1zrWO2Fu3MYYMpSSY8p:7YRnYGFr7XLGvsIG/MjbrX+AqSS3mE3l
- TLSH T114833B48E7EC563EEBAE477F44A2169343B4966BA942F3CD1C6420CA2C363C6511DBD3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90078
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Private.Xml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 217fec5bf20662896a10ff94bea6a993a5832c64cd2ea247ca8488d29b66dde1
- MD5 fa54884c5de2de115bd6268a07670240
- SHA1 f81d86323d3d8e59d8ecde13cf9be9c28854c668
- SHA512 80e0cfefb4b2108fd032d5f5b2304ab1ab37f0e361289c399ca2e9c1f1d4b944596e01f46c9f539c29077da449879ce96d356929bdae79d010188499b31d9877
- SSDEEP 12288:8UR6J9lyxK659AIEYv7P192+RhLBIteMgO:Hl59xEY7PrRhFFMgO
- TLSH T171F44A28B7D90526F3BF0778A821AC79D6FDF0216605E39D388C96EE7312F4054627A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
770686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
745KB
Virtual Size
744KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Reflection.Metadata.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 93cdd8247c54e6018cb064cd5c5b5908ab84bcc62aa95d1c7bdf07820bfadd97
- MD5 482ddfb24b954c6d00315dd3033daca7
- SHA1 8625f7d4ad075b2f3f6fe3d38fcbf38831f9739f
- SHA512 49caf36d658f3bb4d45ad5a067224542956e204b2f2520fe66a2e42d1a4c2bf1c976b6b9c05c50bda45b420d386b0a4be2bd1744defa6af8a8eafa9732e96aba
- SSDEEP 3072:JPax4oe2o3CRYV23vux+3XzbS42WhOtpcmq:sab3EEWSUX
- TLSH T129B36B24A3FC236BF5FB8B79A47240160BB6B84E341BD75E0E0854DF256ABC45921B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
115118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.InteropServices.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15dd8cf30e0e22daf59616e2d6151eb057e280d3d390b77fb410bc78ed6ad190
- MD5 83fa6bab92f99a2ec9989b8567e169b2
- SHA1 db2dc7c1bc912f3564c0e9cc9f86307b45c26da3
- SHA512 810dd509d4bb57c2e20a282770ad9e52e32e9a97a3817090ca36554f32a39e8c8271b314bdc5625e5feac6cf613c23e6509751f8a121042457f3d8447b3cc5f8
- SSDEEP 384:9H30rl2Yd5zVNUYl9N1C2KmEybYth0oW03iW:IfDVCviYMe
- TLSH T1D7923A1173E85B7FDE6F0730DC3282D04BB2EEE85943EA2E9298551F518BB8C4674762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.Numerics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fbd03c488ef5927222e79c7f9b5560dcba98bba83025d670c66be4fe7a64bbd4
- MD5 1970b359abbae6e69acc24d768c422a0
- SHA1 f524c103f39d721a2bac5b536ac3ec84ca7e0116
- SHA512 993592de34403b000944c15327f2e237bad7072d08622d19b60c2134726040bfe9f308cca6f5fd46616e62c2d22b605cf6b536f4273bd5f4e599092f7b037cea
- SSDEEP 1536:CgNem3q7T+PjXRWZBNCFpkW0Fq3u0FKSOkG8gQzb+9SIOe99m:qRTLBNmpkW0FX0FK8G8xuOGE
- TLSH T14B8306CC23EACA35DB8F46753528136B4F319F5B806BF36A1C9815F1126A39936821F3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e0faa04a029b7ab90d0eb3ffcc210f9b2cf3275fa2aec38d8153318b1d3f152a
- MD5 024e3c18a98d72e1dd12a7bf42b209b0
- SHA1 927c93cf80b7de847cc3e330c4b0ec29003c171d
- SHA512 095e36256558093262e801bc93e3e14350cb65214568e2cb74304f80ed8ab375ee082b55604ad526f7e4895c1fa0e217bd46f013c087a5c93c6e482930b90102
- SSDEEP 192:vIpfuOHSxioGdGmhFYOpPWWWPWbKSW4cH+tKTQYJmg4UxkWtqJW:Qp2OHS16CW3WVtetOxJmgxkWtqJW
- TLSH T118225F61EE9A6337CC9E5772BD73A1C112F276D4947B9FBA234C410AACCA13C4A31754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Claims.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 227a01f7e7cbeb587d90fc2a53169f39e2a89c381e53231b4567a00cc64d13dd
- MD5 7c8dd2e03b72ef4dee44190192e0e8bf
- SHA1 2715bbe93c8ffce72dfff6a95e2f8e371b0cc61c
- SHA512 d455c40b59081259bb457a594195ce32e1de34ca066dd1fdd37ccd3757d7635e1355bd69f6d39492dba82489b10ca9f1455aa8566f9808ab998bc070469f1f2e
- SSDEEP 384:l+ZLI2a2r2gCOUyelVall9AODsoijV1jF96Hk6WWRUW:lWHa2rfCO3riTjFeT
- TLSH T1BA521B1573EC4337C9FF0F3DE8B642410376EA21A561DA6D4998224E9C57B04CBB2B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19182
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Cryptography.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 06a2aafb94fda7770a40576ab776c27daa5570535b67d1bab08ffb760f53cd57
- MD5 240c39a8e1d94ea53dde4e8114d45d11
- SHA1 0c77c7f8f035b8e431261ed1cd5fc64a787a4a83
- SHA512 7d3286c3e1c4a92c95f1b7f180c45a742a0c006e6fdf0f196707e457e29d6c86f350514e6a94fcb8bbb8a8ed08ac4e26af55e7a2b8498a11e649f8bb48edb81d
- SSDEEP 3072:ZhCh0X3ndC3V+qpXfT6oiA+H0LQVH2kqCB8Gi+AH9ycHFoufBCb53veHWrbenjKb:FndC3V1NfTB+G3flB89ufBMrbenjKQ
- TLSH T1B0243A287BF44B2DF5EF8B79E1709401857EE496B923DB0C1A841AED1463B80C761B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
217310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
204KB
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Security.Principal.Windows.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52d530f38ebc1215dab800d73ad12c4f1bb64ffd808215712cde80c841d0b14e
- MD5 d6f7f3a80d4d93d63e87b2206fe6fc36
- SHA1 a6e127414622d6f45982e6e7f820f272d30ebb15
- SHA512 d06d8716c9e0c001eaf2350cdb4d8274e17af8dd80c04fb85160d15273ac5e5c877c07bab65e85dec8cfa82cc3154be1079f0109b1bd12e48739a7ca43776730
- SSDEEP 1536:njmyjNtjkD0zd76Lhj4RlY31TwBQhafUCB:jmyjNn6tjj31UUq
- TLSH T136335B10A3EC032BE6FF4B3CA4F0625A47B6FA526B02DBAE4DF5555A1443BC18661733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Text.Encoding.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69c64420c7a5eb1fcf66ffa9dc7d46346214ef711bbfca41f3d0ac84060984ce
- MD5 b5cda210b9e91d593384a6e72f3e0808
- SHA1 2cc64e6073cdaa0ae670661161a95686e1405862
- SHA512 5625fbb4507c9f8f0ef0d271d02aaf00f72aba0717a8834d75f763bf8597fef69b441c13045329aa094be45539879edd644df7aa6b5c17fc8044428b902ccbb8
- SSDEEP 48:6pGMMQ2uwaOHdiRkF1d0+IvQTxNPPDmDVZLZvLjLqOZWyX6LqjKPLqW7Lq65WmX:+dN2uwtHdiS0xvmDmDfLZhW6aJW
- TLSH T150B1742057E5837AEDB24B72DCF3924056B4BF50DD23DB2E19C8620A5C57A148EB1F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Text.RegularExpressions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17bcc88e818f02289feaefa66b3e3e8878f04a7dc810171f10d88b9c65f51318
- MD5 a167bb4f213d8c740177d1afa3f80af9
- SHA1 e74cfd980defa81c8f702faa2ed225a11a465ce0
- SHA512 a4b3ecd89e1317ddefcda731e422fc6f2bb0dcfd0a34d562884eed536b9ad8b3a1d29337c6c9bf6317441c86fb35ac2684fc9642a51d0089471d914d6f3ced62
- SSDEEP 3072:mg911icHPWLm5PpWJmJOV9cqamfCnz3aVKD6ImS8zCToGNIJgZ9v/zHdXqwTOKN/:msJuLmFpWJmA99WKVKD6IozTO9vJvOK
- TLSH T154746C3453AC4E12D67F8337D4A19418CFF59D21ABCEDB878C4436E5297A780EAB2193
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
357614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
341KB
Virtual Size
341KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Channels.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6d378152fdab60722cecce2cdf56ad03ae64355221ada2ee21fc7a279ba1ed86
- MD5 322f23f90314a01ec0520c7a4cb2d5d2
- SHA1 4bbe2f28c60816a3fb9f3d156d13ae9f07409249
- SHA512 39060faa58002cde694f4ba40f1e4f1c5c0e40d8d56f7eb11c73fdcdc0fdaa20a239958215206e3952e58b045533be5f225966d779c8a0f7e265986ef612bd08
- SSDEEP 384:v6hSTrSlH28x7F/ZkZ0ADiEQWGRW3c9MbkyzFAgRMw1tkFDF0E+MjnDn/NiP17C9:s865/LoQtW37VuWPT
- TLSH T10BD22901D7DC1327DFAB1BBBF9B1161416B6EF50A812DF981D8CA2E49CA770017613B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Thread.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8c004a5750641cf8369c688da23023499e27efb3735570c323d84b3e21cf66af
- MD5 4955c24745575dfcbbbbc0670d6bf392
- SHA1 784162ba652a14a21459c282dd3c97519613eb26
- SHA512 49b51aa427a8d84a09d91170740f1f26ba527d1a25a0c8ce5b04f99aa71b780992b4f66771ec238dd469874bebd17717ca29b4edc4307e62bc2c3839a66e0103
- SSDEEP 48:6aXQ51mU6MsnAaQdiRkj+6SQ+IvQTtzjNPPDmDVZLo+I9bZWsAmKJblP5WmX:5XQq/AaQdiI+6SQxv8dDmDfLWWcU7W
- TLSH T15DB1822093E44376FC730F329C6363885ABAFB51DD63CB2D0994520A6C2F6148E31F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6b839b5766b495050e768c37490807ebe2619b6b6c4d695fa2da4946897a7820
- MD5 a4f749abe52c03e988e588d9ccf3dc90
- SHA1 0bd21c8cbdb4444b53f00fd6b55074794e2ed6f6
- SHA512 6511c61ec6443cc3e1080f5c563db13eda59d5f44d4e60ed0fa3c10ed846ea6f4bdc3789874868cd4a63e54dccb5209f7d4d762ea40ab417a214b34403382f62
- SSDEEP 192:HNZ34Uj0EtOpX8EuBMfzzadzDbRyrbRyxgRWVsTW:HNZ34UbtOpX8BMfzzadfFebRYgRWVsTW
- TLSH T1F6426421A3F81278FAF30775AEB6A1504976FCF84921D16E705C501E297BB504AF2773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Xml.ReaderWriter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f4ab0c9d258dd8428149e1562d2491eeaa67d39f3991012915beadd983ebf8df
- MD5 024bd94cfead8eb5df697b67981c65f0
- SHA1 c98aabe5afe3adc23b428ab68ff0ddf9134088f1
- SHA512 479c82e1bbf7c6ea32f1b36bb3b811da6f7559fc84c72ca5458230d1755f99bc188b0f8b36204a3e2bcdac482ee56801dc9d971057384b78150c6477d220caba
- SSDEEP 48:6Vd/c4NRKA8akt5K+dsZPDy+IvzTONPRzDmDVZL7+IYZWscKcc5WmX:8KxtH2Z7yxv6DmDfLkW1dAW
- TLSH T1CEC1636053E45333FDB20BB3E8E3964167F5BA20DD32CB9D1595521B6C22614CF31B62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1b87caece6f7210339367104160057ea31bf8e421789a6ab20acef7fb087b315
- MD5 8bc4e666db2c9720f4238b51a69594c6
- SHA1 f3b05de3e563f80ef5609297a265209bd2ec5304
- SHA512 f24d9ed74ed5543d273f53af41bf1f27283a4e379ab373c008ee4ab88fe7d1c4bc96cb27c0f4856ede3cd517368f434f52445cfb3cd225244fe24ea5296a7a8c
- SSDEEP 48:6WZ6yzpbdiRd/aOK8pTqwNPPDmDVZLHJnxZWV1Kzhd5Wmq:htpbdizagDmDfLhWvkLW
- TLSH T11EB1832093E44336ED760B32EDA39785A7BCBB10EE63CB1D14D5124F6C16A148E31B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
av_libglesv2.dll
- IMPHASH 39e0b47d01cae06f42d925fb79045509
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
3816816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libGLESv2.dll.pdb
user32
GetClientRect
GetWindowThreadProcessId
IsIconic
IsWindow
WindowFromDC
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateFileW
CreateThread
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualProtect
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
dxgi
CreateDXGIFactory1
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressSingle
EGL_AcquireExternalContextANGLE
EGL_BindAPI
EGL_BindTexImage
EGL_ChooseConfig
EGL_ClientWaitSync
EGL_ClientWaitSyncKHR
EGL_CopyBuffers
EGL_CopyMetalSharedEventANGLE
EGL_CreateContext
EGL_CreateDeviceANGLE
EGL_CreateImage
EGL_CreateImageKHR
EGL_CreateNativeClientBufferANDROID
EGL_CreatePbufferFromClientBuffer
EGL_CreatePbufferSurface
EGL_CreatePixmapSurface
EGL_CreatePlatformPixmapSurface
EGL_CreatePlatformPixmapSurfaceEXT
EGL_CreatePlatformWindowSurface
EGL_CreatePlatformWindowSurfaceEXT
EGL_CreateStreamKHR
EGL_CreateStreamProducerD3DTextureANGLE
EGL_CreateSync
EGL_CreateSyncKHR
EGL_CreateWindowSurface
EGL_DebugMessageControlKHR
EGL_DestroyContext
EGL_DestroyImage
EGL_DestroyImageKHR
EGL_DestroyStreamKHR
EGL_DestroySurface
EGL_DestroySync
EGL_DestroySyncKHR
EGL_DupNativeFenceFDANDROID
EGL_ExportVkImageANGLE
EGL_ForceGPUSwitchANGLE
EGL_GetCompositorTimingANDROID
EGL_GetCompositorTimingSupportedANDROID
EGL_GetConfigAttrib
EGL_GetConfigs
EGL_GetCurrentContext
EGL_GetCurrentDisplay
EGL_GetCurrentSurface
EGL_GetDisplay
EGL_GetError
EGL_GetFrameTimestampSupportedANDROID
EGL_GetFrameTimestampsANDROID
EGL_GetMscRateANGLE
EGL_GetNativeClientBufferANDROID
EGL_GetNextFrameIdANDROID
EGL_GetPlatformDisplay
EGL_GetPlatformDisplayEXT
EGL_GetProcAddress
EGL_GetSyncAttrib
EGL_GetSyncAttribKHR
EGL_GetSyncValuesCHROMIUM
EGL_HandleGPUSwitchANGLE
EGL_Initialize
EGL_LabelObjectKHR
EGL_LockSurfaceKHR
EGL_LockVulkanQueueANGLE
EGL_MakeCurrent
EGL_PostSubBufferNV
EGL_PrepareSwapBuffersANGLE
EGL_PresentationTimeANDROID
EGL_ProgramCacheGetAttribANGLE
EGL_ProgramCachePopulateANGLE
EGL_ProgramCacheQueryANGLE
EGL_ProgramCacheResizeANGLE
EGL_QueryAPI
EGL_QueryContext
EGL_QueryDebugKHR
EGL_QueryDeviceAttribEXT
EGL_QueryDeviceStringEXT
EGL_QueryDisplayAttribANGLE
EGL_QueryDisplayAttribEXT
EGL_QueryDmaBufFormatsEXT
EGL_QueryDmaBufModifiersEXT
EGL_QueryStreamKHR
EGL_QueryStreamu64KHR
EGL_QueryString
EGL_QueryStringiANGLE
EGL_QuerySupportedCompressionRatesEXT
EGL_QuerySurface
EGL_QuerySurface64KHR
EGL_QuerySurfacePointerANGLE
EGL_ReacquireHighPowerGPUANGLE
EGL_ReleaseDeviceANGLE
EGL_ReleaseExternalContextANGLE
EGL_ReleaseHighPowerGPUANGLE
EGL_ReleaseTexImage
EGL_ReleaseThread
EGL_SetBlobCacheFuncsANDROID
EGL_SetDamageRegionKHR
EGL_SetValidationEnabledANGLE
EGL_SignalSyncKHR
EGL_StreamAttribKHR
EGL_StreamConsumerAcquireKHR
EGL_StreamConsumerGLTextureExternalAttribsNV
EGL_StreamConsumerGLTextureExternalKHR
EGL_StreamConsumerReleaseKHR
EGL_StreamPostD3DTextureANGLE
EGL_SurfaceAttrib
EGL_SwapBuffers
EGL_SwapBuffersWithDamageKHR
EGL_SwapInterval
EGL_Terminate
EGL_UnlockSurfaceKHR
EGL_UnlockVulkanQueueANGLE
EGL_WaitClient
EGL_WaitGL
EGL_WaitNative
EGL_WaitSync
EGL_WaitSyncKHR
EGL_WaitUntilWorkScheduledANGLE
GL_AcquireTexturesANGLE
GL_ActiveShaderProgram
GL_ActiveShaderProgramEXT
GL_ActiveTexture
GL_AlphaFunc
GL_AlphaFuncx
GL_AttachShader
GL_BeginPerfMonitorAMD
GL_BeginPixelLocalStorageANGLE
GL_BeginQuery
GL_BeginQueryEXT
GL_BeginTransformFeedback
GL_BindAttribLocation
GL_BindBuffer
GL_BindBufferBase
GL_BindBufferRange
GL_BindFragDataLocationEXT
GL_BindFragDataLocationIndexedEXT
GL_BindFramebuffer
GL_BindFramebufferOES
GL_BindImageTexture
GL_BindProgramPipeline
GL_BindProgramPipelineEXT
GL_BindRenderbuffer
GL_BindRenderbufferOES
GL_BindSampler
GL_BindTexture
GL_BindTransformFeedback
GL_BindUniformLocationCHROMIUM
GL_BindVertexArray
GL_BindVertexArrayOES
GL_BindVertexBuffer
GL_BlendBarrier
GL_BlendBarrierKHR
GL_BlendColor
GL_BlendEquation
GL_BlendEquationOES
GL_BlendEquationSeparate
GL_BlendEquationSeparatei
GL_BlendEquationSeparateiEXT
GL_BlendEquationSeparateiOES
GL_BlendEquationi
GL_BlendEquationiEXT
GL_BlendEquationiOES
GL_BlendFunc
GL_BlendFuncSeparate
GL_BlendFuncSeparatei
GL_BlendFuncSeparateiEXT
GL_BlendFuncSeparateiOES
GL_BlendFunci
GL_BlendFunciEXT
GL_BlendFunciOES
GL_BlitFramebuffer
GL_BlitFramebufferANGLE
GL_BlitFramebufferNV
GL_BlobCacheCallbacksANGLE
GL_BufferData
GL_BufferStorageEXT
GL_BufferStorageExternalEXT
GL_BufferStorageMemEXT
GL_BufferSubData
GL_CheckFramebufferStatus
GL_CheckFramebufferStatusOES
GL_Clear
GL_ClearBufferfi
GL_ClearBufferfv
GL_ClearBufferiv
GL_ClearBufferuiv
GL_ClearColor
GL_ClearColorx
GL_ClearDepthf
GL_ClearDepthx
GL_ClearStencil
GL_ClearTexImageEXT
GL_ClearTexSubImageEXT
GL_ClientActiveTexture
GL_ClientWaitSync
GL_ClipControlEXT
GL_ClipPlanef
GL_ClipPlanex
GL_Color4f
GL_Color4ub
GL_Color4x
GL_ColorMask
GL_ColorMaski
GL_ColorMaskiEXT
GL_ColorMaskiOES
GL_ColorPointer
GL_CompileShader
GL_CompressedCopyTextureCHROMIUM
GL_CompressedTexImage2D
GL_CompressedTexImage2DRobustANGLE
GL_CompressedTexImage3D
GL_CompressedTexImage3DOES
GL_CompressedTexImage3DRobustANGLE
GL_CompressedTexSubImage2D
GL_CompressedTexSubImage2DRobustANGLE
GL_CompressedTexSubImage3D
GL_CompressedTexSubImage3DOES
GL_CompressedTexSubImage3DRobustANGLE
GL_CopyBufferSubData
GL_CopyImageSubData
GL_CopyImageSubDataEXT
GL_CopyImageSubDataOES
GL_CopySubTexture3DANGLE
GL_CopySubTextureCHROMIUM
GL_CopyTexImage2D
GL_CopyTexSubImage2D
GL_CopyTexSubImage3D
GL_CopyTexSubImage3DOES
GL_CopyTexture3DANGLE
GL_CopyTextureCHROMIUM
GL_CoverageModulationCHROMIUM
GL_CreateMemoryObjectsEXT
GL_CreateProgram
GL_CreateShader
GL_CreateShaderProgramv
GL_CreateShaderProgramvEXT
GL_CullFace
GL_CurrentPaletteMatrixOES
GL_DebugMessageCallback
GL_DebugMessageCallbackKHR
GL_DebugMessageControl
GL_DebugMessageControlKHR
GL_DebugMessageInsert
GL_DebugMessageInsertKHR
GL_DeleteBuffers
GL_DeleteFencesNV
GL_DeleteFramebuffers
GL_DeleteFramebuffersOES
GL_DeleteMemoryObjectsEXT
GL_DeletePerfMonitorsAMD
GL_DeleteProgram
GL_DeleteProgramPipelines
GL_DeleteProgramPipelinesEXT
GL_DeleteQueries
GL_DeleteQueriesEXT
GL_DeleteRenderbuffers
GL_DeleteRenderbuffersOES
GL_DeleteSamplers
GL_DeleteSemaphoresEXT
GL_DeleteShader
GL_DeleteSync
GL_DeleteTextures
GL_DeleteTransformFeedbacks
GL_DeleteVertexArrays
GL_DeleteVertexArraysOES
GL_DepthFunc
GL_DepthMask
GL_DepthRangef
GL_DepthRangex
GL_DetachShader
GL_Disable
GL_DisableClientState
GL_DisableExtensionANGLE
GL_DisableVertexAttribArray
GL_Disablei
GL_DisableiEXT
GL_DisableiOES
GL_DiscardFramebufferEXT
GL_DispatchCompute
GL_DispatchComputeIndirect
GL_DrawArrays
GL_DrawArraysIndirect
GL_DrawArraysInstanced
GL_DrawArraysInstancedANGLE
GL_DrawArraysInstancedBaseInstanceANGLE
GL_DrawArraysInstancedBaseInstanceEXT
GL_DrawArraysInstancedEXT
GL_DrawBuffers
GL_DrawBuffersEXT
GL_DrawElements
GL_DrawElementsBaseVertex
GL_DrawElementsBaseVertexEXT
GL_DrawElementsBaseVertexOES
GL_DrawElementsIndirect
GL_DrawElementsInstanced
GL_DrawElementsInstancedANGLE
GL_DrawElementsInstancedBaseInstanceEXT
GL_DrawElementsInstancedBaseVertex
GL_DrawElementsInstancedBaseVertexBaseInstanceANGLE
GL_DrawElementsInstancedBaseVertexBaseInstanceEXT
GL_DrawElementsInstancedBaseVertexEXT
