malware_analysis.zip
- SHA256 c2d3bb8a95ffa9ab2c3aebc9112eaffbf2731ddc0a9a42e817549780445d3cbf
Overview
overview
3Static
static
3malware_analysis.zip
windows10-2004-x64
1malware_analysis.zip
windows11-ltsc_2024-x64
1keygen/IDE...config
windows10-2004-x64
3keygen/IDE...config
windows11-ltsc_2024-x64
3keygen/Mic...es.dll
windows10-2004-x64
1keygen/Mic...es.dll
windows11-ltsc_2024-x64
1keygen/Mic...es.xml
windows10-2004-x64
3keygen/Mic...es.xml
windows11-ltsc_2024-x64
1keygen/Mic...er.dll
windows10-2004-x64
1keygen/Mic...er.dll
windows11-ltsc_2024-x64
1keygen/Mic...er.xml
windows10-2004-x64
3keygen/Mic...er.xml
windows11-ltsc_2024-x64
1keygen/Mic...ns.dll
windows10-2004-x64
1keygen/Mic...ns.dll
windows11-ltsc_2024-x64
1keygen/Mic...ns.xml
windows10-2004-x64
3keygen/Mic...ns.xml
windows11-ltsc_2024-x64
1keygen/Mic...ns.dll
windows10-2004-x64
1keygen/Mic...ns.dll
windows11-ltsc_2024-x64
1keygen/Mic...ns.xml
windows10-2004-x64
3keygen/Mic...ns.xml
windows11-ltsc_2024-x64
1keygen/Mic...ns.dll
windows10-2004-x64
1keygen/Mic...ns.dll
windows11-ltsc_2024-x64
1keygen/Mic...ns.xml
windows10-2004-x64
3keygen/Mic...ns.xml
windows11-ltsc_2024-x64
1keygen/Mic...ng.dll
windows10-2004-x64
1keygen/Mic...ng.dll
windows11-ltsc_2024-x64
1keygen/Mic...ng.xml
windows10-2004-x64
3keygen/Mic...ng.xml
windows11-ltsc_2024-x64
1keygen/Mic...ns.dll
windows10-2004-x64
1keygen/Mic...ns.dll
windows11-ltsc_2024-x64
1keygen/Mic...ns.xml
windows10-2004-x64
3keygen/Mic...ns.xml
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
malware_analysis.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
malware_analysis.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
keygen/IDEA_Statica_v26_kg.exe.config
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral4
Sample
keygen/IDEA_Statica_v26_kg.exe.config
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral5
Sample
keygen/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral6
Sample
keygen/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral7
Sample
keygen/Microsoft.Bcl.AsyncInterfaces.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral8
Sample
keygen/Microsoft.Bcl.AsyncInterfaces.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral9
Sample
keygen/Microsoft.Bcl.TimeProvider.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral10
Sample
keygen/Microsoft.Bcl.TimeProvider.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral11
Sample
keygen/Microsoft.Bcl.TimeProvider.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral12
Sample
keygen/Microsoft.Bcl.TimeProvider.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral13
Sample
keygen/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral14
Sample
keygen/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral15
Sample
keygen/Microsoft.Extensions.Logging.Abstractions.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral16
Sample
keygen/Microsoft.Extensions.Logging.Abstractions.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral17
Sample
keygen/Microsoft.IdentityModel.Abstractions.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral18
Sample
keygen/Microsoft.IdentityModel.Abstractions.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral19
Sample
keygen/Microsoft.IdentityModel.Abstractions.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral20
Sample
keygen/Microsoft.IdentityModel.Abstractions.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral21
Sample
keygen/Microsoft.IdentityModel.JsonWebTokens.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral22
Sample
keygen/Microsoft.IdentityModel.JsonWebTokens.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral23
Sample
keygen/Microsoft.IdentityModel.JsonWebTokens.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral24
Sample
keygen/Microsoft.IdentityModel.JsonWebTokens.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral25
Sample
keygen/Microsoft.IdentityModel.Logging.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral26
Sample
keygen/Microsoft.IdentityModel.Logging.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral27
Sample
keygen/Microsoft.IdentityModel.Logging.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral28
