BorderlessGaming-1.0.2.0.zip
- SHA256 80300e44909d9bfb6b568e830af9ec88b4adfef3873ea12c40859c22d6180832
Overview
overview
7Static
static
3Borderless...ic.dll
windows10-2004-x64
3Borderless...ic.dll
windows11-ltsc_2024-x64
3BorderlessGaming.exe
windows10-2004-x64
7BorderlessGaming.exe
windows11-ltsc_2024-x64
4CommandLine.dll
windows10-2004-x64
1CommandLine.dll
windows11-ltsc_2024-x64
1Microsoft....er.dll
windows10-2004-x64
1Microsoft....er.dll
windows11-ltsc_2024-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-ltsc_2024-x64
1de\Borderl...es.dll
windows10-2004-x64
3de\Borderl...es.dll
windows11-ltsc_2024-x64
3de\Microso...es.dll
windows10-2004-x64
1de\Microso...es.dll
windows11-ltsc_2024-x64
1en-US\Bord...es.dll
windows10-2004-x64
3en-US\Bord...es.dll
windows11-ltsc_2024-x64
3en\Borderl...es.dll
windows10-2004-x64
3en\Borderl...es.dll
windows11-ltsc_2024-x64
3es\Microso...es.dll
windows10-2004-x64
1es\Microso...es.dll
windows11-ltsc_2024-x64
1fr\Microso...es.dll
windows10-2004-x64
1fr\Microso...es.dll
windows11-ltsc_2024-x64
1it\Microso...es.dll
windows10-2004-x64
1it\Microso...es.dll
windows11-ltsc_2024-x64
1pl\Microso...es.dll
windows10-2004-x64
1pl\Microso...es.dll
windows11-ltsc_2024-x64
1protobuf-net.dll
windows10-2004-x64
1protobuf-net.dll
windows11-ltsc_2024-x64
1ru\Microso...es.dll
windows10-2004-x64
1ru\Microso...es.dll
windows11-ltsc_2024-x64
1zh-CN\Bord...es.dll
windows10-2004-x64
3zh-CN\Bord...es.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BorderlessGaming.Logic.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
BorderlessGaming.Logic.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
BorderlessGaming.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral4
Sample
BorderlessGaming.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral5
Sample
CommandLine.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
CommandLine.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Microsoft.Win32.TaskScheduler.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Microsoft.Win32.TaskScheduler.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Newtonsoft.Json.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
de\BorderlessGaming.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
de\BorderlessGaming.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
de\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
de\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
en-US\BorderlessGaming.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
en-US\BorderlessGaming.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
en\BorderlessGaming.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
en\BorderlessGaming.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
es\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
es\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
fr\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
fr\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
it\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
it\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
pl\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
pl\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
protobuf-net.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
protobuf-net.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
ru\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
ru\Microsoft.Win32.TaskScheduler.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
zh-CN\BorderlessGaming.resources.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
zh-CN\BorderlessGaming.resources.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target BorderlessGaming-1.0.2.0.zip
- Size 1.1MB
- Sample261102-kslfdaax5l
- SHA256 80300e44909d9bfb6b568e830af9ec88b4adfef3873ea12c40859c22d6180832
- MD5 94c2114d1bca262a7e5d313406c2eacb
- SHA1 366dccd9ea3421902b6f14a6564d9e7e50d5821e
- SHA512 d5e340caeefc5003cbc7af2b6b442aadaa476716db9a23ba14c89d2ae4f42a3702de215638332957b7ca1784fa5e891b3547c37bfe431d80e5ff547b8db0b67f
- SSDEEP 24576:iD4+gdZ4nse4b/UL2OfysX3gQ4cUT/mN5xYcxMNEVMC:B+gdZvb/UL2OqsHdTUTkPBxM+T
- TLSH T14635338614801307C8A34FB740EC1F654E07A8B24BF942C5EAE8F66D474F3E9AEF5A55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 16 IoCs
Checks for missing Authenticode signature.
