CeleryLatest.zip
- SHA256 334839a878f41c61aaaf84865762e4afa7135a9576af0bace4ce3383d2d83ee4
Static task
static1
1 signatures
General
- Target CeleryLatest.zip
- Size 9.4MB
- Sample261027-wll9wawsd1
- SHA256 334839a878f41c61aaaf84865762e4afa7135a9576af0bace4ce3383d2d83ee4
- MD5 91865af1ff750b595a7fc53b248b16a6
- SHA1 204209c944f3436e610e050427dea6dfaf780ff9
- SHA512 e0ba77e05b9a35be252ca04e58373268baff8d0e8869cd57697153dbcfd5bb4867d2c375c13319207c726499781dbe45232fa08ac579f1bd227770f182b5ecee
- SSDEEP 196608:Jy/QEcnNVmUhiF5sBio1UOQi9dq9ogl8fRGn9bXpdWiaAo:n1M5sb6ekSglMRGN+z
- TLSH T139A633E60BE82F01E3A3C27EE956D549CF0ACE8327D36859D516B4543C966232F4239F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 25 IoCs
Checks for missing Authenticode signature.
resource unpack001/BetterFolderBrowser.dll unpack001/CeleryApp.exe unpack002/ar-dz.materialdesignextensions.resources.dll unpack002/betterfolderbrowser.dll unpack002/costura.dll unpack002/cs-cz.materialdesignextensions.resources.dll unpack002/cs.materialdesignextensions.resources.dll unpack002/de.materialdesignextensions.resources.dll unpack002/dragablz.dll unpack002/fr-fr.materialdesignextensions.resources.dll unpack002/fr.materialdesignextensions.resources.dll unpack002/materialdesigncolors.dll unpack002/materialdesignextensions.dll unpack002/materialdesignthemes.wpf.dll unpack002/pt-br.materialdesignextensions.resources.dll unpack002/pt.materialdesignextensions.resources.dll unpack002/ru-ru.materialdesignextensions.resources.dll unpack002/ru.materialdesignextensions.resources.dll unpack002/uz-latn-uz.materialdesignextensions.resources.dll unpack001/CeleryIn.bin unpack001/CeleryInject.exe unpack001/Costura.dll unpack001/Dragablz.dll unpack001/MaterialDesignColors.dll unpack001/MaterialDesignExtensions.dll
File Explorer
-
CeleryLatest.zip.zip 9.4MB
-
BetterFolderBrowser.dll.dll 12KB
-
CeleryApp.exe.exe 8.8MB
-
ar-dz.materialdesignextensions.resources.dll.dll 7KB
-
betterfolderbrowser.dll.dll 12KB
-
costura.dll.dll 4KB
-
costura.pdb2KB
-
cs-cz.materialdesignextensions.resources.dll.dll 7KB
-
cs.materialdesignextensions.resources.dll.dll 7KB
-
de.materialdesignextensions.resources.dll.dll 7KB
-
dragablz.dll.dll 233KB
-
dragablz.pdb50KB
-
fr-fr.materialdesignextensions.resources.dll.dll 7KB
-
fr.materialdesignextensions.resources.dll.dll 7KB
-
materialdesigncolors.dll.dll 295KB
-
materialdesigncolors.pdb17KB
-
materialdesignextensions.dll.dll 349KB
-
materialdesignthemes.wpf.dll.dll 9.1MB
-
materialdesignthemes.wpf.pdb116KB
-
microsoft.web.webview2.core.dll.dll 445KB
-
microsoft.web.webview2.winforms.dll.dll 37KB
-
microsoft.web.webview2.wpf.dll.dll 43KB
-
microsoft.xaml.behaviors.dll.dll 141KB
-
microsoft.xaml.behaviors.pdb471KB
-
pt-br.materialdesignextensions.resources.dll.dll 7KB
-
pt.materialdesignextensions.resources.dll.dll 7KB
-
ru-ru.materialdesignextensions.resources.dll.dll 7KB
-
ru.materialdesignextensions.resources.dll.dll 7KB
-
system.diagnostics.diagnosticsource.dll.dll 34KB
-
uz-latn-uz.materialdesignextensions.resources.dll.dll 6KB
-
CeleryIn.bin.dll 44KB
-
CeleryInject.exe.exe 5.5MB
-
CeleryLauncher.runtimeconfig.json372B
-
CeleryLogo.ico4KB
-
CeleryLogo.png.png 14KB
-
CeleryScript.bin185KB
-
Costura.dll.dll 4KB
-
Dragablz.dll.dll 233KB
-
MaterialDesignColors.dll.dll 295KB
-
MaterialDesignExtensions.dll.dll 349KB
-
Microsoft.Web.WebView2.Core.dll.dll 445KB
-
Microsoft.Web.WebView2.WinForms.dll.dll 37KB
-
Microsoft.Web.WebView2.Wpf.dll.dll 43KB
-
Microsoft.Xaml.Behaviors.dll.dll 141KB
-
System.Diagnostics.DiagnosticSource.dll.dll 34KB
-
bin/Monaco/index.html.html .js 13KB
-
bin/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf69KB
-
bin/Monaco/vs/base/worker/workerMain.js.js 174KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes.js.js 2KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/base.js521B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes.js33KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js11KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js594B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js777KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js16KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js7KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js6KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js12KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js24KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/functions.js10KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/globals.js854B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/keywords.js428B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Krnl.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js11KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/math.js12KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/table.js5KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/task.js1KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/modules-table.js5KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/modules.js516B
-
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DataModelServices.js47KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DrawingTypes.js4KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/params/InstanceClasses.js72KB
-
bin/Monaco/vs/basic-languages/lua/autocompletes/snippets.js1KB
-
bin/Monaco/vs/basic-languages/lua/lua.js.js 24KB
-
bin/Monaco/vs/basic-languages/lua/snippets.js12KB
-
bin/Monaco/vs/basic-languages/monaco.contribution.js.js 28KB
-
bin/Monaco/vs/editor/editor.main.css68KB
-
bin/Monaco/vs/editor/editor.main.js.js 2.4MB
-
bin/Monaco/vs/editor/editor.main.nls.de.js76KB
-
bin/Monaco/vs/editor/editor.main.nls.es.js76KB
-
bin/Monaco/vs/editor/editor.main.nls.fr.js83KB
-
bin/Monaco/vs/editor/editor.main.nls.it.js78KB
-
bin/Monaco/vs/editor/editor.main.nls.ja.js157KB
-
bin/Monaco/vs/editor/editor.main.nls.js61KB
-
bin/Monaco/vs/editor/editor.main.nls.ko.js130KB
-
bin/Monaco/vs/editor/editor.main.nls.ru.js325KB
-
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js100KB
-
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js102KB
-
bin/Monaco/vs/loader.js.js 31KB
-
runtimes/win-arm64/native/WebView2Loader.dll132KB
-
runtimes/win-x64/native/WebView2Loader.dll.dll 156KB
-
runtimes/win-x86/native/WebView2Loader.dll.dll 112KB
-
settings65B
BetterFolderBrowser.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5334c9c4eb567a89e4644df868d7fb6e242a3ea422b2ce9283843970ec756372
- MD5 fff67e7d52b58a11d456a1d5cd2ba294
- SHA1 6dea84a0a060c39c93b1e3f404270c039d3dbfdd
- SHA512 fc8cc5fbc624559e03e70c48bd4e6e4595b1784fdf2c258b33ddb3410bdd93dcf26f3b5db4e4d0d8f133e8df93fe95ab93a703efa92a0a4133f57f48ebd6ea74
- SSDEEP 192:2ZPVABalnP/VYkWdcHIp3RgzK/RGLHdnKuWGIBC0p++kVX805N9:2ABk1W4Ip3ez4RoF2+bR805N9
- TLSH T19D42D549A7E94638DCBE4B757C722A504370FA18AC37E71E0A81105E9C63394C7533BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\VitalRay\source\repos\libraries\BetterFolderBrowser\BetterFolderBrowser\obj\Debug\BetterFolderBrowser.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CeleryApp.exe
- SHA256 6a25cc6c05e54ca56e8b51d2b2bd8b9a17a96ecb1d1f6d4442d36378dc809ed1
- MD5 74c366b46a85acac6c83e9671e64dda7
- SHA1 dc9a7b4cc7511b701401aa86e0106d3495e3a0fe
- SHA512 e0df64a74c3c9e1c36f5957d346d961cc92741b1803e05d41454dde4371a0e9420f9e79163bed9fe2d8b588b9da6f2faaa08003ca50be37a6425a8320acd15cb
- SSDEEP 98304:wEgLIRfyC7egWJ3iJzdjf4fwraOWcD9XdMPABIw/t6KHDicVwzUs7:wEguhegD4fJOWs9XNBZ16M2cuU
- TLSH T10796C01BF3EB8EBEF7136B7CE5A1635654FEA4312AFF810BA2095917D44A480CDE0644
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Javan\source\repos\CeleryApp\CeleryApp\CeleryApp\obj\x64\Release\CeleryApp.pdb
Name
.text
Size
8.7MB
Virtual Size
8.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
ar-dz.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 083258337cce9facf560c40ba7a18dd7968d4fea1ead412a466ef37441d82dde
- MD5 f1535d1ba2a9a468fb95181e3d40147d
- SHA1 b45217e7545cf0afa45e3f3fc33953d56116b1ac
- SHA512 21fe44b4450b8594751014e233be5428f09da7254cc32299506e774a33a5084443e5b8fda862b898cf933426f6b54fe72d86df6238a6eaa8095515bbf75511fa
- SSDEEP 96:w8uRwW7LQ3QKbLxNtFY/Y6vlcfdu8rGnXhF1ShkzePcJrK3oz+eEHZ7:wb7qQK3tFcHvydnGXhF1SSoi1UZ
- TLSH T1A7F12D5263F8022AF5F76F76AAB211058935FD25AE76D92E1105116E08B3F20CEB1F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
betterfolderbrowser.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5334c9c4eb567a89e4644df868d7fb6e242a3ea422b2ce9283843970ec756372
- MD5 fff67e7d52b58a11d456a1d5cd2ba294
- SHA1 6dea84a0a060c39c93b1e3f404270c039d3dbfdd
- SHA512 fc8cc5fbc624559e03e70c48bd4e6e4595b1784fdf2c258b33ddb3410bdd93dcf26f3b5db4e4d0d8f133e8df93fe95ab93a703efa92a0a4133f57f48ebd6ea74