Sample
keygen/Microsoft.IdentityModel.Logging.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral29
Sample
keygen/Microsoft.IdentityModel.Tokens.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral30
Sample
keygen/Microsoft.IdentityModel.Tokens.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral31
Sample
keygen/Microsoft.IdentityModel.Tokens.xml
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
300 seconds
Behavioral task
behavioral32
Sample
keygen/Microsoft.IdentityModel.Tokens.xml
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
General
- Target malware_analysis.zip
- Size 9.4MB
- Sample261030-n2p2psyvbt
- SHA256 c2d3bb8a95ffa9ab2c3aebc9112eaffbf2731ddc0a9a42e817549780445d3cbf
- MD5 77f2d0fa9401f094eefed098b2e97268
- SHA1 211ba75038c7b75731b32774cd430299d2402e03
- SHA512 4b94f3547cfd3d8cb1739eaecf5fdc5710f5a7078dea8580e3201305c5a740ae01864737bb014cf2d3675e8250733b146b305d5ecef97e80ed9bf14aa8775fd4
- SSDEEP 196608:guhIhIHYngsDaVjVdLLbRSvViJ349MADd6/wRa2LY+pA77oB:U6YnRi/vMiIDdNa28woo
- TLSH T1E2A633F19220AB12C14E73325EFE9ADDFBF65314ACA4EA017E41E54D132704B1E78A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/keygen/idea_statica_v26_kg.exe
File Explorer
-
malware_analysis.zip.zip 9.4MB
-
keygen/IDEA_Statica_v26_kg.exe.config800B
-
keygen/Microsoft.Bcl.AsyncInterfaces.dll.dll 26KB
-
keygen/Microsoft.Bcl.AsyncInterfaces.xml.xml 30KB
-
keygen/Microsoft.Bcl.TimeProvider.dll.dll 31KB
-
keygen/Microsoft.Bcl.TimeProvider.xml.xml 30KB
-
keygen/Microsoft.Extensions.Logging.Abstractions.dll.dll 46KB
-
keygen/Microsoft.Extensions.Logging.Abstractions.xml.xml 48KB
-
keygen/Microsoft.IdentityModel.Abstractions.dll.dll 19KB
-
keygen/Microsoft.IdentityModel.Abstractions.xml.xml 16KB
-
keygen/Microsoft.IdentityModel.JsonWebTokens.dll.dll 165KB
-
keygen/Microsoft.IdentityModel.JsonWebTokens.xml.xml 129KB
-
keygen/Microsoft.IdentityModel.Logging.dll.dll 38KB
-
keygen/Microsoft.IdentityModel.Logging.xml.xml 53KB
-
keygen/Microsoft.IdentityModel.Tokens.dll.dll 382KB
-
keygen/Microsoft.IdentityModel.Tokens.xml.xml 632KB
-
keygen/System.Buffers.dll.dll 20KB
-
keygen/System.Buffers.xml3KB
-
keygen/System.Diagnostics.DiagnosticSource.dll.dll 164KB
-
keygen/System.Diagnostics.DiagnosticSource.xml.xml 205KB
-
keygen/System.IdentityModel.Tokens.Jwt.dll.dll 89KB
-
keygen/System.IdentityModel.Tokens.Jwt.xml.xml 140KB
-
keygen/System.Memory.dll.dll 138KB
-
keygen/System.Memory.xml13KB
-
keygen/System.Numerics.Vectors.dll.dll 113KB
-
keygen/System.Numerics.Vectors.xml179KB
-
keygen/System.Runtime.CompilerServices.Unsafe.dll.dll 17KB
-
keygen/System.Runtime.CompilerServices.Unsafe.xml20KB
-
keygen/System.Text.Encodings.Web.dll.dll 77KB
-
keygen/System.Text.Encodings.Web.xml61KB
-
keygen/System.Text.Json.dll.dll 629KB
-
keygen/System.Text.Json.xml524KB
-
keygen/System.Threading.Tasks.Extensions.dll.dll 25KB
-
keygen/System.Threading.Tasks.Extensions.xml9KB
-
keygen/System.ValueTuple.dll.dll 24KB
-
keygen/System.ValueTuple.xml.xml 142B
-
keygen/idea_statica_v26_kg.exe.exe 8.6MB
keygen/IDEA_Statica_v26_kg.exe.config
- SHA256 b72efd8b73e1ccf2e959dbdc2b12bdb2580cad385ee973980e9c1d2ff75edbe1
- MD5 6e2e44bb242ca93164e66a43aa4b4bc0
- SHA1 157e2c61bb1e126db26eb8e0b6dd8d9141a22ae3
- SHA512 26640fff544f80e8ab7a1eeb664fd482125e4a1606be5bac2dd177069abcc8c4a38cd6581692d0c4dc2dcff6fe4f5bfe97f13fdb71a48f825ac5ec3f735cabd4
- TLSH T1B5012D2151C8BFA54F724AA33B7BA418CBB903B3284C054DB4DE6A978F316994207176
- MD5 SHA1 SHA512 TLSH
keygen/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
- MD5 ff34978b62d5e0be84a895d9c30f99ae
- SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
- SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28
- SSDEEP 384:cOJWqnwCBbNAP0VES2j0cX6dAl+NWpVzrdcoquWeP/WxR5kHRN7dDFcYR9zPrf8O:culwCBhdVv2wK5fdcUtFFn9zT8pY
- TLSH T14FC27C1A935C1317CEAF2EB4E570D9422935E78A2C22EB3E1588F2950D97345EB31738
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
73:a6:36:c1:dd:b5:ab:95:84:54:f7:d7:ec:c4:a1:7e:22:c6:c0:c4:77:c8:31:52:a6:11:c8:6c:c8:6e:03:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:d2:21:24:31:4a:58:bf:2d:11:00:01:00:00:01:d2