resource unpack001/BorderlessGaming.Logic.dll unpack001/BorderlessGaming.exe unpack001/CommandLine.dll unpack001/Microsoft.Win32.TaskScheduler.dll unpack001/de\BorderlessGaming.resources.dll unpack001/de\Microsoft.Win32.TaskScheduler.resources.dll unpack001/en-US\BorderlessGaming.resources.dll unpack001/en\BorderlessGaming.resources.dll unpack001/es\Microsoft.Win32.TaskScheduler.resources.dll unpack001/fr\Microsoft.Win32.TaskScheduler.resources.dll unpack001/it\Microsoft.Win32.TaskScheduler.resources.dll unpack001/pl\Microsoft.Win32.TaskScheduler.resources.dll unpack001/protobuf-net.dll unpack001/ru\Microsoft.Win32.TaskScheduler.resources.dll unpack001/zh-CN\BorderlessGaming.resources.dll unpack001/zh-CN\Microsoft.Win32.TaskScheduler.resources.dll
File Explorer
-
BorderlessGaming-1.0.2.0.zip.zip 1.1MB
-
BorderlessGaming.Logic.dll.dll 97KB
-
BorderlessGaming.Logic.pdb185KB
-
BorderlessGaming.exe.exe 516KB
-
BorderlessGaming.exe.config.xml 184B
-
BorderlessGaming.pdb185KB
-
CommandLine.dll.dll 57KB
-
Languages.zip.zip 22KB
-
de-DE.lang4KB
-
en-US.lang3KB
-
es-419.lang4KB
-
fr-FR.lang4KB
-
it-IT.lang4KB
-
ja-JP.lang5KB
-
ko-KR.lang4KB
-
pl-PL.lang4KB
-
ru-RU.lang5KB
-
sl-SI.lang4KB
-
zh-CN.lang3KB
-
zh-TW.lang4KB
-
Microsoft.Win32.TaskScheduler.dll.dll 317KB
-
Newtonsoft.Json.dll.dll 704KB
-
de\BorderlessGaming.resources.dll.dll 5KB
-
de\Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
en-US\BorderlessGaming.resources.dll.dll 144KB
-
en\BorderlessGaming.resources.dll.dll 62KB
-
es\Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
fr\Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
it\Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
pl\Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
-
protobuf-net.dll.dll 269KB
-
ru\Microsoft.Win32.TaskScheduler.resources.dll.dll 10KB
-
zh-CN\BorderlessGaming.resources.dll.dll 172KB
-
zh-CN\Microsoft.Win32.TaskScheduler.resources.dll.dll 9KB
BorderlessGaming.Logic.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 31a0ce93e5c8bcc08935972f6238de972180a1ac0895624e5f557af8b98bf92f
- MD5 2ad8316bbeefce1f32ba3d3e2fb5191b
- SHA1 e128c473cc74694580f834b73380917d39713be8
- SHA512 dc8f9226ecea38599e625a68ca3122368399abffbbcf4158a1f97fb0ae8008522c195327f6ce46922153910261d3ab076e75bdf682c6eff80e97af02e1d8e6ef
- SSDEEP 1536:XvI6bdG8zzxsD5nHzexGyackW4CvEGdv0uK0nnnnKFCo/Fu:XvIcdVzAaxGyzQqLRO0nnnnqC+k
- TLSH T114A36C1563F88B65F5EFBFBAF4210A12CB71E58A282EF74A4D88B0D95D223D34514393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
105306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\Borderless-Gaming\Borderless-Gaming\BorderlessGaming.Logic\obj\Release\BorderlessGaming.Logic.pdb
mscoree
_CorDllMain
Name
.text
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BorderlessGaming.Logic.pdb
- SHA256 32b00107a9d6dcc0e4c756319876d4036df764843bd4c38fe57d24ac81645f5f
- MD5 678df36cab33b1ec19ee6cff39bd9052
- SHA1 35c60c909c23528fe6253b6e4b8f41a1155b680f
- SHA512 bf4fffde3823bbe45d0e53aa6b7bf5be20bf5c13b85fb6c1be2312d0c13655ae0b4ec5b9d045444f9bed39c1fcc4b6e36a3ce9c3a0514edd30ca2ee75b9784db