- SSDEEP 192:2ZPVABalnP/VYkWdcHIp3RgzK/RGLHdnKuWGIBC0p++kVX805N9:2ABk1W4Ip3ez4RoF2+bR805N9
- TLSH T19D42D549A7E94638DCBE4B757C722A504370FA18AC37E71E0A81105E9C63394C7533BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\VitalRay\source\repos\libraries\BetterFolderBrowser\BetterFolderBrowser\obj\Debug\BetterFolderBrowser.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\CI_WS\Ws\198629\Source\Costura_Fody\src\Costura\obj\Release\netstandard1.0\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.pdb
- SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
- MD5 34b42a5776a3ad022b429124d55e576d
- SHA1 6c6000a5eaf8579850ab82a89bd6268776eb51ad
- SHA512 c24bf10e1d95a07fcd65c1f7841d2d4bdf25c5db02f5f4912286c8d6c077fe8bd3fc564cb249cb4ae01aed10889f25cc22a48bd9698499ed556560d0621a64f4
- TLSH T1F35193776F04C291ED9884B28513DA492B3047127602EE7AE9E51B05CCFFDF8077286B
- MD5 SHA1 SHA512 TLSH
cs-cz.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72c3eacdc4b158b143fcad2a09f1478abd35e4831d34cbb9a2b447f7f046ea7e
- MD5 ef57a3dd9c0ab9de5eb877ffdb75bc9d
- SHA1 0e8cc360d9b55f7af8e5b00e41750fadea504503
- SHA512 af15dd8b5f38c2f1c2b5dac15d3419f68150fec4fa4d196f935d4794e1ceaaec1e4282170be3ff0780f20cad339e14efed79d295950b0e1b963f36c86c2b084d
- SSDEEP 96:hL8uRwW7/pAxRhe7ZSzXLlcfGuu8rGnXhF1SqkzePcJrK3oz+eEHZ7:hLb7/CIIzXLyXnGXhF1Shoi1UZ
- TLSH T1F8E11D12A3F9432AF1F36F79AA7602051A39FD51AD32C11E4189116E18B2F54CEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
cs.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 72c3eacdc4b158b143fcad2a09f1478abd35e4831d34cbb9a2b447f7f046ea7e
- MD5 ef57a3dd9c0ab9de5eb877ffdb75bc9d
- SHA1 0e8cc360d9b55f7af8e5b00e41750fadea504503
- SHA512 af15dd8b5f38c2f1c2b5dac15d3419f68150fec4fa4d196f935d4794e1ceaaec1e4282170be3ff0780f20cad339e14efed79d295950b0e1b963f36c86c2b084d
- SSDEEP 96:hL8uRwW7/pAxRhe7ZSzXLlcfGuu8rGnXhF1SqkzePcJrK3oz+eEHZ7:hLb7/CIIzXLyXnGXhF1Shoi1UZ
- TLSH T1F8E11D12A3F9432AF1F36F79AA7602051A39FD51AD32C11E4189116E18B2F54CEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
de.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0828b186d1aa37ae5949533e73e9b957ea6e28aa09a9128d18dded31cb93ed73
- MD5 79a933f7ea3a7810261d3eaca458321d
- SHA1 9de001107752757da5952facf19133c69c30bbce
- SHA512 4eafdf0c56417e277c5bbcec2cfd6a07fd2e647e92e84898aeff0f8690e3e993c631d800bbd6de69e5a0c5ac0f2057a8a47336208fdeab75dd2798a98ab5d84c
- SSDEEP 96:VWYRPWuHp361xpqw/YhBJlcfsu8rGnXhF1SKkzePcJrK3oz+eEHZ7:wZ+uqw/qbysnGXhF1SBoi1UZ
- TLSH T13BE10B02A3F9132EF6F36F79AA7641041975FD56AE72C21E4109516E18B2B50CEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12158
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
dragablz.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c5724efe19f5945143626a8270c9c3a188d4886eeaca083c57c742a985c7338
- MD5 5a9583a7bed76b2e94091f9b74716f68
- SHA1 60552dc4ed629b32a7c0e7b31406a21829bdc38e
- SHA512 8ab70fd60a27a80e43a270a401e8772833ad0a11ade1ea13483b37b1a02dbb70679bbe200fceca632ee1ba8df66a95a51a2fe65671eb3ae596682d3e1ee1c0d5
- SSDEEP 6144:fTuK/5J3BPYcKHJv8ahfgfkMMafGfCfDf2fE:fKKhP+Dhfgf7fGfCfDf2f
- TLSH T123346D4033700775C6BF8BB5EA615528EA30E4D2F262D74539C92EED2CD37908A653BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
245122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdb
mscoree
_CorDllMain
Name
.text
Size
231KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
dragablz.pdb
- SHA256 43b10d17a40b803533f36363be6badeccd2dc4535d3696659c88936d600198d1
- MD5 7ad05063493ba63fac7b84392f76def0
- SHA1 c66903a4140832d830b1340591aa39ba4b716f04
- SHA512 7ebaae642003643371a26609198b8def778c1dc1ac72364f772459d533f0a9df2c13a0383f6feed6c4f2c1b206d215c75623a44f656327d73305acec9ac62834
- SSDEEP 768:TzZ3cvnPNM1/EZoDZu6XqKprEvPLCMZmFD3ikzBlQuFeXHPEqv:TzZsvPNMtEqDb6Kpr88Befh
- TLSH T12833FA56DE91DA3BCA25483A48732715F370D1CCE54A5F2752FCEA21ACC7328992B2DC
- MD5 SHA1 SHA512 SSDEEP TLSH
fr-fr.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b77bc2664eb5180be90ae53b8da80f9ba14c900145287f643383dd7944c6625
- MD5 cd91aebc138906dddcafa3e00939bf94
- SHA1 38e5824d8619e5c8ca996bc52e30ab5c633b2c6d
- SHA512 03f04f3de70c265b797df58803d55d19bfaf0b4aadd037882139a3118a85fafed911d2bb7f64b07ac35655c419426ac7d990c3368842a34e7ef0b758bb17eb7a
- SSDEEP 96:laru8uRwW7zvROKyxQfZaCHlcfiu8rGnXhF1S2kzePcJrK3oz+eEHZ7:llb7z5OEvyinGXhF1SFoi1UZ
- TLSH T173E12D07A3F9032AF1F26FB6AA7642040935FD55AE32D51E014851AE18B2F14DEB2F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
fr.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b77bc2664eb5180be90ae53b8da80f9ba14c900145287f643383dd7944c6625
- MD5 cd91aebc138906dddcafa3e00939bf94
- SHA1 38e5824d8619e5c8ca996bc52e30ab5c633b2c6d
- SHA512 03f04f3de70c265b797df58803d55d19bfaf0b4aadd037882139a3118a85fafed911d2bb7f64b07ac35655c419426ac7d990c3368842a34e7ef0b758bb17eb7a
- SSDEEP 96:laru8uRwW7zvROKyxQfZaCHlcfiu8rGnXhF1S2kzePcJrK3oz+eEHZ7:llb7z5OEvyinGXhF1SFoi1UZ
- TLSH T173E12D07A3F9032AF1F26FB6AA7642040935FD55AE32D51E014851AE18B2F14DEB2F77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
materialdesigncolors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1966082c8efa5ecddac7fd8b3e3b86a63599602d18bdff17e7c366d49603aaf0
- MD5 d2207fccbdd6caa91c43776559ce401f
- SHA1 4f78f282a238b21ad1f995f154d624865d08a38a
- SHA512 d4984e3a6d82e7ebe11c2f7ea07092e60ef1396849921c6c0a463dd9b38836c5f6799e79f932bddc62b89d7a9896b5e5ba931c3c8cbfedff51076a41796a8c0e
- SSDEEP 1536:1r1In+fq1fDfDemxD0EsXpGX0EOAyzU7fKoVxbzQXT:B1WB1PerAjOAL7fKoVxb2T
- TLSH T1BA54755C1250E0FED813567A5838359972277A36AB948F8AEEAF71FD8C1600B4F331E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
307850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignColors.Wpf\obj\Release\net462\MaterialDesignColors.pdb
mscoree
_CorDllMain
Name
.text
Size
293KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
materialdesigncolors.pdb
- SHA256 ded3989359498a5dbf3eeed124c4294c85f99c4abfd11ba75447112f071695a9
- MD5 7f04146cf4f8f4abfb536d655b3458ce
- SHA1 1f496f7cb53d39ee2f51813d5c5a46bccecff074
- SHA512 2b43090707e0bca4e8c5afaec07a90b7b0821fe01f3da0ca5b2323f9335ad718d86d0dfbea8951e62e8c61d88029982ff48d5401eb9fd10d0137e5dc5ddea9d8
- SSDEEP 384:fRqFE2rH+jozCcb8AeqDSZIATSl4EV8eewPa:fKE2H+cbaqCIAeZt9a
- TLSH T1A5823C1906B547A6C28516BDABEF43493331C30AFA314B9BA3E1763D3CDA3950D635E8
- MD5 SHA1 SHA512 SSDEEP TLSH
materialdesignextensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5b93560fa74b9a05959aae5116da59495d36782d2e17e45f0efcc06ad36ed6a
- MD5 6da7ae89f1eac96f143dc5200031d8b8
- SHA1 d9dc3936bc9a288a727cb2295c3d05899adcc9c8
- SHA512 3929f7092a5acb5ae3333e7e0a9ac2a403b78c8c8ad35a17ece25e6688a61a0f7e4b701691b02ad2941c6e15d2262c6f8ae76413af93dc92aa422e1738147e94
- SSDEEP 6144:OM2EyV6zxDNFOzaFkpXeRk7ecDfE0MHOZB0zSvo1UvEGK262:nGVcxHOzxpuRk7emfE0MHOZB0zSvo1UJ
- TLSH T1F7743B1023B8466EC67F8775E5E14000DB31B96725A3D79D2ED92CDF68E3704836A3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
362382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\GitRepositories\MaterialDesignExtensions\MaterialDesignExtensions\obj\Release\net45\MaterialDesignExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
346KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
materialdesignthemes.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f2cb7b4de690abc21780bbab0f0b39273b6538ab04ef47fbe099126a43b62864
- MD5 dd614b113b0fd72554a55eda5dbfcc10
- SHA1 0144a3f8c52dd932bfaca7d7f147f694b5511551
- SHA512 974eaf9906a798c723436b9ab1abae282757596c350e48a6697d84c1bdd50715415d3a70c9a081d4b996f3abbbdc4b26d3c3f9139f8b685cb54bf01376512c51
- SSDEEP 98304:vVDXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR2fS0:PnJ45/9iD54+V11bFv4z
- TLSH T1C5A6C82CD901A767E2B7C164C09E0A17F1A2896AF5395F0E70CB1B693247A433E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9542298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignThemes.Wpf\obj\Release\net462\MaterialDesignThemes.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
9.1MB
Virtual Size
9.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
materialdesignthemes.wpf.pdb
- SHA256 a00fb457a34b96f6581d0fe11f7b8208d9c8790055daaeaa0a8412f4dc9a9cbb
- MD5 64cc2f092fd1027b6bc9498da338ba33
- SHA1 07acaef199cc849c94202dcbd61a8d8cf2d2f638
- SHA512 139aacee03a3082157455d7a9562b3152f247795b3d175d236de71d7e9271eedd8f7983916b5afb545b02d94f24b16131b14fc347d058f9bf1a81db6ebde7a01
- SSDEEP 1536:tf9GfS1UYcpIar5c884LoPhXJpj/oW+LadjJvw45OJWySNtg5dQFX9D5BPx+G2u:T3NchzopFeOjJvwhINtgwF15FxR
- TLSH T1FEC31759CADAC73ACBCB36B794630361337AC104A9529B37225BB7367C67708065379C
- MD5 SHA1 SHA512 SSDEEP TLSH
microsoft.web.webview2.core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c2441011ec290b3408391f32072379f677ab3fa4507c4304167cd82fad6593c1
- MD5 c4b4a5f4f28d47239eb4e37cb3cc8046