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
21458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.Bcl.AsyncInterfaces.xml
- SHA256 3d06c35d7b0eca37abe2d135cfe12d1012816a99e5e92e0cf4e8501e1b540aae
- MD5 1fc4bc74b30d484c24b04de5c0a38f5e
- SHA1 aa0f9f8db757d37f1f92473a57ad53f20615460a
- SHA512 6ba26c5d6edf273cfae5e637ef1623fa37b171d8927bfd9fa8c85dcc27eb6a4fbbf8427e08cc61746604dd0e75e4ba31fcfc661349966fc5aa48da8d5b5f6045
- SSDEEP 384:XgOpngSae6jWuTPP/xM2fB8qnmltJ5XZzRzgqW81Fu3DRmfCh7sE+siDBQsFJIss:0FQJNTR7TIcXI
- TLSH T183E20F2473C99B220CB6121A8D18F0C4EE225E37695D983834CD6D679F7B89663FF4B4
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/Microsoft.Bcl.TimeProvider.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1c5a3d263b723ecf05a98d9bec4e59c476d553c75e912dfefb3e137671b7be72
- MD5 d26ec836e870f3a0c1f85b44f946bbf7
- SHA1 3ef723e1d763fc58deb02e7b4a15924ddb1d59b8
- SHA512 68870b0e0cf82511a07d534b904eed7520f5573eead99faf4532b76378de395503604fe17822b28891e8bc34f784350b70a3e5b478c877dd9bc7962a06bac763
- SSDEEP 384:WUF909jkDz0MVW2AevTJbdaX99JsNP3G+zpQWhzbW9Tb2HRN76tKlO8R9zexD3B:WUF+k8MVWsTJbdc9r07G/iNOQ9zs3B
- TLSH T153E26C52C3AC4317EEBE1E71A8F4E1421976B3967813E73E1A4DF0462DA7B406A20F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a5:50:04:a2:f1:c7:36:dd:32:db:33:d8:80:e9:0d:c6:8e:a8:6d:9e:08:96:2d:5a:ed:e1:4b:c9:91:77:f7:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 30, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:cd:55:07:2a:e7:ca:c1:99:1d:00:01:00:00:01:cd
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 25, 2023 - Feb 1, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
27286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.TimeProvider/Release/net462/Microsoft.Bcl.TimeProvider.pdb
mscoree
_CorDllMain
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.Bcl.TimeProvider.xml
- SHA256 20444ab6647aa13c1b747a93093d5dfd2bd73533ca6a4c6a3d7321017e33f073
- MD5 74110e45e120ed1429d71fc7258c03ab
- SHA1 665e99940c71b43ffb4be661a026c306dee32d29
- SHA512 6912a7aa52ceb90067b4d5f832f26cca7b6b8524c8e84008a24a2a459c0d00e67c967a79954e185b39392c102ce1b26ea225cceb33c8a2efabd6a9db1789264c
- SSDEEP 384:alQ7ORDtScPoLcwW4b0YSH2XssP0vHTUwyY1RDczQdU054Izi4t0Knsy7p7GztnX:iQ7OR44QlXZ7pf6rTIcXI
- TLSH T143E2DD3573C98B220CB301165D18F0C0EE224B33695E9D6970CE6E5BBF6BC9267BB495
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/Microsoft.Extensions.Logging.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 11237735e84a15e786a3cb807e3683965e371937f02b53de5edcd95b96f6dacb
- MD5 071af169726a1386248d60084561bed6
- SHA1 655b525bf733af9f1ff7a7898e98116347e67cf8
- SHA512 c73be2eb20cb01a4a1100f13948d2c330dbdd4e6ca3659a9e2b1a95fc0bd044837ad6828c8918dcbab3a80baad763518f5d7d8f3755a669e43f1ad9e16d3206e
- SSDEEP 768:K6+Si2RFK9jSq43+EDM+cchB+wTStirCjn11L/KV:IO+E4dc3N2t0CT1FSV
- TLSH T176235C05A7EC023BCA784DFAF8E492816B75D1D32C02CB4B9CDCE15428A7BD95E5172E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
04:a7:13:7d:d6:34:45:aa:6e:b2:e0:52:e8:74:24:5d:61:8c:c5:f2:93:ea:22:12:13:58:70:64:30:31:60:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 16, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ab:5e:40:9d:ee:46:df:2c:6c:00:00:00:00:00:ab
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
43466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.Extensions.Logging.Abstractions/obj/Release/netstandard2.0/Microsoft.Extensions.Logging.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.Extensions.Logging.Abstractions.xml
- SHA256 83dcc9563691e2cbbc8c678b57f1763fece18b6c124bc08e9363fd8ca7771747
- MD5 620d071304ba94e270f19b4cc58bb1cd
- SHA1 e182dcea78df374b5e161d93d2d96d09b0784f88
- SHA512 3d64ced5401129ac6c0496b0f99647d861a203fba01d05bd8a0c8cae2f9b9c39c70414e7425caa07eda192e387477444339322fe082f8effae3b78e3c3426edc
- SSDEEP 384:gOib/oNLVosL2xMaUVGb9SsZ2npVsQicjDoc6wvYU1GTJJRjEHAUDDlXNJxfV7+q:Dib/oTqwoD08Zzl+Q+gUx+q
- TLSH T1A223BA20EA898E05553A0609ED98F940FF2489B73009ED633CCDBD265FBEDE591BB741
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/Microsoft.IdentityModel.Abstractions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 48bd29fbc18ee81ba03b93dba512561aed287e577a24a8dbf278799a3b8847d4