- SSDEEP 1536:QMkzDrXsAGShML7DwSE2v1bAb4idnC3qL+y+33mUd1j/h46eI/:QiAGSuL7MBkxjiBC3Dy+GSTO6eI
- TLSH T185049522FB18D671E46ACB346D9F9F0D0636FD884B839B1F2785705C2EE231A1E517A4
- MD5 SHA1 SHA512 SSDEEP TLSH
BorderlessGaming.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6aa383f1f46ef7ce31db1d42f64d3b577b56e351558ad36ff2412756e9bc328a
- MD5 c5e8694861ecaa96a6316ce3026fba5d
- SHA1 b3c85af7ee48a0a1b26e150b1c377ab32bb638d6
- SHA512 e824cac2b9431767c5678397dcd14127d10e2560cef380b65a6bf62a0aac51655ebea7e308968a22f7595863dbad18b338f9dd10c643ca04ccf4041ba0a145c8
- SSDEEP 6144:IgaNZAH4Tkxpyaa33emDT6AQU+coCyZPw/+9XdNANPKgnTHoJRh3VJRhyJRhqeNk:IK4T+51ZPk+9DyP5kJpJuJoJhnJnyBQ
- TLSH T1E9B4B63032EB511DE5B79A3209E02397962EB762EA09D79D243523CD4B1364FAB1173F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
502774
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\Borderless-Gaming\Borderless-Gaming\BorderlessGaming\obj\Release\BorderlessGaming.pdb
mscoree
_CorExeMain
Name
.text
Size
483KB
Virtual Size
482KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BorderlessGaming.exe.config
- SHA256 16286566d54d81c3721f7ecf7f426d965de364e9be2f9e628d7363b684b6fe6a
- MD5 13ff21470b63470978e08e4933eb8e56
- SHA1 3fa7077272c55e85141236d90d302975e3d14b2e
- SHA512 56d0e52874744df091ba8421eeda9c37854ece32a826bd251f74b88b6334df69736b8cd97104e6e7b2279ef01d2144fee100392744cc1afb7025ebbad5c307a8
- TLSH T123C0124940A8BD269D338A279250C922FFB022A2A024140CF02FAA6A0B311AD464736A
- MD5 SHA1 SHA512 TLSH
BorderlessGaming.pdb
- SHA256 3e8fe8e42a7ec20b547e1a20f866aa763b644ea3c34811f0e6adaad369212f2f
- MD5 3e35fb85740b66f3fe1c7f3b2039c5d8
- SHA1 ca3b289d96ec720408830d59a895eb9017e3bab8
- SHA512 3bb9adb0bc4cce57633b2e3430578d41fe7d4ae71890e4ebd675d570043438e093808b6aa23c21622649989b2ed8061e3a349577e268782ed6acde6845f5b595
- SSDEEP 3072:LD9k1w9gHSEgJCwD4XwqmZUxgqSjPnSdHKmPtqaon:LD4w9gH/gJCwD/XZUxgqSjPnSkmgaon
- TLSH T18B04A423FB94C672E425C67C6AEF4F2C0335E9888B839B8F5645B06C3EE23951E56354
- MD5 SHA1 SHA512 SSDEEP TLSH
CommandLine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4923528d3d18689d58fa30b3d822ab72a13be21a57f13e0bc59b55b864424f7a
- MD5 ec0e2dd54144d6f6a317b7daa715d418
- SHA1 62c2e04bba8436912d9bcec1ec4d4c7afc843a47
- SHA512 ccaf01f89fab001ef2ded15b352e1dd2ab3967584a8720acb7c6b7203240f9c896f7d46600b12e0e86b25b30779b1e5ed59ce97fb3f295afb11d6391670265ef
- SSDEEP 768:Aa4UCvHii8p2scLC8OfyHxy1XdF0l1t8HQDGiejOsSZhD3T1x:A9hircRL9OfPtCJE9iejOsSv7
- TLSH T1EC43F95467E8872AE6BF0B75B83062510BB4BF46B963D76E4D44B49E1423FD085223B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
p:\CommandLine\src\libcmdline\obj\Release\CommandLine.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Languages.zip
- SHA256 101c5670b843ebc1435cc8e366add08102f95fea930d6311b1059e1dc8269956
- MD5 74ba078ae5694d1dab907c3b58296eaa
- SHA1 5e69c0ff7da53c83f4b5e3e6ac0098287c6ab57c
- SHA512 375455918814e72fbc59f8a851db77cb4b9e931ce7245b6be8fb0db84d2f86d656a64b0a86f87763c6e2bdf9a4561a91a165bb47be0586e13f4abe562370c613
- SSDEEP 384:fjcK3s8t1wrEx4Qf9H5j7CHJ7EiJxUME1BxkSCHqQ7GHFZkJkScfiYz5N:fjB3s8tqQVZY9rcBxlCKQ7OGJQiWn