- SHA1 ed86941cf065f91758d536d8e13cc2542cc38922
- SHA512 440ee33d5a830d9c59d96367f2a43d4a4113f6fe0924a691e682a2e9251a8615e52177dcb9af225dba538a8a3893ac85be79e9c1aa687034e3da6c95191dc645
- SSDEEP 12288:EB7Md7DkbrB3kPo+iKvRFNLe1+imQ9pRFZNIEJdIElxPrEIvLcglxMwCepM1STUH:EeFP7
- TLSH T18CA4502223FE821AFAF66FB5957412204BF6FCD6B979D25E059C912D0D72B40C9A1333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1f:1f:17:de:d7:95:c6:e3:08:fd:e0:1a:bb:77:cf:e8:6c:71:9c:9c:62:31:6d:77:97:3e:25:c9:fa:17:26:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c9:fa:d5:8e:25:20:74:02:5e:00:01:00:00:01:c9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
451826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
433KB
Virtual Size
433KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.web.webview2.winforms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c9eeff2dd13109f41447a92763d31aaa07369c58a570c18bbb851824a77da98a
- MD5 e6f424ee6036ee7d58283780b705be8c
- SHA1 c17fc397711fb2e0c400007620c76e70c956dd9c
- SHA512 1d255265115a4a2238a21e3ade35101babcbf9d5de58521365666b9564681119c4b7f20ed6a6c16fb6120ab19106fa40f25421da938b7fee7b8a5e7758f2c22f
- SSDEEP 768:ejIHFTA42CL9tcZDgcEST3p4Jjrjh2jJFSgyauYv1JKia5/Zi/WGQKVu6bL7RSOX:AIS3C5tcZDgcEST3p4JjrjaJFSgyau0H
- TLSH T162033B00839C8617E6EBAFB865B0A1611B3ABEC37A61D39D5D88F0E91DB37E05510377
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
59:b3:1e:c6:dd:6e:ad:bf:1a:7d:64:d2:5d:36:bc:61:e3:69:f3:e1:ae:8d:14:9f:35:31:d8:71:2e:1f:cd:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:fb:00:a0:4a:5b:f2:27:dc:00:01:00:00:01:c7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
33338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.web.webview2.wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15bcd610a80632ef59d911a8447b11127cdeafbf147c844f1b740735efdf338a
- MD5 0241e0a42b292e0c9b585470c613ec78
- SHA1 74e4ab7e37bff177a394617923baddfcf087c0e1
- SHA512 bd083301c6f93a1852c76686797919787f439c65ea11d430701257fa4d3791a4eff892b6ceea1c534d832bfbc0b0ecca3f671e3a9c50f34089f919e3756882f0
- SSDEEP 768:k2TI5VoCjJ4Jd7U2zkQ+Z8cDP/ryEH0yBy4JjrD1h2jVh3URGvkz7FKKa5/Bi/xm:VE5tjJ4Y2zf+Z8cDP/ryEH0yBy4JjrDC
- TLSH T1F5136CD413EC452AE2FF5EB8A57589510A39FF433A60CB8E19D8B1E90DB73D019503AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:c3:c1:88:64:a8:85:3c:f4:fd:38:e5:3b:98:53:16:ce:3b:3e:bb:43:01:12:1a:fc:da:5b:55:2b:a7:85:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c5:03:cd:cd:21:a1:f4:ef:39:00:01:00:00:01:c5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
39998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.xaml.behaviors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b864da9d88414877cea9b1a016146265a5fb9d0e12f4dbb1dccc0cc998119a54
- MD5 ec5a1abee150abe698689211b07cd1ec
- SHA1 affc3cb47da8fe76986d271cdc3e7ea345cc04e5
- SHA512 a2b55b4ffc3f11546ed8d3457e98b986c089e25229bd687da35d45d63e4860722e8b13826d3a3daa1be843cf3a4ae3da4cf9b6fdcb5d1a4948648537e683789f
- SSDEEP 3072:UAyazS96IT0O6gAf+LwCMe1u051dXcr9/soMEs5r/j9:tyhYIT0O65cwCMyE
- TLSH T1AAE34B9593FC8A2EC7FF0635E0B451145631F757B923DB4D6EC0A1AD0993382A6223BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
02:f6:ad:1a:99:d8:c9:42:80:8f:cc:44:ff:d9:72:82:6f:4d:5c:df:3a:cb:db:82:b0:aa:c6:8f:6d:b7:ee:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 18, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7880-E390-8014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:5c:86:d2:e3:ec:39:f6:8b:38:00:00:00:00:01:5c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
141614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net45\Microsoft.Xaml.Behaviors.pdb
mscoree
_CorDllMain
Name
.text
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.xaml.behaviors.pdb
- SHA256 5dcec23ec8c56d07e7fe0d9d06b2dafd943858337f3562dec8546d827c5a343a
- MD5 db7fde2d3ebce71e5a0fef7502b377b9
- SHA1 bce18b21f242fc612c6b69a6e9224582625175b1
- SHA512 7086dfec9a5ff71689db38070924095e475505af27ce04451baaa41d7c877bdbfd85526f39833a587630284797f39511df8bee1b957a0139c85813475f8a7bbf
- SSDEEP 6144:vthI0Fdc1qcCXrl2gIdvrbpg/EdkLzIdvL/Ed:V3iEX+rbp2z+
- TLSH T150A4A323BF44C633D96A94381ADB4F0D123CE2CD5B43AB4F6B85B11C6EE23996D47294
- MD5 SHA1 SHA512 SSDEEP TLSH
pt-br.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee64da7b188eab6b5ce5b524b3f54150625de554bd61cd9bcfe4647236cc278e
- MD5 1c49b6797b14e7a5dab597dcaf517d9a
- SHA1 ec9465821dd6b8bfd69bc96826f5c9b39553d6b6
- SHA512 0378ccfb51fb75bf68220b10a87b2195ac1f924e639c64b4f454316791a7731ac741bf2ca1c7c4bb015618eda0f9f635e605f25bf68a81ede123597524685cc8
- SSDEEP 96:G8uRwW7mNDRWx7bWjWw+Dmlcfxu8rGnXhF1SWkzePcJrK3oz+eEHZ7:Gb78DfoKyxnGXhF1Sloi1UZ
- TLSH T14AE10C0663F9032AF5F36F7AAAB652051A78FD55EE32C51E0145516E18B2B10CEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
pt.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee64da7b188eab6b5ce5b524b3f54150625de554bd61cd9bcfe4647236cc278e
- MD5 1c49b6797b14e7a5dab597dcaf517d9a
- SHA1 ec9465821dd6b8bfd69bc96826f5c9b39553d6b6
- SHA512 0378ccfb51fb75bf68220b10a87b2195ac1f924e639c64b4f454316791a7731ac741bf2ca1c7c4bb015618eda0f9f635e605f25bf68a81ede123597524685cc8
- SSDEEP 96:G8uRwW7mNDRWx7bWjWw+Dmlcfxu8rGnXhF1SWkzePcJrK3oz+eEHZ7:Gb78DfoKyxnGXhF1Sloi1UZ
- TLSH T14AE10C0663F9032AF5F36F7AAAB652051A78FD55EE32C51E0145516E18B2B10CEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12206
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ru-ru.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a2b41faceed68dc0e3d420d1f1dfc8fa58430d9ada1daa48c035f73c4c075b9
- MD5 56da5b910b638aa025e05fae030bbc58
- SHA1 9444a0ce305b57dee8956a5dfc6913250a3649fe
- SHA512 634e088f282753ab4ad78e8954e0262b7a077deb5bb8ca336ee30206fd0116886df5235cb9c7851a082b26e23e733304659f665d575784d6b7c79e287e7b0305
- SSDEEP 96:XYRPWulmNMbxtqWggRZFicSHLlcfqTu8rGnXhF1SskzePcJrK3oz+eEHZ7:XZAmN8qiFicSryqTnGXhF1SToi1UZ
- TLSH T16AF10E0263FC126EF0F26F75AA3665081D75BD79AE32C21E050411AE18B2F64CEB1B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ru.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a2b41faceed68dc0e3d420d1f1dfc8fa58430d9ada1daa48c035f73c4c075b9
- MD5 56da5b910b638aa025e05fae030bbc58
- SHA1 9444a0ce305b57dee8956a5dfc6913250a3649fe
- SHA512 634e088f282753ab4ad78e8954e0262b7a077deb5bb8ca336ee30206fd0116886df5235cb9c7851a082b26e23e733304659f665d575784d6b7c79e287e7b0305
- SSDEEP 96:XYRPWulmNMbxtqWggRZFicSHLlcfqTu8rGnXhF1SskzePcJrK3oz+eEHZ7:XZAmN8qiFicSryqTnGXhF1SToi1UZ
- TLSH T16AF10E0263FC126EF0F26F75AA3665081D75BD79AE32C21E050411AE18B2F64CEB1B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12622
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.diagnostics.diagnosticsource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- TLSH T145F25B54EBAC8953DEE71D3062A4D9423A3AEB936C10C25E2699E18D0D83BD1EB11737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d6:fb:4d:67:72:14:08:d2:75:46:a0:06:cb:be:f9:d3:5f:db:20:bd:97:db:cd:de:3c:cd:a0:78:2f:b1:93:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
bc:c6:7a:ba:4c:c6:19:72:95:75:c0:52:c5:b2:9c:4b:5f:0f:69:2e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c9:64:4d:16:db:1a:7d:b3:15:00:00:00:00:00:c9
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a1:a5:fd:b9:ee:a7:fc:9e:9d:00:00:00:00:00:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
24690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Diagnostics.DiagnosticSource\System.Diagnostics.DiagnosticSource.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
uz-latn-uz.materialdesignextensions.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a276ff0a83b9451a889666ca9d6e2d1afc5a6edc3ad8adb60cbfb82d993698a8
- MD5 19447a6982234f1768e91f13fbea27a1
- SHA1 02154f75090167167982b04042f12bec35859334
- SHA512 fbddbbca44cced145a8251aa13f79205d7b08725ab361b6589b3b92e0f1dceb83c820ba877bc79a03fc7ee192e114221a869174b3528958623d57d1fec1e88a0
- SSDEEP 96:zA5sRwFiBxlcfiu8rGnXhF1SVkzePcJrK3oz+eEHZ7:s5LUyinGXhF1SOoi1UZ
- TLSH T17AD13F02A3F8432AF1F36F36AA7792141675FD55AD72C60E415851AE28B2B10DEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CeleryIn.bin
- IMPHASH 57127fa98e84d836ff1e07fcec0c9958
- SHA256 cf30daca8f3ccaf5e23d3b191417006d8b464939fe0e2d10972e1de7ea95f1b6
- MD5 6e3f0111d318b2b8617dc52f6c94e6c5
- SHA1 93d85fda40fae6db2a7951705e82d17e853f539d
- SHA512 6b894fbfd152d323a03e03ccb995ed933e73cf810239a03b9bd43f290936b144c706dfe793b21bcc46d49086041bd71f1814a9aa308d0d9930c58a5903b93a09
- SSDEEP 384:SiBAxILGlECtQpfXt3AbXdEkYB1uRvFdBB4lAmA2QdwKFASF:S9GpWrdEkyuzHGA2vS
- TLSH T12923A64BFB9511E9C4B6C138D5A3272DF4B131A887718BCB97584A6B0772BE4E63C384
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
34868
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcessHeaps
HeapWalk
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
api-ms-win-crt-string-l1-1-0
strlen
tolower
api-ms-win-crt-convert-l1-1-0
_ui64toa_s
_itoa
_gcvt_s
_itoa_s
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_onexit_table
celerycmd
icallback
init
test
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33731,
count=2, id=259, version=33731,
count=7, id=260, version=33731,
count=12, id=261, version=33731,
count=3, id=257, version=30795,
count=41, id=1, productName=Unmarked objects,
count=8, id=261, version=33813,
count=1, id=256, version=33813,
count=1, id=255, version=33813,
count=1, id=258, version=33813,
CeleryInject.exe
- IMPHASH 07cf1b0dd0d4bd84e4088ab25f438e9b
- SHA256 f84e39b3be2ba74691b82dab25a4d42d13535f138d9c69ffe37d45d90612a34f
- MD5 072bd8b0166f4e8c134fddd1a91b16c6
- SHA1 da0e078b22b6739eb2ae67ef3dd7ac7ee841f96c
- SHA512 5ff3173c47a7718c41076507a5c3d8e83021928dead3c82ce6e46b4609afa6ffa4af7cd4af1b779805c00ccd5b9ee5a59144c0507bb17db8fad77b0e144ee828
- SSDEEP 49152:uACTPFe76hHoYwVbV+huHplzrvTAm+DGjV1ykc+nPsbn3+nM6Pzs0dn3dnndn+dF:WwHpoe6
- TLSH T1D246B60BAA3640E2D6B7C43ED553622AF9323459C338A3E756469E531F233E5D43AB70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3639148
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
QueryPerformanceFrequency
VirtualQueryEx
LoadLibraryA
Process32FirstW
Process32NextW
FindClose
lstrcpyW
lstrcpynW
lstrcmpiW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
VirtualFreeEx
WriteProcessMemory
ReadProcessMemory
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
IsDebuggerPresent
VirtualProtectEx
VirtualAllocEx
OpenProcess
GetCurrentProcessId
GetLastError
CloseHandle
GetTempPathW
DeleteFileW
Sleep
FormatMessageA
GlobalLock
GlobalUnlock
VirtualProtect
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
GetFileAttributesW
GetFileInformationByHandleEx
GetModuleHandleW
AreFileApisANSI
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
GetFileSizeEx
CreateFileA
VerifyVersionInfoW
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetStdHandle
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
SetLastError
GetTickCount
FreeLibrary
GetSystemDirectoryA
SleepEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
QueryPerformanceCounter
LocalFree
GetCurrentProcess
K32QueryWorkingSetEx
K32GetModuleFileNameExW
K32GetModuleBaseNameW
K32EnumProcessModules
K32EnumProcesses
Thread32Next
Thread32First
CreateToolhelp32Snapshot
SetConsoleTitleA
lstrlenW
lstrcatW
GlobalAlloc
user32
mouse_event
keybd_event
MapVirtualKeyA
SetCursorPos
GetForegroundWindow
EmptyClipboard
FindWindowW
GetWindowRect
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
advapi32
CryptEncrypt
GetCurrentHwProfileA
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
msvcp140
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_S3AEAPEA_S@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_SDU_Mbstatet@@@std@@MEAA@XZ
?out@?$codecvt@_UDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_U1AEAPEB_UPEAD3AEAPEAD@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_UDU_Mbstatet@@@std@@MEAA@XZ
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??7ios_base@std@@QEBA_NXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEAPEA_W0PEAH001@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?rdstate@ios_base@std@@QEBAHXZ
?fail@ios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Syserror_map@std@@YAPEBDH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
msvcp140_codecvt_ids
?id@?$codecvt@_UDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A
ws2_32
getpeername
getsockname
getsockopt
ntohs
bind
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSACleanup
WSAStartup
gethostbyname
gethostname
gethostbyaddr
inet_addr
sendto
htons
freeaddrinfo
getaddrinfo
WSAGetLastError
socket
setsockopt
send
select
recv
ioctlsocket
connect
recvfrom
listen
WSASetLastError
htonl
accept
__WSAFDIsSet
closesocket
WSAIoctl
ntdll
VerSetConditionMask
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
shlwapi
StrCmpW
PathRemoveFileSpecW
normaliz
IdnToAscii
crypt32
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertCloseStore
CertOpenStore
wldap32
ord22
ord41
ord45
ord26
ord27
ord50
ord32
ord33
ord46
ord301
ord217
ord143
ord35
ord79
ord30
ord200
ord211
ord60
vcruntime140
memchr
_purecall
memmove
strstr
memcmp
strchr
strrchr
memcpy
memset
__C_specific_handler
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
_CxxThrowException
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_errno
__sys_errlist
__sys_nerr
_beginthreadex
exit
terminate
_getpid
system
abort
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-string-l1-1-0
tolower
isalnum
strncpy
strnlen
strspn
strncmp
isalpha
isspace
strcspn
strcmp
strncat
_strdup
strpbrk
toupper
iscntrl
isgraph
ispunct
isxdigit
isdigit
islower
isupper
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
_read
_write
_close
fopen
__stdio_common_vsprintf_s
_open
feof
fseek
_lseeki64
fgets
fgetwc
fputwc
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fflush
fclose
_get_stream_buffer_pointers
_wfopen
__stdio_common_vsprintf
ungetwc
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fputs
__acrt_iob_func
ftell
fgetc
api-ms-win-crt-heap-l1-1-0
calloc
free
_set_new_mode
realloc
malloc
_callnewh
_aligned_malloc
_aligned_free
api-ms-win-crt-filesystem-l1-1-0
_stat64
_waccess_s
_access
_wrmdir
_fstat64
_unlink
_wmkdir
_unlock_file
_lock_file
_wstat64
api-ms-win-crt-utility-l1-1-0
qsort
srand
api-ms-win-crt-time-l1-1-0
_localtime64_s
strftime
_difftime64
_time64
_gmtime64_s
_gmtime64
clock
api-ms-win-crt-math-l1-1-0
ceilf
_dsign
floorf
floor
log2
acos
_dclass
modf
asin
round
cosh
__setusermatherr
frexp
pow
_fdopen
cos
ldexp
exp
fmod
atan
tanh
tan
atan2
sqrt
sinh
log10
sin
log
ceil
api-ms-win-crt-convert-l1-1-0
wcstombs
strtoll
strtoul
strtol
strtoull
strtod
atoi
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
Name
.text
Size
3.9MB
Virtual Size
3.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
109KB
Virtual Size
155KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
256KB
Virtual Size
255KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=253, version=33731,
count=4, id=259, version=33731,
count=10, id=260, version=33731,
count=36, id=261, version=33731,
count=8, id=257, version=33731,
count=116, id=260, productName=VS2019 v16.2.3 build 27905, version=27905,
count=1, id=262, version=30795,
count=25, id=257, version=30795,
count=601, id=1, productName=Unmarked objects,
count=138, id=261, version=33813,
count=2, id=260, version=32217,
count=50, id=260, version=33813,
count=1, id=255, version=33813,
count=1, id=258, version=33813,
CeleryLauncher.runtimeconfig.json
- SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
- MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
- SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
- SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998
- TLSH T1CEE02C7BCA10ACB315F52BBAC02AC282FE20232B00004D2A35FC180C2F3AAB30012F49
- MD5 SHA1 SHA512 TLSH
CeleryLogo.ico
- SHA256 eabe2efbb4f11ff62c0fd16f8aa5e932a52d8f0603226b8b8320e00335bda70b
- MD5 3246befa41923904f2963da9b19c2dd7
- SHA1 fdfec504286148eb258e87298df30fac0e1cb606
- SHA512 7e234fb730c67e233cac775feb793376fcd9a9548025867ffbf9420398fccc72287bc39162cdacfba6b43613fa54695a1c0b8a14b45f6a381959d3e4cb728185
- SSDEEP 48:4MR4sNF78zZHhU2fjhzoivJxBx9thQPvsFwz10C6u4N2y+AIXanZ2xuxh+7P:HmM8/WijFtYaQ0juXj/y56P
- TLSH T167811982FD3B7859FE2F6A3303580AB39B9E6D53F6459231978CFC676C125C0044083A
- MD5 SHA1 SHA512 SSDEEP TLSH
CeleryLogo.png
- SHA256 bdaaba382b0884c9e3416fd5d0d3d6024e3a8f8ecc89e218aa36bc914ebe9114
- MD5 bac9347d28295cb29b8be12e770fadec
- SHA1 b2c6c46fea41e95e983dde4c4a215ea9ed2f447c
- SHA512 2726fe9f8d6b406aac086ac0c38c613413d648f0501fcaf14a9d97d8804e0089ac38f7c53b5077c287ddcd71043c4b2fb9fd8266c27bb0b51bccdcf7f9e495fc
- SSDEEP 384:Z44yCiwSneFfrIOKB2nFg7+c52PkjTtKsDgtE8NIHRAe:x6Cf/KUF45PjEsS6ye
- TLSH T14862D1B5E0CAE7472B069C078A2E931A8F86CDE8CE57009C439775D358C5AC59C5276F
- MD5 SHA1 SHA512 SSDEEP TLSH
CeleryScript.bin
- SHA256 cb9fd5739dee972e8eafe3f2c12a80760724fbbb5fc9cf4a58e6018fcfd75c77
- MD5 ce4c2bdbfe9a5aff1a31e018a3d576e3
- SHA1 53c4356330b7632f13dfea7b7a2cbfe2fc38fcd6
- SHA512 31ff57619e41776b74812214ba618c55348f67e89b203d5cc65f92bc5d6078fe6b891befd66eee7d03aedc6e85139f1b69feceed89f44011d8764d99f4dd5e2e
- SSDEEP 3072:Yub5crqB6mmUjiWKa7MgdMT2222222222222UnD222222222222222222222222F:Yu10qB6mmUjiWKa7Mgdg22222222222W
- TLSH T136048B5964B160459FDC1CE3E0A80A0A0B18E470BDDE66670A5B2D5F3AF3389953BFD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\CI_WS\Ws\198629\Source\Costura_Fody\src\Costura\obj\Release\netstandard1.0\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Dragablz.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c5724efe19f5945143626a8270c9c3a188d4886eeaca083c57c742a985c7338