- MD5 0e73983bddfe375a0f7520a1c7ad750e
- SHA1 303a2f3847a17d93b89be51a790aef7fe5351d11
- SHA512 ee9942a3f0384136dc9a7e5dc6ed94a657bc7c5b206288fd219139aec858ff8f0687bfbea11cb8fcbd90358407c6aef03537675619400f00b5238a16016e923f
- SSDEEP 384:gw+9Em2OIyQ1VY6kwzWdooW3VHRN7/FbR9zRxu7/FoA:g6l7ZkO11r9zRmOA
- TLSH T11E923A95CBAC8243DC575B31A6AADD432E3CABD69910D27E038CF54A1C137C9DA3123E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:83:e9:16:2a:03:f0:93:d5:cc:83:1d:e9:6f:b3:ef:2b:92:c5:73:03:7d:79:6f:1f:07:df:85:84:b9:36:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:84:98:e2:12:e0:78:a3:31:5d:00:00:00:00:04:84
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:14:8d:cd:23:44:ee:06:df:72:00:01:00:00:02:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
14902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net472/Microsoft.IdentityModel.Abstractions.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.IdentityModel.Abstractions.xml
- SHA256 5e729e604a63929ba0d77d1b484da1144d719e5a76dc32a8109acf609ca2fc3b
- MD5 9508b8014c25a184631e8cb8221756df
- SHA1 fb4dee5d26bff00ddfa82959e1f99ad04da48659
- SHA512 3778696c092dfa0186ffe73266475dda864ac19f6d1e6e645ca1f2ab160d82378576082c357d1448b09c3235283865d8ac38574bfb149e5f0f5cd91e52f64e6a
- SSDEEP 192:FL8OKRQ1+594G4+47b6t/594G4+4CkCMZBWM:Z8c+594Rp7et/594RpCkCMZBWM
- TLSH T17772E018BAC1EF6119B75212A925F884FF798973102A8D1A35CE1F1B0F36CC6A2FF545
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/Microsoft.IdentityModel.JsonWebTokens.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 608eeadae79660028621c3d4057c190d266adc9722e143a61b4cb79cc334af24
- MD5 5694a8f8f664fbe12b494ba155e396f8
- SHA1 20fdcc4c05822bcfb94e9a3c1e94374f7198bb54
- SHA512 8afb5448d650e52083df8a62ac9c20fe49fbad177392ffcf13afa77bde53998d9d88dc09d41f1b63f877319a6b86b310eedc94b0cba4c1e35860256469bcc424
- SSDEEP 3072:mFFfdLU8mvLVchDZKzQklRNiY6h0z66irWN9XNEgfpXaXr0iMJgBGILkDzVZl0+w:m/GLVcRgz7NBir0aMqxMvMZ
- TLSH T1F5F3181423FC4748F4FF6B3969B451104EBABE46AC39EB4C2CA195DD1862F809A70B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b1:0f:2e:e3:38:83:0f:1b:7a:14:ed:35:3f:a8:41:2f:de:3b:de:de:49:6b:33:b5:73:30:ea:ea:a2:e8:c4:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:22:41:d2:f6:aa:ff:c8:b5:ff:00:01:00:00:02:22
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
163314
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net472/Microsoft.IdentityModel.JsonWebTokens.pdb
mscoree
_CorDllMain
Name
.text
Size
152KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.IdentityModel.JsonWebTokens.xml
- SHA256 7a6d56fcf60d59bd923f289c27660de7b8d1dc70b2678991230b8e130190c0d1
- MD5 425a6f355eb7943a25b97d08342cdc90
- SHA1 9aefab3e0bce9937c9b63b8ad740a8c124f0b7a8
- SHA512 8c65c3b1d6b6451fe25a1560304fed50fe473426879d62ba740c65fda6a66bd24cb128306b63b036b11469b7d69fb581e5e9b50e8a6e38b6e27d1fc4ab3aa0af
- SSDEEP 384:zBYRtQuYmdDRsfnmL7/nxc69cbfZ9T9ol9uji29GjU9usU9uGjE9GT9uGsfGW9uJ:TwzrkfOd0q0/gTJVp+HqmUUh4z8l44bg
- TLSH T1DFD33215AACA89225873570ADC90E494FB7E0613161EED5371CD4E9B3F2AFC2D1A34CB
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/Microsoft.IdentityModel.Logging.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c3759bf8d29c5f0c5ccc06f038764bf03336c92c199279411bf8fac7013c7c47
- MD5 003511dccc1b4dc8acff51a445cd9da8
- SHA1 3252f93228c147a60634fea228dec9a89689031c
- SHA512 8c628705209f21d46163af104d7fdeeec823487b824005cc7116086d0bae41a76c39af511b8734b5f806c60de55ef8800b72f1aaa65d158021b47b94566dc3ae
- SSDEEP 768:mdoCQV5mZEwjYeh6ItDFUwYQgZRYAVcTq+2YsULi9zY8:qSVgoIsDsAVOj2Ys1zY8
- TLSH T11D036C1153ECC366EEFA1F30BAB599121A3EBAC37A21D74D2954E14E0D03BC54B10B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:a5:0a:c2:14:9d:92:40:74:18:2d:da:8c:42:d2:e3:27:4f:d2:8b:82:3c:57:c9:c0:a2:d6:c6:46:2e:1b:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
34398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Logging/obj/Release/net472/Microsoft.IdentityModel.Logging.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.IdentityModel.Logging.xml
- SHA256 f54f9d598a9011c7e350502fb7dbb7af7a3be84713326fc35206f07dcc792c1e