- TLSH T1CFA2CF16843AE75DF16B04BE690B49D3F63A7364163D382AABD148491743EE00E1EF8E
- MD5 SHA1 SHA512 SSDEEP TLSH
de-DE.lang
- SHA256 e7acf08ad799dbf2435e191a9da1af2c4ab172d257076db006e7ea1ef8416651
- MD5 8bcfbe1e4eb0c30990196862e5ea97f2
- SHA1 2f24361dd03e5dce10348f08c0ebefb12e7c3560
- SHA512 d4df3c2153e3ef5515ca206468168f2ca93462d92a69af5951fbc93a4a00b47b24a54b9e588f28295d713e131db2cedeca525d438f733029d05973362def8816
- SSDEEP 96:IOXaXykfnNgEMpNeQosN4TNqbAfE+2oi6mFMn:7qZg7eQxWqW1fsFMn
- TLSH T1D2913112D06AB199EEA233133D069AD27B25D13AC774A512206DC15FFE8E4EBC2073E5
- MD5 SHA1 SHA512 SSDEEP TLSH
en-US.lang
- SHA256 a1f5ce1e90cfe59c6a27ef67a80fbf30f0bfe6d8d2c63538bfde345241bdf08a
- MD5 35ead1f2272efaa8276cb46d7acbda82
- SHA1 c667f3061d3e790f94cdd547f455c0849d57b302
- SHA512 e6ca2252eaa87cecdc8823a3e9b213aadb5f2df26f52b7e553309068e89a2d82509f6a557801d509fcf06b88f287b7960122095e29e66dd5771667bb1f486d39
- TLSH T19D811165E039B166EC72A3635A43A7433B12C43DC3B5912708BD8608FE9D0E3D2432EA
- MD5 SHA1 SHA512 TLSH
es-419.lang
- SHA256 dbfe6a31d3a0295a3c0f3ae0ca2273707a4abcaaf86f9d216c1bc29696feb988
- MD5 4aab97285db61f3aef670e017c76bb27
- SHA1 66ca85aa40170dd9103292ea659c042eca47495e
- SHA512 fda80328f162391dd2fa3c82477c8ef06ffbac090e265c35877a84615d10d69dc9d537650adf02cc7c1859b14e297b785346aa01519a71e2ceceecdd6be87e25
- SSDEEP 96:L2ENblJqnYfwPVRYv2sQTa9pOATGVlUfYhO16XMuzDf:7+ndu2sQTepihquzDf
- TLSH T1E0916626D1BCA1A6FD5263538B43E203FA60D03D9B7DC11314AD4A59BF8C9D6C043AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
fr-FR.lang
- SHA256 ce031da8649f37e331de10b5c4486b961f6b5992a3ec07f5740852f50bfda11f
- MD5 fd3de12f9be56c06fe7c82ec1a59d5ad
- SHA1 089d7553fdab3569f2348bcec2c8f7b9bd3245a9
- SHA512 7179c1ff5c1cf4cad75c87eb9ca408da9195f5ea98a91d5e49297be0ddb047b865611cdd5ef949b5f59916a6135a14be976425c5f26c9253f47e2149c949ace2
- SSDEEP 96:7n7fSHVQhI6LVlEQQtz+CVCX0Af9gPdv9fi0b:77eV2lEQQUJaPdvo8
- TLSH T186A13267E1B9B0E5ADD22327AD02D653FB60C43DD7B4C25048994606BF8C8EEE1833E4
- MD5 SHA1 SHA512 SSDEEP TLSH
it-IT.lang
- SHA256 4a6b0c1c254a64f85c10333833ae46ee758595f512b586f214c1440be81e703e
- MD5 7d92a9cb3d937e256216000c4d8fc5b4
- SHA1 0a5ab843899acb533ac7201526d0ae3ce2698096
- SHA512 08bd677416e6cf40fcb94ca38ac5302cfabc170b08eb04ce69a4a14351eb4052d999270ed1f7922b9a162dae4b2c913ef15c8de295c7e9eb4869f9ad11de80a8
- SSDEEP 96:y03WjADv8d2AQHpBJ+hEjQBTS4aUxgUt4MAr5JLWMAOJ7Sr7t:yWWqqdapBYEjQB1PZt4d5JqMAISft
- TLSH T17AA16534E46CD095BCA613ABC54262037B61D86DBF7C901655B90308FF8E5A2E1B37FA
- MD5 SHA1 SHA512 SSDEEP TLSH
ja-JP.lang
- SHA256 c60bd8e03161fbdf8ff7bfb0459696437308f486a51785a29f5bd4b812a3838f
- MD5 6e4792ac4c7a858ea869e76806a700f2
- SHA1 fd091c2dce2eac6c8a50b76f4e62466d9f0a4eb7
- SHA512 056e1aec1f861ed0b82e497d07dacc5c247f494b1a7776567357f20b776fe8ab5419bc9e71b07cf14af1269b0f85e425ffd063eb69b57d3aeec46d345b956214
- SSDEEP 96:U4e79cCKB2UDZsiarrILQgvusNmTjAsnt2/yOwM8+ESjsap1:Ut9UYr+QbPTL4yyESYap1
- TLSH T186B1DE2CA3E1A424ED3696B7188B718276928D3BEF717926002CE561BE980DFD1437F5
- MD5 SHA1 SHA512 SSDEEP TLSH
ko-KR.lang