- MD5 5a9583a7bed76b2e94091f9b74716f68
- SHA1 60552dc4ed629b32a7c0e7b31406a21829bdc38e
- SHA512 8ab70fd60a27a80e43a270a401e8772833ad0a11ade1ea13483b37b1a02dbb70679bbe200fceca632ee1ba8df66a95a51a2fe65671eb3ae596682d3e1ee1c0d5
- SSDEEP 6144:fTuK/5J3BPYcKHJv8ahfgfkMMafGfCfDf2fE:fKKhP+Dhfgf7fGfCfDf2f
- TLSH T123346D4033700775C6BF8BB5EA615528EA30E4D2F262D74539C92EED2CD37908A653BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
245122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\dragablz\Dragablz\obj\Release\net45\Dragablz.pdb
mscoree
_CorDllMain
Name
.text
Size
231KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1004B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MaterialDesignColors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1966082c8efa5ecddac7fd8b3e3b86a63599602d18bdff17e7c366d49603aaf0
- MD5 d2207fccbdd6caa91c43776559ce401f
- SHA1 4f78f282a238b21ad1f995f154d624865d08a38a
- SHA512 d4984e3a6d82e7ebe11c2f7ea07092e60ef1396849921c6c0a463dd9b38836c5f6799e79f932bddc62b89d7a9896b5e5ba931c3c8cbfedff51076a41796a8c0e
- SSDEEP 1536:1r1In+fq1fDfDemxD0EsXpGX0EOAyzU7fKoVxbzQXT:B1WB1PerAjOAL7fKoVxb2T
- TLSH T1BA54755C1250E0FED813567A5838359972277A36AB948F8AEEAF71FD8C1600B4F331E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
307850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignColors.Wpf\obj\Release\net462\MaterialDesignColors.pdb
mscoree
_CorDllMain
Name
.text
Size
293KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
MaterialDesignExtensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c5b93560fa74b9a05959aae5116da59495d36782d2e17e45f0efcc06ad36ed6a
- MD5 6da7ae89f1eac96f143dc5200031d8b8
- SHA1 d9dc3936bc9a288a727cb2295c3d05899adcc9c8
- SHA512 3929f7092a5acb5ae3333e7e0a9ac2a403b78c8c8ad35a17ece25e6688a61a0f7e4b701691b02ad2941c6e15d2262c6f8ae76413af93dc92aa422e1738147e94
- SSDEEP 6144:OM2EyV6zxDNFOzaFkpXeRk7ecDfE0MHOZB0zSvo1UvEGK262:nGVcxHOzxpuRk7emfE0MHOZB0zSvo1UJ
- TLSH T1F7743B1023B8466EC67F8775E5E14000DB31B96725A3D79D2ED92CDF68E3704836A3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
362382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\GitRepositories\MaterialDesignExtensions\MaterialDesignExtensions\obj\Release\net45\MaterialDesignExtensions.pdb
mscoree
_CorDllMain
Name
.text
Size
346KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c2441011ec290b3408391f32072379f677ab3fa4507c4304167cd82fad6593c1
- MD5 c4b4a5f4f28d47239eb4e37cb3cc8046
- SHA1 ed86941cf065f91758d536d8e13cc2542cc38922
- SHA512 440ee33d5a830d9c59d96367f2a43d4a4113f6fe0924a691e682a2e9251a8615e52177dcb9af225dba538a8a3893ac85be79e9c1aa687034e3da6c95191dc645
- SSDEEP 12288:EB7Md7DkbrB3kPo+iKvRFNLe1+imQ9pRFZNIEJdIElxPrEIvLcglxMwCepM1STUH:EeFP7
- TLSH T18CA4502223FE821AFAF66FB5957412204BF6FCD6B979D25E059C912D0D72B40C9A1333
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1f:1f:17:de:d7:95:c6:e3:08:fd:e0:1a:bb:77:cf:e8:6c:71:9c:9c:62:31:6d:77:97:3e:25:c9:fa:17:26:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:2b:0a:49:d9:d2:91:7e:ac:00:00:00:00:03:3c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c9:fa:d5:8e:25:20:74:02:5e:00:01:00:00:01:c9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
451826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
433KB
Virtual Size
433KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.WinForms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c9eeff2dd13109f41447a92763d31aaa07369c58a570c18bbb851824a77da98a
- MD5 e6f424ee6036ee7d58283780b705be8c
- SHA1 c17fc397711fb2e0c400007620c76e70c956dd9c
- SHA512 1d255265115a4a2238a21e3ade35101babcbf9d5de58521365666b9564681119c4b7f20ed6a6c16fb6120ab19106fa40f25421da938b7fee7b8a5e7758f2c22f
- SSDEEP 768:ejIHFTA42CL9tcZDgcEST3p4Jjrjh2jJFSgyauYv1JKia5/Zi/WGQKVu6bL7RSOX:AIS3C5tcZDgcEST3p4JjrjaJFSgyau0H
- TLSH T162033B00839C8617E6EBAFB865B0A1611B3ABEC37A61D39D5D88F0E91DB37E05510377
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
59:b3:1e:c6:dd:6e:ad:bf:1a:7d:64:d2:5d:36:bc:61:e3:69:f3:e1:ae:8d:14:9f:35:31:d8:71:2e:1f:cd:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c7:fb:00:a0:4a:5b:f2:27:dc:00:01:00:00:01:c7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
33338
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\release\net45\Microsoft.Web.WebView2.WinForms.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 15bcd610a80632ef59d911a8447b11127cdeafbf147c844f1b740735efdf338a
- MD5 0241e0a42b292e0c9b585470c613ec78
- SHA1 74e4ab7e37bff177a394617923baddfcf087c0e1
- SHA512 bd083301c6f93a1852c76686797919787f439c65ea11d430701257fa4d3791a4eff892b6ceea1c534d832bfbc0b0ecca3f671e3a9c50f34089f919e3756882f0
- SSDEEP 768:k2TI5VoCjJ4Jd7U2zkQ+Z8cDP/ryEH0yBy4JjrD1h2jVh3URGvkz7FKKa5/Bi/xm:VE5tjJ4Y2zf+Z8cDP/ryEH0yBy4JjrDC
- TLSH T1F5136CD413EC452AE2FF5EB8A57589510A39FF433A60CB8E19D8B1E90DB73D019503AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
46:c3:c1:88:64:a8:85:3c:f4:fd:38:e5:3b:98:53:16:ce:3b:3e:bb:43:01:12:1a:fc:da:5b:55:2b:a7:85:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c5:03:cd:cd:21:a1:f4:ef:39:00:01:00:00:01:c5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
39998
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\release\net45\Microsoft.Web.WebView2.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Xaml.Behaviors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b864da9d88414877cea9b1a016146265a5fb9d0e12f4dbb1dccc0cc998119a54
- MD5 ec5a1abee150abe698689211b07cd1ec
- SHA1 affc3cb47da8fe76986d271cdc3e7ea345cc04e5
- SHA512 a2b55b4ffc3f11546ed8d3457e98b986c089e25229bd687da35d45d63e4860722e8b13826d3a3daa1be843cf3a4ae3da4cf9b6fdcb5d1a4948648537e683789f
- SSDEEP 3072:UAyazS96IT0O6gAf+LwCMe1u051dXcr9/soMEs5r/j9:tyhYIT0O65cwCMyE
- TLSH T1AAE34B9593FC8A2EC7FF0635E0B451145631F757B923DB4D6EC0A1AD0993382A6223BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
02:f6:ad:1a:99:d8:c9:42:80:8f:cc:44:ff:d9:72:82:6f:4d:5c:df:3a:cb:db:82:b0:aa:c6:8f:6d:b7:ee:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 18, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7880-E390-8014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:5c:86:d2:e3:ec:39:f6:8b:38:00:00:00:00:01:5c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
141614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\src\Microsoft.Xaml.Behaviors\obj\Release\net45\Microsoft.Xaml.Behaviors.pdb
mscoree
_CorDllMain
Name
.text
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Diagnostics.DiagnosticSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d22133818a30313e0becf010d78a556a56b34ea361dbd33588c9817631fed540
- MD5 8d9df432109f1cfdd86723b5f171e3d7
- SHA1 85dc92edd4b0049ed9049e075c4def8a3d64e43b
- SHA512 5c83303934eecfa61c43a071d29c98e5804d37a5dc7f7b035772d6a168b0c5e65dfabef20b46214e65493c4bda44831cafee83615498fbe9e718c884f4650edf
- SSDEEP 384:iQobG82oiaPaf/gn5LQ0+0zdQUv2CtyW8fiFISWbW9pWJbWivT1Nq0GftpBjAvnC:nA299fI5dxzL2CC11vimvnEBBNFT
- TLSH T145F25B54EBAC8953DEE71D3062A4D9423A3AEB936C10C25E2699E18D0D83BD1EB11737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d6:fb:4d:67:72:14:08:d2:75:46:a0:06:cb:be:f9:d3:5f:db:20:bd:97:db:cd:de:3c:cd:a0:78:2f:b1:93:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
bc:c6:7a:ba:4c:c6:19:72:95:75:c0:52:c5:b2:9c:4b:5f:0f:69:2e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c9:64:4d:16:db:1a:7d:b3:15:00:00:00:00:00:c9
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a1:a5:fd:b9:ee:a7:fc:9e:9d:00:00:00:00:00:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
24690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.Diagnostics.DiagnosticSource\System.Diagnostics.DiagnosticSource.pdb
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Monaco/index.html
- SHA256 3818906ed429acd27aabad7ec8771893d60658ea31b8d0c92418b96de8ee94e6
- MD5 8132342ce4b039603cbb3b1a32ab859b
- SHA1 66c46050a6e5b08758c00455ae26a6c66e94ce4c
- SHA512 44d93118187e703af1fc1627de7e97c39072e666c9086b1b4c00a7eadce1913c84dc97e8f80e2b514154ef66b23baddbfd71a2faa250735ddf4d2bc12709cef4
- SSDEEP 192:oL3bXRggAbYm/9mv2Oxr09VpDwFgBsK7u24FzTkcmc/VT+9taAc4dReigXN:2RggAbYmbD9V9wFgBs+SFN
- TLSH T15B5232D8B45F548E32A2636991BBF11AE82DC23BA00101FBB6DDE570CFB505542A7A7C
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/base/browser/ui/codicons/codicon/codicon.ttf
- SHA256 4946e7465803ccab735800d9236f188c2200d28b395e77727e9aa0baa443b87a
- MD5 a1cef3d530e1adb0f52b2f62994a2aca
- SHA1 074579894ad91265941fbce44d2b41c863797cf6
- SHA512 423656417849bddd0f7bf01138d9de54b334fc0ca64f28c5d679f66e38f5bc3c601a0faa166734cde4c2ec1e56983c36ceabdb3265c414fc40a7ee3798ede52d
- SSDEEP 1536:ex5Ez/D8G5dlHwkP/7BzekxVL7/b/SS0/hczE00phJgZExGk:ex5Ez/D84HwKxemVHbKSm+zEXHJMrk
- TLSH T12B637C06C3615E6ECD739A7E459241118995A406F37FCFF3E947BA23801E8DA0FC9E29
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/base/worker/workerMain.js
- SHA256 19b566655d73370a820a7d6fffe7af03dba3af4997016c0983be5bd188603ec2
- MD5 9ce9e46b6d66d8b2dbcabba577cad2ed
- SHA1 397b0e9e7b2bee37a8444e84bb9788a0bdcb023e
- SHA512 f322ea669fa81397066edef062721ae3dd515b3d61c4ad7bef0db0eb3a53f056da298fd4f761bd3e5d613e6f5803a7c35ed056085ac3b97e06c7bfd47fffad49
- SSDEEP 1536:mi5eQeCEwCP1m9JXKmA1xKzyOQJf9X2K7eM9bWXsUK5QSkSoIMQwr+ZjtQYyeTMO:mHTdkKmA1yyOQJl2K7ns6dZ/RVaNzY
- TLSH T1C9044CC53265984353E652F5A07B0107FA38B877680C556CF3A8C9DF2D6A88760BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes.js
- SHA256 1fbe4337327ef99c9caba74678cfff28652606fd667dbca34f12e809738010d9
- MD5 eb6fde8de905af68c855a2506c8a8204
- SHA1 32b172578f398151be79f78bdeb15eeff4a83020
- SHA512 6e95ecdfbabf20c2e717006ea00fa92d79e577cf262460cef7f3db7bb4fa87585bed99b6a1bd1d865c5e5184044b0244aa0823580c9444b1f2ff013057f54235
- TLSH T133517096B7CE6BAF598C33E8E5778406A69FE5336115883DFE0C90C420D3119E2E89F5
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/base.js
- SHA256 9a6c60193eb2dda7c2682bf9c7ff7e01b0f6000d70881583f0055782c8b2c619
- MD5 29e50887a6f1c445e0f63bed73eefb83
- SHA1 b8e006b9ad14bb6012497e164d9a4f926e2d568d
- SHA512 16cc7fd8b5641d347a6a9e8542a6ab29d71a432dfb2f72dae05b21b274d92208ec7c5a9ad1ba313658f3a68aebd9edc3d0bcbf07a03d0f16eae95568f175dbf4
- TLSH T1CCF0976BF78F30CA1E474385A73AC1495C6EDC32D2322035F51CEAA94488C2923468AE
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes.js
- SHA256 75418233aff9a1401f6c467f8ca20999803436bc1ebb463123d1fb94dcff1f38
- MD5 fabe9b3ec7774eb374f18709ab41c8c0
- SHA1 de6c19413ef008000357bccea90faf0d23ccf605
- SHA512 d7b4a9dbfab0ec55e27b2ded86066b37ebea7d50b3b6b28f44c996f8280463176f1107c6bf15a52fb700f88ac3e0e7b87fb8a50664da9b31fc0e89a38d2055e9
- SSDEEP 768:EDVdzN+yYumzw/Wx5nYCH0e2zBsGMPv3lHhj4MyjKG9jn9/j7NFvHR0hT/YEkd3M:H6/W3YCUpqUDW
- TLSH T1E2E231E7F38C3593199B4784A27EC68539BEF6BDE4F10079782C5608079481933AB67A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
- SHA256 ce2e06aaa97355c4f68a0793c41d4e068b3e1a225f5376d9dd3f4016e0441c7a
- MD5 287b74a1ea581434cca8f9009f1489f2
- SHA1 877544929146171e416cc8fb33b0e7e49845df3d
- SHA512 4cd7b324ccde3fbca94ab948c4d831655125d6d4e2b237291b8e68f172cb375002c7ccdc49c3cfcf4ab6b7d65850d1a40bcc3f9979498eec697bae43dec7b54f
- SSDEEP 192:AJCfeXBM5iG6zUMmY7QMlr4qLYFQjG6AcE103aNd9xZAqGQ2qFARewPxHFTX0:9feXB2iG6zUMmY7QM54qLYFQjG6AcE1X
- TLSH T1B732BCF7F38D798719438786AB3DDE842E2ED938D93240B8F70C6615258C959232619F
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
- SHA256 9bd9c85c5d1f476e663889ab2008f83b323c8d794abb0df35d43091c689ef64d
- MD5 4d0ec8edaec389b1eba92c1d18676f09
- SHA1 6eafd8ed47700b9a2ff1e10dd7468e50fab1bf6d
- SHA512 d4c7655d7db8d4f7d4bb2d0add36bef916caf291b2855785685a3e812279369848ce081ac6fb5cc869fb827653a4a1f874273af17bee67987e3c3a441ad368e8
- TLSH T10AF0EBBBBF0B3697060B63C8AB3DD740192DC831C4624425F20C5B6040C0C2772360F9
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
- SHA256 f7ada012dcc309b7c1cd272d1a81657b0ddb3d51521e682116522099285d525e
- MD5 09bbad4c05be7ab76cc3c5ef4fa9ddc0
- SHA1 a38cb372349a2420619e2fb629f0912500dc1064
- SHA512 40b753d8e97ba46be9fe4241dbe892bdeb62c902ea088d68ee7ea5ce0506d51b16f7105355a6b5360363c80d98b0f644b7a7ea2b4262210f24870368a2629c44
- TLSH T1AB21EBF3FB8E304B1D028785573CDB011C2FD834C87210B9F108A67090C9D42225B29B
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
- SHA256 799c0657b0ab027c3ec0794e8934bed4a4a8e7f063dcae47783a7f32fbeda25c
- MD5 b1e41317d3ffe843032f5eb6f74806a9
- SHA1 506f617da8d8093ed58cfda68e0d60e1aa2ed08d
- SHA512 fb538a73935fd41b9f2ba9f6ddcdfe066f6f672d5dfe682dad301cae3392a93405fd35ee61126e9889e14f71c51e11cdecb4e20d213ba91b34801ec5b89ce02a
- SSDEEP 6144:0XUmTfyptLD/yxnbDh+hIAKVwhWppLTl+ExT3dsX34hAhbAhQ9qhjLmWhXXu:wVyx
- TLSH T136058CF7B78D6A4B2C07934AB63DCB04393EE6B4DC2254BDB65C7B2075CC901126369A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
- SHA256 807dd6d35bf5fffcd4de4aa4ed1800716223a6fe014077f23f2f652ac86d2a31
- MD5 430fa91891107d6f1f3c3392dde9ff4d
- SHA1 5d42ebec7a7c3f5e5b7eb074c38572345e33c1c1
- SHA512 22011409e428216a619ca085ce8e034dc6bc3a8f9de27fb4f2e3dd6b8aa8cc7aa3b02508af816137f646ca1fa96e083a832e68bd8c8b016bfd7a3674d532a875
- SSDEEP 384:pFcCsgQgj6bPo2nv5CYR8/+qvPNEzH+AK6/NBA8K/tQsdz6FKRjrDcWYUeih+hrA:pFcCXQgj6bPo2nv5CYR8/+qvPNEzH+Ak
- TLSH T10E72DEFBF34D36A71D4B4281EB3DEE46261FC67CD83201B0BB5C6A15164885623A785F
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Model.js
- SHA256 17b72f11f227d6261e44b0bf49d6cdc4ed88cef93c68384ba73f7550d9614d99
- MD5 6cf31f5ac3af68e878bf565c9ed6404c
- SHA1 afaa8bf2c9326ebe8658566fe6296a075d49e23c
- SHA512 0fff9572888be7dfcb792c53b006a6f4b8328d6522b971f5cb8fe9b0ce17ba9f82b6ae0a78d56cf585121a9a62772e70b03227074bb4683a52617f46c52202d2
- SSDEEP 96:AqiyuRkcbZjRZ7AiQnRztu6W6cEY4Ef+YepYk6JY3g6RtqYnFNYlyecYqzGRpYSY:AJye3VNZ7/QRvcKEe9fg6zSyz2585
- TLSH T167F142FFB34D726A18434381AF3EEE863A3EC438E87356B5B45C5128458C92533A799D
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
- SHA256 660f088e8da6e3c7c16ff4df184a92fe96c2b2ffb8c3b3411f30b68d93723dba
- MD5 c41248fefc16d5e096019eace4e8ec90
- SHA1 e22931bf5fefeb7a5fc4ce7770283328e588241a
- SHA512 98f6a1367b4be1da50d1a257e726b9c1a66ae22cb8e2d1439b1dd0b4ba4d5a7e22340b165b489911d0a8603fb5c827c7ae43d89daf10dde34352a21304265a4d
- TLSH T11621F0ABF3CE7456234701C69F3BC9492B3DDC7083220610B15C99A088B4699A6439DF
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
- SHA256 60a9fa2721d16f3162f5701b7ada27de313794b97047cc7bba25f82859e4c75e
- MD5 1b0977e0af22c275e5f7df15de461932
- SHA1 2fe9b8a3910fbf4187247dea7402baa402764210
- SHA512 8aceee740df28fdd7e28abb3b42617eca70b33756f5b414366019fead5f94f716f3fde34e3600642a6c12b7ae5904b1700332a1a3a5c20c3f5f4d609652384b6
- SSDEEP 192:AJDF/h+8NpUG1mQqJfL/3x78ONlzN1eFqT:MFJ+EpB1ifL/JNoFy
- TLSH T19ED164B6F6EE26F1187A024AAE3B894036D9B3BC94EC7068B7DC541D53CDD2C131607A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
- SHA256 251d21959744760aa1e79274b7a9fad433fd42b2d3fb4783f56f0b070d06cf8e
- MD5 b965d0ffcb61fec7f70f4f28a44e9982
- SHA1 2a4c47087318178698368ff06fef670155bdfc53
- SHA512 9da1ea797cbaba01c92dc7a68a586ceed6048565de1b8e40074a76666a8ac1df910a91c547abd5a2f8882686ed5d2cf1079cb47d626eaaf478da74b037d06af6
- SSDEEP 384:XQazTbBakPYkrvL9Li9ZV7+RSC1LQS7FihmJVPMp1TQElbvvQeTRmvhQ:XQazTbBakPhrvL9Li9ZViRp1LQS7Fihx
- TLSH T14D5265F7F34C364A1853C382AF3EEF41782EC93DD9339178B64CAA096148915276799E
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/functions-krnl.js
- SHA256 f0a206f25ddb30f7b3935e5f21d9bf50bcba3fcf891041be0c40e31d71e53e5a
- MD5 2d8fdd6e889dd22ab3f48239e3ef4e0b
- SHA1 d9a64914d84b6238489421b8af3f85f7c3e2b254
- SHA512 dd5c6bd2fbe55e566ce099e9d5a3b60e5836e2414e9cf36ce8e1755d398385aa04e6c3a7e439ab32794da06dc3773325d65c01d87d8cffb2bff4033bdd222e6a
- SSDEEP 768:47d4ogTbvgoeqYOhGE1AmsX8jYrEMGot1bdtvR+RXTJ70aEmpZpY5rJt7HG+svFs:PsxpzBBQZf69T
- TLSH T149B285DBB78E696718978713713EC2C6263EC07CE523A575BC58A608059C46C13BBB8F
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/functions.js
- SHA256 269c81ad08e8302bbd3bfc1463e2a4d5c263a20894536a913501bb36df26a196
- MD5 3f841145388311a85d830c615614eab3
- SHA1 61af50d8d6f9728507bca4c3e13e14f5f64f108d
- SHA512 22be56298a92a4cbdd01ae7ce4c9dfb5a276fc287e22e4720e4e2adb5af7d2dc30127154f5eb4f50d0826ee4094a9e093e64cbe21b9956dcce0421ac19423647
- SSDEEP 192:AJ3deBFp8Nweb2RvsYTvOZOEGOzeHUuQvZ3Okp5TrrEFfgRVpauiOQGIPLO08:IdeBFp8yebgvsYTGAEJzeHUuQvZ+kp5L
- TLSH T19E22DFDBB34F651754D79B27B13EC2D51A7EC0B8E43195B8BC9C99400A8847C13BBB8A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/globals.js
- SHA256 334af46a755d6e0262aeadb767dba63e312ad2c0505158323d9c0e6d0728c370
- MD5 354cee337dbaf64533755dddbd0459f3
- SHA1 97839f4d82cd15be561829dbdc4461ac5947b5dd
- SHA512 7212b222657ac90b7ca92568ef04de7f3969147b10945a087555633afa5d1d26adb4d1bca8c4991440d188b84f920057bed6b731edbb46f32a84382eaa577845
- TLSH T14601F50372EEB3DB1A5A23CCBD7FD504224EC1E6C02408BE63941F20BB8A4250577EA1
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/keywords.js
- SHA256 3f4ae1c666488bb398eae05c6ef9fdcf2e6c126f9b2510e6eee43a8d64d21325
- MD5 5176733f9ca5189ac3e39247a7121f9a
- SHA1 708db91150b2b968b9f70995c65d02405a5a036a
- SHA512 f2d14011392f752291b8d489120389b5ca12c553b18459945c5147f1a94f5f58882e1b4f79f030c05d8bb4cb189d38b113152ed8bce4df3e430c09a7382ed206
- TLSH T185E09A8B7BFF95DB0A0552847F3EE080204DD823C14E0A3AA3248E78408787915B9A2A
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
- SHA256 611aeca1bdc19d0cd5fd440ebf5b07a9894ff44230e7f8cf8db832b895a6d834
- MD5 f4c544ffa5cdbf5b0b978a5977c35cfd
- SHA1 0e27a3d67232c4e2ef836a4260acc434e77a8b47