- MD5 abc85f17ed3d740b4124ebd918f892a4
- SHA1 4c53f52b2f574560d919a1c383e852d9ad9f889e
- SHA512 50fd51bc4b1ec92c0232b3d3a525e828bc12d3695d42fb3bad1456e076b40482ede0d720765be5c35270a4f302b50b2d567ae4f6cabe72050ca849b30c8de8bb
- SSDEEP 384:so8wGaeaaaeaKaGaXT13i0Dp2Hkw3BZEYjVyFtou7zCVpvhMATWMC:so8wrRRP7zH
- TLSH T183332130BAC58E560C731201EE68F9C4FF364A672109ED2AB0CD6E575F3ECE592AB445
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/Microsoft.IdentityModel.Tokens.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e65d85deb269158b983046d0a73c152ae95e70fd2a5ae1b4200310f9e61ed23d
- MD5 276516ba010a7ece7da947b85fd28cae
- SHA1 50b36758049ed1bda4e79f56c12c55d5a9b71537
- SHA512 4b7f02c4a4fefce6d7ce3b6f8c1689977b463607b19a65b0aed03ec1a9b13c9af588f9b1819e3b1249e1d3f73792d22087588f44c7e83149c7d7797936a9b4a0
- SSDEEP 6144:vHPCCDKYVK8MS+Om5SrEdoO4mEqh+zDLhbqt/IjoqxcX1PuEWD5fb:XFH3lYYu4mE75
- TLSH T12D841854A3FC825AF1FF2B71A9B915154AB3FE4FB8BAC75E2250D11E1C22B409860737
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
94:32:0f:d0:14:d2:7d:de:aa:c6:98:70:4c:bc:fb:28:db:12:44:07:48:f0:f7:bd:2c:b1:18:6e:a9:0e:90:bb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:84:98:e2:12:e0:78:a3:31:5d:00:00:00:00:04:84
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:3605-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:b0:43:35:66:cf:af:95:e8:00:01:00:00:02:13
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
386282
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net472/Microsoft.IdentityModel.Tokens.pdb
mscoree
_CorDllMain
Name
.text
Size
370KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/Microsoft.IdentityModel.Tokens.xml
- SHA256 b56419f42a663abecf669969c0773a83dc55f81538eddacc01e011a2dfc7ca88
- MD5 8950ef472d6793b598f85738d064dc12
- SHA1 879accd63ad8cedccbea0712bacfe771a0998162
- SHA512 0f995f831f77c1ea7a2e461d7352ff22b4b5ab3f6f121c3679c8aee0f0411b777faf78bd9e61097b7a45160c4987ba7708d14998e6824fb11dc7bc234153e5ab
- SSDEEP 6144:wwuKY6Vku4t0flewpEjwmItibclLSYBEFgWh8kbzO:4KY63
- TLSH T128D44229BAC68D12586362179C90F8C4FBB90763501EDE4274CD1C9B3F6AED3D3A7489
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Buffers.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FF06-4BC3-B9DA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:14:35:27:45:ea:b6:c8:6c:4f:00:00:00:00:01:14
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 23, 2019 - Jan 21, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
17218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Buffers.xml
- SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
- MD5 1c55860dd93297a6ea2fad2974834c3a
- SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
- SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
- TLSH T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
- MD5 SHA1 SHA512 TLSH
keygen/System.Diagnostics.DiagnosticSource.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 adfdd696119a96761d680c9b30ef8cf908bf45088321239b3eb377d6947af594
- MD5 ee6b380545b6d5e821b5f1387a55765b
- SHA1 c706908f1f3f616bd6f4134d110d167f694061d9
- SHA512 b74da845b49b64c5397d778f84c3f287cd491bee0964740528893b360f10e005839e7c1ecbbb74ec596428d66ef86f7ff9a694149fbd0d4fd16e585b0874b4ce
- SSDEEP 3072:9k9Qguh0HTe6oTVr/NEFWARs228VIQKw+EOFEZK:9Muh0KrZY74SpL4
- TLSH T1A9F37C1163DC136BCEEF5675F2A488464B72FD4BF616D78E2948B9FC2863780CA21253
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7a:05:06:8f:26:0e:b1:29:b9:ec:f7:09:d0:a4:d0:6b:1c:eb:1c:b2:47:0a:da:4d:2b:ce:21:1c:47:e2:75:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 26, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f6:83:2f:26:6a:54:5d:22:c1:00:01:00:00:01:f6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
162150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.DiagnosticSource/net461-Release/System.Diagnostics.DiagnosticSource.pdb
mscoree
_CorDllMain
Name
.text
Size
151KB
Virtual Size
150KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Diagnostics.DiagnosticSource.xml
- SHA256 a62c2472400e6f15221b447ecc39ddcb2a1d2cd3e49cc0f8a7a9c45c33e734f2
- MD5 dc07c310fa03b5912e0664418cca5526
- SHA1 5799c7562191501a2be32d6d66e61f3d95b47a23