- SHA256 ec3c8c9b84f6d262dd832007d0c7ad3a451e96f53479e89aec2dd577da703645
- MD5 e48db0c67dad329d423950556c512eae
- SHA1 d84b10e6bad7dc85fe417d83aa77623de39d9b3f
- SHA512 d0d194492dc2d4ebdd2ba6ad08dce84894b6029ec9b541d78eef51085e168634e3c877a63367c8e2eb3d419bf574682174967a680ea30d1a1550b320b5216323
- SSDEEP 96:b81rYnVaoNz0lGvVQHCDq2/iCARw1tOIOTJX21FlRf:iXlGdQHAq2/pwClt
- TLSH T159913260F8FFA4E8BC739A579D42630A3346963A737542314C584A88FD9C4E3C247AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
pl-PL.lang
- SHA256 8b76894dcc0b69e3870929dafc6fb55beca47e1ef15fea932919e97bdf2b779a
- MD5 823b1f1348bef3aa0c4b83d4114b28d7
- SHA1 64a581ce00b70b3dc4521dd47965bbd9b83f5927
- SHA512 db937d4e5886388e409500264c58016e65e798401c2b988aca75170298f3ad82a10284996c50bc1c3e4ee0495f6d8118ebed51c39371c3d0efbf86c848127a58
- SSDEEP 96:fT4tP3T71vUzke5Zp/79yVYhiQx7vUpAVBpJhX+sTtp3HrK:fctP3T71vUzkg/ZwQxVBjtjTfHrK
- TLSH T104917319F0B5D15DFE750A3B98AA17527B16883EE779C952546D8440BECC0D7C2A33E0
- MD5 SHA1 SHA512 SSDEEP TLSH
ru-RU.lang
- SHA256 e1f86499c27286e7268122a271a04a8028b99814c7388dcb77544af8fe4428a3
- MD5 c25fe4be9ef227e5c15b499fc45166b5
- SHA1 f5b37e26da43c71a3dd47165d42c954c88516476
- SHA512 eb0e9f12e992755b6e0499ac9736fae2baac703c1870809c03e8b3fc3511af7404b939a88973f07ce94b6b344e41c4b699583d3968eab53e4ee3825c584bad0e
- SSDEEP 96:fWntbrou7NYBofvfYdiHQumsQYWgqKakgAZ1sKYK2n0xE:Ontbp7yMHQuZQYEKakiLKYSE
- TLSH T122C1AF24D1AA70AB9901F92BCD056F097DB5807E3FBEA3160C641D7E3DFA071C22A795
- MD5 SHA1 SHA512 SSDEEP TLSH
sl-SI.lang
- SHA256 30a71a4c55dd725fce190a309e57c5f2af06c5d99cf7bdc823b85f81a4b98beb
- MD5 9a6d6060f9231b3bc9b0c70fd81bf553
- SHA1 9df033b7a6692dc4d54a3baad3beb359e84c5330
- SHA512 22d894f57717e397d76e8913d25289e7b27c8bded3de03365ff9bab18bf885385cbf83528cb2281b0fb92eac92d170ad7342f41018581f61ffb5225851e94e37
- SSDEEP 96:BC7wI3Vxp8QZTaGCLw4OnAE/NVEXqFBIhvbHrd:c1eQ1kL/2vS6Ihfd
- TLSH T1D6918421D07EDC84EE2263AF9A9303517F568C79D3358125786E024AFECC8E2C1936E0
- MD5 SHA1 SHA512 SSDEEP TLSH
zh-CN.lang
- SHA256 d74ace4d47728ed53518b32403ec8b0b1f601bdab48e53976552ccc7bd3444ec
- MD5 2972dd2505facc15ba9490a190f9657d
- SHA1 42a4578d41cf97578d1542020edc523a7b0806c7
- SHA512 7f96bed3110c8b3c4b8e3f10ce92040c14804f20da4929af1ea829897148fec3157e36183df4f281537682a37fd6da3411c02241678d55ae1bcdb0293176dd98
- TLSH T1AD81A774D47CADB9FE269377298503073F00A53AFB31A66144688609BDCC4DAE6437C9
- MD5 SHA1 SHA512 TLSH
zh-TW.lang
- SHA256 0f1b829360e57a15e3a64d799a2ff2a9c1107ee9c64bcfd064a40b097df849a6
- MD5 01800538136847bee7840172dc1d192d
- SHA1 363290b5790bdc32fc88be72ef983e4913d2e5d5
- SHA512 9c09cdc9b14736a85f3d9b3baab975a68c3631e9dd8ef3a37e93425b0c0e79ab16efd7983303724c979941deeb35ef4cc346162707a00a1aa55e9f46477c6f53
- SSDEEP 96:xAO42L7mhUcNq6QerHO+kFA5didNeVjktNj6bm/RGllloG:Z42Hm+uQerDkyUjuBK/R2QG
- TLSH T1EA91645094B9982CFE62AE371B8603133B609579AB74A62100BE81D1BFCD8E7E1433D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Microsoft.Win32.TaskScheduler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4d62c95536f88eee447042cf4907bde48c7f22cebac30f7c5afd4748497ccdc2
- MD5 6257d4a618328bbbccc63e2dd34ce45c
- SHA1 53381dbd1d92349a4c5f81fe0da21d3ec2ee9d9b
- SHA512 da359eccad0048cd1f0e5316d5d81b2d5adc1bdebea36e1a64c9a2024e6359c018b93d9781ae427035e1da093661fc4f18fa3c10da4371fb7247aa413d2a701e
- SSDEEP 6144:JmrqJZtlDVC+sEm8iR8RMXZyYzhJS+8sX6PxQEcaBKBAw:jZrcbPPR8RMXZyYzhJS+8sX6PxQEb8B
- TLSH T1F5644B2263FC872AE9FF177EF43541108AB9F94AA866DF0E4550A9988E73740C953337
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
329798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net452\Microsoft.Win32.TaskScheduler.pdb
mscoree
_CorDllMain
Name
.text
Size
314KB
Virtual Size
314KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
- MD5 24704261e701b49b51e40c1292ed149e
- SHA1 db8ce5e0b7d8c14920bc9c4eebe51bdf706e3fc6
- SHA512 8ef6a6196044862a9d8d53c6a88e68d9591edf244385bc4888cb9c16c942eeb4a1689c49245d6cf80d619e95f0745898513ed2b67a6fc4c65fbc06b872f72184
- SSDEEP 12288:65RsO50fsVuW3icGomHAQ/DUHIdGFRrDTOAPKfhUUNSUmTIcvABXyoJl8fCfB5qm:om2VuaOKdKSUNz0IpBXyov8fC3
- TLSH T178E45B2177FC8E16D9EF2375B430D9181BF1F956A2BAE78FA504D9A51C837918C203A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
08:39:56:e4:21:43:4f:90:03:ee:08:ba:76:09:c5:58:d4:a5:2a:73:28:78:a1:5f:f6:46:d6:59:61:a9:2a:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 16, 2025
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0c:0d:22:a2:ef:64:2e:b8:88:c4:4f:a0:18:f0:0a:1b
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 4, 2024 - Nov 3, 2027
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:4b:a1:b1:ad:e1:59:fc:e7:34:00:00:00:00:00:4b
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 26, 2024 - Nov 19, 2025
Minor OS version
0
Major OS version
4
Entry point
713798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
690KB
Virtual Size
689KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
de\BorderlessGaming.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3cf297f21a5817212fe39f699fe85ee9d2a0756ee7192ac6f6320c61e04743a4
- MD5 c2211f7b2ff2feee0997b48b5f940a45
- SHA1 42decf6488cda0ae967b85d136c20606dbac67ad
- SHA512 50ea38a13ff4e9b98f48e4aa82606cd9536a37981c9835f9f2d2e5b346b78227af296c270981ba75329bc06a8f971b15a2347878242c019f0c1fdc34fbac032b
- SSDEEP 48:6HzprHzkZdrH+XgsuNiePvd/dxzKbU/2XCJEGSMuMs58+COJQlc4vBNqo9Bhd7Es:UrkekNiKl1xUUNyM68+slcsqchd7E5t
- TLSH T12EC1DD01ABF91325F6F3AF3269B75681423AFA71DD62C76E0444026D2DB2790CA60F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
de\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a6e68dee7fcce966e9059bd0d449ddd9481e6fee33087f2639d2563ac75038df
- MD5 0f50bae539bd0bd1631a9dd91768fef5
- SHA1 4c0d578279cbb96b83c3123d205dab093d2c73ed
- SHA512 33615213a2c0d79bb27adb83be958acb2e78bffd7041a33a63d5ca4d66b81c7f9cfe65de33d510f98b3746f5918c28a6ad0b6b007c572ab5a88b52f1df7ccae3
- SSDEEP 192:yiAN0xENtqVeFseIS+iyOdv7ZJSqSi/u4WRo1dS15rcN0XWr:BAN5FNIS+iyOdzZJSGuPRSM5rcN0XWr
- TLSH T143120C099BF8023DF5F62FB9E9B68531B43AFD968D32C62D1244814D4531642CAF2B3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
en-US\BorderlessGaming.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 98a54aaadc1e22e91a4f8476b67885d2e483d0912180cf1ee26bcbb2157e56eb