GL_DrawElementsInstancedBaseVertexOES
GL_DrawElementsInstancedEXT
GL_DrawRangeElements
GL_DrawRangeElementsBaseVertex
GL_DrawRangeElementsBaseVertexEXT
GL_DrawRangeElementsBaseVertexOES
GL_DrawTexfOES
GL_DrawTexfvOES
GL_DrawTexiOES
GL_DrawTexivOES
GL_DrawTexsOES
GL_DrawTexsvOES
GL_DrawTexxOES
GL_DrawTexxvOES
GL_EGLImageTargetRenderbufferStorageOES
GL_EGLImageTargetTexStorageEXT
GL_EGLImageTargetTexture2DOES
GL_Enable
GL_EnableClientState
GL_EnableVertexAttribArray
GL_Enablei
GL_EnableiEXT
GL_EnableiOES
GL_EndPerfMonitorAMD
GL_EndPixelLocalStorageANGLE
GL_EndQuery
GL_EndQueryEXT
GL_EndTilingQCOM
GL_EndTransformFeedback
GL_FenceSync
GL_Finish
GL_FinishFenceNV
GL_Flush
GL_FlushMappedBufferRange
GL_FlushMappedBufferRangeEXT
GL_Fogf
GL_Fogfv
GL_Fogx
GL_Fogxv
GL_FramebufferFetchBarrierEXT
GL_FramebufferFoveationConfigQCOM
GL_FramebufferFoveationParametersQCOM
GL_FramebufferMemorylessPixelLocalStorageANGLE
GL_FramebufferParameteri
GL_FramebufferParameteriMESA
GL_FramebufferPixelLocalClearValuefvANGLE
GL_FramebufferPixelLocalClearValueivANGLE
GL_FramebufferPixelLocalClearValueuivANGLE
GL_FramebufferPixelLocalStorageInterruptANGLE
GL_FramebufferPixelLocalStorageRestoreANGLE
GL_FramebufferRenderbuffer
GL_FramebufferRenderbufferOES
GL_FramebufferTexture
GL_FramebufferTexture2D
GL_FramebufferTexture2DMultisampleEXT
GL_FramebufferTexture2DOES
GL_FramebufferTexture3DOES
GL_FramebufferTextureEXT
GL_FramebufferTextureLayer
GL_FramebufferTextureMultiviewOVR
GL_FramebufferTextureOES
GL_FramebufferTexturePixelLocalStorageANGLE
GL_FrontFace
GL_Frustumf
GL_Frustumx
GL_GenBuffers
GL_GenFencesNV
GL_GenFramebuffers
GL_GenFramebuffersOES
GL_GenPerfMonitorsAMD
GL_GenProgramPipelines
GL_GenProgramPipelinesEXT
GL_GenQueries
GL_GenQueriesEXT
GL_GenRenderbuffers
GL_GenRenderbuffersOES
GL_GenSamplers
GL_GenSemaphoresEXT
GL_GenTextures
GL_GenTransformFeedbacks
GL_GenVertexArrays
GL_GenVertexArraysOES
GL_GenerateMipmap
GL_GenerateMipmapOES
GL_GetActiveAttrib
GL_GetActiveUniform
GL_GetActiveUniformBlockName
GL_GetActiveUniformBlockiv
GL_GetActiveUniformBlockivRobustANGLE
GL_GetActiveUniformsiv
GL_GetAttachedShaders
GL_GetAttribLocation
GL_GetBooleani_v
GL_GetBooleani_vRobustANGLE
GL_GetBooleanv
GL_GetBooleanvRobustANGLE
GL_GetBufferParameteri64v
GL_GetBufferParameteri64vRobustANGLE
GL_GetBufferParameteriv
GL_GetBufferParameterivRobustANGLE
GL_GetBufferPointerv
GL_GetBufferPointervOES
GL_GetBufferPointervRobustANGLE
GL_GetClipPlanef
GL_GetClipPlanex
GL_GetCompressedTexImageANGLE
GL_GetDebugMessageLog
GL_GetDebugMessageLogKHR
GL_GetError
GL_GetFenceivNV
GL_GetFixedv
GL_GetFloatv
GL_GetFloatvRobustANGLE
GL_GetFragDataIndexEXT
GL_GetFragDataLocation
GL_GetFramebufferAttachmentParameteriv
GL_GetFramebufferAttachmentParameterivOES
GL_GetFramebufferAttachmentParameterivRobustANGLE
GL_GetFramebufferParameteriv
GL_GetFramebufferParameterivMESA
GL_GetFramebufferParameterivRobustANGLE
GL_GetFramebufferPixelLocalStorageParameterfvANGLE
GL_GetFramebufferPixelLocalStorageParameterfvRobustANGLE
GL_GetFramebufferPixelLocalStorageParameterivANGLE
GL_GetFramebufferPixelLocalStorageParameterivRobustANGLE
GL_GetGraphicsResetStatus
GL_GetGraphicsResetStatusEXT
GL_GetGraphicsResetStatusKHR
GL_GetInteger64i_v
GL_GetInteger64i_vRobustANGLE
GL_GetInteger64v
GL_GetInteger64vEXT
GL_GetInteger64vRobustANGLE
GL_GetIntegeri_v
GL_GetIntegeri_vRobustANGLE
GL_GetIntegerv
GL_GetIntegervRobustANGLE
GL_GetInternalformativ
GL_GetInternalformativRobustANGLE
GL_GetLightfv
GL_GetLightxv
GL_GetMaterialfv
GL_GetMaterialxv
GL_GetMemoryObjectParameterivEXT
GL_GetMultisamplefv
GL_GetMultisamplefvANGLE
GL_GetMultisamplefvRobustANGLE
GL_GetObjectLabel
GL_GetObjectLabelEXT
GL_GetObjectLabelKHR
GL_GetObjectPtrLabel
GL_GetObjectPtrLabelKHR
GL_GetPerfMonitorCounterDataAMD
GL_GetPerfMonitorCounterInfoAMD
GL_GetPerfMonitorCounterStringAMD
GL_GetPerfMonitorCountersAMD
GL_GetPerfMonitorGroupStringAMD
GL_GetPerfMonitorGroupsAMD
GL_GetPointerv
GL_GetPointervANGLE
GL_GetPointervKHR
GL_GetPointervRobustANGLERobustANGLE
GL_GetProgramBinary
GL_GetProgramBinaryOES
GL_GetProgramInfoLog
GL_GetProgramInterfaceiv
GL_GetProgramInterfaceivRobustANGLE
GL_GetProgramPipelineInfoLog
GL_GetProgramPipelineInfoLogEXT
GL_GetProgramPipelineiv
GL_GetProgramPipelineivEXT
GL_GetProgramResourceIndex
GL_GetProgramResourceLocation
GL_GetProgramResourceLocationIndexEXT
GL_GetProgramResourceName
GL_GetProgramResourceiv
GL_GetProgramiv
GL_GetProgramivRobustANGLE
GL_GetQueryObjecti64vEXT
GL_GetQueryObjecti64vRobustANGLE
GL_GetQueryObjectivEXT
GL_GetQueryObjectivRobustANGLE
GL_GetQueryObjectui64vEXT
GL_GetQueryObjectui64vRobustANGLE
GL_GetQueryObjectuiv
GL_GetQueryObjectuivEXT
GL_GetQueryObjectuivRobustANGLE
GL_GetQueryiv
GL_GetQueryivEXT
GL_GetQueryivRobustANGLE
GL_GetRenderbufferImageANGLE
GL_GetRenderbufferParameteriv
GL_GetRenderbufferParameterivOES
GL_GetRenderbufferParameterivRobustANGLE
GL_GetSamplerParameterIiv
GL_GetSamplerParameterIivEXT
GL_GetSamplerParameterIivOES
GL_GetSamplerParameterIivRobustANGLE
GL_GetSamplerParameterIuiv
GL_GetSamplerParameterIuivEXT
GL_GetSamplerParameterIuivOES
GL_GetSamplerParameterIuivRobustANGLE
GL_GetSamplerParameterfv
GL_GetSamplerParameterfvRobustANGLE
GL_GetSamplerParameteriv
GL_GetSamplerParameterivRobustANGLE
GL_GetSemaphoreParameterui64vEXT
GL_GetShaderInfoLog
GL_GetShaderPrecisionFormat
GL_GetShaderSource
GL_GetShaderiv
GL_GetShaderivRobustANGLE
GL_GetString
GL_GetStringi
GL_GetSynciv
GL_GetTexEnvfv
GL_GetTexEnviv
GL_GetTexEnvxv
GL_GetTexGenfvOES
GL_GetTexGenivOES
GL_GetTexGenxvOES
GL_GetTexImageANGLE
GL_GetTexLevelParameterfv
GL_GetTexLevelParameterfvANGLE
GL_GetTexLevelParameterfvRobustANGLE
GL_GetTexLevelParameteriv
GL_GetTexLevelParameterivANGLE
GL_GetTexLevelParameterivRobustANGLE
GL_GetTexParameterIiv
GL_GetTexParameterIivEXT
GL_GetTexParameterIivOES
GL_GetTexParameterIivRobustANGLE
GL_GetTexParameterIuiv
GL_GetTexParameterIuivEXT
GL_GetTexParameterIuivOES
GL_GetTexParameterIuivRobustANGLE
GL_GetTexParameterfv
GL_GetTexParameterfvRobustANGLE
GL_GetTexParameteriv
GL_GetTexParameterivRobustANGLE
GL_GetTexParameterxv
GL_GetTransformFeedbackVarying
GL_GetTranslatedShaderSourceANGLE
GL_GetUniformBlockIndex
GL_GetUniformIndices
GL_GetUniformLocation
GL_GetUniformfv
GL_GetUniformfvRobustANGLE
GL_GetUniformiv
GL_GetUniformivRobustANGLE
GL_GetUniformuiv
GL_GetUniformuivRobustANGLE
GL_GetUnsignedBytei_vEXT
GL_GetUnsignedBytevEXT
GL_GetVertexAttribIiv
GL_GetVertexAttribIivRobustANGLE
GL_GetVertexAttribIuiv
GL_GetVertexAttribIuivRobustANGLE
GL_GetVertexAttribPointerv
GL_GetVertexAttribPointervRobustANGLE
GL_GetVertexAttribfv
GL_GetVertexAttribfvRobustANGLE
GL_GetVertexAttribiv
GL_GetVertexAttribivRobustANGLE
GL_GetnUniformfv
GL_GetnUniformfvEXT
GL_GetnUniformfvKHR
GL_GetnUniformfvRobustANGLE
GL_GetnUniformiv
GL_GetnUniformivEXT
GL_GetnUniformivKHR
GL_GetnUniformivRobustANGLE
GL_GetnUniformuiv
GL_GetnUniformuivKHR
GL_GetnUniformuivRobustANGLE
GL_Hint
GL_ImportMemoryFdEXT
GL_ImportMemoryZirconHandleANGLE
GL_ImportSemaphoreFdEXT
GL_ImportSemaphoreZirconHandleANGLE
GL_InsertEventMarkerEXT
GL_InvalidateFramebuffer
GL_InvalidateSubFramebuffer
GL_InvalidateTextureANGLE
GL_IsBuffer
GL_IsEnabled
GL_IsEnabledi
GL_IsEnablediEXT
GL_IsEnablediOES
GL_IsFenceNV
GL_IsFramebuffer
GL_IsFramebufferOES
GL_IsMemoryObjectEXT
GL_IsProgram
GL_IsProgramPipeline
GL_IsProgramPipelineEXT
GL_IsQuery
GL_IsQueryEXT
GL_IsRenderbuffer
GL_IsRenderbufferOES
GL_IsSampler
GL_IsSemaphoreEXT
GL_IsShader
GL_IsSync
GL_IsTexture
GL_IsTransformFeedback
GL_IsVertexArray
GL_IsVertexArrayOES
GL_LabelObjectEXT
GL_LightModelf
GL_LightModelfv
GL_LightModelx
GL_LightModelxv
GL_Lightf
GL_Lightfv
GL_Lightx
GL_Lightxv
GL_LineWidth
GL_LineWidthx
GL_LinkProgram
GL_LoadIdentity
GL_LoadMatrixf
GL_LoadMatrixx
GL_LoadPaletteFromModelViewMatrixOES
GL_LogicOp
GL_LogicOpANGLE
GL_LoseContextCHROMIUM
GL_MapBufferOES
GL_MapBufferRange
GL_MapBufferRangeEXT
GL_Materialf
GL_Materialfv
GL_Materialx
GL_Materialxv
GL_MatrixIndexPointerOES
GL_MatrixMode
GL_MaxShaderCompilerThreadsKHR
GL_MemoryBarrier
GL_MemoryBarrierByRegion
GL_MemoryObjectParameterivEXT
GL_MinSampleShading
GL_MinSampleShadingOES
GL_MultMatrixf
GL_MultMatrixx
GL_MultiDrawArraysANGLE
GL_MultiDrawArraysEXT
GL_MultiDrawArraysIndirectEXT
GL_MultiDrawArraysInstancedANGLE
GL_MultiDrawArraysInstancedBaseInstanceANGLE
GL_MultiDrawElementsANGLE
GL_MultiDrawElementsBaseVertexEXT
GL_MultiDrawElementsEXT
GL_MultiDrawElementsIndirectEXT
GL_MultiDrawElementsInstancedANGLE
GL_MultiDrawElementsInstancedBaseVertexBaseInstanceANGLE
GL_MultiTexCoord4f
GL_MultiTexCoord4x
GL_Normal3f
GL_Normal3x
GL_NormalPointer
GL_ObjectLabel
GL_ObjectLabelKHR
GL_ObjectPtrLabel
GL_ObjectPtrLabelKHR
GL_Orthof
GL_Orthox
GL_PatchParameteri
GL_PatchParameteriEXT
GL_PatchParameteriOES
GL_PauseTransformFeedback
GL_PixelLocalStorageBarrierANGLE
GL_PixelStorei
GL_PointParameterf
GL_PointParameterfv
GL_PointParameterx
GL_PointParameterxv
GL_PointSize
GL_PointSizePointerOES
GL_PointSizex
GL_PolygonModeANGLE
GL_PolygonModeNV
GL_PolygonOffset
GL_PolygonOffsetClampEXT
GL_PolygonOffsetx
GL_PopDebugGroup
GL_PopDebugGroupKHR
GL_PopGroupMarkerEXT
GL_PopMatrix
GL_PrimitiveBoundingBox
GL_PrimitiveBoundingBoxEXT
GL_PrimitiveBoundingBoxOES
GL_ProgramBinary
GL_ProgramBinaryOES
GL_ProgramParameteri
GL_ProgramParameteriEXT
GL_ProgramUniform1f
GL_ProgramUniform1fEXT
GL_ProgramUniform1fv
GL_ProgramUniform1fvEXT
GL_ProgramUniform1i
GL_ProgramUniform1iEXT
GL_ProgramUniform1iv
GL_ProgramUniform1ivEXT
GL_ProgramUniform1ui
GL_ProgramUniform1uiEXT
GL_ProgramUniform1uiv
GL_ProgramUniform1uivEXT
GL_ProgramUniform2f
GL_ProgramUniform2fEXT
GL_ProgramUniform2fv
GL_ProgramUniform2fvEXT
GL_ProgramUniform2i
GL_ProgramUniform2iEXT
GL_ProgramUniform2iv
GL_ProgramUniform2ivEXT
GL_ProgramUniform2ui
GL_ProgramUniform2uiEXT
GL_ProgramUniform2uiv
GL_ProgramUniform2uivEXT
GL_ProgramUniform3f
GL_ProgramUniform3fEXT
GL_ProgramUniform3fv
GL_ProgramUniform3fvEXT
GL_ProgramUniform3i
GL_ProgramUniform3iEXT
GL_ProgramUniform3iv
GL_ProgramUniform3ivEXT
GL_ProgramUniform3ui
GL_ProgramUniform3uiEXT
GL_ProgramUniform3uiv
GL_ProgramUniform3uivEXT
GL_ProgramUniform4f
GL_ProgramUniform4fEXT
GL_ProgramUniform4fv
GL_ProgramUniform4fvEXT
GL_ProgramUniform4i
GL_ProgramUniform4iEXT
GL_ProgramUniform4iv
GL_ProgramUniform4ivEXT
GL_ProgramUniform4ui
GL_ProgramUniform4uiEXT
GL_ProgramUniform4uiv
GL_ProgramUniform4uivEXT
GL_ProgramUniformMatrix2fv
GL_ProgramUniformMatrix2fvEXT
GL_ProgramUniformMatrix2x3fv
GL_ProgramUniformMatrix2x3fvEXT
GL_ProgramUniformMatrix2x4fv
GL_ProgramUniformMatrix2x4fvEXT
GL_ProgramUniformMatrix3fv
GL_ProgramUniformMatrix3fvEXT
GL_ProgramUniformMatrix3x2fv
GL_ProgramUniformMatrix3x2fvEXT
GL_ProgramUniformMatrix3x4fv
GL_ProgramUniformMatrix3x4fvEXT
GL_ProgramUniformMatrix4fv
GL_ProgramUniformMatrix4fvEXT
GL_ProgramUniformMatrix4x2fv
GL_ProgramUniformMatrix4x2fvEXT
GL_ProgramUniformMatrix4x3fv
GL_ProgramUniformMatrix4x3fvEXT
GL_ProvokingVertexANGLE
GL_PushDebugGroup
GL_PushDebugGroupKHR
GL_PushGroupMarkerEXT
GL_PushMatrix
GL_QueryCounterEXT
GL_QueryMatrixxOES
GL_ReadBuffer
GL_ReadPixels
GL_ReadPixelsRobustANGLE
GL_ReadnPixels
GL_ReadnPixelsEXT
GL_ReadnPixelsKHR
GL_ReadnPixelsRobustANGLE
GL_ReleaseShaderCompiler
GL_ReleaseTexturesANGLE
GL_RenderbufferStorage
GL_RenderbufferStorageMultisample
GL_RenderbufferStorageMultisampleANGLE
GL_RenderbufferStorageMultisampleEXT
GL_RenderbufferStorageOES
GL_RequestExtensionANGLE
GL_ResumeTransformFeedback
GL_Rotatef
GL_Rotatex
GL_SampleCoverage
GL_SampleCoveragex
GL_SampleMaski
GL_SampleMaskiANGLE
GL_SamplerParameterIiv
GL_SamplerParameterIivEXT
GL_SamplerParameterIivOES
GL_SamplerParameterIivRobustANGLE
GL_SamplerParameterIuiv
GL_SamplerParameterIuivEXT
GL_SamplerParameterIuivOES
GL_SamplerParameterIuivRobustANGLE
GL_SamplerParameterf
GL_SamplerParameterfv
GL_SamplerParameterfvRobustANGLE
GL_SamplerParameteri
GL_SamplerParameteriv
GL_SamplerParameterivRobustANGLE
GL_Scalef
GL_Scalex
GL_Scissor
GL_SelectPerfMonitorCountersAMD
GL_SemaphoreParameterui64vEXT
GL_SetFenceNV
GL_ShadeModel
GL_ShaderBinary
GL_ShaderSource
GL_ShadingRateQCOM
GL_SignalSemaphoreEXT
GL_StartTilingQCOM
GL_StencilFunc
GL_StencilFuncSeparate
GL_StencilMask
GL_StencilMaskSeparate
GL_StencilOp
GL_StencilOpSeparate
GL_TestFenceNV
GL_TexBuffer
GL_TexBufferEXT
GL_TexBufferOES
GL_TexBufferRange
GL_TexBufferRangeEXT
GL_TexBufferRangeOES
GL_TexCoordPointer
GL_TexEnvf
GL_TexEnvfv
GL_TexEnvi
GL_TexEnviv
GL_TexEnvx
GL_TexEnvxv
GL_TexGenfOES
GL_TexGenfvOES
GL_TexGeniOES
GL_TexGenivOES
GL_TexGenxOES
GL_TexGenxvOES
GL_TexImage2D
GL_TexImage2DExternalANGLE
GL_TexImage2DRobustANGLE
GL_TexImage3D
GL_TexImage3DOES
GL_TexImage3DRobustANGLE
GL_TexParameterIiv
GL_TexParameterIivEXT
GL_TexParameterIivOES
GL_TexParameterIivRobustANGLE
GL_TexParameterIuiv
GL_TexParameterIuivEXT
GL_TexParameterIuivOES
GL_TexParameterIuivRobustANGLE
GL_TexParameterf
GL_TexParameterfv
GL_TexParameterfvRobustANGLE
GL_TexParameteri
GL_TexParameteriv
GL_TexParameterivRobustANGLE
GL_TexParameterx
GL_TexParameterxv
GL_TexStorage2D
GL_TexStorage2DEXT
GL_TexStorage2DMultisample
GL_TexStorage2DMultisampleANGLE
GL_TexStorage3D
GL_TexStorage3DEXT
GL_TexStorage3DMultisample
GL_TexStorage3DMultisampleOES
GL_TexStorageAttribs2DEXT
GL_TexStorageAttribs3DEXT
GL_TexStorageMem2DEXT
GL_TexStorageMem2DMultisampleEXT
GL_TexStorageMem3DEXT
GL_TexStorageMem3DMultisampleEXT
GL_TexStorageMemFlags2DANGLE
GL_TexStorageMemFlags2DMultisampleANGLE
GL_TexStorageMemFlags3DANGLE
GL_TexStorageMemFlags3DMultisampleANGLE
GL_TexSubImage2D
GL_TexSubImage2DRobustANGLE
GL_TexSubImage3D
GL_TexSubImage3DOES
GL_TexSubImage3DRobustANGLE
GL_TextureFoveationParametersQCOM
GL_TransformFeedbackVaryings
GL_Translatef
GL_Translatex
GL_Uniform1f
GL_Uniform1fv
GL_Uniform1i
GL_Uniform1iv
GL_Uniform1ui
GL_Uniform1uiv
GL_Uniform2f
GL_Uniform2fv
GL_Uniform2i
GL_Uniform2iv
GL_Uniform2ui
GL_Uniform2uiv
GL_Uniform3f
GL_Uniform3fv
GL_Uniform3i
GL_Uniform3iv
GL_Uniform3ui
GL_Uniform3uiv
GL_Uniform4f
GL_Uniform4fv
GL_Uniform4i
GL_Uniform4iv
GL_Uniform4ui
GL_Uniform4uiv
GL_UniformBlockBinding
GL_UniformMatrix2fv
GL_UniformMatrix2x3fv
GL_UniformMatrix2x4fv
GL_UniformMatrix3fv
GL_UniformMatrix3x2fv
GL_UniformMatrix3x4fv
GL_UniformMatrix4fv
GL_UniformMatrix4x2fv
GL_UniformMatrix4x3fv
GL_UnmapBuffer
GL_UnmapBufferOES
GL_UseProgram
GL_UseProgramStages
GL_UseProgramStagesEXT
GL_ValidateProgram
GL_ValidateProgramPipeline
GL_ValidateProgramPipelineEXT
GL_VertexAttrib1f
GL_VertexAttrib1fv
GL_VertexAttrib2f
GL_VertexAttrib2fv
GL_VertexAttrib3f
GL_VertexAttrib3fv
GL_VertexAttrib4f
GL_VertexAttrib4fv
GL_VertexAttribBinding
GL_VertexAttribDivisor
GL_VertexAttribDivisorANGLE
GL_VertexAttribDivisorEXT
GL_VertexAttribFormat
GL_VertexAttribI4i
GL_VertexAttribI4iv
GL_VertexAttribI4ui
GL_VertexAttribI4uiv
GL_VertexAttribIFormat
GL_VertexAttribIPointer
GL_VertexAttribPointer
GL_VertexBindingDivisor
GL_VertexPointer
GL_Viewport
GL_WaitSemaphoreEXT
GL_WaitSync
GL_WeightPointerOES
glAcquireTexturesANGLE
glActiveShaderProgram
glActiveShaderProgramEXT
glActiveTexture
glAlphaFunc
glAlphaFuncx
glAttachShader
glBeginPerfMonitorAMD
glBeginPixelLocalStorageANGLE
glBeginQuery
glBeginQueryEXT
glBeginTransformFeedback
glBindAttribLocation
glBindBuffer
glBindBufferBase
glBindBufferRange
glBindFragDataLocationEXT
glBindFragDataLocationIndexedEXT
glBindFramebuffer
glBindFramebufferOES
glBindImageTexture
glBindProgramPipeline
glBindProgramPipelineEXT
glBindRenderbuffer
glBindRenderbufferOES
glBindSampler
glBindTexture
glBindTransformFeedback
glBindUniformLocationCHROMIUM
glBindVertexArray
glBindVertexArrayOES
glBindVertexBuffer
glBlendBarrier
glBlendBarrierKHR
glBlendColor
glBlendEquation
glBlendEquationOES
glBlendEquationSeparate
glBlendEquationSeparatei
glBlendEquationSeparateiEXT
glBlendEquationSeparateiOES
glBlendEquationi
glBlendEquationiEXT
glBlendEquationiOES
glBlendFunc
glBlendFuncSeparate
glBlendFuncSeparatei
glBlendFuncSeparateiEXT
glBlendFuncSeparateiOES
glBlendFunci
glBlendFunciEXT
glBlendFunciOES
glBlitFramebuffer
glBlitFramebufferANGLE
glBlitFramebufferNV
glBlobCacheCallbacksANGLE
glBufferData
glBufferStorageEXT
glBufferStorageExternalEXT
glBufferStorageMemEXT
glBufferSubData
glCheckFramebufferStatus
glCheckFramebufferStatusOES
glClear
glClearBufferfi
glClearBufferfv
glClearBufferiv
glClearBufferuiv
glClearColor
glClearColorx
glClearDepthf
glClearDepthx
glClearStencil
glClearTexImageEXT
glClearTexSubImageEXT
glClientActiveTexture
glClientWaitSync
glClipControlEXT
glClipPlanef
glClipPlanex
glColor4f
glColor4ub
glColor4x
glColorMask
glColorMaski
glColorMaskiEXT
glColorMaskiOES
glColorPointer
glCompileShader
glCompressedCopyTextureCHROMIUM
glCompressedTexImage2D
glCompressedTexImage2DRobustANGLE
glCompressedTexImage3D
glCompressedTexImage3DOES
glCompressedTexImage3DRobustANGLE
glCompressedTexSubImage2D
glCompressedTexSubImage2DRobustANGLE
glCompressedTexSubImage3D
glCompressedTexSubImage3DOES
glCompressedTexSubImage3DRobustANGLE
glCopyBufferSubData
glCopyImageSubData
glCopyImageSubDataEXT
glCopyImageSubDataOES
glCopySubTexture3DANGLE
glCopySubTextureCHROMIUM
glCopyTexImage2D
glCopyTexSubImage2D
glCopyTexSubImage3D
glCopyTexSubImage3DOES
glCopyTexture3DANGLE
glCopyTextureCHROMIUM
glCoverageModulationCHROMIUM
glCreateMemoryObjectsEXT
glCreateProgram
glCreateShader
glCreateShaderProgramv
glCreateShaderProgramvEXT
glCullFace
glCurrentPaletteMatrixOES
glDebugMessageCallback
glDebugMessageCallbackKHR
glDebugMessageControl
glDebugMessageControlKHR
glDebugMessageInsert
glDebugMessageInsertKHR
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteFramebuffersOES
glDeleteMemoryObjectsEXT
glDeletePerfMonitorsAMD
glDeleteProgram
glDeleteProgramPipelines
glDeleteProgramPipelinesEXT
glDeleteQueries
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteRenderbuffersOES
glDeleteSamplers
glDeleteSemaphoresEXT
glDeleteShader
glDeleteSync
glDeleteTextures
glDeleteTransformFeedbacks
glDeleteVertexArrays
glDeleteVertexArraysOES
glDepthFunc
glDepthMask
glDepthRangef
glDepthRangex
glDetachShader
glDisable
glDisableClientState
glDisableExtensionANGLE
glDisableVertexAttribArray
glDisablei
glDisableiEXT
glDisableiOES
glDiscardFramebufferEXT
glDispatchCompute
glDispatchComputeIndirect
glDrawArrays
glDrawArraysIndirect
glDrawArraysInstanced
glDrawArraysInstancedANGLE
glDrawArraysInstancedBaseInstanceANGLE
glDrawArraysInstancedBaseInstanceEXT
glDrawArraysInstancedEXT
glDrawBuffers
glDrawBuffersEXT
glDrawElements
glDrawElementsBaseVertex
glDrawElementsBaseVertexEXT
glDrawElementsBaseVertexOES
glDrawElementsIndirect
glDrawElementsInstanced
glDrawElementsInstancedANGLE
glDrawElementsInstancedBaseInstanceEXT
glDrawElementsInstancedBaseVertex
glDrawElementsInstancedBaseVertexBaseInstanceANGLE
glDrawElementsInstancedBaseVertexBaseInstanceEXT
glDrawElementsInstancedBaseVertexEXT
glDrawElementsInstancedBaseVertexOES
glDrawElementsInstancedEXT
glDrawRangeElements
glDrawRangeElementsBaseVertex
glDrawRangeElementsBaseVertexEXT
glDrawRangeElementsBaseVertexOES
glDrawTexfOES
glDrawTexfvOES
glDrawTexiOES
glDrawTexivOES
glDrawTexsOES
glDrawTexsvOES
glDrawTexxOES
glDrawTexxvOES
glEGLImageTargetRenderbufferStorageOES
glEGLImageTargetTexStorageEXT
glEGLImageTargetTexture2DOES
glEnable
glEnableClientState
glEnableVertexAttribArray
glEnablei
glEnableiEXT
glEnableiOES
glEndPerfMonitorAMD
glEndPixelLocalStorageANGLE
glEndQuery
glEndQueryEXT
glEndTilingQCOM
glEndTransformFeedback
glFenceSync
glFinish
glFinishFenceNV
glFlush
glFlushMappedBufferRange
glFlushMappedBufferRangeEXT
glFogf
glFogfv
glFogx
glFogxv
glFramebufferFetchBarrierEXT
glFramebufferFoveationConfigQCOM
glFramebufferFoveationParametersQCOM
glFramebufferMemorylessPixelLocalStorageANGLE
glFramebufferParameteri
glFramebufferParameteriMESA
glFramebufferPixelLocalClearValuefvANGLE
glFramebufferPixelLocalClearValueivANGLE
glFramebufferPixelLocalClearValueuivANGLE
glFramebufferPixelLocalStorageInterruptANGLE
glFramebufferPixelLocalStorageRestoreANGLE
glFramebufferRenderbuffer
glFramebufferRenderbufferOES
glFramebufferTexture
glFramebufferTexture2D
glFramebufferTexture2DMultisampleEXT
glFramebufferTexture2DOES
glFramebufferTexture3DOES
glFramebufferTextureEXT
glFramebufferTextureLayer
glFramebufferTextureMultiviewOVR
glFramebufferTextureOES
glFramebufferTexturePixelLocalStorageANGLE
glFrontFace
glFrustumf
glFrustumx
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenFramebuffersOES
glGenPerfMonitorsAMD
glGenProgramPipelines
glGenProgramPipelinesEXT
glGenQueries
glGenQueriesEXT
glGenRenderbuffers
glGenRenderbuffersOES
glGenSamplers
glGenSemaphoresEXT
glGenTextures
glGenTransformFeedbacks
glGenVertexArrays
glGenVertexArraysOES
glGenerateMipmap
glGenerateMipmapOES
glGetActiveAttrib
glGetActiveUniform
glGetActiveUniformBlockName
glGetActiveUniformBlockiv
glGetActiveUniformBlockivRobustANGLE
glGetActiveUniformsiv
glGetAttachedShaders
glGetAttribLocation
glGetBooleani_v
glGetBooleani_vRobustANGLE
glGetBooleanv
glGetBooleanvRobustANGLE
glGetBufferParameteri64v
glGetBufferParameteri64vRobustANGLE
glGetBufferParameteriv
glGetBufferParameterivRobustANGLE
glGetBufferPointerv
glGetBufferPointervOES
glGetBufferPointervRobustANGLE
glGetClipPlanef
glGetClipPlanex
glGetCompressedTexImageANGLE
glGetDebugMessageLog
glGetDebugMessageLogKHR
glGetError
glGetFenceivNV
glGetFixedv
glGetFloatv
glGetFloatvRobustANGLE
glGetFragDataIndexEXT
glGetFragDataLocation
glGetFramebufferAttachmentParameteriv
glGetFramebufferAttachmentParameterivOES
glGetFramebufferAttachmentParameterivRobustANGLE
glGetFramebufferParameteriv
glGetFramebufferParameterivMESA
glGetFramebufferParameterivRobustANGLE
glGetFramebufferPixelLocalStorageParameterfvANGLE
glGetFramebufferPixelLocalStorageParameterfvRobustANGLE
glGetFramebufferPixelLocalStorageParameterivANGLE
glGetFramebufferPixelLocalStorageParameterivRobustANGLE
glGetGraphicsResetStatus
glGetGraphicsResetStatusEXT
glGetGraphicsResetStatusKHR
glGetInteger64i_v
glGetInteger64i_vRobustANGLE
glGetInteger64v
glGetInteger64vEXT
glGetInteger64vRobustANGLE
glGetIntegeri_v
glGetIntegeri_vRobustANGLE
glGetIntegerv
glGetIntegervRobustANGLE
glGetInternalformativ
glGetInternalformativRobustANGLE
glGetLightfv
glGetLightxv
glGetMaterialfv
glGetMaterialxv
glGetMemoryObjectParameterivEXT
glGetMultisamplefv
glGetMultisamplefvANGLE
glGetMultisamplefvRobustANGLE
glGetObjectLabel
glGetObjectLabelEXT
glGetObjectLabelKHR
glGetObjectPtrLabel
glGetObjectPtrLabelKHR
glGetPerfMonitorCounterDataAMD
glGetPerfMonitorCounterInfoAMD
glGetPerfMonitorCounterStringAMD
glGetPerfMonitorCountersAMD
glGetPerfMonitorGroupStringAMD
glGetPerfMonitorGroupsAMD
glGetPointerv
glGetPointervANGLE
glGetPointervKHR
glGetPointervRobustANGLERobustANGLE
glGetProgramBinary
glGetProgramBinaryOES
glGetProgramInfoLog
glGetProgramInterfaceiv
glGetProgramInterfaceivRobustANGLE
glGetProgramPipelineInfoLog
glGetProgramPipelineInfoLogEXT
glGetProgramPipelineiv
glGetProgramPipelineivEXT
glGetProgramResourceIndex
glGetProgramResourceLocation
glGetProgramResourceLocationIndexEXT
glGetProgramResourceName
glGetProgramResourceiv
glGetProgramiv
glGetProgramivRobustANGLE
glGetQueryObjecti64vEXT
glGetQueryObjecti64vRobustANGLE
glGetQueryObjectivEXT
glGetQueryObjectivRobustANGLE
glGetQueryObjectui64vEXT
glGetQueryObjectui64vRobustANGLE
glGetQueryObjectuiv
glGetQueryObjectuivEXT
glGetQueryObjectuivRobustANGLE
glGetQueryiv
glGetQueryivEXT
glGetQueryivRobustANGLE
glGetRenderbufferImageANGLE
glGetRenderbufferParameteriv
glGetRenderbufferParameterivOES
glGetRenderbufferParameterivRobustANGLE
glGetSamplerParameterIiv
glGetSamplerParameterIivEXT
glGetSamplerParameterIivOES
glGetSamplerParameterIivRobustANGLE
glGetSamplerParameterIuiv
glGetSamplerParameterIuivEXT
glGetSamplerParameterIuivOES
glGetSamplerParameterIuivRobustANGLE
glGetSamplerParameterfv
glGetSamplerParameterfvRobustANGLE
glGetSamplerParameteriv
glGetSamplerParameterivRobustANGLE
glGetSemaphoreParameterui64vEXT
glGetShaderInfoLog
glGetShaderPrecisionFormat
glGetShaderSource
glGetShaderiv
glGetShaderivRobustANGLE
glGetString
glGetStringi
glGetSynciv
glGetTexEnvfv
glGetTexEnviv
glGetTexEnvxv
glGetTexGenfvOES
glGetTexGenivOES
glGetTexGenxvOES
glGetTexImageANGLE
glGetTexLevelParameterfv
glGetTexLevelParameterfvANGLE
glGetTexLevelParameterfvRobustANGLE
glGetTexLevelParameteriv
glGetTexLevelParameterivANGLE
glGetTexLevelParameterivRobustANGLE
glGetTexParameterIiv
glGetTexParameterIivEXT
glGetTexParameterIivOES
glGetTexParameterIivRobustANGLE
glGetTexParameterIuiv
glGetTexParameterIuivEXT
glGetTexParameterIuivOES
glGetTexParameterIuivRobustANGLE
glGetTexParameterfv
glGetTexParameterfvRobustANGLE
glGetTexParameteriv
glGetTexParameterivRobustANGLE
glGetTexParameterxv
glGetTransformFeedbackVarying
glGetTranslatedShaderSourceANGLE
glGetUniformBlockIndex
glGetUniformIndices
glGetUniformLocation
glGetUniformfv
glGetUniformfvRobustANGLE
glGetUniformiv
glGetUniformivRobustANGLE
glGetUniformuiv
glGetUniformuivRobustANGLE
glGetUnsignedBytei_vEXT
glGetUnsignedBytevEXT
glGetVertexAttribIiv
glGetVertexAttribIivRobustANGLE
glGetVertexAttribIuiv
glGetVertexAttribIuivRobustANGLE
glGetVertexAttribPointerv
glGetVertexAttribPointervRobustANGLE
glGetVertexAttribfv
glGetVertexAttribfvRobustANGLE
glGetVertexAttribiv
glGetVertexAttribivRobustANGLE
glGetnUniformfv
glGetnUniformfvEXT
glGetnUniformfvKHR
glGetnUniformfvRobustANGLE
glGetnUniformiv
glGetnUniformivEXT
glGetnUniformivKHR
glGetnUniformivRobustANGLE
glGetnUniformuiv
glGetnUniformuivKHR
glGetnUniformuivRobustANGLE
glHint
glImportMemoryFdEXT
glImportMemoryZirconHandleANGLE
glImportSemaphoreFdEXT
glImportSemaphoreZirconHandleANGLE
glInsertEventMarkerEXT
glInvalidateFramebuffer
glInvalidateSubFramebuffer
glInvalidateTextureANGLE
glIsBuffer
glIsEnabled
glIsEnabledi
glIsEnablediEXT
glIsEnablediOES
glIsFenceNV
glIsFramebuffer
glIsFramebufferOES
glIsMemoryObjectEXT
glIsProgram
glIsProgramPipeline
glIsProgramPipelineEXT
glIsQuery
glIsQueryEXT
glIsRenderbuffer
glIsRenderbufferOES
glIsSampler
glIsSemaphoreEXT
glIsShader
glIsSync
glIsTexture
glIsTransformFeedback
glIsVertexArray
glIsVertexArrayOES
glLabelObjectEXT
glLightModelf
glLightModelfv
glLightModelx
glLightModelxv
glLightf
glLightfv
glLightx
glLightxv
glLineWidth
glLineWidthx
glLinkProgram
glLoadIdentity
glLoadMatrixf
glLoadMatrixx
glLoadPaletteFromModelViewMatrixOES
glLogicOp
glLogicOpANGLE
glLoseContextCHROMIUM
glMapBufferOES
glMapBufferRange
glMapBufferRangeEXT
glMaterialf
glMaterialfv
glMaterialx
glMaterialxv
glMatrixIndexPointerOES
glMatrixMode
glMaxShaderCompilerThreadsKHR
glMemoryBarrier
glMemoryBarrierByRegion
glMemoryObjectParameterivEXT
glMinSampleShading
glMinSampleShadingOES
glMultMatrixf
glMultMatrixx
glMultiDrawArraysANGLE
glMultiDrawArraysEXT
glMultiDrawArraysIndirectEXT
glMultiDrawArraysInstancedANGLE
glMultiDrawArraysInstancedBaseInstanceANGLE
glMultiDrawElementsANGLE
glMultiDrawElementsBaseVertexEXT
glMultiDrawElementsEXT
glMultiDrawElementsIndirectEXT
glMultiDrawElementsInstancedANGLE
glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE
glMultiTexCoord4f
glMultiTexCoord4x
glNormal3f
glNormal3x
glNormalPointer
glObjectLabel
glObjectLabelKHR
glObjectPtrLabel
glObjectPtrLabelKHR
glOrthof
glOrthox
glPatchParameteri
glPatchParameteriEXT
glPatchParameteriOES
glPauseTransformFeedback
glPixelLocalStorageBarrierANGLE
glPixelStorei
glPointParameterf
glPointParameterfv
glPointParameterx
glPointParameterxv
glPointSize
glPointSizePointerOES
glPointSizex
glPolygonModeANGLE
glPolygonModeNV
glPolygonOffset
glPolygonOffsetClampEXT
glPolygonOffsetx
glPopDebugGroup
glPopDebugGroupKHR
glPopGroupMarkerEXT
glPopMatrix
glPrimitiveBoundingBox
glPrimitiveBoundingBoxEXT
glPrimitiveBoundingBoxOES
glProgramBinary
glProgramBinaryOES
glProgramParameteri
glProgramParameteriEXT
glProgramUniform1f
glProgramUniform1fEXT
glProgramUniform1fv
glProgramUniform1fvEXT
glProgramUniform1i
glProgramUniform1iEXT
glProgramUniform1iv
glProgramUniform1ivEXT
glProgramUniform1ui
glProgramUniform1uiEXT
glProgramUniform1uiv
glProgramUniform1uivEXT
glProgramUniform2f
glProgramUniform2fEXT
glProgramUniform2fv
glProgramUniform2fvEXT
glProgramUniform2i
glProgramUniform2iEXT
glProgramUniform2iv
glProgramUniform2ivEXT
glProgramUniform2ui
glProgramUniform2uiEXT
glProgramUniform2uiv
glProgramUniform2uivEXT
glProgramUniform3f
glProgramUniform3fEXT
glProgramUniform3fv
glProgramUniform3fvEXT
glProgramUniform3i
glProgramUniform3iEXT
glProgramUniform3iv
glProgramUniform3ivEXT
glProgramUniform3ui
glProgramUniform3uiEXT
glProgramUniform3uiv
glProgramUniform3uivEXT
glProgramUniform4f
glProgramUniform4fEXT
glProgramUniform4fv
glProgramUniform4fvEXT
glProgramUniform4i
glProgramUniform4iEXT
glProgramUniform4iv
glProgramUniform4ivEXT
glProgramUniform4ui
glProgramUniform4uiEXT
glProgramUniform4uiv
glProgramUniform4uivEXT
glProgramUniformMatrix2fv
glProgramUniformMatrix2fvEXT
glProgramUniformMatrix2x3fv
glProgramUniformMatrix2x3fvEXT
glProgramUniformMatrix2x4fv
glProgramUniformMatrix2x4fvEXT
glProgramUniformMatrix3fv
glProgramUniformMatrix3fvEXT
glProgramUniformMatrix3x2fv
glProgramUniformMatrix3x2fvEXT
glProgramUniformMatrix3x4fv
glProgramUniformMatrix3x4fvEXT
glProgramUniformMatrix4fv
glProgramUniformMatrix4fvEXT
glProgramUniformMatrix4x2fv
glProgramUniformMatrix4x2fvEXT
glProgramUniformMatrix4x3fv
glProgramUniformMatrix4x3fvEXT
glProvokingVertexANGLE
glPushDebugGroup
glPushDebugGroupKHR
glPushGroupMarkerEXT
glPushMatrix
glQueryCounterEXT
glQueryMatrixxOES
glReadBuffer
glReadPixels
glReadPixelsRobustANGLE
glReadnPixels
glReadnPixelsEXT
glReadnPixelsKHR
glReadnPixelsRobustANGLE
glReleaseShaderCompiler
glReleaseTexturesANGLE
glRenderbufferStorage
glRenderbufferStorageMultisample
glRenderbufferStorageMultisampleANGLE
glRenderbufferStorageMultisampleEXT
glRenderbufferStorageOES
glRequestExtensionANGLE
glResumeTransformFeedback
glRotatef
glRotatex
glSampleCoverage
glSampleCoveragex
glSampleMaski
glSampleMaskiANGLE
glSamplerParameterIiv
glSamplerParameterIivEXT
glSamplerParameterIivOES
glSamplerParameterIivRobustANGLE
glSamplerParameterIuiv
glSamplerParameterIuivEXT
glSamplerParameterIuivOES
glSamplerParameterIuivRobustANGLE
glSamplerParameterf
glSamplerParameterfv
glSamplerParameterfvRobustANGLE
glSamplerParameteri
glSamplerParameteriv
glSamplerParameterivRobustANGLE
glScalef
glScalex
glScissor
glSelectPerfMonitorCountersAMD
glSemaphoreParameterui64vEXT
glSetFenceNV
glShadeModel
glShaderBinary
glShaderSource
glShadingRateQCOM
glSignalSemaphoreEXT
glStartTilingQCOM
glStencilFunc
glStencilFuncSeparate
glStencilMask
glStencilMaskSeparate
glStencilOp
glStencilOpSeparate
glTestFenceNV
glTexBuffer
glTexBufferEXT
glTexBufferOES
glTexBufferRange
glTexBufferRangeEXT
glTexBufferRangeOES
glTexCoordPointer
glTexEnvf
glTexEnvfv
glTexEnvi
glTexEnviv
glTexEnvx
glTexEnvxv
glTexGenfOES
glTexGenfvOES
glTexGeniOES
glTexGenivOES
glTexGenxOES
glTexGenxvOES
glTexImage2D
glTexImage2DExternalANGLE
glTexImage2DRobustANGLE
glTexImage3D
glTexImage3DOES
glTexImage3DRobustANGLE
glTexParameterIiv
glTexParameterIivEXT
glTexParameterIivOES
glTexParameterIivRobustANGLE
glTexParameterIuiv
glTexParameterIuivEXT
glTexParameterIuivOES
glTexParameterIuivRobustANGLE
glTexParameterf
glTexParameterfv
glTexParameterfvRobustANGLE
glTexParameteri
glTexParameteriv
glTexParameterivRobustANGLE
glTexParameterx
glTexParameterxv
glTexStorage2D
glTexStorage2DEXT
glTexStorage2DMultisample
glTexStorage2DMultisampleANGLE
glTexStorage3D
glTexStorage3DEXT
glTexStorage3DMultisample
glTexStorage3DMultisampleOES
glTexStorageAttribs2DEXT
glTexStorageAttribs3DEXT
glTexStorageMem2DEXT
glTexStorageMem2DMultisampleEXT
glTexStorageMem3DEXT
glTexStorageMem3DMultisampleEXT
glTexStorageMemFlags2DANGLE
glTexStorageMemFlags2DMultisampleANGLE
glTexStorageMemFlags3DANGLE
glTexStorageMemFlags3DMultisampleANGLE
glTexSubImage2D
glTexSubImage2DRobustANGLE
glTexSubImage3D
glTexSubImage3DOES
glTexSubImage3DRobustANGLE
glTextureFoveationParametersQCOM
glTransformFeedbackVaryings
glTranslatef
glTranslatex
glUniform1f
glUniform1fv
glUniform1i
glUniform1iv
glUniform1ui
glUniform1uiv
glUniform2f
glUniform2fv
glUniform2i
glUniform2iv
glUniform2ui
glUniform2uiv
glUniform3f
glUniform3fv
glUniform3i
glUniform3iv
glUniform3ui
glUniform3uiv
glUniform4f
glUniform4fv
glUniform4i
glUniform4iv
glUniform4ui
glUniform4uiv
glUniformBlockBinding
glUniformMatrix2fv
glUniformMatrix2x3fv
glUniformMatrix2x4fv
glUniformMatrix3fv
glUniformMatrix3x2fv
glUniformMatrix3x4fv
glUniformMatrix4fv
glUniformMatrix4x2fv
glUniformMatrix4x3fv
glUnmapBuffer
glUnmapBufferOES
glUseProgram
glUseProgramStages
glUseProgramStagesEXT
glValidateProgram
glValidateProgramPipeline
glValidateProgramPipelineEXT
glVertexAttrib1f
glVertexAttrib1fv
glVertexAttrib2f
glVertexAttrib2fv
glVertexAttrib3f
glVertexAttrib3fv
glVertexAttrib4f
glVertexAttrib4fv
glVertexAttribBinding
glVertexAttribDivisor
glVertexAttribDivisorANGLE
glVertexAttribDivisorEXT
glVertexAttribFormat
glVertexAttribI4i
glVertexAttribI4iv
glVertexAttribI4ui
glVertexAttribI4uiv
glVertexAttribIFormat
glVertexAttribIPointer
glVertexAttribPointer
glVertexBindingDivisor
glVertexPointer
glViewport
glWaitSemaphoreEXT
glWaitSync
glWeightPointerOES
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1022KB
Virtual Size
1022KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
177KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
337B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
malloc_h
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bootselector.deps.json
- SHA256 c8b6ca0cefeb10a228e66937cff1188a45bf605175dd44d52c668b8fb0c7e11f
- MD5 dac233881b7f42288efaa1b6f92982f3
- SHA1 bb93ba818b9589fd16b8fa1d1d4ab4c3dd740dab
- SHA512 223d454232a8b54dae50890f54ced6d70c7fa924717607e1d22e01c3b0afc61f2dfa484a60e057e42ff85255d3f32bbe6d7680a86464c8d1cc3be8e1f1a2a24f
- SSDEEP 384:Xr1s+aY2ZFz5pdxJxUeptkYL/AiKoGnaOrv4:XA22fEibG1w
- TLSH T14EA24526C9A04DA7097567A3387A4295F365032F7044898EB8BC385DDF73E3B2295F39
- MD5 SHA1 SHA512 SSDEEP TLSH
bootselector.dll
- SHA256 93cd2b2b1b67df5ae320445bf466f2b77771267ca59280c20eaabf15ac676f47
- MD5 9e576f4682c74ab37289c5a0a180988e
- SHA1 598981eaadffdadfe431cbf50e43236a1b4d94fe
- SHA512 5c961e68a6ee2f844b4e3d59f99eafa999cab346b76c687cb4610c8fbbf6f2e17bf9f0a68d018bdaea446b58849552784b91ef2e582deef1cf8c05e612c98686
- SSDEEP 3072:nXLNj6ZP0ZJLNj6ZP0ZF5jbav0LNN6ZP0Zs:nXN6FuN6FI5jbK0z6F
- TLSH T153840E41366E9368F1F09C7EA86DD72ABA2316802D4E1BACDFC0572C035D6D91AB73D4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\bootselector\bootselector\obj\Release\net10.0\win-x64\bootselector.pdb
Name
.text
Size
267KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
114KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
bootselector.exe
- IMPHASH 53e4e12437621212a425d294842d0a96
- SHA256 2e522b4ed7f56f4ea2ddac58fe1d85b053049f6be07ed250149d0055d5085855
- MD5 ff26abd41566bc1017bbc22ed4712435
- SHA1 af4c2580b54b34bd541da972c46bc433dc881b54
- SHA512 efc17ad5a7dd92125ec4b9034d8b375d6e7518d9cb30f1d71607c81eaee6ba17fd861193ed4341637d7f424a0793992cd5c8ba2e62da26ba3e067c56fc873e3a
- SSDEEP 3072:6XwANETcQt1Onb5RHrfqDQXFn4dPPYseJwmm82jT6+bOLNL6ZP0Z6:QlxnlRLfyQXN42DCzqZ6F
- TLSH T17744EC02366E83A9F1F19D3D986DDB29BA3325402F1A17AE8FC05B2C071D6D51AB73D4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
80768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
114KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33140,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35217,
count=1, id=258, version=35217,
bootselector.pdb
- SHA256 b6f7df115d48532ff9f5b8eca32fe4b2cf89610683f21c5147fe12bc149589d4
- MD5 2b2d45f30a6eb2c60fc211fbcee0d6b4
- SHA1 316774d648d6306ef9bf6b09e085f5a18233b6df
- SHA512 e2a3dcd8f61e6e956b406d676d599e7a193df07804e600f967e4b7ee66bccb85d9481239490b2763f7e00433219a680e750a9b8334e575581ee2d5bea3f200d7
- SSDEEP 768:YOGS8Z5PYGycjWVYdLBCxZIniOVl0yCYj:F8UGyAWVHxZIniOVl0/Q
- TLSH T12BB23873A369D221C40666BA9062C2ACB734C3312311EFB9F2D475A4EDAFB4947F9075
- MD5 SHA1 SHA512 SSDEEP TLSH
bootselector.runtimeconfig.json
- SHA256 c1fae63403a672b3e567f36a3568d00c2498dde3083fa89437a88151e5080094
- MD5 9ae7866460fd9cdc2b3f64eb77031f14
- SHA1 fb564ca4c896e1820c00fc02dbdb0c2382457500
- SHA512 cd29b20e4a926f003aaf2e2c437e13ce34f089d7392752a9264d47230d8fbc648b786eb79fc2401f5cae6b385aad842c314599423a10fa15832a05f5fa2bcaa8
- TLSH T1A2313734DE5AB8FD017951AB9921C492CB7053271044BD52F1FD080CAFBBAB42276FA6
- MD5 SHA1 SHA512 TLSH
clretwrc.dll
- SHA256 4f3f74d9fe5f61cf277a05f9294d7185a78771da186030f498e212785b631522
- MD5 25e41a5e23c09a5a1c3dd6ef436fbcf3
- SHA1 7d6ae2414845a0fee3794a3ff0e646e371c420bb
- SHA512 7777a8f9a8ce3bd1474c237dbc79a8d847d0ff6a24baa254be7e365aa525f41ee8f5a6c5a2455a514b1f7deafb81c59bbffdebc830cfe3140407119749956185
- SSDEEP 3072:tP9vKrcsTZ6y97YugoclWxKgEn49+XK2fyvTnj5:HEAHRfyvTn1
- TLSH T1876499463BED4409F5B35FB0AAB75236A676BCA52E51C01D2054D22D2CF1F80CE62BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:3c:a1:99:ec:f8:27:bc:21:9d:1d:e3:ce:4c:f5:81:d5:73:72:1e:9f:e1:a3:9d:87:a3:81:68:30:12:8c:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:07:2c:11:39:89:cd:85:fb:c5:00:01:00:00:02:07
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\clretwrc\clretwrc.pdb
Name
.rdata
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
299KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=35217,
count=1, id=258, version=35217,
clrgc.dll
- IMPHASH fc6b7aa6e5f3b57777010baf258d6003
- SHA256 7a6cdb8ede42029c049f3ffbbc8b27d89a6256dd3978881610ddecdf18cf8375
- MD5 70240fe40f827a829a8e08a44986f34e
- SHA1 2f4d0e65a8d4846542860cebab6ca1731dec844e
- SHA512 c016c268a4cc9a4adb9ec109a4c7863b62406794ffd74e6432dd87855fe644b6686f70699cf776292c8780cfbe1cfa3f4bd0ecd1a590d611eb926a9f1643a5e2
- SSDEEP 12288:rt2cw5eD6UP5qnFo68Cay3PrLwsiAqzIi9Pc76:0/UP5qnFofCv3jLwsirzme
- TLSH T1C7E47C2EF39D61ACD527D0798A677233E7B634091B4279EB07948B246F63ED4673A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
54:e9:87:c2:5c:74:b6:fc:80:6a:6f:34:54:06:ac:2e:50:2d:51:ee:55:a6:70:40:a4:17:5f:b3:64:78:cc:b0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
566720
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\gc\clrgc.pdb
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlVirtualUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
InitializeCriticalSection
GetEnabledXStateFeatures
GetProcessGroupAffinity
DebugBreak
SleepEx
GlobalMemoryStatusEx
SetThreadGroupAffinity
SwitchToThread
ResetEvent
GetSystemInfo
CloseHandle
QueryPerformanceFrequency
GetCurrentThread
GetLogicalProcessorInformation
SetEvent
K32GetProcessMemoryInfo
GetCurrentThreadId
GetLogicalProcessorInformationEx
GetTickCount64
CreateEventW
IsProcessInJob
WaitForSingleObject
GetLargePageMinimum
FlushProcessWriteBuffers
SetThreadPriority
VirtualUnlock
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
QueryInformationJobObject
GetCurrentProcessorNumberEx
VirtualFree
GetThreadIdealProcessorEx
VirtualAlloc
GetProcessAffinityMask
VirtualAllocExNuma
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
abort
terminate
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
calloc
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
strlen
strcpy_s
strcmp
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GC_Initialize
GC_VersionInfo
Name
.text
Size
570KB
Virtual Size
570KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33140,
count=104, id=1, productName=Unmarked objects,
count=8, id=259, version=35207,
count=11, id=260, version=35207,
count=42, id=261, version=35207,
count=29, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
clrgcexp.dll
- IMPHASH 7339c605e783235c2335d9b6c360976e
- SHA256 3981960658653dc8b1803dfd732056baec0b72c0c904c57b8af6f9906a27b4d3
- MD5 90cd9933417017f3c9f50bb75a7b0c74
- SHA1 84532f7def139d824bb6e87fbde5fb4836d14aef
- SHA512 633cc1ee048e8b7304e7bec092fe8ad081ff8568182fb4eb906c42fe6212c1540adbc08da4748e74c39e2541c5259b035e5483be50bda86ab9d5a8ae0aaacb63
- SSDEEP 12288:lfnn0re+VyAz7iRZqJG3KQJw43WuPNm567eQ8ScQ5:KtQ3KVuFm07b5
- TLSH T100E47C1EF7ED20ACD557C0798A627237F7B1311A1B1179EB07948A246FA7ED06B3A301
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
07:3a:8e:b1:99:d8:6d:66:82:4e:bf:bd:7a:e3:cb:1c:84:4c:a6:52:1d:95:67:c1:a6:94:0f:8e:3e:c5:03:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ab:af:3a:c8:82:4e:48:55:5d:00:00:00:00:04:ab
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:16:d6:93:ce:fb:93:1f:ed:e1:00:01:00:00:02:16
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
596576
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\gc\clrgcexp.pdb
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
GetLastError
RtlLookupFunctionEntry
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
IsProcessInJob
WaitForSingleObject
GetLargePageMinimum
RtlVirtualUnwind
RtlCaptureContext
FlushProcessWriteBuffers
SetThreadPriority
SetLastError
GetCurrentThreadId
InitializeCriticalSection
GetEnabledXStateFeatures
GetProcessGroupAffinity
DebugBreak
SleepEx
GlobalMemoryStatusEx
SetThreadGroupAffinity
SwitchToThread
ResetEvent
GetSystemInfo
VirtualUnlock
GetNumaProcessorNodeEx
CloseHandle
QueryPerformanceFrequency
VirtualAllocExNuma
GetCurrentThread
GetLogicalProcessorInformation
GetProcessAffinityMask
SetEvent
K32GetProcessMemoryInfo
GetLogicalProcessorInformationEx
VirtualAlloc
GetTickCount64
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
QueryInformationJobObject
GetCurrentProcessorNumberEx
VirtualFree
GetThreadIdealProcessorEx
CreateEventW
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
api-ms-win-crt-math-l1-1-0
sqrt
round
pow
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm
_initterm_e
_seh_filter_dll
_execute_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
abort
terminate
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsncmp
strcmp
strlen
strcpy_s
advapi32
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GC_Initialize
GC_VersionInfo
Name
.text
Size
599KB
Virtual Size
599KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
55KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33140,
count=107, id=1, productName=Unmarked objects,
count=8, id=259, version=35207,
count=11, id=260, version=35207,
count=42, id=261, version=35207,
count=29, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
clrjit.dll
- IMPHASH 343caf36c077099bfc3434052a423e63
- SHA256 c4d89d40001e26e7714029c860f4c01e1893464ee4c627ac084b9ba23b82ea92
- MD5 b231183c18e994b34f4f3b07d4cce644
- SHA1 4e0839a520c50abb11b2e29386ab7d272f393a09
- SHA512 0cfaf6b4b41ba18e06d6d9e69e2fe2b56fe1fdea07bf09b2257d1250c3bc40a9c1b825fb7d095b3d64691086f0514c854673b9f625b2df998b05af87acbe7dd9
- SSDEEP 49152:1J9IXWMgPjntJUCJAVQtJewDNivTaxCW9pYl2RwQvTH2M4Kq2Nro4ZV5oHzcc4f2:1n4gbndJAu7NivTavpQ2R5vTWbKPN5Vk
- TLSH T15BA5AE87A2A801FCE06B9134C5174A57EBB2B8562331AFCF52F04AD66F377D2262D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
aa:a6:dc:4f:49:bf:6c:3e:7f:9e:69:83:04:66:7d:df:2d:eb:2c:8d:8f:c8:df:12:2b:27:0c:ff:59:4a:21:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:06:d7:bc:51:38:98:23:ec:2c:00:01:00:00:02:06
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
1290144
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\jit\clrjit.pdb
kernel32
RaiseException
DebugBreak
OutputDebugStringA
MultiByteToWideChar
DisableThreadLibraryCalls
QueryThreadCycleTime
GetCurrentThread
QueryPerformanceFrequency
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fseek
fflush
_fileno
__stdio_common_vsprintf
_wfopen
__acrt_iob_func
__stdio_common_vsprintf_s
_dup
_setmode
ftell
setvbuf
fclose
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_initterm
_errno
_configure_narrow_argv
_initialize_narrow_environment
abort
terminate
_cexit
_execute_onexit_table
_initialize_onexit_table
_invalid_parameter_noinfo
api-ms-win-crt-math-l1-1-0
sinf
sin
powf
pow
_fdopen
logf
log2f
log2
log10f
log10
log
fmod
floorf
copysign
copysignf
ilogbf
floor
acosh
asinh
atanh
cbrt
trunc
acoshf
asinhf
atanhf
cbrtf
truncf
expf
exp
sinhf
sqrt
coshf
cosh
cosf
sqrtf
cos
ceilf
ceil
atanf
atan2f
atan2
atan
asinf
asin
acosf
acos
sinh
tan
tanf
tanh
tanhf
api-ms-win-crt-string-l1-1-0
strnlen
strcpy_s
strcmp
_stricmp
wcsncmp
strncmp
strlen
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
free
malloc
getJit
getLikelyClasses
getLikelyMethods
jitBuildString
jitStartup
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
262KB
Virtual Size
261KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33140,
count=153, id=1, productName=Unmarked objects,
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=38, id=261, version=35207,
count=117, id=270, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
coreclr.dll
- IMPHASH e20750a195ea32e71cacb69fc211d72f
- SHA256 5b33c3bb313c6ad4a97deba45d08329bfa7b74624c56a02a6e565e49d850924c
- MD5 1bfdc7da92adac75fa7bcc5cb7bfe91a
- SHA1 bb6011c113a09559c3b91361974ac319254c2c1c
- SHA512 becad2d42d2582844989635e41e5f4f60a4d783d51a46436d442c9a651c33a7c8189b9a18178ad7999d8556ba46832287ae762eed2d97fbd20bd59f5b1237f2e
- SSDEEP 98304:TxbN9JZ17wIBu2TcXrGH8FWzryd8UKN7VRlmezCah:Vx9JbwIBu9XrGH8FWzryd8UKN7VRqa
- TLSH T135269D56F6AD00D8C4BAC1B8C6D74A27FAB238551338DFEB46A046651F237E26B3D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:f8:5f:b1:a0:2c:d1:cf:2b:1e:5f:d4:21:4b:6f:41:59:6e:7d:f1:fd:81:04:5e:55:f1:66:6a:3e:a2:72:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:06:d7:bc:51:38:98:23:ec:2c:00:01:00:00:02:06
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
1351504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscoree\coreclr\coreclr.pdb
kernel32
FormatMessageW
ReadFile
WriteFile
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
DebugBreak
FlushInstructionCache
GetCurrentProcess
LCMapStringEx
LocalFree
VerSetConditionMask
VerifyVersionInfoW
TerminateProcess
OutputDebugStringW
GetLogicalProcessorInformationEx
SetThreadGroupAffinity
GetThreadGroupAffinity
GetProcessGroupAffinity
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
HeapAlloc
HeapFree
CreateFileMappingW
MapViewOfFileEx
HeapCreate
GetProcessHeap
VirtualQuery
HeapDestroy
GetModuleFileNameW
RaiseFailFastException
CreateProcessW
GetCPInfo
GetEnvironmentVariableW
LoadLibraryExW
CreateFileW
GetFullPathNameW
RtlCaptureContext
VirtualAlloc
VirtualProtect
GetThreadContext
SetThreadContext
OpenEventW
WaitForSingleObject
ResetEvent
WaitForMultipleObjectsEx
ExitThread
LocateXStateFeature
VirtualFree
HeapReAlloc
InitializeContext
CopyContext
ResumeThread
DisconnectNamedPipe
ConnectNamedPipe
FlushFileBuffers
CreateNamedPipeA
WaitForMultipleObjects
DuplicateHandle
CreateFileA
CancelIoEx
GetOverlappedResult
SetFilePointer
MapViewOfFile
UnmapViewOfFile
FlushProcessWriteBuffers
SetThreadErrorMode
GetModuleHandleExW
GetCommandLineW
SetLastError
TlsSetValue
SetErrorMode
GetExitCodeProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RtlLookupFunctionEntry
QueueUserAPC
SetThreadPriority
GetThreadPriority
TlsAlloc
SignalObjectAndWait
SetThreadStackGuarantee
GetConsoleOutputCP
GetModuleHandleW
ExitProcess
Sleep
CreateMemoryResourceNotification
SleepEx
SuspendThread
SetXStateFeaturesMask
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetFileSize
GetEnabledXStateFeatures
RtlRestoreContext
WerRegisterRuntimeExceptionModule
RtlInstallFunctionTableCallback
GetSystemDefaultLCID
GetUserDefaultLCID
RtlUnwind
RtlDeleteFunctionTable
SetConsoleCtrlHandler
FlsAlloc
FlsSetValue
FlsGetValue
GetLocaleInfoEx
GetUserDefaultLocaleName
RtlAddFunctionTable
LoadLibraryExA
CreateFileMappingA
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
VirtualAllocExNuma
GetNumaProcessorNodeEx
VirtualUnlock
GetLargePageMinimum
IsProcessInJob
GetTickCount64
K32GetProcessMemoryInfo
GetLogicalProcessorInformation
QueryPerformanceFrequency
GlobalMemoryStatusEx
QueryPerformanceCounter
RtlVirtualUnwind
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsFree
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetEnvironmentStringsW
GetSystemTime
GetSystemTimeAsFileTime
FreeLibrary
GetCurrentProcessId
GetProcAddress
CreateThread
GetSystemInfo
CloseHandle
GetActiveProcessorGroupCount
GetCurrentThread
GetCurrentProcessorNumberEx
GetLastError
FreeEnvironmentStringsW
GetCurrentThreadId
SetEnvironmentVariableW
TlsGetValue
GetStdHandle
advapi32
EventWrite
LookupPrivilegeValueW
AdjustTokenPrivileges
EventRegister
SetKernelObjectSecurity
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
SetThreadToken
RevertToSelf
OpenThreadToken
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventWriteTransfer
ole32
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoRevokeInitializeSpy
CoGetClassObject
CoGetContextToken
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetMarshalSizeMax
CLSIDFromProgID
CoReleaseMarshalData
CoTaskMemAlloc
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoTaskMemFree
oleaut32
SysStringByteLen
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
GetRecordInfoFromTypeInfo
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
SafeArrayGetLBound
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SetErrorInfo
CreateErrorInfo
SysFreeString
SysStringLen
GetErrorInfo
SysAllocString
SysAllocStringLen
SafeArrayGetDim
VariantChangeType
SafeArrayDestroy
QueryPathOfRegTypeLi
LoadTypeLibEx
SafeArrayGetVartype
SysAllocStringByteLen
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
wcsncmp
wcsnlen
towupper
iswascii
strncmp
towlower
iswspace
wcscat_s
strnlen
isdigit
isalpha
strncat_s
wcsncat_s
strncpy_s
wcscpy_s
wcsncpy_s
wcscmp
iswupper
isspace
strcat_s
_stricmp
_wcsnicmp
strcpy_s
strncpy
strcmp
_strnicmp
_strdup
strtok_s
strlen
_wcsicmp
api-ms-win-crt-heap-l1-1-0
_callnewh
realloc
malloc
free
calloc
api-ms-win-crt-convert-l1-1-0
strtoull
_wcstoui64
wcstoul
strtol
_wtoi
_atoi64
atol
_ltow_s
strtoul
api-ms-win-crt-stdio-l1-1-0
_write
fopen
fwrite
fflush
__stdio_common_vsnwprintf_s
_flushall
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
fputs
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fgets
_wfopen
_fileno
fclose
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_controlfp_s
_seh_filter_dll
terminate
abort
_cexit
_crt_atexit
_initterm
_errno
_invalid_parameter_noinfo
_initterm_e
_execute_onexit_table
api-ms-win-crt-math-l1-1-0
cosh
cosf
cos
ceilf
ceil
atanf
log2
atan2f
atan2
atan
log2f
logf
pow
log10f
asinf
asin
acosf
acos
fma
powf
fmaf
fmod
fmodf
roundf
sin
exp
log
sinf
sinh
sinhf
sqrt
log10
round
expf
tan
modf
atanh
acosh
cbrt
asinh
asinhf
modff
atanhf
cbrtf
acoshf
tanf
tanh
tanhf
coshf
api-ms-win-crt-time-l1-1-0
_time64
CLRJitAttachState
DotNetRuntimeContractDescriptor
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_set_error_writer
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics
g_dacTable
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
86B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
790KB
Virtual Size
790KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
180KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Section
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=33140,
count=11, id=257, version=33140,
count=392, id=1, productName=Unmarked objects,
count=11, id=259, version=35207,
count=17, id=260, version=35207,
count=51, id=261, version=35207,
count=26, id=259, version=35217,
count=449, id=270, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
createdump.exe
- IMPHASH 4af0151186b7939a582eacbb0c85b139
- SHA256 01e4e2a38f85a5d9f90c60bf0638ce1115f8ee21e80c0fb2c10486ff3df98f6a
- MD5 6d54b6e68a415c6778c07a0dfce598ef
- SHA1 e978483ff2ae79f5a51ac6fbf6ffcc8deca1d265
- SHA512 d4baa00b1e5607e5756f191c348dba849ed8a47a1b137f933f9cf077d1ecbe3b9d44fd8033274cb22a75bfad9ee1c4196b67aa626d0b44bd785f77b74e2d4cab
- SSDEEP 768:mzc/aw1lkK5GNunVAmBfnXE8Sl/lBwe3T/zYKxDjyUQU9zZn3:J/avK5l/U8OBwO/0KlyKzV
- TLSH T179634B16DA2A50EBD25E8C78C5534906EE71BC838BE0B6CB6B514ED50D62FD09F3E306
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0f:b6:0f:d6:a2:5a:46:d3:36:28:7c:ce:6d:2d:e4:81:95:3f:3c:10:b7:a7:3b:1e:3e:49:94:6a:94:15:8a:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:02:79:50:74:21:14:7d:b8:a1:00:01:00:00:02:02
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
12160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\debug\createdump\createdump.pdb
kernel32
GetCurrentProcess
OpenProcess
GetTempPathA
GetLastError
CreateFileA
CloseHandle
K32GetModuleBaseNameA
GetProcAddress
LocalFree
FormatMessageA
LoadLibraryExW
SetUnhandledExceptionFilter
TerminateProcess
FreeLibrary
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
QueryPerformanceFrequency
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
UnhandledExceptionFilter
dbghelp
MiniDumpWriteDump
ws2_32
WSAGetLastError
gethostname
WSAStartup
ntdll
NtQueryInformationProcess
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fclose
fflush
__acrt_iob_func
fopen
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
terminate
abort
_initialize_onexit_table
strerror
_invoke_watson
__p___argv
_register_onexit_function
_register_thread_local_exe_atexit_callback
__p___argc
_c_exit
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_errno
_set_app_type
_seh_filter_exe
_cexit
api-ms-win-crt-string-l1-1-0
strcat_s
strcmp
wcsncmp
strcpy_s
strlen
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
free
_set_new_mode
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
388B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35207,
count=12, id=260, version=35207,
count=46, id=261, version=35207,
count=9, id=257, version=33140,
count=100, id=1, productName=Unmarked objects,
count=5, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
hostfxr.dll
- IMPHASH 073409ff6b2095593ea0375e90fc8959
- SHA256 35f9ac5f0493c4d9fa892bde9174253a663468fa2c2b277f90e2d4522ad73edc
- MD5 4405d98040a261a12da8a034e63a6173
- SHA1 7ccc71db8000a8fdd69b8136e87183874fec4471
- SHA512 696682507a23313c11c200bfec32154fc1418fea728da2a3d9914316073d4702c338f52134aa5de61d88dbbac65f1967740e4637ef43b2d651df11f6d8fe2ed3
- SSDEEP 6144:unlXfjNj8mrXyLKEEfFn+GosECbMiycfhJAqg+FCK5ZoDNsgHewQ/U62AU8sunxB:uzyWYbafzAa4Up1xp7
- TLSH T176841916D3E8057CF0B79678DAB69901EB727C494BB0E5DF139088A51E73BD08A39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:49:ff:ab:77:b7:da:d7:a9:c1:bd:65:4c:cb:bf:96:64:8a:e2:cd:fb:5c:a6:02:81:f9:ec:a6:09:f2:7a:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ab:af:3a:c8:82:4e:48:55:5d:00:00:00:00:04:ab
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:651A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:15:18:03:d3:81:07:26:7c:53:00:01:00:00:02:15
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
233808
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\fxr\standalone\hostfxr.pdb
advapi32
RegOpenKeyExW
RegCloseKey
RegGetValueW
kernel32
UnmapViewOfFile
GetFileSizeEx
FindFirstFileExW
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetFinalPathNameByHandleW
GetModuleFileNameW
GetEnvironmentVariableW
FindClose
CreateFileW
GetFileAttributesW
FreeEnvironmentStringsW
MultiByteToWideChar
GetConsoleMode
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
WriteConsoleW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
CreateFileMappingW
MapViewOfFile
GetEnvironmentStringsW
LoadLibraryExW
OutputDebugStringW
GetCurrentProcessId
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
WakeAllConditionVariable
SleepConditionVariableSRW
SwitchToThread
QueryPerformanceCounter
GetSystemTimeAsFileTime
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_register_onexit_function
_initterm
terminate
_wcserror_s
_errno
_execute_onexit_table
_cexit
_initialize_onexit_table
_crt_atexit
_invoke_watson
abort
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
realloc
malloc
free
api-ms-win-crt-string-l1-1-0
strlen
_wcsicmp
_wcsnicmp
wcsncmp
tolower
strcpy_s
strcmp
api-ms-win-crt-stdio-l1-1-0
setvbuf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
_wfsopen
__acrt_iob_func
fputwc
__stdio_common_vfwprintf
fflush
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
api-ms-win-crt-locale-l1-1-0
_free_locale
_create_locale
api-ms-win-crt-math-l1-1-0
ceilf
hostfxr_close
hostfxr_get_available_sdks
hostfxr_get_dotnet_environment_info
hostfxr_get_native_search_directories
hostfxr_get_runtime_delegate
hostfxr_get_runtime_properties
hostfxr_get_runtime_property_value
hostfxr_initialize_for_dotnet_command_line
hostfxr_initialize_for_runtime_config
hostfxr_main
hostfxr_main_bundle_startupinfo
hostfxr_main_startupinfo
hostfxr_resolve_frameworks_for_runtime_config
hostfxr_resolve_sdk
hostfxr_resolve_sdk2
hostfxr_run_app
hostfxr_set_error_writer
hostfxr_set_runtime_property_value
Name
.text
Size
252KB
Virtual Size
251KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
93KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=11, id=260, version=35207,
count=52, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33140,
count=154, id=1, productName=Unmarked objects,
count=27, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
hostpolicy.dll
- IMPHASH e187d74e6e8371418443482d3996db32
- SHA256 8aa2e62ed8ea5473004926743ef7f4ce4a17401037b4a11868d9b9385a781b6a
- MD5 4a153296070a21d6468d73847f848710
- SHA1 dcbf56f6eca3f543f0621fc43cbdb12abb1ae26a
- SHA512 0d79fcc722fb21be1cc5c892815ccb5f9c7b82e60b6e265aa8f7d2b3a6dae572f26409bb0e81c65f1252f0d9a83b825c7871ad9954ac5c2fe198955bb2a25182
- SSDEEP 6144:h9e9EvPeP4w9x9cI0HUsBCSwHaB5bVOLikGAQaNa/4lSbZAnHvuOnwVKIAH5c9uq:hUEePPSRRsSwUfmuxkfqk1tY
- TLSH T16B842A16E6EC007CF0B7D679CAB28901EB727C4947B195DF139099AA1E73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:57:dc:45:4b:7a:d5:88:8e:35:55:8f:c1:f4:35:a5:07:bc:9f:39:2a:fa:6b:b8:42:05:18:49:18:7e:19:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0a:47:b2:14:d9:ee:b2:b3:0f:00:01:00:00:02:0a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
234208
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\win-x64.Release\corehost\hostpolicy\standalone\hostpolicy.pdb
advapi32
RegOpenKeyExW
RegCloseKey
RegGetValueW
kernel32
CreateDirectoryW
RemoveDirectoryW
Sleep
GetLastError
GetCurrentProcessId
UnmapViewOfFile
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
WriteConsoleW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
LoadLibraryExW
OutputDebugStringW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetStringTypeW
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
api-ms-win-crt-runtime-l1-1-0
_wcserror_s
_configure_narrow_argv
_cexit
_errno
terminate
_beginthreadex
_invoke_watson
_initialize_narrow_environment
abort
_initterm_e
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm
_seh_filter_dll
api-ms-win-crt-string-l1-1-0
_wcsicmp
strcpy_s
strlen
tolower
_wcsnicmp
_wcsdup
wcsnlen
wcsncmp
strcmp
api-ms-win-crt-heap-l1-1-0
free
_callnewh
calloc
realloc
malloc
api-ms-win-crt-stdio-l1-1-0
fputwc
__acrt_iob_func
fflush
setvbuf
__stdio_common_vsnwprintf_s
__stdio_common_vfwprintf
fwrite
_wfsopen
fclose
__stdio_common_vswprintf
api-ms-win-crt-filesystem-l1-1-0
_wrename
_wremove
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_time64
wcsftime
_gmtime64_s
api-ms-win-crt-locale-l1-1-0
_lock_locales
setlocale
___lc_locale_name_func
_free_locale
___lc_codepage_func
___mb_cur_max_func
_create_locale
__pctype_func
_unlock_locales
api-ms-win-crt-math-l1-1-0
ceilf
corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
Name
.text
Size
252KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=11, id=260, version=35207,
count=83, id=261, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33140,
count=194, id=1, productName=Unmarked objects,
count=30, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
libHarfBuzzSharp.dll
- IMPHASH ec7fff8f58c3f1ed14aaf7c661442137
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ac:33:69:76:3a:72:0e:65:e9:8b:6c:f3:ca:98:68:a6:07:d5:66:2a:a9:a9:02:97:0f:9a:ca:10:bc:c1:06:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 25, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:551A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:01:d1:45:59:98:10:cc:42:4f:00:01:00:00:02:01
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
1349220
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\a\_work\1\s\native\windows\libHarfBuzzSharp\bin\x64\Release\libHarfBuzzSharp.pdb
kernel32
CreateFileW
UnmapViewOfFile
MultiByteToWideChar
CloseHandle
GetFileSize
CreateFileMappingW
MapViewOfFile
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
ReadFile
GetConsoleMode
ReadConsoleW
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
SetStdHandle
HeapSize
SetEndOfFile
WriteConsoleW
hb_aat_layout_feature_type_get_name_id
hb_aat_layout_feature_type_get_selector_infos
hb_aat_layout_get_feature_types
hb_aat_layout_has_positioning
hb_aat_layout_has_substitution
hb_aat_layout_has_tracking
hb_blob_copy_writable_or_fail
hb_blob_create
hb_blob_create_from_file
hb_blob_create_from_file_or_fail
hb_blob_create_or_fail
hb_blob_create_sub_blob
hb_blob_destroy
hb_blob_get_data
hb_blob_get_data_writable
hb_blob_get_empty
hb_blob_get_length
hb_blob_get_user_data
hb_blob_is_immutable
hb_blob_make_immutable
hb_blob_reference
hb_blob_set_user_data
hb_buffer_add
hb_buffer_add_codepoints
hb_buffer_add_latin1
hb_buffer_add_utf16
hb_buffer_add_utf32
hb_buffer_add_utf8
hb_buffer_allocation_successful
hb_buffer_append
hb_buffer_clear_contents
hb_buffer_create
hb_buffer_create_similar
hb_buffer_deserialize_glyphs
hb_buffer_deserialize_unicode
hb_buffer_destroy
hb_buffer_diff
hb_buffer_get_cluster_level
hb_buffer_get_content_type
hb_buffer_get_direction
hb_buffer_get_empty
hb_buffer_get_flags
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_buffer_get_invisible_glyph
hb_buffer_get_language
hb_buffer_get_length
hb_buffer_get_not_found_glyph
hb_buffer_get_replacement_codepoint
hb_buffer_get_script
hb_buffer_get_segment_properties
hb_buffer_get_unicode_funcs
hb_buffer_get_user_data
hb_buffer_guess_segment_properties
hb_buffer_has_positions
hb_buffer_normalize_glyphs
hb_buffer_pre_allocate
hb_buffer_reference
hb_buffer_reset
hb_buffer_reverse
hb_buffer_reverse_clusters
hb_buffer_reverse_range
hb_buffer_serialize
hb_buffer_serialize_format_from_string
hb_buffer_serialize_format_to_string
hb_buffer_serialize_glyphs
hb_buffer_serialize_list_formats
hb_buffer_serialize_unicode
hb_buffer_set_cluster_level
hb_buffer_set_content_type
hb_buffer_set_direction
hb_buffer_set_flags
hb_buffer_set_invisible_glyph
hb_buffer_set_language
hb_buffer_set_length
hb_buffer_set_message_func
hb_buffer_set_not_found_glyph
hb_buffer_set_replacement_codepoint
hb_buffer_set_script
hb_buffer_set_segment_properties
hb_buffer_set_unicode_funcs
hb_buffer_set_user_data
hb_color_get_alpha
hb_color_get_blue
hb_color_get_green
hb_color_get_red
hb_color_line_get_color_stops
hb_color_line_get_extend
hb_direction_from_string
hb_direction_to_string
hb_draw_close_path
hb_draw_cubic_to
hb_draw_funcs_create
hb_draw_funcs_destroy
hb_draw_funcs_get_empty
hb_draw_funcs_get_user_data
hb_draw_funcs_is_immutable
hb_draw_funcs_make_immutable
hb_draw_funcs_reference
hb_draw_funcs_set_close_path_func
hb_draw_funcs_set_cubic_to_func
hb_draw_funcs_set_line_to_func
hb_draw_funcs_set_move_to_func
hb_draw_funcs_set_quadratic_to_func
hb_draw_funcs_set_user_data
hb_draw_line_to
hb_draw_move_to
hb_draw_quadratic_to
hb_face_builder_add_table
hb_face_builder_create
hb_face_builder_sort_tables
hb_face_collect_nominal_glyph_mapping
hb_face_collect_unicodes
hb_face_collect_variation_selectors
hb_face_collect_variation_unicodes
hb_face_count
hb_face_create
hb_face_create_for_tables
hb_face_destroy
hb_face_get_empty
hb_face_get_glyph_count
hb_face_get_index
hb_face_get_table_tags
hb_face_get_upem
hb_face_get_user_data
hb_face_is_immutable
hb_face_make_immutable
hb_face_reference
hb_face_reference_blob
hb_face_reference_table
hb_face_set_glyph_count
hb_face_set_index
hb_face_set_upem
hb_face_set_user_data
hb_feature_from_string
hb_feature_to_string
hb_font_add_glyph_origin_for_direction
hb_font_changed
hb_font_create
hb_font_create_sub_font
hb_font_destroy
hb_font_draw_glyph
hb_font_funcs_create
hb_font_funcs_destroy
hb_font_funcs_get_empty
hb_font_funcs_get_user_data
hb_font_funcs_is_immutable
hb_font_funcs_make_immutable
hb_font_funcs_reference
hb_font_funcs_set_draw_glyph_func
hb_font_funcs_set_font_h_extents_func
hb_font_funcs_set_font_v_extents_func
hb_font_funcs_set_glyph_contour_point_func
hb_font_funcs_set_glyph_extents_func
hb_font_funcs_set_glyph_from_name_func
hb_font_funcs_set_glyph_func
hb_font_funcs_set_glyph_h_advance_func
hb_font_funcs_set_glyph_h_advances_func
hb_font_funcs_set_glyph_h_kerning_func
hb_font_funcs_set_glyph_h_origin_func
hb_font_funcs_set_glyph_name_func
hb_font_funcs_set_glyph_shape_func
hb_font_funcs_set_glyph_v_advance_func
hb_font_funcs_set_glyph_v_advances_func
hb_font_funcs_set_glyph_v_kerning_func
hb_font_funcs_set_glyph_v_origin_func
hb_font_funcs_set_nominal_glyph_func
hb_font_funcs_set_nominal_glyphs_func
hb_font_funcs_set_paint_glyph_func
hb_font_funcs_set_user_data
hb_font_funcs_set_variation_glyph_func
hb_font_get_empty
hb_font_get_extents_for_direction
hb_font_get_face
hb_font_get_glyph
hb_font_get_glyph_advance_for_direction
hb_font_get_glyph_advances_for_direction
hb_font_get_glyph_contour_point
hb_font_get_glyph_contour_point_for_origin
hb_font_get_glyph_extents
hb_font_get_glyph_extents_for_origin
hb_font_get_glyph_from_name
hb_font_get_glyph_h_advance
hb_font_get_glyph_h_advances
hb_font_get_glyph_h_kerning
hb_font_get_glyph_h_origin
hb_font_get_glyph_kerning_for_direction
hb_font_get_glyph_name
hb_font_get_glyph_origin_for_direction
hb_font_get_glyph_shape
hb_font_get_glyph_v_advance
hb_font_get_glyph_v_advances
hb_font_get_glyph_v_kerning
hb_font_get_glyph_v_origin
hb_font_get_h_extents
hb_font_get_nominal_glyph
hb_font_get_nominal_glyphs
hb_font_get_parent
hb_font_get_ppem
hb_font_get_ptem
hb_font_get_scale
hb_font_get_serial
hb_font_get_synthetic_bold
hb_font_get_synthetic_slant
hb_font_get_user_data
hb_font_get_v_extents
hb_font_get_var_coords_design
hb_font_get_var_coords_normalized
hb_font_get_var_named_instance
hb_font_get_variation_glyph
hb_font_glyph_from_string
hb_font_glyph_to_string
hb_font_is_immutable
hb_font_make_immutable
hb_font_paint_glyph
hb_font_reference
hb_font_set_face
hb_font_set_funcs
hb_font_set_funcs_data
hb_font_set_parent
hb_font_set_ppem
hb_font_set_ptem
hb_font_set_scale
hb_font_set_synthetic_bold
hb_font_set_synthetic_slant
hb_font_set_user_data
hb_font_set_var_coords_design
hb_font_set_var_coords_normalized
hb_font_set_var_named_instance
hb_font_set_variation
hb_font_set_variations
hb_font_subtract_glyph_origin_for_direction
hb_glyph_info_get_glyph_flags
hb_language_from_string
hb_language_get_default
hb_language_matches
hb_language_to_string
hb_map_allocation_successful
hb_map_clear
hb_map_copy
hb_map_create
hb_map_del
hb_map_destroy
hb_map_get
hb_map_get_empty
hb_map_get_population
hb_map_get_user_data
hb_map_has
hb_map_hash
hb_map_is_empty
hb_map_is_equal
hb_map_keys
hb_map_next
hb_map_reference
hb_map_set
hb_map_set_user_data
hb_map_update
hb_map_values
hb_ot_color_glyph_get_layers
hb_ot_color_glyph_has_paint
hb_ot_color_glyph_reference_png
hb_ot_color_glyph_reference_svg
hb_ot_color_has_layers
hb_ot_color_has_paint
hb_ot_color_has_palettes
hb_ot_color_has_png
hb_ot_color_has_svg
hb_ot_color_palette_color_get_name_id
hb_ot_color_palette_get_colors
hb_ot_color_palette_get_count
hb_ot_color_palette_get_flags
hb_ot_color_palette_get_name_id
hb_ot_font_set_funcs
hb_ot_layout_collect_features
hb_ot_layout_collect_features_map
hb_ot_layout_collect_lookups
hb_ot_layout_feature_get_characters
hb_ot_layout_feature_get_lookups
hb_ot_layout_feature_get_name_ids
hb_ot_layout_feature_with_variations_get_lookups
hb_ot_layout_get_attach_points
hb_ot_layout_get_baseline
hb_ot_layout_get_baseline2
hb_ot_layout_get_baseline_with_fallback
hb_ot_layout_get_baseline_with_fallback2
hb_ot_layout_get_font_extents
hb_ot_layout_get_font_extents2
hb_ot_layout_get_glyph_class
hb_ot_layout_get_glyphs_in_class
hb_ot_layout_get_horizontal_baseline_tag_for_script
hb_ot_layout_get_ligature_carets
hb_ot_layout_get_size_params
hb_ot_layout_has_glyph_classes
hb_ot_layout_has_positioning
hb_ot_layout_has_substitution
hb_ot_layout_language_find_feature
hb_ot_layout_language_get_feature_indexes
hb_ot_layout_language_get_feature_tags
hb_ot_layout_language_get_required_feature
hb_ot_layout_language_get_required_feature_index
hb_ot_layout_lookup_collect_glyphs
hb_ot_layout_lookup_get_glyph_alternates
hb_ot_layout_lookup_get_optical_bound
hb_ot_layout_lookup_substitute_closure
hb_ot_layout_lookup_would_substitute
hb_ot_layout_lookups_substitute_closure
hb_ot_layout_script_find_language
hb_ot_layout_script_get_language_tags
hb_ot_layout_script_select_language
hb_ot_layout_script_select_language2
hb_ot_layout_table_choose_script
hb_ot_layout_table_find_feature_variations
hb_ot_layout_table_find_script
hb_ot_layout_table_get_feature_tags
hb_ot_layout_table_get_lookup_count
hb_ot_layout_table_get_script_tags
hb_ot_layout_table_select_script
hb_ot_math_get_constant
hb_ot_math_get_glyph_assembly
hb_ot_math_get_glyph_italics_correction
hb_ot_math_get_glyph_kerning
hb_ot_math_get_glyph_kernings
hb_ot_math_get_glyph_top_accent_attachment
hb_ot_math_get_glyph_variants
hb_ot_math_get_min_connector_overlap
hb_ot_math_has_data
hb_ot_math_is_glyph_extended_shape
hb_ot_meta_get_entry_tags
hb_ot_meta_reference_entry
hb_ot_metrics_get_position
hb_ot_metrics_get_position_with_fallback
hb_ot_metrics_get_variation
hb_ot_metrics_get_x_variation
hb_ot_metrics_get_y_variation
hb_ot_name_get_utf16
hb_ot_name_get_utf32
hb_ot_name_get_utf8
hb_ot_name_list_names
hb_ot_shape_glyphs_closure
hb_ot_shape_plan_collect_lookups
hb_ot_tag_from_language
hb_ot_tag_to_language
hb_ot_tag_to_script
hb_ot_tags_from_script
hb_ot_tags_from_script_and_language
hb_ot_tags_to_script_and_language
hb_ot_var_find_axis
hb_ot_var_find_axis_info
hb_ot_var_get_axes
hb_ot_var_get_axis_count
hb_ot_var_get_axis_infos
hb_ot_var_get_named_instance_count
hb_ot_var_has_data
hb_ot_var_named_instance_get_design_coords
hb_ot_var_named_instance_get_postscript_name_id
hb_ot_var_named_instance_get_subfamily_name_id
hb_ot_var_normalize_coords
hb_ot_var_normalize_variations
hb_paint_color
hb_paint_color_glyph
hb_paint_custom_palette_color
hb_paint_funcs_create
hb_paint_funcs_destroy
hb_paint_funcs_get_empty
hb_paint_funcs_get_user_data
hb_paint_funcs_is_immutable
hb_paint_funcs_make_immutable
hb_paint_funcs_reference
hb_paint_funcs_set_color_func
hb_paint_funcs_set_color_glyph_func
hb_paint_funcs_set_custom_palette_color_func
hb_paint_funcs_set_image_func
hb_paint_funcs_set_linear_gradient_func
hb_paint_funcs_set_pop_clip_func
hb_paint_funcs_set_pop_group_func
hb_paint_funcs_set_pop_transform_func
hb_paint_funcs_set_push_clip_glyph_func
hb_paint_funcs_set_push_clip_rectangle_func
hb_paint_funcs_set_push_group_func
hb_paint_funcs_set_push_transform_func
hb_paint_funcs_set_radial_gradient_func
hb_paint_funcs_set_sweep_gradient_func
hb_paint_funcs_set_user_data
hb_paint_image
hb_paint_linear_gradient
hb_paint_pop_clip
hb_paint_pop_group
hb_paint_pop_transform
hb_paint_push_clip_glyph
hb_paint_push_clip_rectangle
hb_paint_push_group
hb_paint_push_transform
hb_paint_radial_gradient
hb_paint_sweep_gradient
hb_script_from_iso15924_tag
hb_script_from_string
hb_script_get_horizontal_direction
hb_script_to_iso15924_tag
hb_segment_properties_equal
hb_segment_properties_hash
hb_segment_properties_overlay
hb_set_add
hb_set_add_range
hb_set_add_sorted_array
hb_set_allocation_successful
hb_set_clear
hb_set_copy
hb_set_create
hb_set_del
hb_set_del_range
hb_set_destroy
hb_set_get_empty
hb_set_get_max
hb_set_get_min
hb_set_get_population
hb_set_get_user_data
hb_set_has
hb_set_hash
hb_set_intersect
hb_set_invert
hb_set_is_empty
hb_set_is_equal
hb_set_is_inverted
hb_set_is_subset
hb_set_next
hb_set_next_many
hb_set_next_range
hb_set_previous
hb_set_previous_range
hb_set_reference
hb_set_set
hb_set_set_user_data
hb_set_subtract
hb_set_symmetric_difference
hb_set_union
hb_shape
hb_shape_full
hb_shape_list_shapers
hb_shape_plan_create
hb_shape_plan_create2
hb_shape_plan_create_cached
hb_shape_plan_create_cached2
hb_shape_plan_destroy
hb_shape_plan_execute
hb_shape_plan_get_empty
hb_shape_plan_get_shaper
hb_shape_plan_get_user_data
hb_shape_plan_reference
hb_shape_plan_set_user_data
hb_style_get_value
hb_subset_input_create_or_fail
hb_subset_input_destroy
hb_subset_input_get_flags
hb_subset_input_get_user_data
hb_subset_input_glyph_set
hb_subset_input_keep_everything
hb_subset_input_old_to_new_glyph_mapping
hb_subset_input_pin_all_axes_to_default
hb_subset_input_pin_axis_location
hb_subset_input_pin_axis_to_default
hb_subset_input_reference
hb_subset_input_set
hb_subset_input_set_flags
hb_subset_input_set_user_data
hb_subset_input_unicode_set
hb_subset_or_fail
hb_subset_plan_create_or_fail
hb_subset_plan_destroy
hb_subset_plan_execute_or_fail
hb_subset_plan_get_user_data
hb_subset_plan_new_to_old_glyph_mapping
hb_subset_plan_old_to_new_glyph_mapping
hb_subset_plan_reference
hb_subset_plan_set_user_data
hb_subset_plan_unicode_to_old_glyph_mapping
hb_subset_preprocess
hb_tag_from_string
hb_tag_to_string
hb_unicode_combining_class
hb_unicode_compose
hb_unicode_decompose
hb_unicode_decompose_compatibility
hb_unicode_eastasian_width
hb_unicode_funcs_create
hb_unicode_funcs_destroy
hb_unicode_funcs_get_default
hb_unicode_funcs_get_empty
hb_unicode_funcs_get_parent
hb_unicode_funcs_get_user_data
hb_unicode_funcs_is_immutable
hb_unicode_funcs_make_immutable
hb_unicode_funcs_reference
hb_unicode_funcs_set_combining_class_func
hb_unicode_funcs_set_compose_func
hb_unicode_funcs_set_decompose_compatibility_func
hb_unicode_funcs_set_decompose_func
hb_unicode_funcs_set_eastasian_width_func
hb_unicode_funcs_set_general_category_func
hb_unicode_funcs_set_mirroring_func
hb_unicode_funcs_set_script_func
hb_unicode_funcs_set_user_data
hb_unicode_general_category
hb_unicode_mirroring
hb_unicode_script
hb_variation_from_string
hb_variation_to_string
hb_version
hb_version_atleast
hb_version_string
Name
.text
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
261KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=260, version=27412,
count=15, id=259, version=27412,
count=152, id=261, version=27412,
count=15, id=260, version=30034,
count=12, id=259, version=30034,
count=42, id=261, version=30034,
count=3, id=257, version=27412,
count=126, id=1, productName=Unmarked objects,
count=1, id=265, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
libSkiaSharp.dll
- IMPHASH ffe661c0b06e35c1f2a6559c922e2926
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:88:e6:1a:4a:f1:91:24:ed:17:8a:d3:e2:7d:9b:d4:2b:52:e8:8a:0e:0b:2c:fd:d7:5c:63:8e:86:2b:48:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 7, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:03:bd:d5:95:5d:0f:3b:18:ad:00:00:00:00:04:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
7235484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\externals\skia\out\windows\x64\libSkiaSharp.pdb
ole32
CoCreateGuid
CoCreateInstance
fontsub
CreateFontPackage
user32
SystemParametersInfoW
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
CloseHandle
CompareStringW
CreateEventW
CreateFileMappingA
CreateFileW
CreateSemaphoreA
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExA
FindNextFileA
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTime
GetSystemTimeAsFileTime
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
KeepSkiaCSymbols
gr_backendrendertarget_delete
gr_backendrendertarget_get_backend
gr_backendrendertarget_get_gl_framebufferinfo
gr_backendrendertarget_get_height
gr_backendrendertarget_get_samples
gr_backendrendertarget_get_stencils
gr_backendrendertarget_get_width
gr_backendrendertarget_is_valid
gr_backendrendertarget_new_gl
gr_backendrendertarget_new_metal
gr_backendrendertarget_new_vulkan
gr_backendtexture_delete
gr_backendtexture_get_backend
gr_backendtexture_get_gl_textureinfo
gr_backendtexture_get_height
gr_backendtexture_get_width
gr_backendtexture_has_mipmaps
gr_backendtexture_is_valid
gr_backendtexture_new_gl
gr_backendtexture_new_metal
gr_backendtexture_new_vulkan
gr_direct_context_abandon_context
gr_direct_context_dump_memory_statistics
gr_direct_context_flush
gr_direct_context_flush_and_submit
gr_direct_context_free_gpu_resources
gr_direct_context_get_resource_cache_limit
gr_direct_context_get_resource_cache_usage
gr_direct_context_is_abandoned
gr_direct_context_make_gl
gr_direct_context_make_gl_with_options
gr_direct_context_make_metal
gr_direct_context_make_metal_with_options
gr_direct_context_make_vulkan
gr_direct_context_make_vulkan_with_options
gr_direct_context_perform_deferred_cleanup
gr_direct_context_purge_unlocked_resources
gr_direct_context_purge_unlocked_resources_bytes
gr_direct_context_release_resources_and_abandon_context
gr_direct_context_reset_context
gr_direct_context_set_resource_cache_limit
gr_direct_context_submit
gr_glinterface_assemble_gl_interface
gr_glinterface_assemble_gles_interface
gr_glinterface_assemble_interface
gr_glinterface_assemble_webgl_interface
gr_glinterface_create_native_interface
gr_glinterface_has_extension
gr_glinterface_unref
gr_glinterface_validate
gr_recording_context_get_backend
gr_recording_context_get_max_surface_sample_count_for_color_type
gr_recording_context_unref
gr_vk_extensions_delete
gr_vk_extensions_has_extension
gr_vk_extensions_init
gr_vk_extensions_new
sk_3dview_apply_to_canvas
sk_3dview_destroy
sk_3dview_dot_with_normal
sk_3dview_get_matrix
sk_3dview_new
sk_3dview_restore
sk_3dview_rotate_x_degrees
sk_3dview_rotate_x_radians
sk_3dview_rotate_y_degrees
sk_3dview_rotate_y_radians
sk_3dview_rotate_z_degrees
sk_3dview_rotate_z_radians
sk_3dview_save
sk_3dview_translate
sk_bitmap_destructor
sk_bitmap_erase
sk_bitmap_erase_rect
sk_bitmap_extract_alpha
sk_bitmap_extract_subset
sk_bitmap_get_addr
sk_bitmap_get_addr_16
sk_bitmap_get_addr_32
sk_bitmap_get_addr_8
sk_bitmap_get_byte_count
sk_bitmap_get_info
sk_bitmap_get_pixel_color
sk_bitmap_get_pixel_colors
sk_bitmap_get_pixels
sk_bitmap_get_row_bytes
sk_bitmap_install_mask_pixels
sk_bitmap_install_pixels
sk_bitmap_install_pixels_with_pixmap
sk_bitmap_is_immutable
sk_bitmap_is_null
sk_bitmap_make_shader
sk_bitmap_new
sk_bitmap_notify_pixels_changed
sk_bitmap_peek_pixels
sk_bitmap_ready_to_draw
sk_bitmap_reset
sk_bitmap_set_immutable
sk_bitmap_set_pixels
sk_bitmap_swap
sk_bitmap_try_alloc_pixels
sk_bitmap_try_alloc_pixels_with_flags
sk_canvas_clear
sk_canvas_clear_color4f
sk_canvas_clip_path_with_operation
sk_canvas_clip_rect_with_operation
sk_canvas_clip_region
sk_canvas_clip_rrect_with_operation
sk_canvas_concat
sk_canvas_destroy
sk_canvas_discard
sk_canvas_draw_annotation
sk_canvas_draw_arc
sk_canvas_draw_atlas
sk_canvas_draw_circle
sk_canvas_draw_color
sk_canvas_draw_color4f
sk_canvas_draw_drawable
sk_canvas_draw_drrect
sk_canvas_draw_image
sk_canvas_draw_image_lattice
sk_canvas_draw_image_nine
sk_canvas_draw_image_rect
sk_canvas_draw_line
sk_canvas_draw_link_destination_annotation
sk_canvas_draw_named_destination_annotation
sk_canvas_draw_oval
sk_canvas_draw_paint
sk_canvas_draw_patch
sk_canvas_draw_path
sk_canvas_draw_picture
sk_canvas_draw_point
sk_canvas_draw_points
sk_canvas_draw_rect
sk_canvas_draw_region
sk_canvas_draw_round_rect
sk_canvas_draw_rrect
sk_canvas_draw_simple_text
sk_canvas_draw_text_blob
sk_canvas_draw_url_annotation
sk_canvas_draw_vertices
sk_canvas_flush
sk_canvas_get_device_clip_bounds
sk_canvas_get_local_clip_bounds
sk_canvas_get_save_count
sk_canvas_get_total_matrix
sk_canvas_is_clip_empty
sk_canvas_is_clip_rect
sk_canvas_new_from_bitmap
sk_canvas_quick_reject
sk_canvas_reset_matrix
sk_canvas_restore
sk_canvas_restore_to_count
sk_canvas_rotate_degrees
sk_canvas_rotate_radians
sk_canvas_save
sk_canvas_save_layer
sk_canvas_scale
sk_canvas_set_matrix
sk_canvas_skew
sk_canvas_translate
sk_codec_destroy
sk_codec_get_encoded_format
sk_codec_get_frame_count
sk_codec_get_frame_info
sk_codec_get_frame_info_for_index
sk_codec_get_info
sk_codec_get_origin
sk_codec_get_pixels
sk_codec_get_repetition_count
sk_codec_get_scaled_dimensions
sk_codec_get_scanline_order
sk_codec_get_scanlines
sk_codec_get_valid_subset
sk_codec_incremental_decode
sk_codec_min_buffered_bytes_needed
sk_codec_new_from_data
sk_codec_new_from_stream
sk_codec_next_scanline
sk_codec_output_scanline
sk_codec_skip_scanlines
sk_codec_start_incremental_decode
sk_codec_start_scanline_decode
sk_color4f_from_color
sk_color4f_to_color
sk_color_get_bit_shift
sk_color_premultiply
sk_color_premultiply_array
sk_color_unpremultiply
sk_color_unpremultiply_array
sk_colorfilter_new_color_matrix
sk_colorfilter_new_compose
sk_colorfilter_new_high_contrast
sk_colorfilter_new_lighting
sk_colorfilter_new_luma_color
sk_colorfilter_new_mode
sk_colorfilter_new_table
sk_colorfilter_new_table_argb
sk_colorfilter_unref
sk_colorspace_equals
sk_colorspace_gamma_close_to_srgb
sk_colorspace_gamma_is_linear
sk_colorspace_icc_profile_delete
sk_colorspace_icc_profile_get_buffer
sk_colorspace_icc_profile_get_to_xyzd50
sk_colorspace_icc_profile_new
sk_colorspace_icc_profile_parse
sk_colorspace_is_numerical_transfer_fn
sk_colorspace_is_srgb
sk_colorspace_make_linear_gamma
sk_colorspace_make_srgb_gamma
sk_colorspace_new_icc
sk_colorspace_new_rgb
sk_colorspace_new_srgb
sk_colorspace_new_srgb_linear
sk_colorspace_primaries_to_xyzd50
sk_colorspace_ref
sk_colorspace_to_profile
sk_colorspace_to_xyzd50
sk_colorspace_transfer_fn_eval
sk_colorspace_transfer_fn_invert
sk_colorspace_transfer_fn_named_2dot2
sk_colorspace_transfer_fn_named_hlg
sk_colorspace_transfer_fn_named_linear
sk_colorspace_transfer_fn_named_pq
sk_colorspace_transfer_fn_named_rec2020
sk_colorspace_transfer_fn_named_srgb
sk_colorspace_unref
sk_colorspace_xyz_concat
sk_colorspace_xyz_invert
sk_colorspace_xyz_named_adobe_rgb
sk_colorspace_xyz_named_display_p3
sk_colorspace_xyz_named_rec2020
sk_colorspace_xyz_named_srgb
sk_colorspace_xyz_named_xyz
sk_colortable_count
sk_colortable_new
sk_colortable_read_colors
sk_colortable_unref
sk_colortype_get_default_8888
sk_compatpaint_clone
sk_compatpaint_delete
sk_compatpaint_get_font
sk_compatpaint_get_text_align
sk_compatpaint_get_text_encoding
sk_compatpaint_make_font
sk_compatpaint_new
sk_compatpaint_new_with_font
sk_compatpaint_reset
sk_compatpaint_set_text_align
sk_compatpaint_set_text_encoding
sk_data_get_bytes
sk_data_get_data
sk_data_get_size
sk_data_new_empty
sk_data_new_from_file
sk_data_new_from_stream
sk_data_new_subset
sk_data_new_uninitialized
sk_data_new_with_copy
sk_data_new_with_proc
sk_data_ref
sk_data_unref
sk_document_abort
sk_document_begin_page
sk_document_close
sk_document_create_pdf_from_stream
sk_document_create_pdf_from_stream_with_metadata
sk_document_create_xps_from_stream
sk_document_end_page
sk_document_unref
sk_drawable_draw
sk_drawable_get_bounds
sk_drawable_get_generation_id
sk_drawable_new_picture_snapshot
sk_drawable_notify_drawing_changed
sk_drawable_unref
sk_dynamicmemorywstream_copy_to
sk_dynamicmemorywstream_destroy
sk_dynamicmemorywstream_detach_as_data
sk_dynamicmemorywstream_detach_as_stream
sk_dynamicmemorywstream_new
sk_dynamicmemorywstream_write_to_stream
sk_filestream_destroy
sk_filestream_is_valid
sk_filestream_new
sk_filewstream_destroy
sk_filewstream_is_valid
sk_filewstream_new
sk_font_break_text
sk_font_delete
sk_font_get_edging
sk_font_get_hinting
sk_font_get_metrics
sk_font_get_path
sk_font_get_paths
sk_font_get_pos
sk_font_get_scale_x
sk_font_get_size
sk_font_get_skew_x
sk_font_get_typeface
sk_font_get_widths_bounds
sk_font_get_xpos
sk_font_is_baseline_snap
sk_font_is_embedded_bitmaps
sk_font_is_embolden
sk_font_is_force_auto_hinting
sk_font_is_linear_metrics
sk_font_is_subpixel
sk_font_measure_text
sk_font_measure_text_no_return
sk_font_new
sk_font_new_with_values
sk_font_set_baseline_snap
sk_font_set_edging
sk_font_set_embedded_bitmaps
sk_font_set_embolden
sk_font_set_force_auto_hinting
sk_font_set_hinting
sk_font_set_linear_metrics
sk_font_set_scale_x
sk_font_set_size
sk_font_set_skew_x
sk_font_set_subpixel
sk_font_set_typeface
sk_font_text_to_glyphs
sk_font_unichar_to_glyph
sk_font_unichars_to_glyphs
sk_fontmgr_count_families
sk_fontmgr_create_default
sk_fontmgr_create_from_data
sk_fontmgr_create_from_file
sk_fontmgr_create_from_stream
sk_fontmgr_create_styleset
sk_fontmgr_get_family_name
sk_fontmgr_match_face_style
sk_fontmgr_match_family
sk_fontmgr_match_family_style
sk_fontmgr_match_family_style_character
sk_fontmgr_ref_default
sk_fontmgr_unref
sk_fontstyle_delete
sk_fontstyle_get_slant
sk_fontstyle_get_weight
sk_fontstyle_get_width
sk_fontstyle_new
sk_fontstyleset_create_empty
sk_fontstyleset_create_typeface
sk_fontstyleset_get_count
sk_fontstyleset_get_style
sk_fontstyleset_match_style
sk_fontstyleset_unref
sk_graphics_dump_memory_statistics
sk_graphics_get_font_cache_count_limit
sk_graphics_get_font_cache_count_used
sk_graphics_get_font_cache_limit
sk_graphics_get_font_cache_point_size_limit
sk_graphics_get_font_cache_used
sk_graphics_get_resource_cache_single_allocation_byte_limit
sk_graphics_get_resource_cache_total_byte_limit
sk_graphics_get_resource_cache_total_bytes_used
sk_graphics_init
sk_graphics_purge_all_caches
sk_graphics_purge_font_cache
sk_graphics_purge_resource_cache
sk_graphics_set_font_cache_count_limit
sk_graphics_set_font_cache_limit
sk_graphics_set_font_cache_point_size_limit
sk_graphics_set_resource_cache_single_allocation_byte_limit
sk_graphics_set_resource_cache_total_byte_limit
sk_image_encode
sk_image_encode_specific
sk_image_get_alpha_type
sk_image_get_color_type
sk_image_get_colorspace
sk_image_get_height
sk_image_get_unique_id
sk_image_get_width
sk_image_is_alpha_only
sk_image_is_lazy_generated
sk_image_is_texture_backed
sk_image_is_valid
sk_image_make_non_texture_image
sk_image_make_raster_image
sk_image_make_shader
sk_image_make_subset
sk_image_make_texture_image
sk_image_make_with_filter
sk_image_make_with_filter_legacy
sk_image_new_from_adopted_texture
sk_image_new_from_bitmap
sk_image_new_from_encoded
sk_image_new_from_picture
sk_image_new_from_texture
sk_image_new_raster
sk_image_new_raster_copy
sk_image_new_raster_copy_with_pixmap
sk_image_new_raster_data
sk_image_peek_pixels
sk_image_read_pixels
sk_image_read_pixels_into_pixmap
sk_image_ref
sk_image_ref_encoded
sk_image_scale_pixels
sk_image_unref
sk_imagefilter_croprect_destructor
sk_imagefilter_croprect_get_flags
sk_imagefilter_croprect_get_rect
sk_imagefilter_croprect_new
sk_imagefilter_croprect_new_with_rect
sk_imagefilter_new_alpha_threshold
sk_imagefilter_new_arithmetic
sk_imagefilter_new_blur
sk_imagefilter_new_color_filter
sk_imagefilter_new_compose
sk_imagefilter_new_dilate
sk_imagefilter_new_displacement_map_effect
sk_imagefilter_new_distant_lit_diffuse
sk_imagefilter_new_distant_lit_specular
sk_imagefilter_new_drop_shadow
sk_imagefilter_new_drop_shadow_only
sk_imagefilter_new_erode
sk_imagefilter_new_image_source
sk_imagefilter_new_image_source_default
sk_imagefilter_new_magnifier
sk_imagefilter_new_matrix
sk_imagefilter_new_matrix_convolution
sk_imagefilter_new_merge
sk_imagefilter_new_offset
sk_imagefilter_new_paint
sk_imagefilter_new_picture
sk_imagefilter_new_picture_with_croprect
sk_imagefilter_new_point_lit_diffuse
sk_imagefilter_new_point_lit_specular
sk_imagefilter_new_spot_lit_diffuse
sk_imagefilter_new_spot_lit_specular
sk_imagefilter_new_tile
sk_imagefilter_new_xfermode
sk_imagefilter_unref
sk_jpegencoder_encode
sk_manageddrawable_new
sk_manageddrawable_set_procs
sk_manageddrawable_unref
sk_managedstream_destroy
sk_managedstream_new
sk_managedstream_set_procs
sk_managedtracememorydump_delete
sk_managedtracememorydump_new
sk_managedtracememorydump_set_procs
sk_managedwstream_destroy
sk_managedwstream_new
sk_managedwstream_set_procs
sk_mask_alloc_image
sk_mask_compute_image_size
sk_mask_compute_total_image_size
sk_mask_free_image
sk_mask_get_addr
sk_mask_get_addr_1
sk_mask_get_addr_32
sk_mask_get_addr_8
sk_mask_get_addr_lcd_16
sk_mask_is_empty
sk_maskfilter_new_blur
sk_maskfilter_new_blur_with_flags
sk_maskfilter_new_clip
sk_maskfilter_new_gamma
sk_maskfilter_new_shader
sk_maskfilter_new_table
sk_maskfilter_ref
sk_maskfilter_unref
sk_matrix44_as_col_major
sk_matrix44_as_row_major
sk_matrix44_destroy
sk_matrix44_determinant
sk_matrix44_equals
sk_matrix44_get
sk_matrix44_get_type
sk_matrix44_invert
sk_matrix44_map2
sk_matrix44_map_scalars
sk_matrix44_new
sk_matrix44_new_concat
sk_matrix44_new_copy
sk_matrix44_new_identity
sk_matrix44_new_matrix
sk_matrix44_post_concat
sk_matrix44_post_scale
sk_matrix44_post_translate
sk_matrix44_pre_concat
sk_matrix44_pre_scale
sk_matrix44_pre_translate
sk_matrix44_preserves_2d_axis_alignment
sk_matrix44_set
sk_matrix44_set_3x3_row_major
sk_matrix44_set_col_major
sk_matrix44_set_concat
sk_matrix44_set_identity
sk_matrix44_set_rotate_about_degrees
sk_matrix44_set_rotate_about_radians
sk_matrix44_set_rotate_about_radians_unit
sk_matrix44_set_row_major
sk_matrix44_set_scale
sk_matrix44_set_translate
sk_matrix44_to_matrix
sk_matrix44_transpose
sk_matrix_concat
sk_matrix_map_points
sk_matrix_map_radius
sk_matrix_map_rect
sk_matrix_map_vector
sk_matrix_map_vectors
sk_matrix_map_xy
sk_matrix_post_concat
sk_matrix_pre_concat
sk_matrix_try_invert
sk_memorystream_destroy
sk_memorystream_new
sk_memorystream_new_with_data
sk_memorystream_new_with_length
sk_memorystream_new_with_skdata
sk_memorystream_set_memory
sk_nodraw_canvas_destroy
sk_nodraw_canvas_new
sk_nvrefcnt_get_ref_count
sk_nvrefcnt_safe_ref
sk_nvrefcnt_safe_unref
sk_nvrefcnt_unique
sk_nway_canvas_add_canvas
sk_nway_canvas_destroy
sk_nway_canvas_new
sk_nway_canvas_remove_all
sk_nway_canvas_remove_canvas
sk_opbuilder_add
sk_opbuilder_destroy
sk_opbuilder_new
sk_opbuilder_resolve
sk_overdraw_canvas_destroy
sk_overdraw_canvas_new
sk_paint_clone
sk_paint_delete
sk_paint_get_blendmode
sk_paint_get_color
sk_paint_get_color4f
sk_paint_get_colorfilter
sk_paint_get_fill_path
sk_paint_get_filter_quality
sk_paint_get_imagefilter
sk_paint_get_maskfilter
sk_paint_get_path_effect
sk_paint_get_shader
sk_paint_get_stroke_cap
sk_paint_get_stroke_join
sk_paint_get_stroke_miter
sk_paint_get_stroke_width
sk_paint_get_style
sk_paint_is_antialias
sk_paint_is_dither
sk_paint_new
sk_paint_reset
sk_paint_set_antialias
sk_paint_set_blendmode
sk_paint_set_color
sk_paint_set_color4f
sk_paint_set_colorfilter
sk_paint_set_dither
sk_paint_set_filter_quality
sk_paint_set_imagefilter
sk_paint_set_maskfilter
sk_paint_set_path_effect
sk_paint_set_shader
sk_paint_set_stroke_cap
sk_paint_set_stroke_join
sk_paint_set_stroke_miter
sk_paint_set_stroke_width
sk_paint_set_style
sk_path_add_arc
sk_path_add_circle
sk_path_add_oval
sk_path_add_path
sk_path_add_path_matrix
sk_path_add_path_offset
sk_path_add_path_reverse
sk_path_add_poly
sk_path_add_rect
sk_path_add_rect_start
sk_path_add_rounded_rect
sk_path_add_rrect
sk_path_add_rrect_start
sk_path_arc_to
sk_path_arc_to_with_oval
sk_path_arc_to_with_points
sk_path_clone
sk_path_close
sk_path_compute_tight_bounds
sk_path_conic_to
sk_path_contains
sk_path_convert_conic_to_quads
sk_path_count_points
sk_path_count_verbs
sk_path_create_iter
sk_path_create_rawiter
sk_path_cubic_to
sk_path_delete
sk_path_effect_create_1d_path
sk_path_effect_create_2d_line
sk_path_effect_create_2d_path
sk_path_effect_create_compose
sk_path_effect_create_corner
sk_path_effect_create_dash
sk_path_effect_create_discrete
sk_path_effect_create_sum
sk_path_effect_create_trim
sk_path_effect_unref
sk_path_get_bounds
sk_path_get_filltype
sk_path_get_last_point
sk_path_get_point
sk_path_get_points
sk_path_get_segment_masks
sk_path_is_convex
sk_path_is_line
sk_path_is_oval
sk_path_is_rect
sk_path_is_rrect
sk_path_iter_conic_weight
sk_path_iter_destroy
sk_path_iter_is_close_line
sk_path_iter_is_closed_contour
sk_path_iter_next
sk_path_line_to
sk_path_move_to
sk_path_new
sk_path_parse_svg_string
sk_path_quad_to
sk_path_rarc_to
sk_path_rawiter_conic_weight
sk_path_rawiter_destroy
sk_path_rawiter_next
sk_path_rawiter_peek
sk_path_rconic_to
sk_path_rcubic_to
sk_path_reset
sk_path_rewind
sk_path_rline_to
sk_path_rmove_to
sk_path_rquad_to
sk_path_set_filltype
sk_path_to_svg_string
sk_path_transform
sk_path_transform_to_dest
sk_pathmeasure_destroy
sk_pathmeasure_get_length
sk_pathmeasure_get_matrix
sk_pathmeasure_get_pos_tan
sk_pathmeasure_get_segment
sk_pathmeasure_is_closed
sk_pathmeasure_new
sk_pathmeasure_new_with_path
sk_pathmeasure_next_contour
sk_pathmeasure_set_path
sk_pathop_as_winding
sk_pathop_op
sk_pathop_simplify
sk_pathop_tight_bounds
sk_picture_deserialize_from_data
sk_picture_deserialize_from_memory
sk_picture_deserialize_from_stream
sk_picture_get_cull_rect
sk_picture_get_recording_canvas
sk_picture_get_unique_id
sk_picture_make_shader
sk_picture_recorder_begin_recording
sk_picture_recorder_delete
sk_picture_recorder_end_recording
sk_picture_recorder_end_recording_as_drawable
sk_picture_recorder_new
sk_picture_ref
sk_picture_serialize_to_data
sk_picture_serialize_to_stream
sk_picture_unref
sk_pixmap_destructor
sk_pixmap_encode_image
sk_pixmap_erase_color
sk_pixmap_erase_color4f
sk_pixmap_extract_subset
sk_pixmap_get_info
sk_pixmap_get_pixel_color
sk_pixmap_get_pixels
sk_pixmap_get_pixels_with_xy
sk_pixmap_get_row_bytes
sk_pixmap_get_writable_addr
sk_pixmap_new
sk_pixmap_new_with_params
sk_pixmap_read_pixels
sk_pixmap_reset
sk_pixmap_reset_with_params
sk_pixmap_scale_pixels
sk_pngencoder_encode
sk_refcnt_get_ref_count
sk_refcnt_safe_ref
sk_refcnt_safe_unref
sk_refcnt_unique
sk_region_cliperator_delete
sk_region_cliperator_done
sk_region_cliperator_new
sk_region_cliperator_next
sk_region_cliperator_rect
sk_region_contains
sk_region_contains_point
sk_region_contains_rect
sk_region_delete
sk_region_get_boundary_path
sk_region_get_bounds
sk_region_intersects
sk_region_intersects_rect
sk_region_is_complex
sk_region_is_empty
sk_region_is_rect
sk_region_iterator_delete
sk_region_iterator_done
sk_region_iterator_new
sk_region_iterator_next
sk_region_iterator_rect
sk_region_iterator_rewind
sk_region_new
sk_region_op
sk_region_op_rect
sk_region_quick_contains
sk_region_quick_reject
sk_region_quick_reject_rect
sk_region_set_empty
sk_region_set_path
sk_region_set_rect
sk_region_set_rects
sk_region_set_region
sk_region_spanerator_delete
sk_region_spanerator_new
sk_region_spanerator_next
sk_region_translate
sk_rrect_contains
sk_rrect_delete
sk_rrect_get_height
sk_rrect_get_radii
sk_rrect_get_rect
sk_rrect_get_type
sk_rrect_get_width
sk_rrect_inset
sk_rrect_is_valid
sk_rrect_new
sk_rrect_new_copy
sk_rrect_offset
sk_rrect_outset
sk_rrect_set_empty
sk_rrect_set_nine_patch
sk_rrect_set_oval
sk_rrect_set_rect
sk_rrect_set_rect_radii
sk_rrect_set_rect_xy
sk_rrect_transform
sk_runtimeeffect_get_child_name
sk_runtimeeffect_get_children_count
sk_runtimeeffect_get_uniform_from_index
sk_runtimeeffect_get_uniform_from_name
sk_runtimeeffect_get_uniform_name
sk_runtimeeffect_get_uniform_size
sk_runtimeeffect_get_uniforms_count
sk_runtimeeffect_make
sk_runtimeeffect_make_color_filter
sk_runtimeeffect_make_shader
sk_runtimeeffect_uniform_get_offset
sk_runtimeeffect_uniform_get_size_in_bytes
sk_runtimeeffect_unref
sk_shader_new_blend
sk_shader_new_color
sk_shader_new_color4f
sk_shader_new_empty
sk_shader_new_lerp
sk_shader_new_linear_gradient
sk_shader_new_linear_gradient_color4f
sk_shader_new_perlin_noise_fractal_noise
sk_shader_new_perlin_noise_improved_noise
sk_shader_new_perlin_noise_turbulence
sk_shader_new_radial_gradient
sk_shader_new_radial_gradient_color4f
sk_shader_new_sweep_gradient
sk_shader_new_sweep_gradient_color4f
sk_shader_new_two_point_conical_gradient
sk_shader_new_two_point_conical_gradient_color4f
sk_shader_ref
sk_shader_unref
sk_shader_with_color_filter
sk_shader_with_local_matrix
sk_stream_asset_destroy
sk_stream_destroy
sk_stream_duplicate
sk_stream_fork
sk_stream_get_length
sk_stream_get_memory_base
sk_stream_get_position
sk_stream_has_length
sk_stream_has_position
sk_stream_is_at_end
sk_stream_move
sk_stream_peek
sk_stream_read
sk_stream_read_bool
sk_stream_read_s16
sk_stream_read_s32
sk_stream_read_s8
sk_stream_read_u16
sk_stream_read_u32
sk_stream_read_u8
sk_stream_rewind
sk_stream_seek
sk_stream_skip
sk_string_destructor
sk_string_get_c_str
sk_string_get_size
sk_string_new_empty
sk_string_new_with_copy
sk_surface_draw
sk_surface_flush
sk_surface_flush_and_submit
sk_surface_get_canvas
sk_surface_get_props
sk_surface_get_recording_context
sk_surface_new_backend_render_target
sk_surface_new_backend_texture
sk_surface_new_image_snapshot
sk_surface_new_image_snapshot_with_crop
sk_surface_new_metal_layer
sk_surface_new_metal_view
sk_surface_new_null
sk_surface_new_raster
sk_surface_new_raster_direct
sk_surface_new_render_target
sk_surface_peek_pixels
sk_surface_read_pixels
sk_surface_unref
sk_surfaceprops_delete
sk_surfaceprops_get_flags
sk_surfaceprops_get_pixel_geometry
sk_surfaceprops_new
sk_svgcanvas_create_with_stream
sk_svgcanvas_create_with_writer
sk_swizzle_swap_rb
sk_text_utils_get_path
sk_text_utils_get_pos_path
sk_textblob_builder_alloc_run
sk_textblob_builder_alloc_run_pos
sk_textblob_builder_alloc_run_pos_h
sk_textblob_builder_alloc_run_rsxform
sk_textblob_builder_alloc_run_text
sk_textblob_builder_alloc_run_text_pos
sk_textblob_builder_alloc_run_text_pos_h
sk_textblob_builder_delete
sk_textblob_builder_make
sk_textblob_builder_new
sk_textblob_get_bounds
sk_textblob_get_intercepts
sk_textblob_get_unique_id
sk_textblob_ref
sk_textblob_unref
sk_typeface_copy_table_data
sk_typeface_count_glyphs
sk_typeface_count_tables
sk_typeface_create_default
sk_typeface_create_from_data
sk_typeface_create_from_file
sk_typeface_create_from_name
sk_typeface_create_from_stream
sk_typeface_get_family_name
sk_typeface_get_font_slant
sk_typeface_get_font_weight
sk_typeface_get_font_width
sk_typeface_get_fontstyle
sk_typeface_get_kerning_pair_adjustments
sk_typeface_get_table_data
sk_typeface_get_table_size
sk_typeface_get_table_tags
sk_typeface_get_units_per_em
sk_typeface_is_fixed_pitch
sk_typeface_open_stream
sk_typeface_ref_default
sk_typeface_unichar_to_glyph
sk_typeface_unichars_to_glyphs
sk_typeface_unref
sk_version_get_increment
sk_version_get_milestone
sk_version_get_string
sk_vertices_make_copy
sk_vertices_ref
sk_vertices_unref
sk_webpencoder_encode
sk_wstream_bytes_written
sk_wstream_flush
sk_wstream_get_size_of_packed_uint
sk_wstream_newline
sk_wstream_write
sk_wstream_write_16
sk_wstream_write_32
sk_wstream_write_8
sk_wstream_write_bigdec_as_text
sk_wstream_write_bool
sk_wstream_write_dec_as_text
sk_wstream_write_hex_as_text
sk_wstream_write_packed_uint
sk_wstream_write_scalar
sk_wstream_write_scalar_as_text
sk_wstream_write_stream
sk_wstream_write_text
sk_xmlstreamwriter_delete
sk_xmlstreamwriter_new
skottie_animation_delete
skottie_animation_get_duration
skottie_animation_get_fps
skottie_animation_get_in_point
skottie_animation_get_out_point
skottie_animation_get_size
skottie_animation_get_version
skottie_animation_keepalive
skottie_animation_make_from_data
skottie_animation_make_from_file
skottie_animation_make_from_stream
skottie_animation_make_from_string
skottie_animation_ref
skottie_animation_render
skottie_animation_render_with_flags
skottie_animation_seek
skottie_animation_seek_frame
skottie_animation_seek_frame_time
skottie_animation_unref
sksg_invalidation_controller_begin
sksg_invalidation_controller_delete
sksg_invalidation_controller_end
sksg_invalidation_controller_get_bounds
sksg_invalidation_controller_inval
sksg_invalidation_controller_new
sksg_invalidation_controller_reset
Name
.text
Size
7.1MB
Virtual Size
7.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
53KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
306KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gehcont
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
33B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
62B
Characteristics
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
mscordaccore.dll
- IMPHASH 0ae18dfbe5ce9ae2ec912b2d0956092e
- SHA256 65560a337d6a32ee191659314438f694e24002d100ba7366998fb58e6dfe54e3
- MD5 ea56988ed6e95e5bddf10349c5a0d766
- SHA1 35b3180047d3947b2d3d8a93362a106721a325d6
- SHA512 0cbadcd26eecd97651b72f4b19faa5620a434cedfe0e373cd9989d6ce0f2663abd86a10255c839fb599b1019261400a2a94e17d2cb749475062db6ad82491cdc
- SSDEEP 24576:L+fTkLL1Lr5dcmZVqZUO754aScMjKQTIitHcjZHU8crqFb2:qCL1Lr5dc6o4a8jKQTIitHcjZHfSqc
- TLSH T165553A56D6BC5499CEA9D0F8C507491FEBB13810037466FF46A48B192F3BBE66BB8310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
95:b1:05:62:c8:80:26:de:97:32:95:64:db:f0:96:b9:25:6f:d0:2e:9b:5f:dc:2b:bd:eb:ad:00:87:9b:76:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5d:70:ed:48:40:45:ba:82:3f:00:00:00:00:00:5d
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 8, 2025 - May 6, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:09:08:07:e0:f9:5c:8c:e6:55:00:01:00:00:02:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
930896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb
kernel32
DebugBreak
GetCurrentProcess
FlushInstructionCache
GetProcAddress
FreeLibrary
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
LCMapStringEx
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
CloseHandle
GetThreadGroupAffinity
GetProcessGroupAffinity
GetCurrentThread
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
SetLastError
GetModuleFileNameW
GetEnvironmentVariableW
LoadLibraryExW
CreateFileW
GetFullPathNameW
TerminateProcess
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
WakeAllConditionVariable
ReadProcessMemory
GetProcessHeap
HeapAlloc
GetSystemInfo
GetThreadId
GetProcessIdOfThread
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
GetLogicalProcessorInformationEx
MultiByteToWideChar
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
TlsFree
SleepConditionVariableSRW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ole32
CoTaskMemFree
CoCreateGuid
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_errno
abort
_cexit
_invalid_parameter_noinfo
terminate
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_initterm
api-ms-win-crt-convert-l1-1-0
strtoul
wcstoul
api-ms-win-crt-string-l1-1-0
wcscpy_s
wcsncpy_s
strncmp
wcsncmp
strcmp
strncpy_s
strcat_s
strcpy_s
strlen
wcsncat_s
strncat_s
wcscat_s
strnlen
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
calloc
_callnewh
free
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35207,
count=15, id=260, version=35207,
count=47, id=261, version=35207,
count=4, id=260, version=33140,
count=11, id=257, version=33140,
count=168, id=1, productName=Unmarked objects,
count=187, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
mscordaccore_amd64_amd64_10.0.125.57005.dll
- IMPHASH 0ae18dfbe5ce9ae2ec912b2d0956092e
- SHA256 65560a337d6a32ee191659314438f694e24002d100ba7366998fb58e6dfe54e3
- MD5 ea56988ed6e95e5bddf10349c5a0d766
- SHA1 35b3180047d3947b2d3d8a93362a106721a325d6
- SHA512 0cbadcd26eecd97651b72f4b19faa5620a434cedfe0e373cd9989d6ce0f2663abd86a10255c839fb599b1019261400a2a94e17d2cb749475062db6ad82491cdc
- SSDEEP 24576:L+fTkLL1Lr5dcmZVqZUO754aScMjKQTIitHcjZHU8crqFb2:qCL1Lr5dc6o4a8jKQTIitHcjZHfSqc
- TLSH T165553A56D6BC5499CEA9D0F8C507491FEBB13810037466FF46A48B192F3BBE66BB8310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
95:b1:05:62:c8:80:26:de:97:32:95:64:db:f0:96:b9:25:6f:d0:2e:9b:5f:dc:2b:bd:eb:ad:00:87:9b:76:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5d:70:ed:48:40:45:ba:82:3f:00:00:00:00:00:5d
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 8, 2025 - May 6, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:09:08:07:e0:f9:5c:8c:e6:55:00:01:00:00:02:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
930896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordac\mscordaccore.pdb
kernel32
DebugBreak
GetCurrentProcess
FlushInstructionCache
GetProcAddress
FreeLibrary
SetFilePointer
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
LCMapStringEx
FormatMessageW
LocalFree
SleepEx
VirtualAlloc
VirtualFree
RaiseException
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
CloseHandle
GetThreadGroupAffinity
GetProcessGroupAffinity
GetCurrentThread
SwitchToThread
GetProcessAffinityMask
QueryInformationJobObject
SetLastError
GetModuleFileNameW
GetEnvironmentVariableW
LoadLibraryExW
CreateFileW
GetFullPathNameW
TerminateProcess
CreateSemaphoreExW
CreateEventW
WaitForSingleObjectEx
SetEvent
ReleaseSemaphore
WakeAllConditionVariable
ReadProcessMemory
GetProcessHeap
HeapAlloc
GetSystemInfo
GetThreadId
GetProcessIdOfThread
GetEnvironmentVariableA
WideCharToMultiByte
GetLastError
GetLogicalProcessorInformationEx
MultiByteToWideChar
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
TlsFree
SleepConditionVariableSRW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ole32
CoTaskMemFree
CoCreateGuid
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_errno
abort
_cexit
_invalid_parameter_noinfo
terminate
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_initterm
api-ms-win-crt-convert-l1-1-0
strtoul
wcstoul
api-ms-win-crt-string-l1-1-0
wcscpy_s
wcsncpy_s
strncmp
wcsncmp
strcmp
strncpy_s
strcat_s
strcpy_s
strlen
wcsncat_s
strncat_s
wcscat_s
strnlen
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
calloc
_callnewh
free
CLRDataCreateInstance
DacDbiInterfaceInstance
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
OutOfProcessFunctionTableCallback
OutOfProcessFunctionTableCallbackEx
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35207,
count=15, id=260, version=35207,
count=47, id=261, version=35207,
count=4, id=260, version=33140,
count=11, id=257, version=33140,
count=168, id=1, productName=Unmarked objects,
count=187, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
mscordbi.dll
- IMPHASH 12112fc4687a82e2f46ddfb18e8ca71b
- SHA256 cbc89ee18288ca67665508295ae0a1ccb74043d19d473eb70c6fe994c093a808
- MD5 14670390f756c09bbd8f1744863f4c3e
- SHA1 502eb2d33c7b045638815776e5c61a64dd004724
- SHA512 1bbf3073635993ed6f8988566ce6bfe01a016e677de2da0b1a3ce24a7f7d32bbc85d3abe206ebc79d051e253c3ba4e443c080067373aa77b61e0af40f988180c
- SSDEEP 24576:4DNOLu9m3FDLjET38Gz85zNElDhQo3gNHSe29AIo:4DNwIqS3INYDZgNHSef/
- TLSH T1C3456C56ABFD5099D8B6C0BEC58B421BFA70384613256BDB5790C21D2F3BBE46E78310
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:bf:d1:09:4d:15:ef:ef:36:ca:4d:b1:8a:ad:34:65:56:5c:a6:12:71:3d:46:1e:40:ec:80:40:9f:51:f0:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=.NET DAC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5d:70:ed:48:40:45:ba:82:3f:00:00:00:00:00:5d
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 8, 2025 - May 6, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0c:b9:64:e3:35:9c:ec:f4:ae:00:01:00:00:02:0c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
795760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscordbi\mscordbi.pdb
kernel32
WaitForSingleObject
DuplicateHandle
CreateEventW
WideCharToMultiByte
SuspendThread
ResumeThread
GetProcAddress
WaitForMultipleObjectsEx
SetEvent
ResetEvent
GetCurrentThreadId
FlushInstructionCache
OpenThread
CreateThread
GetThreadContext
InitializeContext
CopyContext
SetThreadContext
VirtualProtectEx
TerminateProcess
ContinueDebugEvent
GetProcessId
FreeLibrary
VirtualQueryEx
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
Sleep
DebugActiveProcess
DebugActiveProcessStop
WaitForDebugEvent
OpenProcess
IsWow64Process
ReadProcessMemory
WriteProcessMemory
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
HeapCreate
GetProcessHeap
DebugBreak
VirtualQuery
RaiseException
SetLastError
LCMapStringEx
MultiByteToWideChar
FormatMessageW
LocalFree
GetModuleFileNameW
GetEnvironmentVariableW
LoadLibraryExW
GetFullPathNameW
GetSystemInfo
GetCurrentThread
SwitchToThread
CreateProcessW
SleepEx
VirtualAlloc
VirtualFree
CreateSemaphoreExW
WaitForSingleObjectEx
ReleaseSemaphore
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
TlsSetValue
GetCurrentProcess
GetCurrentProcessId
FlushFileBuffers
CloseHandle
GetLastError
CreateFileW
WriteFile
ReadFile
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TlsFree
advapi32
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
SetThreadToken
RevertToSelf
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
oleaut32
CreateErrorInfo
SetErrorInfo
user32
LoadStringW
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
calloc
free
api-ms-win-crt-string-l1-1-0
wcscat_s
wcscpy_s
strncmp
wcsncmp
wcsncpy_s
strcmp
wcsncat_s
strncpy_s
wcsnlen
strcpy_s
strlen
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_invalid_parameter_noinfo
terminate
_seh_filter_dll
_errno
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_cexit
abort
api-ms-win-crt-convert-l1-1-0
wcstoul
CoreCLRCreateCordbObject
CoreCLRCreateCordbObject3
CoreCLRCreateCordbObjectEx
CreateCordbObject
DllGetClassObjectInternal
OpenVirtualProcess
OpenVirtualProcess2
OpenVirtualProcessImpl
OpenVirtualProcessImpl2
Name
.text
Size
955KB
Virtual Size
954KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35207,
count=15, id=260, version=35207,
count=46, id=261, version=35207,
count=4, id=260, version=33140,
count=11, id=257, version=33140,
count=192, id=1, productName=Unmarked objects,
count=1, id=259, version=35217,
count=114, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
mscorrc.dll
- SHA256 10565660f78e642c000f3a4bf78f07eff29e10db4a3158e2510b79ceb2288478
- MD5 44eb2ab871a2866491b020089686484b
- SHA1 dcbf8e559fe610a4a3c6f7ed73b67c9634770c66
- SHA512 f9544b4e64774f551811eea9c12843a51d487d22cf906c16eae6d155bd97988764464756fd343e9e0abc95c7c1436b6dd28652de2fe97bfa172db3f38ae09b14
- SSDEEP 1536:7w891ntuvh7xChdZUutVHSfignwJfcvVMgSIctpoECUYyLzMF:7wknTdZUufSfHnqCSpSfsYF
- TLSH T133D38891A7F95218FAF73B746DB95AA00E7ABC96FDB9C21D0240805E5D71A40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
89:66:1d:73:fa:3f:43:87:99:2a:13:7b:8b:34:17:5b:00:83:4f:3b:8e:38:16:3a:e5:09:87:c2:ac:5e:e3:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:ac:76:2f:fe:6e:d2:8c:84:68:00:00:00:00:04:ac
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2025 - Jul 6, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:08:78:9d:58:5d:92:c7:d9:52:00:01:00:00:02:08
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\dlls\mscorrc\mscorrc.pdb
Name
.rdata
Size
512B
Virtual Size
356B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=35217,
count=1, id=258, version=35217,
msquic.dll
- IMPHASH e03d2e28c6417fd633aac131f09b26f3
- SHA256 6246f5fe726fbf612ca621961fd90a440425d64e9f4e51b7bb7adb80651032fa
- MD5 2480590d88abb773d57c9c983e2a47d8
- SHA1 9fbb3741c722f7e3c08d3346847b16ac5d5f4464
- SHA512 e7f8d735a9a18136a8f0c9baef8e3096f2aa68d8ad0106573a64a35a020fb48791e85226ff3ad55d67b36c86474755661a567219978fad12cea4ad511fc0b08d
- SSDEEP 6144:eKQizqeRb4AzDBBUE2SHxkKl6a1TOAwTrySuOCF83IHL54WstAVic7wIHlt6L6/l:LQk5Rb4AzgUHxr23UF8Wl4ht+7
- TLSH T17AB47E1267FC14A8E0B7C378C9278527FAB27C254721C65F6391922D1F63B50AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:78:7d:da:99:64:07:f1:3b:57:ac:32:11:95:c4:7b:e5:79:c7:dd:e7:28:29:10:26:6e:0d:69:7a:11:9b:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 23, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:06:d7:bc:51:38:98:23:ec:2c:00:01:00:00:02:06
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
191280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\s\msquic\artifacts\bin\winuser\cmakeouttemp\msquic.pdb
winmm
timeGetDevCaps
secur32
SetCredentialsAttributesW
FreeCredentialsHandle
AcquireCredentialsHandleW
QueryContextAttributesW
DeleteSecurityContext
AcceptSecurityContext
QuerySecurityContextToken
FreeContextBuffer
InitializeSecurityContextW
kernel32
GetCurrentThreadId
SetEvent
ResetEvent
SetThreadPriority
GetLastError
CreateThread
SetThreadIdealProcessor
SetThreadGroupAffinity
HeapCreate
HeapFree
InterlockedPopEntrySList
MultiByteToWideChar
GetLogicalProcessorInformationEx
QueryPerformanceFrequency
HeapAlloc
InitializeSListHead
HeapDestroy
GlobalMemoryStatusEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
SetThreadpoolWait
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryExW
TlsFree
TlsSetValue
CloseHandle
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwindEx
IsDebuggerPresent
GetCurrentProcessId
LeaveCriticalSection
GetSystemTimeAdjustment
WaitForSingleObject
IsProcessorFeaturePresent
TerminateProcess
PostQueuedCompletionStatus
Sleep
GetQueuedCompletionStatusEx
CreateIoCompletionPort
GetCurrentProcess
SetUnhandledExceptionFilter
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EnterCriticalSection
GetCurrentProcessorNumberEx
LoadLibraryA
QueryDepthSList
GetProcAddress
FreeLibrary
CreateEventA
GetActiveProcessorGroupCount
InterlockedFlushSList
InterlockedPushEntrySList
AcquireSRWLockShared
ReleaseSRWLockShared
SetFileCompletionNotificationModes
GetActiveProcessorCount
CancelIoEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
TlsGetValue
InitializeSRWLock
CloseThreadpoolWait
InterlockedPushListSListEx
advapi32
EventUnregister
RegOpenKeyExA
RegQueryValueExA
EventWriteTransfer
RegCloseKey
RegNotifyChangeKeyValue
EventRegister
iphlpapi
GetIpNetEntry2
SetCurrentThreadCompartmentId
ConvertInterfaceLuidToAlias
GetIfTable2
FreeMibTable
ConvertInterfaceIndexToLuid
GetCurrentThreadCompartmentId
ResolveIpNetEntry2
GetAdaptersAddresses
GetBestRoute2
bcrypt
BCryptDestroyKey
BCryptEncrypt
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptSetProperty
BCryptCreateHash
BCryptGenerateSymmetricKey
BCryptDecrypt
ws2_32
htonl
GetAddrInfoW
FreeAddrInfoW
WSAGetLastError
setsockopt
getsockopt
WSARecv
htons
WSACleanup
bind
WSAIoctl
connect
closesocket
WSASend
shutdown
socket
getsockname
WSASocketW
WSAStartup
crypt32
CertEnumCertificatesInStore
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertCloseStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateContextProperty
CertGetNameStringA
CertAddCertificateLinkToStore
CertSaveStore
CertGetCertificateChain
sspicli
QueryContextAttributesExW
ntdll
RtlNtStatusToDosError
RtlInitUnicodeString
NtSetInformationThread
RtlIpv6AddressToStringExA
RtlIpv4AddressToStringExA
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SysFreeString
SysAllocString
SafeArrayUnaccessData
VariantClear
SafeArrayAccessData
ole32
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
api-ms-win-crt-stdio-l1-1-0
fgets
fclose
__stdio_common_vfprintf
__acrt_iob_func
fopen
__stdio_common_vsnprintf_s
api-ms-win-crt-string-l1-1-0
wcscmp
wcscat_s
strnlen
strcmp
wcsncmp
_strnicmp
api-ms-win-crt-convert-l1-1-0
strtoul
mbstowcs_s
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
abort
_initialize_narrow_environment
_cexit
_execute_onexit_table
_initialize_onexit_table
terminate
_initterm_e
_configure_narrow_argv
_initterm
MsQuicClose
MsQuicOpenVersion
Name
.text
Size
327KB
Virtual Size
327KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
81KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=35207,
count=11, id=260, version=35207,
count=31, id=261, version=35207,
count=32, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=30795,
count=209, id=1, productName=Unmarked objects,
count=2, id=260, version=30795,
count=56, id=269, version=35211,
count=1, id=256, version=35211,
count=1, id=255, version=35211,
count=2, id=151,
count=1, id=258, version=35211,
netstandard.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 52067616216e4bd03e9f6e75097c1b3e80af135410a6dc36ac5431ce0ae40b86
- MD5 98dfe189194ac2620373c8618773a997
- SHA1 a330d1f3ad9d6e6b4333914459abbea5dfcdff0e
- SHA512 d45a61c8332576d5e411834769fe06c468d7aaabcdaa833d9f1bbf72f60245aa83443caa1cc10b5c482d47e579f543f7022fcc1fb1e0b88bedd361152e17b8b2
- SSDEEP 48:6ZfwCdSIQ8qVriRdt+oEqgqDMf1TvO7NPPDmDVZLQEuGeZWQyKCy5Wmq:4frxqVriJ+euMDmDfLQzWrnyW
- TLSH T1ADC15125A7D40233DC730BB2DC73528161F57AE0EDB7CE6E8995410A9C276589E32F26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