- SHA512 84db8b0bf439c08a7ec5314dc3987f56f8f5f18db4513aa6935955b0f905aceb96298234a5c4fedbaa8d3333dc0158ff9f2c114962518dc34878bd33c27272e9
- SSDEEP 1536:YQ5WexlsagtLLpGz8cXQ3LhT3S4EXiZLcPj7tELXoy:TcOjgtg839CXycfVy
- TLSH T127241F35B7C8DB210CB302236E18F0C4EE261A672615A87539CD5E9B9F33DA153BF895
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.IdentityModel.Tokens.Jwt.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2e3603bc1ca6a3b31019ee12b88ad6dcb5c3b08a245acd9749279a1caa73fade
- MD5 db58193337fb5a93f440a2a60840acc3
- SHA1 07a4a55905130d25498f90112c4567bf8263f6ee
- SHA512 763430964777bd7968d08c0faee61df768ff676eb1cd9d4b41e7369ae5670db521e380c1d0bb345daa375a57471948f61242ce743596c85f43aa0568e7649cdf
- SSDEEP 1536:OEbJakVZLxCP0sDGVWB8LZuOzpnqk5p/rqXTqA88V1xNxqx+231ze:n5ZCKVU8LZuOn/rqXTqA88V1LO+G1a
- TLSH T1B593191077EC8329F5FF2F39E1B190401AB5BE57A839DB8D1980929E5877BC08A60777
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:e1:ec:ab:72:11:ad:f4:1e:14:8b:fe:a5:8d:da:4a:ea:38:6a:47:f0:a4:73:85:ca:51:22:6a:97:7f:bf:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 23, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:85:5e:99:ec:0e:59:2f:cd:d7:00:00:00:00:04:85
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 19, 2025 - Jun 17, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
86006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net472/System.IdentityModel.Tokens.Jwt.pdb
mscoree
_CorDllMain
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.IdentityModel.Tokens.Jwt.xml
- SHA256 3edab8d30233d32dc8186f33b6f93a7f3f58d48bb03cb847d5ad9dfafe4406c4
- MD5 886136a99b1bc7f41a197361a48ae30d
- SHA1 d46ff8531aa338b2cc7bd3c84a81b10807ecf970
- SHA512 880200534ae254a5d74ccbca2182d3077d2114dcbd648850f1986005cd468ef943ffbd346a1d96cf57d648eb73ac702ee24474e3d62e56ffa79e815696950b3d
- SSDEEP 768:VRRotXzZFZzZxj1G/csMrIYQPq5z/KPk8TNAhyE4IP+zAUYEF0xc:jRVCe9
- TLSH T1A7E311247FC68E2118634312ECA4F984EE761713181EDDE2B0DD1D8FAF2ADC692B7549
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Memory.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- TLSH T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
136114
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Memory.xml
- SHA256 d5714c96607eb1a9d0f90f57ca194d8a9c3ede0656a1d1f461e78b209f054813
- MD5 add19745a43b2515280ce24671863114
- SHA1 cf44e6557fde93288ff2567a002a69279965caba
- SHA512 8d7e564fa61411b5c28f29b07855dd112687edcb39b991803c7c7de67b6894b309102ac9b52409b56b7bb5c9101eb4cdfb21fcfbf5d835e4a153e188cb97cc87
- SSDEEP 192:19SSrAVfjSE0wxiMiLiLiXdCjticiciAiJiziPNjNei5i9zhi+ipOUTJ:1gbXKKXppPmcPi6LmJ
- TLSH T18852AE787BCF8D10553602256EA5F480FE295A67700DBD58B1CE3D43EB7E896B2BB840
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Numerics.Vectors.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ae:0e:d6:4e:96:89:db:00:f5:00:00:00:00:00:ae
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
103866
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb
mscoree
_CorDllMain
Name
.text
Size
93KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Numerics.Vectors.xml
- SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
- MD5 95dd29ca17b63843ad787d3bc9c8c933
- SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
- SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
- SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
- TLSH T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- TLSH T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:48:a2:88:45:56:bc:2f:80:bf:00:00:00:00:01:48
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
14030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Runtime.CompilerServices.Unsafe.xml
- SHA256 39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
- MD5 c782e92abbfc0531226f735c6ac56498
- SHA1 2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
- SHA512 a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
- SSDEEP 384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR
- TLSH T15E92AD243BCA5FA21772031D9E1AF1C9EE21957B308CA84134DC6C7377ADDEA4A7B560