- SHA512 a84aa78fa060f23a3f0ed8f12ab7585f45c0624aa3e684d7ca7f84785154f0c0b50527d5c389995c4131c994b67041089cd8a98609695b685a18f84f3efce022
- TLSH T185319DD7F38D619F4DAA4382733DDB406B1DD078D17260FDF5DDAE2461DC4580A62628
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/Krnl.js
- SHA256 039bc35b76e7137d2af8e34bcc35adc70d3c949099edd198f9987676f6b0c9e5
- MD5 31adee645af94b08a85f39aa5ab85dfb
- SHA1 0a44bbe4baefc547e76fba1847191b7e1f2c9a26
- SHA512 ec22c29d0f73b836901d7d708c90a5ceadedd6624a46bf0c850c031342c4cbf134c1c0450eabfb2c02a1c4d9d68931403aec1eeff234d0902fa0644cb7aadb61
- TLSH T17C3185C6B78EA59F4ED94389523EFF542A1DC071C12110FFB586BBA9B0EC1480691B64
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js
- SHA256 1601f42e5d9bd8257e6b4fe6857f19113023cd2ebdfcbec34a2458e3c6b28c4d
- MD5 b7e8ab61e201df8981fa7938738afeea
- SHA1 cbe2d942b8e1444f356aeb09a1fba7e374c9c169
- SHA512 f2dd1d09332996dd81c05929fc949515c290b055b38938155b5f49bd45d3e2ecbc3829226a40f6cdc6004ab163b750c6c59abd6c771a3dd22700f46aabbab46b
- SSDEEP 192:AJm5O9mLKnKsgvAKOnzKTfh+gKQy2NyL72+LKTKLbdcK2KIKD2+EHKyzc6U+j6tm:Z5O9mLKnKsmAKYzKTfh+gKQy2NyLq+L0
- TLSH T15232219FF70D32A6458766DBEE3FDC88293DD438D4B396A1F82CA550029482E136B85D
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/math.js
- SHA256 619973aa7da2c2bc8a34b121245bf083c3e90b1b9cca9d8961dd2d07885f7588
- MD5 c9be95e59dd86ab7706a36b86cb09508
- SHA1 f9434690df19efe3aa07702348641c95995094bf
- SHA512 be1f9f05fcf9b3ed991bea1883809f92b1431c2346ca43834f47e5ab8fcee7ce83785edca6db51699864ed4d3d3016e552d232d75a4dab43d2e8a274700599f8
- SSDEEP 384:S4ZscscHaA5rF6i9fx6EAu4usvo0z2/OtnJiUhSkNmajHxtk:S4Zsc7HaA5rFZfx6E74usvos2/OtnJix
- TLSH T1E952BBFBF38D3566244383C1977DCE452A6EEA38D873426AFA5C5A100789C54335789F
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/table.js
- SHA256 a0667c2236748bb1fe38a9e874332bd573b54fd6f9dfed46d7f6e0296141b056
- MD5 0efc2ec2b5741c67d8586a0de839fd09
- SHA1 fcbc6cecff7dcf017a09ffcad3614999c2f41c5a
- SHA512 57c6420f5d23c67ab5901dc7aece9118105481ebfdc2c290e4565f38efc0760091ab8d6b38c8034237ece76300e5111757135392ddd5dd4791b2bb5ecfaa21be
- SSDEEP 96:AqiuKPqgYHgbCMEYlrBaoY1yiwYXhN8hYFsx2YTVTY7A9Yl/ay/YC4EYmmWdrGni:AJ3ZCEBNYhyxxTVgA4rP4PgrGZNpo
- TLSH T19BB1C7EFF38E325719CB81E3663EDE456B6ECA34D5328671B85D865404C882C17AFC28
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/libraries/task.js
- SHA256 6368fd477fd1979301475990cfc2e7444b57c7f58691d1aa433f7463d8f2e0a0
- MD5 7145942d6ac814db089050fcf4665813
- SHA1 82a5351d3e1ca47d25c09b84b187f4a2a8fdda58
- SHA512 eab376da62ab95166d90aa1c7d70932c6a27f39bb4c1e5cf670efd3ed089a7c2be8bfbabd8d99deb9eb8041eb79fac0b32667b99b281009ea73a9f394ee0182d
- TLSH T18341EEFBB30E356356435AD55B7FE6CC5B3EC534E86211AEF14CAA650A54C2833038AE
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/modules-table.js
- SHA256 0ac3dcbaef38a2e3fc08e9358ec14602b4147188b11a08099461ea37fa410d4f
- MD5 570a07b4dceb824d0131d3d19e6a774b
- SHA1 cd89cc1f960908c88a1673ac144bae617d344e5e
- SHA512 5a0d58dc721142dd4c6fa703eacfbb2eda13951f1b8d501f7b17612048d65b215b4a10c34943b9e35151af1a6c0784580ffdfd09ad7cd9e60b4c823c143dd718
- SSDEEP 96:AqicKuBgvhPFfMUvNCiQIvthbwvKs38Jv7tQuveCbvmxFvf05FHvRtUvADtdrGvE:AJUwfSitDsszQnCyxezJtbfrGp6sg
- TLSH T12FC1D9EFF38E325719CBC1A36A3EDE056B6EC634D5328671B85D965404C882C17AFC28
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/modules.js
- SHA256 efa8feba293a8a6ca2af2eb9fec2b17bfbbf84428a7a1c80e2a36584b6a0212c
- MD5 f50fefe4e3974f1457f96f5a33ea0906
- SHA1 e3f33cbcca36349f114714b3b3a4269d6bc6af0a
- SHA512 49d9070932bc92d511462cb365669ab662abbcf01561fc2a5f005a52fd1a627a3e8191b7e0639fd28776a024a126449dba78b3c6242fc6f51dc0a06f6d7b067b
- TLSH T141F02707B3EE73CB1A88534C7E7EC049264DC0E2C029043A57896EA1EA868250532BA2
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DataModelServices.js
- SHA256 2f06d60e90c8a526f12ef0e450f77beaefda0225b79eec62b66950da28c856b3
- MD5 f9099d16ded8fb819dc0d27d078eab07
- SHA1 175b3d3f9502642d6cd153c24a5f4968b77d3550
- SHA512 a2332a87969edc8f967693b9486cad8ff28f2b761b42a06d0140d050e245b0605418df44c4e416b0e9f9b7e268fb7b75b52f1b8c5863460c934e16ff8afffafa
- SSDEEP 768:MQ0ImE5gYuucKA9oqY3oUwmsdgoOaoR0bUCwTY9oBWWU30yOjypc4r8VImCnELC3:oXtebf7MJ
- TLSH T1D02318F7F3CC38A76D438246AA3ADB402D2ED538E93670B9B7DC761950C8D181757A0A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/params/DrawingTypes.js
- SHA256 12d1a59f76c3608cd3fdbecb04c5ab72902e7a9b75ae40eda196d3d129f54301
- MD5 b585bc0a29aa91042126d74ceeeed7d2
- SHA1 8a758132b6f6853a63cc4af8f133392ccfc8464a
- SHA512 49fb90a83d25ef6b3edd8ffc342a884d61cd3c45b114f34e3969697ddbf8f831864f6f04b6ad49ff418587663e74a1946eb416746fb0697aa2a6329be740eac5
- SSDEEP 96:vmUqiAOR8XlAKYZwxX2LSuYD2TvXBSoY2EPuXuKKYBgZXpKYZy/5XtBmzQY20/+0:vmUJAOm1AlyYS7wRSsEWeK1qZdSdBmzx
- TLSH T16391019FF2CD30864BD2858A543DDD026F1CDCBAC6237F29F9DA1E145A8C119638DB16
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/params/InstanceClasses.js
- SHA256 ea34d9e29984c31632c97210a20db208c33e42776194786f2de827c2997f5623
- MD5 c4dece2fc34dfe766d3a6f7acc983cb9
- SHA1 1e3ad38c7780a50cfda5fa985ff58b83a3b54aa2
- SHA512 7647c23cd9edaa5bb4fa0ad60d749ed4bdaf0186539eea098247c5fc8bed7ec8493ecaf40079c7d48f68cdf6c8b400ed0af34e77b386de2af69b9017115b10e3
- SSDEEP 768:CMgzQgTkgBEgn4gyygHkgKkgZsgnMg0Ug+Igoegc8gb8gG4gAQg2wgKkgp8gBsgy:r3joaQTWy5Tq
- TLSH T1C17379F7F78C34172D47C286A639EF00393FD534E93215B9B6BCB625A0C8A21265B51B
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/autocompletes/snippets.js
- SHA256 9b8838acacd8610567b65dbb65981586cb4e23ba1ab8623bc285dda454b813b9
- MD5 309e194818904be8d5cd8f824eea0849
- SHA1 27854c536a3c2a2bf99364a5971bb0e0b9269d78
- SHA512 403e44e99ca35d0ee2c908e9e926ba1c93c7938f9134cf4722940143d1e665a796e359013682a4223d5087b38ffb07f4f00a8986f13377d1e13cfd93946d717d
- TLSH T10531CF8F728F9CDF819C039E41BEE7E6105CE1FEC262062EB208572555C4628653F319
- MD5 SHA1 SHA512 TLSH
bin/Monaco/vs/basic-languages/lua/lua.js
- SHA256 e5a18ba57542748e7ad026cffad053bb6dfdbc2bf0304db823ceadf20008c431
- MD5 51d8500a9a01ee3e066e3ca3f15a251a
- SHA1 cdec3a155480275a4d1781acf509ea800fbb2477
- SHA512 0a421cb5c2f4f2adc68b091ab9a67191b7e6cb19b12a1499d5ca7f493fc118a2ff68d66c0bac92667ae482ba188265314be14cf13bc94e21e4362b62060d7363
- SSDEEP 768:FXkAlD94XFDOvvEEMhOIb5EMhtnUEW1rEmAAtWUnWTEOIiY6Unw5t9JTC:dkuD94VDOvvEEMhOIb5EMhtnUEW1rEmV
- TLSH T115B25F199DC251245692E36B8BEF9004A4688513EC19F8B0BAAD83549F4DD0CD3FFBBD
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/snippets.js
- SHA256 943ce614749f67dffe97b2afb88f3c76fd91545c4100a0e649d45e9fc9b98a03
- MD5 89930ae7aaf2478333dbc14e4c93d8b9
- SHA1 10b2fbd6703f3ab213dc386a3380b67722ca84cb
- SHA512 10b23981e8b8144e8e184aecd0995a6b96ce6e5df8ee8658c376d850884aba75914ce29e3d1ef76fa22eccda07aed313f78edf922b6a2f32d3fccdd5de34d0b6
- SSDEEP 384:IJEyCxCeOq51h9iH/G08mBsI1y7QFo8PRugvsziH9E0gJM7FFvS/S5E8E/ufg+8/:IWyCxC3I78fd86pQ7QFo8PRugvsziH9S
- TLSH T1C652EDDFB79E50AB44DB8B1AB13EC1D1192DC0BCD4759578BD98D8140A8887813BBBCB
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/monaco.contribution.js
- SHA256 42e79ec54895ee725c4f793b79fc5ca3c997a0193645060233277e524a7a34a4
- MD5 3161b5db765e3bb316c23a5e32871f82
- SHA1 a96b95d4c63186d7243fd4e32ed4566a613afd4a
- SHA512 ae9d181d2908261376f6afd2282e134bc38fc2f5a896337bc41fd7f06460c74b67b66b726dc39d53f743a7e8c99fc4c8911c1e9902f8db4bcb9dfd85ab9072a4
- SSDEEP 192:hhrM409fKYTxXTUTSTBjTYT9NlTOTgTQTCT/TUTjTNTbTnTxTTT7YAHTwTbTFsTw:hynJYA41wpuzVniHQ
- TLSH T1DED2248D5D8587DB1BC2B0F4A81B9C05E5A2902670093C5FAB91FE9F74AA3CCE173C59
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.css
- SHA256 85b305d49bae83ae9fb7d5d1c84d93989e3dc252db38a7dc07b7d349902a89ce
- MD5 deb0a19013648d19143c4e9981c87f02
- SHA1 0f4f223bae72cbec3f87be273223c11e0a6672e5
- SHA512 456380613f3c73abe04b90f2fb5aa436bccdeb63e206cc63f6301bca85b241b363955d8fb574687c1182cd0a4efc82a9391961b99985f4a8b9483b42ccbeeb42
- SSDEEP 1536:8M3/S2lRD4PfPuPjPAPdjNZBmBkHE0akfPZP/PyM:J8NZBmBkHE0akP
- TLSH T1C26384EF26002D2862EB8137A681DFD971F9D473F9224EE9ACBC7B20954E1E50717538
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.js
- SHA256 f9ffe3e01f9bf58ab25b37da98eaf5e80f6e37f9347e663bf249d3a6190a28ca
- MD5 d9723831dc0cce5974cb423729e38e5c
- SHA1 a8298c1064526017bf0121795051323dc9ce322f
- SHA512 0e8b6ed339bb44068ca3dede1699d827717382e3c4782e5f53ec941c4986410f0b858bceb643c898e6392ab639649266fb27f5d1ded0bd0d3401d2749aacddf6
- SSDEEP 49152:F5T6aBj6hpnDeB0eXoBB1f5dd5LeZhtic2LLsz+nK9zTGcqS9o7KpSXxKVqeY0XJ:MsF
- TLSH T116C52CA63155285343DB50FBA8B60103B2396592B809946CF7BC5CDE269FD8233B7F78
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.de.js
- SHA256 217aad6fe9cc93483f3423bd790c1d840b1aba274439b7c8ec34b5d14811eed7
- MD5 3442df530f13346a214fe2f322cb033d
- SHA1 27d3787aecc0fe9720da1ea7f17c51ba95b98fa4
- SHA512 5f5d26adf313f588480abbbfcb7509e0fed0b52908420a4548adcc1a358c00f366c34529e0ecb10cd9cc64316dcffc7fed93794e07ea3e9171a94f68f58316f6
- SSDEEP 1536:rSrGPsnVxWQ2AhURY5pF7Plzyhvv09/yy37AhkWIIiWjzQo3X3Z5qYYokE9pMpOR:rQtHTPlAv6WjzQo3XD
- TLSH T18E73FAB29C8B31675EC62391FB406C6B7B1CD16E7642601D08FFC06A7267AF9C29E471
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.es.js
- SHA256 656dc966b4ab36a0d7846217a2434394810357cef5cd3bc8877fab4637c81f53
- MD5 6909aeb1b135c2e7cebfd010ce361337
- SHA1 dcf9c5146c89c0fdfa70e7db0c23cd7047b3b0e0
- SHA512 137c528923ddb5d852a9784b521a57da32932e034c1c8a23b2f5932336b9e076febe5a8c67d50b8062b7faabee5031a1e567db5708b7cb1ab87bc468f59fd9ba
- SSDEEP 1536:tS3YhxH3zNFqZdQM3Zyxgc3PtjGHhCv0qUfOBHTBuVF:t73Kpr6GBCvTUfOBHTBuH
- TLSH T1BB73543A47C8476311D302CEF2D3D503D19CF8CA6168E1A7A57BDA5960CCEA8D17BB29
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.fr.js
- SHA256 9b7c1a14b3960b99b678df79ef50713d8b2a61b53a3e40533cf7007653e4f3b8
- MD5 be07ebb97a18651d640b01f71d56ce1e
- SHA1 97aa9ceec575aff5f9d04dcb939785074516a560
- SHA512 bd12807c96dfe43045e853ff47ac7d3c28350309ddbe646945de9ed31b480687233b11fb22515086df90b7346b8759ce658fbcedd17ab47f602b728915018de9
- SSDEEP 1536:3501img/YZbtAW6kyGL7TBP+PkjCpjn634W:35eihYZmW6kyGL52PtpjnO4W
- TLSH T14B837547A7C4315125C71AA3FAA14583D86CCD8DB3C8D311FCAB56DD01CA8ECB2DB6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.it.js
- SHA256 5080d040135141347236deabe17e3bb3136eee2db6f5b0bd172bd43ee5ea1cf3
- MD5 2edddc05f7e353a4a762ebc369c2d5da
- SHA1 48da773df82f07050367a9a3315950b34e213d07
- SHA512 c83089e9a04b04c3c32571846aa799650214cafdedc3e538bd5b53e46ca663befcc25c76432261f19492d8bf147cc3873a0919a1ea4d292cae08bbff8eb917dc
- SSDEEP 1536:8Gy/XDfnwyS5y1tpeq2F91J1qn4tmdy3SPZ:8Gy/XDwyS52tpeq2F91J1qn4tmdy2
- TLSH T1BD73B93D01C121112DDB13DEE165648EFB76A8CCFD9C316959AC0A1D20CEE98B29F77A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.ja.js
- SHA256 89c71964ce3a43359e7479e18456d25891698e770dcd2c371c4aa273dfedcbaf
- MD5 6fb600ddd7248a6615fbf70f7a8259b1
- SHA1 47af0949467d6d16ee38dabfc8da40736a759b6d
- SHA512 23b6daf755f924164ecd3daf30a07a90d04d06b1561e05c82b244897e253bb9321ff9ff4afce5d855626e8076c9c1668e7b5e5133479ad36c55e08ab0010b877
- SSDEEP 3072:u5hKeqYF/HZmcLfPqq2y+qe9uiOowffWuTFAwCHES+g66vb:u5hKet7owBJAwCHES+g6C
- TLSH T148F3066FEA090EBF5873859EFE527A8664E4AF191330F21B975CB7723D20062574A31C
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.js
- SHA256 5d225bedcf756f8f4b89576f2e1f9bf3a2196cacae88a99492b653ac00571a62
- MD5 0c72cae1f023116b3c4473788f17a1db
- SHA1 201ac72f0e90bdfe7b58fb2309c05bcf06659c35
- SHA512 6ed6d2e8c87d62153f4a1999daa512479351b7ac2f07e82f118c7af432993992d679e2d4929c6723200b00ba3018d82acc95173fa15d38a3732951dfdcbef645
- SSDEEP 768:m8Zn/0UwoJT/Qq4Pl0ZrJvv+WuYKqk3VeebHa3g10v0gMS:m8ZLLpuYKqk3VeebWMS
- TLSH T13453B563A34C13322A8709EBB6DED19467194D7D7352136678ECD438228B4E493BF9F4
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.ko.js
- SHA256 8dff673ceb0dcb5c4ab812caaf7dd5f275f787a0df6305104c635062c692f1dc
- MD5 80a13e1606f2739b561b11b22c660eb5
- SHA1 b6ba4cfe633c02114d700db1a4d987e8544067ff
- SHA512 589448f3abf36b19b3c80b00bde94d0d2b06e98762847f6d77b90edae1c4ecc81b8ddc1fa5b247e512bf8d85e55cfb0fee02d3292f47d5441b4f1098a2565964
- SSDEEP 768:P/SDJJxzxOjp7fxQbEGgnjQaWaWKFcTqKYjl4CbTBNq0caAktPREL6qfFQrPE+eC:P/S1XpEGgjmaWNqku62
- TLSH T1ECD37B1A8B25F9E25E9684AAFD5913CCD6190B32D1E5BB38C2FFC1A7B352058D943F04
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.ru.js
- SHA256 6d66cea2afb2db2ce4a9dd69afc992d27cafb87a4774afd056504be69ea6b910
- MD5 55758fd0a149eb64f88b696a3aa28438
- SHA1 d95567a199d880ebdbfd6ee1715fc3d1796c7474
- SHA512 102b39aa6acf0becc7636c2db43fe5fedab0faf6850cff9ebd5215cdd61c630495ac0db242654849c0b5d91023dbb0c2fac170a2401e948a36d47f3e94b397ef
- SSDEEP 384:hS8XFGk0d+Hkx1arSOG8+kPKQK1yHFx6n10vHDez:0Vd365PKx10vyz
- TLSH T18F645FD1D97B095DAAC43103F6793CEE38106C86EA48D37BEC7C219BE680395D39179A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
- SHA256 32fb2dc839e58028ea4962f45fb6be774e74f2d526546d705d816b5b01aadb58
- MD5 2976b84e043f5d36760e1714bb664c12
- SHA1 6333fc72cecbadbe2df1259c4dda38ca76afb566
- SHA512 d20506a544b6036f353e65ab8ff7ae35d9d9abb169d6659ffff800d15c57d29324eea2d2f34ee2cb2b197ada95f6fe2e761e1b86c18612b812d513aba42d740b
- SSDEEP 3072:asO2S8LZbbr+OTko0wbT6U17POFoGL+D/Ju63Ka1dHGdG5KBGuHv9QeleX:asNS8LZbbrv0wbT6U17POqGL+D/Ju63p
- TLSH T15EA3983D5B462A5249FB89EADD104E4FEAD28F052242DE3BD2F8FE56B700139C941739
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
- SHA256 659efbd4e50609b5c17d6c13c588d3e69c6378688204c264f7d37c606f07bf53
- MD5 8151145974946eb5332827d53fe28fc0
- SHA1 51d7a355d6e458338d4cad5b6c01f2dd0ce8af20
- SHA512 9d8c6b9a58c42dc71ffdec4ad382febee3494590808c203950e01e4557a2047296a61cb2a854bd7b254d139e4c945dbb33dbe482752adef96ff4ed5335b372c6
- SSDEEP 3072:0mWmqaax9kO+x7jEtIDKIu7Q2DFJln6Hn/X7TgFcuo3pSjyV8i1gwJEsS1fq14q5:0Pmqaax9kO+x7jEtIDKIu7Q2DFJln6H3
- TLSH T18AA3117E1B54299118FB94DADE605E8FA9CAEF082203DE37D5F8AE917700039C94673C
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/loader.js
- SHA256 d423befdd508b4540874b3dee8fd559fb7a0e56a29d7ca774eaed0df784bc2f1
- MD5 1f4fb062c471465ac8a71e7c7de863bf
- SHA1 2882b45fb948339c82c9f672ca38a063bd98b930
- SHA512 5913c5a0ec50021c93910bdbb65338256dea4339866c010f328c819d29c415056943f0875f9ff0b120924ba9ed4af91d7d23d0b0aeb5cec0638823463a3b007f
- SSDEEP 768:MFvC2l3lndKLa2wE7n0UvEUwtBSOjIiOGagWDrKdF6eCGiVajW4g83:Kz3lnGbF5KBn
- TLSH T1F8E2A5D9BBA474234257F4F4D07F011BD6B695AA040C802CB14DD9EE2CBD989A53EF78
- MD5 SHA1 SHA512 SSDEEP TLSH
runtimes/win-arm64/native/WebView2Loader.dll
- SHA256 02db1c3c3f5606769393199136148679b2334d16d5afb7ed4ef4654d7316edf4
- MD5 6945039d194214317f9bbdc40c57ef8c
- SHA1 15d08817c393deff51d4ce44741e5a6984783e2b
- SHA512 a300aa9698523bca861bbb1c00f9b256c97baa50510650165edd4c845c37a27ab1c687ae7f52a13eaebde8212fb159f07a505dc22f1bb315bc5e4eb8756da14e
- SSDEEP 3072:1MASjt+Wsz3AGsMj+y5TWhEtNEOKbmCj6:kt+Ws3iEt6OK6D
- TLSH T193D3099326CD0457D2D2EF3CC4278954272BB9694B308BCB3692411EDE6FBD4DEB0926
- MD5 SHA1 SHA512 SSDEEP TLSH
runtimes/win-x64/native/WebView2Loader.dll
- IMPHASH aaa8a1994a594e4746a652eda600aebf
- SHA256 1b23ff90ac64223bcb21b14a107079c7bb4ad0697ed841a0c0485c7d0fe0a175
- MD5 b1cc3d7d194abc6908801cd0334a6c70
- SHA1 5f3c72eafab090095a08f17f026415cbfefa8349
- SHA512 ed351fe2efe92df52ba79f4239297ea20f8f4a061c413d81f35b29bc8b5db95500c4f5a631439a0abc1d5753b616297fa69aa04ee96f807f78cc0c3f69d9c85d
- SSDEEP 3072:qKLKQDEW3JHtcGNd/SzCzkYLSq9hX4qSd/8SALTUYrEtnWldxP2HK:NTBt9Nd/9d18qSGEtmx
- TLSH T1C6F36D57B3E5007BE1678274C9934A56E77778110B60AFDF03A482691F237E4AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fc:d9:ff:45:ce:dd:69:40:84:14:bf:7f:56:d8:a9:e6:e1:d5:19:c6:85:7f:f6:8b:4f:c9:9d:e0:d9:a2:36:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c1:3e:a0:83:9c:e0:09:af:c5:00:01:00:00:01:c1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
2
Major OS version
5
Entry point
18032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb
kernel32
CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Name
.text
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
140B
Characteristics
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
runtimes/win-x86/native/WebView2Loader.dll
- IMPHASH 608537c42a46a95b31cc1ef01ab6eeb0
- SHA256 fc14dc275026daba48c4014a0de0f4e228043fa899c9ae0308f6ea2c239af1f1
- MD5 d0b3cc3feef9a483b63d180ccdc1992a
- SHA1 812388ee2b1bca8946203979c3f4c427aef22c1f
- SHA512 2185b810fd90d812035543efbadd684c12f835e7dcfb949324daa5954950674aea621280a8f408e17deae8f01b2c19b6dce64238f2843e30a1dfcb8e449a980a
- SSDEEP 3072:nsaDUh9T2dO9O3ed9zJ11Xx3QKHwsTPOEt+AlL0F3Hd:nsp9T2dO4o91MEt7h839
- TLSH T1D8B35B51B6D08471E5BE09380874EBA96B3F7A50DF608DEB27541AB94E317C0DF34A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:ea:c3:64:d8:92:9a:17:5f:f3:f5:15:b8:a6:cf:c1:bd:32:2c:b9:a9:7c:66:6e:e2:ff:3a:a7:65:3d:4b:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 13, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 16, 2023 - Jan 31, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:bf:df:6e:b9:04:15:52:28:58:00:01:00:00:01:bf
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
5
Entry point
16368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb
kernel32
CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
settings
- SHA256 a6d3d93074267c7c701f92ac0899710228ce9f323ced8780432c6c25aae832c0
- MD5 086bb083756e230b9451741a2b977636
- SHA1 3dac45c483668977b5884d3588865215703a1925
- SHA512 695937fc323bb64f9576f5d77db45a68e0d0839a629720fc61f878d79a3db9a70d772ba0e0e3aafea7200e38f445d3b54ea0ff392489768074dead9fae359cba
- TLSH T144A002C00145F53372920F4C50050305433C00C5048AF31D1040B1150B3061EF29B202
- MD5 SHA1 SHA512 TLSH