- MD5 c180110b22392993a661e2eba9673525
- SHA1 e037f440ad195ea479d7f459b5968c6d2b232883
- SHA512 99b01e831d003a83b52a7a5d840d724568734b5950f77ff58f33f68d7af3504fd114788673bb2da48b9bbb82caf77587d73868ef1415ff18a9fc09722ea75ada
- SSDEEP 3072:iw5UxlfhI1d5YgNLmQw5UxlfhI+0w5UxlfhIok:iJRhA8gUQJRhz0JRhF
- TLSH T142E392313267611CC8AA493304606383A66D6749EF89DBDE727933DC5B5319F3B2262F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
153406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
142KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
en\BorderlessGaming.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b26fe37f21a864a93905647d846de4781ca7ab3cb5047553d67c311a2dbb0d4d
- MD5 7d8d538dc77cb14869820a0f21d1eb26
- SHA1 9077944f2d79b14087f00e01a011927182887899
- SHA512 c9cba2b90bb56e5c7b7b11557e6225726f661521857d342564df7155f0e1189d10da55a2869e910a262dde7e8a81152318e6cb7e570e8aad67852dc3adc346b7
- SSDEEP 768:QQCzerv77IIAeY0TPTbpbUBQB2qCSy8uucuuL75kSbUhIpeRK6fU/O9re568ZiKK:vieI0TbpIQBxCSfhIpZdJHXXo
- TLSH T16753A5713257611CC86A0A32046463C7A6696748EF89CBDE327933DC6B5319F6B2273F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
69518
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
es\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1618e7a7a1b1de8bf0bb39debe419d5039d7ac82dd1ed839bf94f630cc9f9bbe
- MD5 b99f61a7a3d326b060976b8e902308e7
- SHA1 ff2a19909bbb48db533240d678e3c1f8a96ef6ae
- SHA512 3785c6c279782121ba2f4eeb3d567cc40a05fca472b64943c1fc9f3ce6a027f6bd1e76e18abc6af6154615784dc18d4e9ec85d93e326713e4a76396c8d2beee8
- SSDEEP 192:T+RHiAN0xEStoCotvVwjOjvZcMTPCb+BE00cUnhWuo1dSV5rcN0XWr:T+RCAN8oNVwjOjv2MTCiE00cjuSs5rcL
- TLSH T188123F0997F8453EF4F22FB9E9768032F43AFD959D22C26E4544820C5471A85CAF2B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
fr\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 013ce001b3b1d204a88f19422385e3c78d0d82de088535412f816324425f4ffd
- MD5 5557cad7f55e687ff7dd273609d50d31
- SHA1 db80a42ffcf4467ef80dea6ef6a836223c105893
- SHA512 d1bd4e90121ff5959917312f0229dbb6b8a7c207cdb485d0682f07ef2ae77e927b88acc8fee13196b126addaa7d65a1752d65a3c8df1830dcf3b7899eec860e8
- SSDEEP 192:IAN0xEYtPaB3iaJhW/ZFnOneII0HYZDKz/CW8o1dSm5rcN0XWr:IANTB3iaJhW/ZFnweH0HYZD48Sf5rcNJ
- TLSH T16C121019ABF8012DF5F22FBEE9768532B83AFD959D32C26D0644810D0471955DAF2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
it\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 dd5466f5e5411459e1f1303998a8c3848aa0c3e3ee6b049c5464e5b6c83bd328
- MD5 f94cbb6736b6143c040f2d3849b34333
- SHA1 9eba8fc677fa480392d79843ef2391b96c3c74a4
- SHA512 53f450ae9ac0b8024cc13c277bb521935e0edbc1a009d98cee7f1b7a63c502d5335b0433cbb6a43d05474d1c1b8d4bb8327db4407a8a56b5d6363da836964bc0
- SSDEEP 192:qNqiAN0xE5tyYFGd+L25mZy/07BWOo1dSV5rcN0XWr:qN5ANpFGd+L25mZs074OSs5rcN0XWr
- TLSH T1AD121C49A7FC423DF4F32FB9E9768171B87AFC959C22C26D0644820C4431A95DAB1B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
pl\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1b542f2386cda645fc6a05f9cdb9c6ce736ba7e7a2535399b4acc666c711953c
- MD5 c1d758d1f64d2ef9c874e10b3ad2f89c
- SHA1 673d7357dd8facfa5a85699423cd8cf97e20d4b6
- SHA512 5e2e1cb6d63e0aea1e71a7569637215dd3286f5efb2ad190d6959bbf5289331cad0ca0a147485bf9366e32138cf1ce5be8030e50ef2b17a368db55a77245d34e
- SSDEEP 192:LAN0xEYtqBoQPqeEKYeCBTrQsk96NWKo1dSK5rcN0XWr:LANLzPqeEReCBTUskBKSj5rcN0XWr
- TLSH T1E4121019A7F8012EF5F22FB9E9B78132B87EFC558D22C25D0644812C4831655CAF6B77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
protobuf-net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 042b8c1c1e0eb7648b164ee48c95168c48324f1fb439cabd5f2e41db0938d807
- MD5 4a4756e227c10623d81228bc4bc49c1d
- SHA1 964014f538918d85f6eb6a7b4023b304067b28f7
- SHA512 93d2c6f47c618dc9493f5a538cbfb5a32c1e3bb35a623b51561057245f2fa557c452ee18ae274182c3e0440b77353c5490d196f16eda142b6129e8d1108e5a04
- SSDEEP 3072:2ne8csJldhXG4JhEj9n8RHq6MY7qLfoDb4LUcqbrKKu55O/u85wcT/0c8yiwo3aa:2nT7JxXJ7qFLMrKXE/9YLy1W2WNU6
- TLSH T195448D14A3EC4616E6FEE7B4E9B815484BF6BA4B752FEB0D589060FD0C2378189017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
280762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
protobuf-net.pdb
mscoree
_CorDllMain
Name
.text
Size
266KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ru\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3955417fac11f059a008c1dd0baa46d727f079354afa4c80453e7249037fb6cb
- MD5 440959033357f2f8a05340839cec1a5a
- SHA1 2fdecfd6e7d080da6585c490a3f5dcb0a41e312e
- SHA512 216d93754683b829f4b75b182eaa46cbf63fde393d7545fe458dc46755dd94879103dde8a1d208dc888b83bf680d2b5cb4452ad66856def2097c9c5fdfdb8031
- SSDEEP 192:3AN0xEfthbdMrrMH3uA0Jkm394in3fwB/C2WT1o1dSc5rcN0XWr:3AN9dMrrMH3uA0hhnYVCNxSF5rcN0XWr
- TLSH T10922411997FC012DF0F26FBAF9768925B87EFCBA5E22C25D2540851D1871914CAB2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
zh-CN\BorderlessGaming.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 16523e3f684c583fe67ed7f8589ab8ef10e6bdf83bd8055f54bd689aa8ebe331
- MD5 a0a1307596571c938f8f5af1723bb07d
- SHA1 e2f0d17ce4616ac7c7da8a10a92d0104b776ed56
- SHA512 7a6fbc9f0b7aae14efd5296a5f62318404823f7ea866ef76e62667c54baa8f6c4234a8560331a2c719a93f5ff8898f69c3ca45e6a9039a16aca8d35521919bcf
- SSDEEP 3072:jw5UxlfhIhd5Yw5UxlfhIF0fK2w5UxlfhISw5UxlfhIZW:jJRhckJRhO0RJRhlJRh0
- TLSH T189049272326B651CC8AA993304601383E62D6749DB89DBDE723933DC5B5319F3B2162F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
181550
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
169KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
zh-CN\Microsoft.Win32.TaskScheduler.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0a56978005282ee6c58fd93141e71ca0da2a1df7637193cb234b97b884f5be59
- MD5 f398d2747d2363cd7090d2021a1f0dc6
- SHA1 2691aaecf9e975dc6603d04f698674d4aea397a8
- SHA512 b3b3a785632b9aa2be3c0ea13160caf0103dd895ffed42e2fb9878c0fffa2768f84f9e3617a4f8a3d0fbab62a7d37fb708790fe9955934446fc0f7ada8572ab5
- SSDEEP 192:ZAN0xEhtiTVNBBzL8FDEVCtzEc6yGW/o1dS45rcN0XWr:ZANmvBBzL8FYVt+d/SR5rcN0XWr
- TLSH T1EC12EE4EA7F8092DF4F22FB8E9B68521B53BFD969C32C16E1554811C5931A41CAF2B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