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Text.Encodings.Web.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e9c4f5eed186cb129c527c4b8d67d163ea2f2396e9d8b96e30b5e7c12203ce84
- MD5 fa9d0d182c63c49a4c567f7c1652b6e6
- SHA1 55ddfbe80762c02f9a9c65809f9ec3ef8f7f2ccc
- SHA512 58f468c982ab66930ff37efb5a941db116e8c1aed66ebc23720a7b18f71bebe1e929bea76680294edb25f430c23d520b8a87e3a22064c5993d0396819a21cbe7
- SSDEEP 1536:AOOgOOOc2yQDmBkKQh39thfavqcdUIUdu4OzfocSWnO73TT+zo:KyEmXQh39HfavqEUTjOzfo5WnMO0
- TLSH T198735E12A748C75AC75E153256A085619BF0DF6F2313F782585CB81E2B733C9EA0E2A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:c5:bf:87:63:20:6f:3f:df:14:8c:e6:1c:77:82:fb:5e:85:38:db:da:14:9d:a9:bd:23:e6:f9:c1:84:58:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 31, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 11, 2023 - May 8, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b7:21:27:1a:07:a2:2a:86:46:00:01:00:00:01:b7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 20, 2022 - Dec 14, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
64978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Encodings.Web/Release/net462/System.Text.Encodings.Web.pdb
mscoree
_CorDllMain
Name
.text
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Text.Encodings.Web.xml
- SHA256 8e96160dd96e742f859587a710bbcfa2f11813bfe560ca823da00d3557520d3d
- MD5 85be27287d715b2aac6d2671b66334f0
- SHA1 9016ec56870827a3d8aeaef8fe9e63af8a59ef83
- SHA512 140ca7169f64be7ab926cb95d898f02dd5495a2875057ad8fcd0e97117aef7ae34be911e4155452a192180ebbdab14ade2fb6b599d35fa10f7a3321b272e75ff
- SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTw3IIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxw3IIMZxE1Cr0Md3wh7te4
- TLSH T19853DC69AAC6EE410AB212011C1CF4C0FD1E1C53F25D1861BDEC5F5B6F2E4BA96FB858
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Text.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 86c3f263ae9b4469ab1266c80471087082447eb4a38e6b97bf5e84de15c07a1d
- MD5 d7e1e8629da31f3482045f243edd50be
- SHA1 d3ad7f529c0b9232206348842e31566ad7347135
- SHA512 0ebfcae7cf17ca0c4299f6d1cd850f0f8959b49e6bbc05079fa6679838abff9eca3a09ad8158f7b0395dabb20a0b9a25efe1d8f645ca9ef69bedce45606a23d3
- SSDEEP 6144:oQ4zRvmmBhTxZOnAHqBfFgICCSToJkR4mUfimb7MVM8iHtoqurICVLeV+kctqWan:BmhZBAXM3eVcTQKiyfVtQ1RCHe
- TLSH T1E4D43A0467E49F3BEADF5370B07941249BB5F81A6329E78B520844E93C937D29D837A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
14:84:37:79:2d:e6:3c:26:07:5a:7e:71:44:17:92:c8:60:46:ab:47:d5:40:e6:fc:ab:99:e2:c0:2e:9f:6c:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 17, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ef:89:3f:56:a1:58:cc:a8:da:00:01:00:00:01:ef
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
637726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Text.Json/Release/net462/System.Text.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
616KB
Virtual Size
615KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Text.Json.xml
- SHA256 2ce568cc3584f2c68e3037a4d2529e4467bf955d5b433790291e914d7a95366a
- MD5 da51e86f5248eb112a9f02afa1d66138
- SHA1 9b386a42dd46f398ca6ec103b9f40080668ccbda
- SHA512 b3ddd23ea1bf411d643aebc955964474f0fbf0a176d3713e9c67f203795cf832ce25242d510554e6fcb273d913ef1f674456d1c1f3c295d957ff802fe2c8b45e
- SSDEEP 6144:1Sb93UX5vMv9qJWxFqXjlovif6+zGUUloQQojxJ+ogSoCIM8tfKfR3v3JgP4aqKV:u9sXjl0iRtH
- TLSH T18EB4DE3477C8CE13049B022D0C5CF080BD36976396199CA776CC5CAA6BDAD62A3FB5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- TLSH T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.Threading.Tasks.Extensions.xml
- SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
- MD5 c89e735fcf37e76e4c3d7903d2111c04
- SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
- SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
- SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
- TLSH T1E322AC283BCD5D521427011B8E1AF4C8FF55AB3B644D392974CE6C57EFAA84792BF820
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen/System.ValueTuple.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a9:54:70:d9:79:c0:84:65:e2:00:00:00:00:00:a9
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
12898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
keygen/System.ValueTuple.xml
- SHA256 c37e163fa76629c196460c7b4d54e95b1a46a4c66ab7b6f3311959c8137dc5f1
- MD5 b6e60687ae5db6d011e21e6993620745
- SHA1 b117c6bbddc72e7f4b590173992ee17bfdde4be1
- SHA512 709212b6cb36f57b92a82def810f9c075a91b3e6a5fd330dcfb563d94a320783509441347d63bde97f530c6b10ce6aa769ca11f7fc39acf1b25d5c8f9dcbb389
- TLSH T141C09B0559D4E5155D3215172EB3F900FE15C75B14D11435745D0F036F354491367431
- MD5 SHA1 SHA512 TLSH
keygen/idea_statica_v26_kg.exe
- SHA256 5a6630ff9c6f271db0ff6953c204b044c94ddf95a450b08a2dcf9a4704df92d6
- MD5 c1754c7594828a1f5cf4c3cea9e45741
- SHA1 cd4c9427f83583b0aedcd9b9b5a48636fe2b877e
- SHA512 4fd883d815d625463e8229a067d60f92c3b0581d3789c5252cf0cd8974c05d55f03be5c1b4b73dcaaa7221b5f24a6a2eab4407f98c84b55594d24254f73533f2
- SSDEEP 196608:CFTa88916EguxODLjLBF/vObHi9ZK5GwDXQLczyY:8i16Eve5ViiEDXvyY
- TLSH T1A1963363B11EAE17D44BE331C9FE159DEA9643271AFC25882F45CF0D32931029ADB66C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48596744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
T�����0�ԉn� K�C_���#�W̉�)��헹��\89�4 �DB��-[lg�l^�#��Ny� Y�܀�n�k���(�N�� �1]+��{ x9�!4�� ju���#��NCI�ߥ��()[�N�pj,Rc����r�4\����h~/9�!�f�0Bm,�L�5g��u���1��O��@݅��y~����{YY��-v �����(� � g�0�������J�|0�~m�6��+�H�`+��jz�̼� �u��w�u �j�V�3Z��i�ߋ�uߊ��� Uu�$��
ÝH�g����i2I�aq,��c e�
�j�]h�� A�+�����7�#4�����,ڶ�F���N����30��{���E������H.�Y�"�sD�����NW7�?���~5A@̵ʼ�߀�
^�9����'#`A�^ �v}E�����Cy2�{��� ��!�{�͊�@��P�E��(CI� t4���s���W �
�A�:a<P!�G��ľ�����X�+������S��4��]�;ON����g���Iü�8�~�~����6H��օ�v��J�<>�g�{9J�i�����ΐ?��Jc����|�!�F�����dv}�R��3c�R��r��:K@�'-n�d�=��l�D<��|D�G�� &�3
y@;��% X4,�3= ob5��vo�@��{[@3<}�R8D�������v���.������A�%�GD妚�gw [� m
��p�W����������d
�Wcю� �\�y�Qj�'� ���@Ri��W�L�7\S�����h� �
�I��r_�.�x; ����?z�Ld ^�Y4\j�/v��9��m����
Z��n��}~�p5�vƅ�&�\�f ��N@�E^ � ��=���0a�lż���;�RRqK�&�Jm���;C�"� �� ��ydω� \�/���E$�9��!�cʹ��j���I�� ς�`I�����Үh�圧Y�LK����l>x; 0�p"�
���3�P_wt��������}��펹�7���yM//�H� h�c1z^?����q[8�a<aW�>+_=� L_F�=q���`�w2^/�2�C�'��AN��6H%��:�� G�YBz<w�{���D�s�ښ8y ��|W?^��p �&G�cL.��g_������kd�����~]H���$^���Ĩ��t
�{�~P�Wz��Ky��� a��-��%9���Z ���P�v ]/��� ��R }hs��q��
<=���`�S'�?I�qi
d��� ���EU�kn�6����C�Q.��t�7.,���۞���h�I�V�{�T"�� 3�)�(OXe�UX$��+�8���h?�N`t$fU�Oռ �߾�I�0 ���K�]��*h��s�8?�]ۯ�nO��jb�EFL��6�,6�؈@�h��jcDb�}%����=���bgA�,r@f+0��i����.`��P�]�v ;����O��8\?̩��J�� ?N.�*�"A�i �����O��$��T���'X[�:�M�15�i�5��P�[��.7n 7��6�]s� a������aL �y���w���Bc ʼe4_��/���j���i0L�ygi�f�Ml'��� o���|
��]� 2��0���0��0$ `��,٦w�r.���8�����ה�I�6����OM�)�Y��شyt5I�a�
��n��j��H� �%3�-�w���I�{_%���G�LT��X#W�l0��vIwO(�W8`�j:��ĉ�qe" �K:#��5����= �!�'��.n���Y� (�����k���~�+��"�_�=�W�=T��K!\1v���I�9oQOHkN�Y��[�Y�`g�=����;}UoI"KW���8 /��n�p���A�'��L:�{T������^ߨl�ۣ&a�z��,t�l�_����l_%+�l0�s�D�QqFM��=IO"��Z0e#Y�nlA~]
�#�ݪ_B��-4_F����P�M��;L_����W������<w�-�� Ov3P8Z"&�()!X�x6O��^�;�������s"�@Vn@ RĴV�4��K�����A0��[eA:�}�~Sl<A����S ��s):���k�c���wM�S�.� .\Ԩ���n�Oo��K�>
���� !��H�,R� ő³��(��� -�65��}p�"�����qv7�������J� �|���,�rG�d���$�6وOٓQ Ȭ|�*�İ���T� ס��\x$��
�_k�Y���<X��G�ft@���/���j{���UA��*�H5Ad���?"8` �V�����oe�6N�"��H�5��F@d���||a 1��Q��bXH; R���E������B���h�А udȰ@K���$��H���x���V[|z/Oح�Y2x��;M�����:(F����+���e"��)��5]�<� w�)Uی[��W�K�t,��x��0+���+��p���5N6�����j�Ur�����x�@x �-O�wW�� ��v���L ��B�������Z�x�ɩr�?�\�K[��\n�T������܂���b��;#���-Ryf�r?�� �>���L�]� ��s-�����
��������J��p�3wD�nn`��>O��ZV�R�hځ��l�)�>f"��kF���O�Xg�)�]�#{�;4�JA ��J��*�O ���I��� � ��bUPi�"��1<�|������FR���Ml�m(p��c�L �q�z N/_�l���%$�l�K��0W(�����`�U��M[��:} �:Vo�`Ia9�=�UA� V0M�PgZ6vL��Dž�2��c�ڠ
,�U�)aD=KA�1�YN��6 ����N��[g�םv ��.% ��<<$� �����_��<��[��G��Vd��~��>&�ƱG<�a��TQLA�o>�f|�=#sb�~�D��3� ���� ��ly��?�_����5R�P]ej����)E y��~e��gS�K�lj���-�N�B��!iӉy�?�� ���#��Sl�K �7�Ηk��^���v�]
I4B@��� � �(�6,������g��3N��y���s b�����u?EhW��b�L|6ӎ�;�ie�ߕ,������c�'ທ��T�Y�ecp؊�X�v����RL�'؉��J�Ց�.��N���5�吆 ^$ٷ|� ���9����C��� �� K8��M�j��-��߰�hhN����O!���+���'���Ȇ�;���ce��(`*ob�>���0�Dd�
Name
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
297KB
Virtual Size
38.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
8.3MB
Virtual Size
8.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE