hotel1.rar
- SHA256 8d41a3a6d54e904ae9627665d2b506d95134f88b41a7b779927d4af98e30865f
Overview
overview
5Static
static
3hotel1/Home.vbs
windows10-2004-x64
5hotel1/Home.vbs
windows11-ltsc_2024-x64
5hotel1/Parametrer.vbs
windows10-2004-x64
5hotel1/Parametrer.vbs
windows11-ltsc_2024-x64
5hotel1/Pro...er.vbs
windows10-2004-x64
5hotel1/Pro...er.vbs
windows11-ltsc_2024-x64
5hotel1/Pro...es.vbs
windows10-2004-x64
5hotel1/Pro...es.vbs
windows11-ltsc_2024-x64
5hotel1/Reserve.vbs
windows10-2004-x64
5hotel1/Reserve.vbs
windows11-ltsc_2024-x64
5hotel1/addho.vbs
windows10-2004-x64
5hotel1/addho.vbs
windows11-ltsc_2024-x64
5hotel1/ajchamber.vbs
windows10-2004-x64
5hotel1/ajchamber.vbs
windows11-ltsc_2024-x64
5hotel1/bin....0.dll
windows10-2004-x64
1hotel1/bin....0.dll
windows11-ltsc_2024-x64
1hotel1/bin....0.dll
windows10-2004-x64
1hotel1/bin....0.dll
windows11-ltsc_2024-x64
1hotel1/bin...es.dll
windows10-2004-x64
1hotel1/bin...es.dll
windows11-ltsc_2024-x64
1hotel1/bin...st.dll
windows10-2004-x64
1hotel1/bin...st.dll
windows11-ltsc_2024-x64
1hotel1/bin...el.dll
windows10-2004-x64
1hotel1/bin...el.dll
windows11-ltsc_2024-x64
1hotel1/bin...me.dll
windows10-2004-x64
1hotel1/bin...me.dll
windows11-ltsc_2024-x64
1hotel1/bin...op.dll
windows10-2004-x64
1hotel1/bin...op.dll
windows11-ltsc_2024-x64
1hotel1/bin...or.dll
windows10-2004-x64
1hotel1/bin...or.dll
windows11-ltsc_2024-x64
1hotel1/bin...ol.dll
windows10-2004-x64
1hotel1/bin...ol.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hotel1/Home.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
hotel1/Home.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
hotel1/Parametrer.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
hotel1/Parametrer.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
hotel1/Properties/Resources.Designer.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
hotel1/Properties/Resources.Designer.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
hotel1/Properties/Resources.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
hotel1/Properties/Resources.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
hotel1/Reserve.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
hotel1/Reserve.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
hotel1/addho.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
hotel1/addho.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
hotel1/ajchamber.vbs
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
hotel1/ajchamber.vbs
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.12.0.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.12.0.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.EntityFramework.12.0.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.EntityFramework.12.0.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
hotel1/bin/Debug/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
hotel1/bin/Debug/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.ComponentModelHost.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.ComponentModelHost.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.GraphModel.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.GraphModel.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.Imaging.Interop.14.0.DesignTime.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.Imaging.Interop.14.0.DesignTime.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.Interop.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.Interop.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.ProjectAggregator.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.ProjectAggregator.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.RemoteControl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
hotel1/bin/Debug/Microsoft.VisualStudio.RemoteControl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target hotel1.rar
- Size 3.0MB
- Sample261107-3vdseswtex
- SHA256 8d41a3a6d54e904ae9627665d2b506d95134f88b41a7b779927d4af98e30865f
- MD5 99718dcdc40d03fc38f7b70ed6f682f2
- SHA1 e7ece83a803287a9cd3de09692aa5a8558f0a8e6
- SHA512 af16b28f34e900484bd7da468fffdbddf91292e47f35af544aa8767799dcb64c8e8e1f3f2852942882de08e1645cfc99a9f78bd372441b508cad7fe9352138cb
- SSDEEP 49152:J6jAqbUtRMrQ1PR8kAhnipF16rydA57V6ad+SBnunqTTTAh+2q/T3l:J6jAqYtRR1PSkYipPmyC57UU+WSqnEhu
- TLSH T16FE5331D1B402260A41B112A2F5FEB41F20976DDFBFD9CDCD5A6345A5873E22F881EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/hotel1/bin/Debug/hotel1.exe unpack001/hotel1/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll unpack001/hotel1/obj/Debug/hotel1.exe
File Explorer
-
hotel1.rar.rar 3.0MB
-
hotel1.sln1KB
-
hotel1/App.config189B
-
hotel1/Home.Designer.cs8KB
-
hotel1/Home.cs7KB
-
hotel1/Home.resx.vbs 5KB
-
hotel1/Parametrer.Designer.cs1KB
-
hotel1/Parametrer.cs516B
-
hotel1/Parametrer.resx.vbs 5KB
-
hotel1/Program.cs540B
-
hotel1/Properties/AssemblyInfo.cs1KB
-
hotel1/Properties/Resources.Designer.cs.vbs 3KB
-
hotel1/Properties/Resources.resx.vbs 6KB
-
hotel1/Properties/Settings.Designer.cs1KB
-
hotel1/Properties/Settings.settings249B
-
hotel1/Reserve.Designer.cs25KB
-
hotel1/Reserve.cs1015B
-
hotel1/Reserve.resx.vbs 5KB
-
hotel1/Resources/5-stars.png.png 19KB
-
hotel1/Resources/PNG-images-PNGs-Plus-Add-Addition--87png.png.png 10KB
-
hotel1/Resources/add.png.png 67KB
-
hotel1/Resources/add1.png.png 67KB
-
hotel1/Resources/add2.png.png 1KB
-
hotel1/Resources/azeez.jpg.jpg 18KB
-
hotel1/Resources/button-rec-accept.png.png 46KB
-
hotel1/Resources/button-rec-accept1.png.png 46KB
-
hotel1/Resources/delete-xxl.png.png 3KB
-
hotel1/Resources/filter.png.png 11KB
-
hotel1/Resources/hotel.png.png 1KB
-
hotel1/Resources/imgdefault.png.png 5KB
-
hotel1/Resources/plus (1).png.png 926B
-
hotel1/addho.Designer.cs11KB
-
hotel1/addho.cs2KB
-
hotel1/addho.resx.vbs 5KB
-
hotel1/ajchamber.Designer.cs12KB
-
hotel1/ajchamber.cs2KB
-
hotel1/ajchamber.resx.vbs 7KB
-
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.12.0.dll.dll 102KB
-
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.12.0.xml.xml 140KB
-
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.EntityFramework.12.0.dll.dll 56KB
-
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.EntityFramework.12.0.xml.xml 38KB
-
hotel1/bin/Debug/Microsoft.Bcl.AsyncInterfaces.dll.dll 21KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.ComponentModelHost.dll.dll 20KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.GraphModel.dll.dll 473KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.GraphModel.xml.xml 653KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Imaging.Interop.14.0.DesignTime.dll.dll 21KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Interop.dll.dll 2.5MB
-
hotel1/bin/Debug/Microsoft.VisualStudio.ProjectAggregator.dll.dll 13KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.RemoteControl.dll.dll 44KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.RpcContracts.dll.dll 127KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Shell.15.0.dll.dll 2.6MB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Shell.Design.dll.dll 496KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Shell.Framework.dll.dll 332KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Telemetry.dll.dll 881KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.TextTemplating.Interfaces.10.0.dll.dll 26KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.TextTemplating.Interfaces.11.0.dll.dll 27KB
-
hotel1/bin/Debug/Microsoft.VisualStudio.Utilities.Internal.dll.dll 40KB
-
hotel1/bin/Debug/Newtonsoft.Json.dll.dll 685KB
-
hotel1/bin/Debug/System.Collections.Immutable.dll.dll 189KB
-
hotel1/bin/Debug/System.Runtime.CompilerServices.Unsafe.dll.dll 17KB
-
hotel1/bin/Debug/System.Threading.Tasks.Extensions.dll.dll 25KB
-
hotel1/bin/Debug/fr/Microsoft.VisualStudio.GraphModel.resources.dll.dll 34KB
-
hotel1/bin/Debug/fr/Microsoft.VisualStudio.Shell.15.0.resources.dll.dll 212KB
-
hotel1/bin/Debug/fr/Microsoft.VisualStudio.Shell.Design.resources.dll.dll 32KB
-
hotel1/bin/Debug/hotel1.exe.exe 61KB
-
hotel1/bin/Debug/hotel1.exe.config.xml 1KB
-
hotel1/bin/Debug/hotel1.pdb85KB
-
hotel1/hotel.cs855B
-
hotel1/hotel1.csproj6KB
-
hotel1/image/edit.png.png 959B
-
hotel1/image/filter.png.png 11KB
-
hotel1/image/imgdefault.png.png 5KB
-
hotel1/index.Designer.cs5KB
-
hotel1/index.cs1KB
-
hotel1/index.resx.vbs 5KB
-
hotel1/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs214B
-
hotel1/obj/Debug/DesignTimeResolveAssemblyReferences.cache3KB
-
hotel1/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache8KB
-
hotel1/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll.dll 3KB
-
hotel1/obj/Debug/hotel1.Home.resources180B
-
hotel1/obj/Debug/hotel1.Parametrer.resources180B
-
hotel1/obj/Debug/hotel1.Properties.Resources.resources23KB
-
hotel1/obj/Debug/hotel1.Reserve.resources180B
-
hotel1/obj/Debug/hotel1.addho.resources180B
-
hotel1/obj/Debug/hotel1.ajchamber.resources1KB
-
hotel1/obj/Debug/hotel1.csproj.AssemblyReference.cache42KB
-
hotel1/obj/Debug/hotel1.csproj.CoreCompileInputs.cache42B
-
hotel1/obj/Debug/hotel1.csproj.FileListAbsolute.txt4KB
-
hotel1/obj/Debug/hotel1.csproj.GenerateResource.cache434B
-
hotel1/obj/Debug/hotel1.csproj.SuggestedBindingRedirects.cache42B
-
hotel1/obj/Debug/hotel1.exe.exe 61KB
-
hotel1/obj/Debug/hotel1.exe.config.xml 1KB
-
hotel1/obj/Debug/hotel1.index.resources180B
-
hotel1/obj/Debug/hotel1.pdb85KB
hotel1.sln
- SHA256 e0a51d1831b067f7ae9cd18c28c27874f92bc00ca629f45c5115cc2ad57e14a0
- MD5 31b22c571df00329b8dbd7132f4abbf7
- SHA1 2643f0b922739ca630414c50b3b1f4f897ec1fda
- SHA512 a5448574444c6d4e56dfa2c45fcb9916df6d0084fba5f7bbdf78e8ca06e17e1e454670d4fb6457a7d3476c34a9cd02ee24a3d872093ce6c486c06e2493a46d5f
- TLSH T162216DAA221D4CF464C513FE8AE22CD629338681D19D283C46DA51586F2BE08917F85F
- MD5 SHA1 SHA512 TLSH
hotel1/App.config
- SHA256 47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
- MD5 9dbad5517b46f41dbb0d8780b20ab87e
- SHA1 ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
- SHA512 43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
- TLSH T17CC080454054BD274D334B1357518539EFB073A36424140CF42FA7560F3114D4657377
- MD5 SHA1 SHA512 TLSH
hotel1/Home.Designer.cs
- SHA256 5464a961b233e6aac3fbb9f7299fcd896d519207c543604907326856059c10e0
- MD5 a3680a0544ca5c1fc92ffc4105ee962b
- SHA1 dc4ff909714f214435268d71dbec361567a5150d
- SHA512 6e4ba1b3b60e4bafd65fc9b285408fa51dca8a2ee3d070eb71f0eda3295d657a9852ac2fb624832ca7a014b95d2e4477116ac943e5a790ba9a9f5fc441af0bf2
- SSDEEP 192:Wwa+6LKY1GqwpsJvdhTonyFif4lzGm0D+hj9Jm2rIGVj9sPkIXP9j9DisFDPTkx5:Ww16LVQsJvdhTonyFS+hj9Jm2rIUj9sW
- TLSH T11C027A68436E8185C9B1504C5F16E7C0EF79063FB917CA2D7D9F8A80DFB61250338AB6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Home.cs
- SHA256 6e63d3770debe6fcaa0170736f1a1ea9d7008c40572ad4922b3d3df41445bc24
- MD5 28397d434b46eddffbcc3105abbba026
- SHA1 11384aebf18bc0cbdf37682f4c171ec44411aea1
- SHA512 8d99276fb057400f5e1030a8415a9343cc7604142cc5714cf064773b0108d31d04c6d7b03e2e1608f2dc81156bf866ed6792da0012125de525fe7ace10750ad0
- SSDEEP 96:Jo4h4Dc5z0U2ncXVg1BKVG1ERxWkO+XiKhalojpLknC04pFwA5f:9KwyI1uvmtkX4f
- TLSH T15CF12148120B473A0A76576ADF938548EF59121B02AB9BE57BCE04858FF18044776FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Home.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Parametrer.Designer.cs
- SHA256 e482451e4373ee9382b0f372c3d1a296d2b57dfea40df98a717fe02cca7dde3e
- MD5 2b97c5cce0ef387fc50360b51db7de12
- SHA1 e57143d923e35da17333e0670179f3473344038c
- SHA512 88836b2efd6011a8be497f38fce4bd81ec5291e4c2c7aaec460b5e62732058b065722051300fd0a9371d96a0d273dad22bfb4ef21c7e78db58a855d21ea9cd91
- TLSH T1AE31242843CDD5244DB3A28D9F16B086DBB80807FD96CE08B49E07960FB60609296DF5
- MD5 SHA1 SHA512 TLSH
hotel1/Parametrer.cs
- SHA256 edb52c73765e0f2119feb06f2b76ea115387c7df840aeb92810f5f88b3cac9de
- MD5 384f9c0f4394c4860002d6234b600b24
- SHA1 39a7201d4cede22b6f4410a695992b5746dd92e2
- SHA512 5ce9fca643e5732054c738c89205cc2833f6ab663f88a7b5ba916b6b04c6355b6c6ff17bf8a4b01c35cdb68c7de61a387825b510fa761b5ad24a624e03a500f0
- TLSH T1BEF08C2C378B876D01720652AF11F9AACBB32327678B89003CDD06C1CF364342670E29
- MD5 SHA1 SHA512 TLSH
hotel1/Parametrer.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Program.cs
- SHA256 8132e7f1435242e4a71ff605da73e2baf8c71ccff516e80d119b01bf716fdfcf
- MD5 976e3cd4646e8ae9fee8165f1dce8b01
- SHA1 b9e5b3e5d5e6e300d4d9c945c0a601fb7fe2a04a
- SHA512 a9a2aeeed8a8c2f84ebac42e57d065ad1078a5f858fdf294e1d0042fc96501f3575400a39218ea5469ad459560d5428c18f13739cec701611fe69338448592b2
- TLSH T1FBF027AA329ED7880AB354F34B05E0C8D773663F0AE9E500B8AD0A41CF3A0190739E02
- MD5 SHA1 SHA512 TLSH
hotel1/Properties/AssemblyInfo.cs
- SHA256 91c3bfe30c21de739b7c8f598477c0c028ae548b45be2f5e3f5f4f80579d4338
- MD5 6e3529e7059f5524732d287339990847
- SHA1 19656572a1c9249cc7ff13301d68352c69f244ca
- SHA512 bde422f6a634ed8c00f7bfdfa774d5aa21d56318143c0f304ca994afaad64b306427c3605189b018accfbad7fee83f4c5eda16ca05859a6e97beaade7ebb2dc7
- TLSH T1FE31B17D5241637F9F5102C37E637685C3BD632882E99914B5FC7843F246A78831C667
- MD5 SHA1 SHA512 TLSH
hotel1/Properties/Resources.Designer.cs
- SHA256 6152a917cfe39436bdc5fd9b84bfc46981ae86c80b3e740e7ab23d947eca42fc
- MD5 82da0f954d152f776c20a18f7ea9f6cb
- SHA1 e9070813e4c75dfed63586468de6c5ebd940b4d5
- SHA512 935705e3bb0db3c26cde49598c1071b91c5227c79c938f4ab0dad3e174c18ef9e90c3428995000a4270dcec91f3696dab1bd7556fc0ff24e2c88dbcc497f94d4
- TLSH T16261CDB71F94C5720C35C6EBE700F841CB211213C62ED529F4EE03615FBA28493AEDA9
- MD5 SHA1 SHA512 TLSH
hotel1/Properties/Resources.resx
- SHA256 a28c3abdc0cfde9cf1da76d651e539abd719d9a32d537234b79480cb6dcf4ebe
- MD5 f0fb6ce10f3d8ddf2d8cf577f9bfe021
- SHA1 998960c130a28b4e97f8da5bacad453c00fb9aa0
- SHA512 baa4d70c4f9b3e369f68b3a974ab6c726117f3caae79d09f64329dc0923bd768ae34fe6135b1297da24061a99f13ee6ed4afe97e57df5da0bf79ead94b419c86
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuF88EoT:KjrbLPD9sLvIzSvKgIqUyahF8NokwCK
- TLSH T1C3D13245B1C5DD260FB3482DE6523984F7A8823B0235AC54B4DC661F9F73885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Properties/Settings.Designer.cs
- SHA256 81608f67551352b5ef22bfea06dd830bc110f24e4c89801c7317af401f501900
- MD5 f7764f2c5497c4bff939bb4ae462575e
- SHA1 e61bb729c4dc7e199998b09ca55541ef79b85bdd
- SHA512 3f779b848d316ebc00f43ec3a3653e49789f433991dac1049f5327d4d964fcb57ce96aa229937f4ed95e92c0e2a3b95f90efad446fb231e2f3c78128caa1d99a
- TLSH T12411C0F52E9287370572E595DB05D163CF32522BCB6E543531CC0605EF2654483AEF59
- MD5 SHA1 SHA512 TLSH
hotel1/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
hotel1/Reserve.Designer.cs
- SHA256 be6061719f8dc673879f10e0af416acfe982b92f0c23d0853c42a1ad8d7f94d6
- MD5 7530c9f21b8a6a13594f7ba9e72f2169
- SHA1 c8633ac1dc3b2ff6f5c73ee6dd282ea57ba34d7b
- SHA512 9dfe8c28658ec7e75e25e1ce1d2363281c021099764803001a4455d610c75411baccf175705d9d5ea9c54e14f91c8175d5c182f059fea298c67d10eb7a481485
- SSDEEP 384:dw1ow9W90Y5g+mFxABySjxsYTzmNKsXa9xI1a9yqMa9/IYa9YPe2tBAABTJBzLBI:S1w3rB8Bv
- TLSH T105C2FB28035E8595C9F5A08C9F19E3C0DE7A462F7D57CA2DB88F4B809FBA1254334DB6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Reserve.cs
- SHA256 45ccfbccfb505e159e9d2a84e326a90ed50c00ceb7af96aa61250813e2f173b8
- MD5 a337c842bcbbb48abb6356926eb9ef1e
- SHA1 7674451aa5fc7b29c5d87e5c3ad599c012a0aa9c
- SHA512 525ca108e69cbca74ef12b45804d44cb047df66460b8dc1de2b43808ec4e572ec043a88403fa53060a288da6c4f5e748d86bb4a57b51352bbd9feb25257ae8ca
- TLSH T1FF118E2E266BC71E00739325DF22955ADFA6621B078B98117FDE4881CF314296A34E39
- MD5 SHA1 SHA512 TLSH
hotel1/Reserve.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/5-stars.png
- SHA256 59203ee770963cc92fec1bd2ebd599e4263a05af8c503a1f01890b369e474bb1
- MD5 620f73226287e2fc4e3f393e910e0a89
- SHA1 6ce0215b9f0571a6bd302422ae1d7013206ce697
- SHA512 db33acc167de0d03b2d1d61b5c5391b42f8b853aaaa8ffc06a7782f9a00861d3bcb73984b1ef2129663c765c34e1a31e01d7723d22d45e77a4c41736ccf3bd68
- SSDEEP 384:YWhLdUBhZjENDDH3uSfhNg0oxV9XA7KVwZjG5M2sw:YWhhyqDDHDfj/oxV9XnES5Mfw
- TLSH T134929EB01F2364505CE010244F660F0BB5978E9DBB25D367962BDA7B82BC3E09D999F4
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/PNG-images-PNGs-Plus-Add-Addition--87png.png
- SHA256 38ff3cea0440c06963880a7a3cfe28d9024cb429b69ea354fb0c3ea70815ec94
- MD5 13354a30bc4e335103963eb2c515d696
- SHA1 9ba6981cf95ef6844222c37b603cc87e9c72bcae
- SHA512 457417cb041c88dd8b516b30005d2efb3854ed8670509646dc647f84f3b74d222e37421ab763a1e5c7c55e740bdcdaf235d69ceb3fbd61d87304605a324f9dd7
- SSDEEP 192:+VJV+jBP1ULngO185z/VQkjpwlUFGb1IZEf8hvIWMTC7twjY16aiNR757:iiwwtPjpwmF+NcvIWCY16aiNv
- TLSH T15222AFF9D1CAEDC8F0FE5716755429103CC5E4E86002B67F89417ED8080CAD74CDA2E4
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/add.png
- SHA256 56349bbf12bbae9345ff99cbe942840892b3f424eafe70dbb82fc80f400f6f73
- MD5 2acda7b0144c59facd057bc7ab7e8c9a
- SHA1 4bac2435e41f0d5ed0eb6fa7f705d675f4b7edd0
- SHA512 08b52483b8cc2e65a7ffd635837b504c0bdb48243a4e02d1e78c4bec5a9d520c54012bec00272f3fd727684adcec8f044c8a2421c0f3f3ba5f33f28e9d57e51a
- SSDEEP 1536:Ux0oB3L5yUP2OJLJRF4GnlyUE6SpVh4Q/4kU8ESV0gq4n5oG9Iir:U/VyUPpJl4GkUE/x4kU8Eq0gqo5oG9fr
- TLSH T13E6302FC3A90F04BF76E3D5179712AD9C41924FE54F13E60532631721ACBD0EA695B02
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/add1.png
- SHA256 56349bbf12bbae9345ff99cbe942840892b3f424eafe70dbb82fc80f400f6f73
- MD5 2acda7b0144c59facd057bc7ab7e8c9a
- SHA1 4bac2435e41f0d5ed0eb6fa7f705d675f4b7edd0
- SHA512 08b52483b8cc2e65a7ffd635837b504c0bdb48243a4e02d1e78c4bec5a9d520c54012bec00272f3fd727684adcec8f044c8a2421c0f3f3ba5f33f28e9d57e51a
- SSDEEP 1536:Ux0oB3L5yUP2OJLJRF4GnlyUE6SpVh4Q/4kU8ESV0gq4n5oG9Iir:U/VyUPpJl4GkUE/x4kU8Eq0gqo5oG9fr
- TLSH T13E6302FC3A90F04BF76E3D5179712AD9C41924FE54F13E60532631721ACBD0EA695B02
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/add2.png
- SHA256 08790294582700bb7560f7a7b645c21b159e7c80d4b33f2a28a36c6acaa4f0f2
- MD5 a82780cc48400e11a11546a10d954e35
- SHA1 e2ef40445e4182276b5b8e45949f71db99573306
- SHA512 d65e958a918b5d0258efd7621d1f420b74a39fd0ef8f9a734297eebc9d73354db77386e9d7e80810387fede4d2ca06f86722a7cefb3b84c6c16cfecd34e448b6
- TLSH T1E521A7B42A10992C97E4D0D19307646D8B423B872A496595FA69C4E40E5993AACBC371
- MD5 SHA1 SHA512 TLSH
hotel1/Resources/azeez.jpg
- SHA256 3ea2d354daffb7947c3e77957c9d54e17cb05b77d245ef957d4a11cc506c3ede
- MD5 ff534a8b40a7e75d164a6de37b7581ef
- SHA1 6a8918f034536da1a52ab410fab9d8aee861ce47
- SHA512 ce452e5a9eb418865267185d9b0e0dc1253f967151a74558d41b6216678f50d212e578b8f5403e9daae51959d59461834b5224e33fbecdd9e91403af157a52b6
- SSDEEP 384:bJwIpkXdx+egrICakG94z79E10GNg74WtVKShSkuXYpXGJ4XPyTp3:bR2v+egrIpkmW9E10B74DULuXYpXGJ4W
- TLSH T19992DF7C6F8C8DE6D3C03BF144746B790A4C7415069FB63D5A22B7BA4626CB0BA080CB
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/button-rec-accept.png
- SHA256 bec11b6947ef6fa2434f97614b99c3598fa7794f4c5e1d5adc13c8e33416c79f
- MD5 acde56e64578452989810d619c20b770
- SHA1 990afecc1a754d2743151c54c40b7c617434da95
- SHA512 7cf7bc1a1be3b11f501b03fc0aa7db191f5632e6c9478fe17a785f96f9285d076964804ce023dec7308bc78336ce642aba664d35e827f1db76c56e5b48625e24
- SSDEEP 768:N/DUUo6PPUC/BvfVpEZ+YBci8IE0d4jp5FWfpxG7rLQLGLTZJVai:NPo6PPUCpvfVpEdBwI4jpafpxG7gqpJh
- TLSH T18D23F2888B75CD5B5A75F040EFC91DA0E3E6AD7DC6208598CC7F2C0DB7067D9AA43864
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/button-rec-accept1.png
- SHA256 bec11b6947ef6fa2434f97614b99c3598fa7794f4c5e1d5adc13c8e33416c79f
- MD5 acde56e64578452989810d619c20b770
- SHA1 990afecc1a754d2743151c54c40b7c617434da95
- SHA512 7cf7bc1a1be3b11f501b03fc0aa7db191f5632e6c9478fe17a785f96f9285d076964804ce023dec7308bc78336ce642aba664d35e827f1db76c56e5b48625e24
- SSDEEP 768:N/DUUo6PPUC/BvfVpEZ+YBci8IE0d4jp5FWfpxG7rLQLGLTZJVai:NPo6PPUCpvfVpEdBwI4jpafpxG7gqpJh
- TLSH T18D23F2888B75CD5B5A75F040EFC91DA0E3E6AD7DC6208598CC7F2C0DB7067D9AA43864
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/delete-xxl.png
- SHA256 66c0886152fb072f562555d47af9a5ef2d6f25bbbc5220332bede6feeb5e659d
- MD5 4c6dd018dabbe663ce15855e5399d4a6
- SHA1 133556d4af9233c11ceae740640b9f44de37030e
- SHA512 fd91655d6f07e84e591b664e4ccb1d0dd01285bb3229ee7d737bc354d9c0504d1b7bb8816d2401ce5044673c061699cae92532a712aad4b5296225a59d52ffb5
- TLSH T144610A3A512F15C0F1067CA214BD96A778302D1E39E529303C1027CB4EFE66ADE97357
- MD5 SHA1 SHA512 TLSH
hotel1/Resources/filter.png
- SHA256 2640ae817298fc0234be964866e314245c7356408393f1d1319d88a3ca2dc16e
- MD5 c3a0bb9150b983fabc4e29c7d6c833b9
- SHA1 a802a8947a870f78726559a35594ed352a5d5ffe
- SHA512 33914c5a86f4e922315214a320c43387ad64cd95adc4c79ba9e728a69ee3db19ed860aa24cc31e6c33bcaff76c1b1289c9f5b904e45ed8159db90975fd318574
- SSDEEP 192:ncLznjP1vjOeLQo9QGDtKnEnJcw5pJvi9a/Ua7nChWWNH63FdV89WZ+DRfZZ91:ncj1vjLQoiGRKnkD5mCeBUCoZ+DR791
- TLSH T1F332BF914D82E997B7626F0CC33609E1344DA2B5DF162EEEAC1CD9800FCB94A210F4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/hotel.png
- SHA256 f958d01d8d3b808d8223de1c4c4ec595997b3bb34c5e4735d743edfae649a58f
- MD5 2b66d3d9f781058da0e389fa238ee1f7
- SHA1 8ed203d1b9508c65af828d26b2ed526673840d90
- SHA512 1ee4cbe7b22c1155feede70207a2fe5181c75ff05c2af15ea232b5f2c702fe782e96887dc3f43d6cf2b6838a7ff17f57bdaa8f53f9eb70956a0121191b726146
- TLSH T1F531F9A3E43B4BBE57FE41377A1E4E10EB26559DC4B1AFA449604136B315CA8F5D4104
- MD5 SHA1 SHA512 TLSH
hotel1/Resources/imgdefault.png
- SHA256 d4d86a697b4c4a0386df1404e02c1d9c5330a5b0a3a043695e2ee4e3911adced
- MD5 a36832a1e392634b93b1f2e54dc81960
- SHA1 b32a1485bf7885154e525b8ec498a1b3369e6a1e
- SHA512 e4158e60b940377a885cd1dad7bda615a9dcd781b609b8b361568ffd7cc4140f9cd4ad45bf5e32e26fc18767efab879e8ef573f6686ac45f124d867b54fd1d05
- SSDEEP 96:vJqpim7WMJKKKQaB81qxqwGAyz4dklxFu0VVVhI1PRhRPKKceUz9r:vJAtCMJXaB+V0dMFu0VVzxD9r
- TLSH T186C13C15C28CE457CEBF9F3CA8F32620E23A74D1868A1C03E661B4D7567CE1D1AC4584
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/Resources/plus (1).png
- SHA256 7c328c6288e52ca38d0d05d1adc5c0a35de028cc98e5dac090216e2e1ab33e37
- MD5 985bf601889f9fe6cf86bd558e4055aa
- SHA1 f2cd2e683d6cd76246788a1b49bd46df95064b7a
- SHA512 e1fdae0931dceb7c04482c5d5ffab3f73e5f9c735711d32f1baf6123190762c5419162a83b0c029abb0d8ec0e7a8a9d0c6002933c3fd9c20f3f19b4a41fa42aa
- TLSH T1F911B79B769E2D9FCB294721402A0111F92B65F0A5D01C6D5AE5E1012D1240399C1B7C
- MD5 SHA1 SHA512 TLSH
hotel1/addho.Designer.cs
- SHA256 f0b82324e1081879043c3d3ae43b9876235bfc97f592c20147baaafc16e659dd
- MD5 f3396327b74e98826df8f8954c84cf6b
- SHA1 abce5dcaac3b2abfb1b9380b363d3d64d5636ac8
- SHA512 4b266461d84a262fc5cf2cb53b829ade9811525949874e78a086406e820361c147c5b745aa3fd0882a20c9644512cee65e8915dab1ebe469cee4d0301e2d0b92
- SSDEEP 192:3wa+lGLSsDFTP9kBg2rQ9WI/C/6Vow9eAfXQ9DaeVQ9syAaQ9ymf/3Q9JKV6ZQ9q:3w1lsFTP9ig2rQ9WIq/6Vow9eAPQ9Dab
- TLSH T18A320868035E8185C6B5604C9F16D2C0EE79062F7D67DA2D79CF4AD0CFFA06943389B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/addho.cs
- SHA256 64c8de4ca0f6a1474c0663fd64e0b665c87b7fe410810c7ad6bacbfa1502aaa1
- MD5 da5fa707ed76fe58a06eca904fa85166
- SHA1 4db54c446469fd950f27b17ef428c1bd60855932
- SHA512 43386bf5306ed089b5b62f6487073eb7c968a35b4e92d318bdf522872a09472b1f0dff468bb54a786be0881a3f8965b41780478d2ec3106c0146db61f1e8977d
- TLSH T136519C08226BD75E01735214EF53882AEFB6165F129F56253BDE8081CF71818F738FAA
- MD5 SHA1 SHA512 TLSH
hotel1/addho.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/ajchamber.Designer.cs
- SHA256 9eeb4e653be020959bc0e2a14c0a298056fb10dbaaceda1a6059b7f419e7cae4
- MD5 73d1f6c6e41547242e88efc96e0f8a34
- SHA1 20343fe9cf073efa04dd4714701dafb78b7c69a4
- SHA512 6407c2e20a2f302bdd725c39c60f39105999ea50b6aaad99f124ff2dd79672167029353d4a3308019bf0be02fdf8cd82ef533ee0692e60c5d75f4b9becb19217
- SSDEEP 384:Ow1XSsP9xg2dvd/Q9eo0Q931lVQ9tlGQ9+FjQ9qPjnw9DNXw9sTrXQ9XImRQ9QLS:R1yLLy
- TLSH T1AD42FA78035E8555C6B6604C8F16E2C1EE79021B7867DA2E789F4AD0DFFB0280379DB6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/ajchamber.cs
- SHA256 959f4c7aa49580f143c3c63ae26ce01daf78cfe4abfe3960145f7a3b40391283
- MD5 2741947d14d395b4cfe81dacbffa580c
- SHA1 a6623acfe2aa68b362c923147ab55180c5eb4942
- SHA512 3bdcf7ffd603abf0900f8f628fb67fa7ecab05f72837d216d49c898f90a039b623eafc935e40c20b1ff8d79e105fbc207e4ffd4b307c64d897d89c99a1c102d5
- TLSH T17351BE69129E8B5D00335118DF52842ADFB512AB268A56363FDCC4C1CF3581CB278E9A
- MD5 SHA1 SHA512 TLSH
hotel1/ajchamber.resx
- SHA256 70c072e6af9754dc1f289c70a2188aacf5e8cde5b892effa542727bdf754f7b3
- MD5 ff9e2e4fc67137190dbde39a1f819f80
- SHA1 4cf1a4a0d8d95b9b4aeec126553afa03a84e7f68
- SHA512 0da2a65b71aa385e9c22568fce31cf46a37d03ba9b68d3afb6009c073279fa44397afab931866684d0455e43dc621ed0c0a4e358cb41994f84e632126a623fc9
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahFUgwookmwT/3BOsh8Al:KjrbLPxsLvASvKgwyahFUgwookR70sBl
- TLSH T141F19451B1C5AD260FF3483DD2522984FBA5823F02316C94B8DC620F6F72985A7733A7
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.12.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8b3674840c188620ebeb457caf5f315b458b9fc4e7c4a1bc0c6775e86cc8ed2a
- MD5 f3db4b7b731d5dc920ef73bff91e2f1d
- SHA1 74bbce3a302419823bfcfca5acd8cc82a5928522
- SHA512 b00104860c914da3bf2fc0c2157c8d3db79321c41aa4cba730cd168e704128316ec8d4d47981bb67d02862d3c5f827914cbd219c27e033bf9f59c425a3a2239a
- SSDEEP 1536:345SYzMA6ziRlbnRADuaobMZbVf3FxQ+fo0Zlw/98fKKaw4hsVy8GzV:3oSYYmXnRADuaNzFjw18fKKKs3G
- TLSH T170A36C20A3FC836AE7FB1738B8B411154779F3576011EB6E8E88B55E1563BC08A12B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
01:8f:5b:4a:79:ce:57:f5:e0:ba:1d:2a:73:8a:2a:25:44:66:2b:13:06:9d:d8:6d:39:14:3d:66:a5:09:a9:5b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 18, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C4BD-E37F-5FFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a3:fb:9a:b3:8e:7b:86:43:4f:00:01:00:00:01:a3
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
100910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\VS\Microsoft.AspNet.Scaffolding\Release\Microsoft.AspNet.Scaffolding.12.0.pdb
mscoree
_CorDllMain
Name
.text
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.12.0.xml
- SHA256 08a59fca94923f4e6bc164d76905da62c1709a845c151820c323c12e4b88b3c4
- MD5 befaa96982a2a693c5401109f448d35f
- SHA1 b9833f35126bd4738490c23df5d69ffbefbea955
- SHA512 53c4f727535694ff2b59dbaaaaf48992248a3503e6234c2d9f7f4a91f96facb9f746bde7fbdf5a2772600fbf3437c7ca96dd2ae79303c3afe6ad863bc2843354
- SSDEEP 3072:nzcNYy/op1CyLPbiYZ9oUbFVlVEvpKWsUIclFRig3BVVgIt9+LhBWmA6Xww:nzcNYy/op1CyLPbiYZxbFVlVEvpKWsUA
- TLSH T1B6E35216F6C0CA124E7201139DC8B8C9FF2A6927115AE866718C2E135FB6DCED3BF560
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.EntityFramework.12.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5350af54452772d19f6b4352f906e74372d0808373655e41b954222d306d3f0
- MD5 e50ec7988eb11f8f04876886d9d4f351
- SHA1 99eeaa704d81f2205c9cdda6cb9537230426d730
- SHA512 3d1d80393679d6de797fddf413627272a036959e0868fbf3ba8718eeddb0b46cb340ebd3c945b3403a4ca52036e957410b3d4fe52efe5f3d8b95bfeb63442704
- SSDEEP 768:WVr2PSS0iKvmk6vG0oGJEstunU8CJ6LDmoJEKx9SiLMYj/9zMh:/2i0mu0oGJsnU3oLDmoxxUijZzMh
- TLSH T130433C5173EC4316E7BF2F7179B5A0864E7AF617A800DB5D0D84694F08A3BC09A21F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:81:02:31:7c:4f:1b:b4:6d:27:b2:e1:c8:bc:f1:79:4e:3f:82:bd:7d:3b:d8:14:6a:79:df:fb:d8:30:ae:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 18, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
53178
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\VS\Microsoft.AspNet.Scaffolding.EntityFramework\Release\Microsoft.AspNet.Scaffolding.EntityFramework.12.0.pdb
mscoree
_CorDllMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.AspNet.Scaffolding.EntityFramework.12.0.xml
- SHA256 7bdfd340a45c6e981cc06aad6b45a0f489e060da8a14712f86855581f4b6b7ef
- MD5 6805323beefba78834f180f6ba59d14e
- SHA1 e24364c7a4b769cf23c09f3f52e9c890d25dc154
- SHA512 784c31c1a5a3167f5604e17235f3d6dbcb79d37a06d90306c905ef5e0ffba7681a4b6c1c9f048d8c06b8e61371d14be960fc641843bc04566f4cbe5870d2e3e2
- SSDEEP 768:TeQOKBHu+42Ryhj9Xt6rnhvE4IxzCR+r9+G7bGIK+KohBw9511IaxSbRoi511Iw/:TeQOKBHaru+LhBc5fY5R+S
- TLSH T11A030AA796C488100D321452FCDCB8DAFE066923A1A5B4B5B14C2D270FF6ECD92FB756
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/bin/Debug/Microsoft.Bcl.AsyncInterfaces.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 295af2142d9214f3fd84eafe4778dca119be7e0229f14b6ba8d5269c2f1e2e78
- MD5 48efe61d6ca3054309907b532d576d2a
- SHA1 f36403aabb16540c93fb35245ec0b4e435628aae
- SHA512 778e7c4675d8fde9e083230213d2efa19aa6924fe892ed74fa1ea2ec16743bb14b99b51856e75eaef632d57be7f36dd1bc7ce39a7c2b0435b2f3211bb19836a3
- SSDEEP 384:O/9b512C4dABe070VJI0Ftdalemxxf34wqsWeb/WjR/uPHRN7Y5slu6o:O/f1IDjV9UPPpWRMkT
- TLSH T189A26B11D7AC4317EEAB3FB19679D1062E34E7D6A821E32E108CE2652CD73859731739
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
82:11:ea:7c:5c:6c:f6:d8:98:91:57:78:8d:42:43:17:c8:8e:9d:92:b0:d0:16:ba:2e:c7:fd:02:5e:79:f7:5b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:41:af:7f:52:97:5c:f2:dc:45:00:00:00:00:01:41
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
17838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/net461-Release/Microsoft.Bcl.AsyncInterfaces.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.ComponentModelHost.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c1f53844af032330af28bf038d8b7d9fe18d6c9e119961783969d5e4d2e85b54
- MD5 b9e4e90406445731a2d8bbb80d09c5bd
- SHA1 5b8b222af660f063720df555e04daf2d003c1cec
- SHA512 f6e58861db903bd4c290b26f8b1defd6263f16e861e3243c60f0270d1cf0abb9f428ddc056e58dbc578d68b2cc752c51d92af77406a3e5a0efd19834c85494e7
- SSDEEP 384:F4R6WucnwVcUtXtOEoJYjLWiJLl7Wi+RQWb1l2TKAR9zdno:+wVTxtOEoJYjLplcd18289z2
- TLSH T190924D21CFAD8AA3E8620E7046E5C1433E7CE7836D405E2F46C59E451DA3B54DF11A7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
52:62:c5:e2:aa:d0:41:38:79:5e:76:6e:f9:8a:ba:e3:8c:d3:81:ec:58:b7:28:5d:e3:c6:66:b7:cb:6e:85:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 17, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
13270
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\Shell\MefHosting\ComponentModelHost\Release\net472\Microsoft.VisualStudio.ComponentModelHost.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.GraphModel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fb74ad636dd9921728ab9a3189de01165adee324417feb5603001c0c10d8603c
- MD5 1d0a1909010bb3a8139ec371ceaa6022
- SHA1 1d18599fa897987c993938ee5f3e77e21c3a76d4
- SHA512 051558fd12d4f8cf49d35987f1676f8858d6c6735ad0c55e1416e7fa9ef891fa5e87e6fb72aa20011042ec4852640356f98e41870e3160f04c2a02162bb35774
- SSDEEP 6144:l+aflvGQ+B6/ne5CPt9R2k3cSSScL2MjTVuGRWUr:4afVS6/e5C3R2k31SScL2Pa
- TLSH T1EBA44A03F3FC8E2AE6AF037AE1751B6567B9E6871643E75F18006DA51C27B40CE502A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a2:24:a8:45:87:eb:28:2f:a2:8f:ed:6c:46:82:d5:44:2e:77:23:f8:c6:c7:a6:73:09:f0:24:71:bc:19:b7:ff
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:97:03:cf:59:9c:6b:89:78:3f:00:01:00:00:01:97
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
386634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0708_092050_0\cmd\2a\out\Intermediate\vmp\microsoft.visualstudio.graphmodel_x86retail_1E7DFF84\Release\net472\Microsoft.VisualStudio.GraphModel.pdb
mscoree
_CorDllMain
Name
.text
Size
370KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.GraphModel.xml
- SHA256 a4e39a6298e37b1aef0368440e63ea67502ac0b787cc884ddf3feea3b9dfe4a3
- MD5 47eaaaeefd3075e074a02e9c668fd1f5
- SHA1 49e85d489fbda6a1f0bc10ee51863a5a4d233475
- SHA512 b44659ce95c3291d8f7231c407e4fe52e8285a81a9013aa7c50bc294c4d8ca6c0e701c87af78ad8212e65142318ff2bbaa2f8f60d9c3ac8f02d780935bc3a7cc
- SSDEEP 6144:rGGx3z7TdOxBopl06SodPXvWRmypQv/cBl3t6cqCseK61TRdtV9AkL3fJQ7NUKrJ:Iw4Hoht
- TLSH T1C6E4EF18F3C44E13197341071E59B884FA648A63123BAA6D354CAD33AF37DD69D7F8A1
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/bin/Debug/Microsoft.VisualStudio.Imaging.Interop.14.0.DesignTime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21e9388960143eab0323b9b56443b6c47439973b1682653c37e0e50217e3bb08
- MD5 b340a021abaa327244b5f02542bd1def
- SHA1 c4471b8c3bf60ed300ebce0bd843f017d205ad5c
- SHA512 1970ebe87910d0b7759cae3139bdb78b73e04b3c5a8a22ede42b772e1dc73bffa05d82a5684aba1b90fa265e30e510806bc5e782117ddd620612625c0a6b2d64
- SSDEEP 384:8rnvcezWjkWY6F0GftpBj3RS/yc4HRN75ulMY:BeMz+iJRS6Ba
- TLSH T1C2A22996CB7C9643ED935E3066A9CA433C3DE3C35920961A116AE1A81CD37C4EB1876E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9f:3f:e7:72:8a:c3:37:84:a8:07:a9:05:62:34:4f:3b:54:fa:50:ab:f1:c1:a6:0b:29:48:50:c1:c5:73:f0:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 25, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
25:01:1a:16:3a:45:fd:a3:3b:5b:6f:df:8b:d4:45:23:2f:77:17:08
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 25, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:01:03:49:9c:76:42:f1:37:3d:9d:00:00:00:00:01:03
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 23, 2018 - Nov 23, 2019
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Jul 26, 2019
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2018 - Jul 26, 2019
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
Serial Number
33:00:00:00:d6:9e:65:81:8e:0d:18:a3:3b:00:00:00:00:00:d6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Aug 23, 2018 - Nov 23, 2019
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
11646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.Interop.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8651aa0a3646c602062682cadab7d4acd78290a9bd98173caa89971ccd7e8e1
- MD5 6bce4d2c77619fbbdf9a9a2f9ff43887
- SHA1 c7a9054f90d951f9f9a36d61f4968ba741941b7d
- SHA512 cd6e71d4837aa5d626e70d7e51f72b833789049c844810c99954551ff1ad67acc3be0db5067b0f09f564f77d6749067228b78282fbb38ac4f0078f313aed1d6f
- SSDEEP 49152:ERcqUZPVPPPwP10LV5pZ/PPPPFPePFPNPPPJPPdPDP0PkZtPPP7PWbbPPbP7PLbx:wIfVhYa
- TLSH T17FC5B65AD62CDD1ADD28D17E7C534F223779C24B3326CB1B4125012CAD9B3918D2AFEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
69:ea:63:18:2c:c8:59:49:75:17:75:b6:16:13:c9:65:2e:7c:8b:0c:38:34:25:45:a2:0d:e9:7d:de:78:02:36
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 23, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ac:66:bc:87:22:5d:de:3d:7b:00:01:00:00:01:ac
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
2409202
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0622_220719\cmd\11\out\binaries\x86ret\bin\AnyCPU\PrimaryInteropAssemblies\net472\Microsoft.VisualStudio.Interop.pdb
mscoree
_CorDllMain
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
239KB
Virtual Size
238KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.ProjectAggregator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a150a29105617f67be0559bd1b039dda6cf088671960e6b28c6ccad5369ff980
- MD5 1460dd3bbf19db3eb22a73bff871f137
- SHA1 6dca5380c79293b35167d72d667d10f5fc3f6209
- SHA512 5270b0a81fb6569e0e605f68d39df64a860532e95699cc147de0777448eb4c422c461d1c84b5e2fae0fae5ed1dc31e5d35e3e46947779275dab86734e2feb8a6
- SSDEEP 384:A9EuIbWXs9WoyHRN7/GlD/LVNSR9zEf4hP8:UETbtu+xLVNe9zi4hP8
- TLSH T16D523AE69B784443EDE7A9B05398DA437D39A7C70D20966B0199F6582DE33C1EB2433C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0b:13:49:df:01:f5:24:01:ae:b6:e7:e6:dc:e5:b1:0c:be:59:df:88:c5:a2:61:0d:bb:25:c3:91:ae:9f:6b:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
9902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.RemoteControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bfc4890087c01f629fa09e744e5a861f9f68b504100cbcf805855fa5906d61c7
- MD5 2338953ae2ab47de1703f27e872e84ba
- SHA1 2765b2f2cd04a0e1df7556da551ce9d763bc5c4d
- SHA512 417ce0ef8344409ebd05b8c52b58a3960489fe810b95af31e72430690ffb8258042a73e205fc27396731113ad84302ff898821b4f2db2b9d4fa2b2293ccca872
- SSDEEP 768:KBgzal57T9j/z7HpuTkQcWeoMlpERQ3VSbK:KRx/vJEt9XkpK4VSbK
- TLSH T117234B0583BC8723DBAF6ABD69B1D5224A32B7536952E75F08CCA1D91C93780DD007BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:31:fb:02:ba:53:7e:79:c6:47:a4:db:f9:b9:01:9c:28:87:49:bf:f0:6e:22:a0:b6:c9:05:66:68:10:14:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 16, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:23:19:d6:5e:de:95:24:31:00:00:00:00:01:40
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
40846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\Microsoft.VisualStudio.RemoteControl\Release\net45\Microsoft.VisualStudio.RemoteControl.pdb
mscoree
_CorDllMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.RpcContracts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5573ce4344b88ae2d0a5723628be2d0455257bed814f88b0c46a2b2b28d67adc
- MD5 1ec7c20c0d7e2b8e375acc5a6e239464
- SHA1 ecc7e6ed62ee72fda30d6b2554a632f2ccf17835
- SHA512 d0cec0cc196b3c1848b6e321b668c295e02dcfa59f148ba9b0d812552d0f35df55bbcd32b6058cd6995db555d63800845cbe4722809743790654a07ec47f047e
- SSDEEP 3072:K3xswDteKT++4amHQ2sIpvIi47pVsfirl0LR7pe:KBsOpJOQjIpvIiIv+H
- TLSH T100D34B2053EC8B6ACAEE293AB46044114677B64B6836E3AF8E447DDF15A3BC14714F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:61:b7:51:ad:ca:99:a6:c8:3d:85:ac:ce:7f:27:38:88:9a:af:86:3c:7a:ae:76:ab:48:88:f0:60:b7:60:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 22, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:99:c8:8f:af:ad:b6:7d:be:8b:00:01:00:00:01:99
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
126426
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\src\Microsoft.VisualStudio.RpcContracts\Release\netstandard2.0\Microsoft.VisualStudio.RpcContracts.pdb
mscoree
_CorDllMain
Name
.text
Size
115KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.Shell.15.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b05eb695ad62f0c8c98fa9a5b0857c73025e1af2d8c72db98f0936b90079ce9d
- MD5 3032750143e0ca0bde67d971aebb9ad4
- SHA1 6831be1cc69fdcb2668ce4125b5c7c3ab9543aa8
- SHA512 67fce3496d3d63dc8cbba71698c57b7609968dec1fa99ab3c1e0a5e52651de5431479bde728888aa35e4786d8ee0655f62474272aa12387b5aed964ea7c77b9a
- SSDEEP 24576:dd8vbcjUWZOME/6l3d1i+C2ANBJo2eyAFR3qDkbl+0tTK8B4LhEOT:jdTd1K27yATqDkbzT/42Q
- TLSH T1D6D52801B3F88A29F2AF46796CB31410EBB6FAA5E761CB5F193861FC1D573845D042A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
92:59:33:aa:a2:c1:22:08:07:c9:3c:9c:c7:20:f9:3d:d0:10:d5:94:54:0f:a3:60:03:0e:67:eb:e3:52:44:b8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 1, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
2200174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0901_081709\cmd\a\out\Intermediate\env\microsoft.visualstudio.shell_x86retail_5074DBE4\Release\net472\Microsoft.VisualStudio.Shell.15.0.pdb
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
556KB
Virtual Size
556KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.Shell.Design.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e3579088589a8ef9d68d0ddadba41f64365c9eee226381dcd09191e29c090d3f
- MD5 1346e3aec516bbe36cd738b5ce79d437
- SHA1 debcc52233b16b6fdb1335dee1b8208632b60642
- SHA512 c4f2d68cf65559551a3e31377ce57b119292fc93c10060c0c17926261f0f44f45557ac4c591754f1ae13573276f315216a49c7420d3c60a7c8c121324a39fdaa
- SSDEEP 12288:Svhi9O5CGjWeHFvKQj2FptTUBKnicIMtBFGNQHV:lO7oFptTUBKnicIMtBFGNQHV
- TLSH T1C1B45A02A7F84B7BD58F4739B866461497B9E245230BDB0F5E54EEBC1DA3B908D013A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
73:08:00:32:16:83:aa:49:a2:25:e4:84:cf:c3:50:d4:c6:2e:dd:e7:ab:dd:3b:7d:8c:37:7b:bc:d1:b3:99:c7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
415246
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0811_143400\cmd\i\out\Intermediate\vsip\microsoft.visualstudio.shell.design_x86retail_ABFD945C\Release\net472\Microsoft.VisualStudio.Shell.Design.pdb
mscoree
_CorDllMain
Name
.text
Size
398KB
Virtual Size
397KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.Shell.Framework.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 67c923e1caa9c48048c1925e8d29ed542856b847b2759ce477b1c89a1fcec382
- MD5 84735885089c7c24168d4957acb9328c
- SHA1 0f48f74518e50c0316284bfb70329b0b5ce80ffd
- SHA512 c6050ca36be12cd198b89aa17d520957621a4282fef2c671f68b079b7cda4b8db5defb250454288db26a59e92456786f6e4c85f2ed2cb11250e1b3a59d00ea02
- SSDEEP 6144:6OQRH3u2eR27yGn3S086J+DL0xmv9c9oyCumNJphOwHPpOm03gIwJC:+3w+C08oAqoyRh
- TLSH T1C8744C6876AEC7F3C5B5E1B8BBE5D513E970C64231278E2B40C54E4908D7B423892DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:e9:1d:66:7f:a9:b6:46:d0:c6:a4:5e:8e:f6:36:a6:9a:98:ad:4f:72:dd:3d:d3:6d:2a:7c:b4:d3:fa:5c:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 1, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
336318
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0901_081709\cmd\2g\out\Intermediate\env\microsoft.visualstudio.shell.framework_x86retail_3D80F868\Release\net472\Microsoft.VisualStudio.Shell.Framework.pdb
mscoree
_CorDllMain
Name
.text
Size
320KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.Telemetry.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2b91d12360844aa47432857d79e6e81775ab930049103493edb315f714904364
- MD5 21d93e2eddc6d393f6783f2295e8eabb
- SHA1 8fbce4d24e663d8c7af9f19067e627baa6a53c06
- SHA512 555652530f557addb006a576196bb4785b784e89f45f76cc98d305325ef06f03f5c06f3731eade8ccb046a6e2b15af3837eb226fc2c2818bc62723b4d734e35c
- SSDEEP 12288:TEXaEFTpH3EqkOifFG7VJGrYpG9ehYFEtTX107Tqb5pAtYivNZc5Ks4z:LEFetFG/c8GFMTFGTrtYivNZc55Q
- TLSH T128155B2273FC8B3ED1EF6639B9B4812407B7F50EA621E35F2A14E5981C927158D40BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
86:c0:ec:ee:85:d3:48:f7:c5:bf:ff:9c:4d:5b:a3:64:06:3b:0a:10:cb:b1:12:d8:dc:5b:47:81:c1:03:ed:15
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 25, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
822638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\Microsoft.VisualStudio.Telemetry\Release\net45\Microsoft.VisualStudio.Telemetry.pdb
mscoree
_CorDllMain
Name
.text
Size
795KB
Virtual Size
795KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.TextTemplating.Interfaces.10.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 97eeeb23563aaf3c4555b6bbdbfa347c7987a5d7117d9c968138806f29a6ad2a
- MD5 c453f557b86462559b5a17ca63040996
- SHA1 06989aed556857da7864ba33a58ac43fdad251c1
- SHA512 9dc7bb44620b686896c22b1601440b0726c7f0d3111d672786868d978f91e210ee9a1833607cc79c27893c64cbd091aa8c3482920cb4ce51997697af31c7e254
- SSDEEP 384:DBp0sHB0u15jgWX2QPEWS8uWP+10vq0GftpBjooKzfERHRN7XlgelhDvQk:P0i17J/iyd7EBjzjr
- TLSH T1D3C24B558B6CC653DEA35D30AAE1D5833E3CE7C76D20561B046DEAC92C93BC4DB20E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a6:33:73:78:6c:91:03:d2:a6:32:9f:2a:88:18:33:37:a3:db:fe:e2:6c:cd:f1:02:88:31:6a:c7:73:74:48:0c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 29, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
ff:81:da:f1:47:f1:c8:95:2c:cd:df:d3:22:b0:92:7d:e4:27:ba:49
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 29, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:a0:1a:98:78:3e:66:d8:aa:d7:00:00:00:00:00:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Minor OS version
0
Major OS version
4
Entry point
13630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\dd\eft\mdf\runtime\T4\Interfaces\objr\i386\Microsoft.VisualStudio.TextTemplating.Interfaces.10.0.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.TextTemplating.Interfaces.11.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8b6261d9b3de341aa24a00cb517fbda4b90651d26302e385f185b294e60e7af0
- MD5 7c0b2659927f9c1bdcbae681ba6f13a8
- SHA1 f64dca7f771bf05fefb59fa22c6bf2ce8e7f41d0
- SHA512 47f3672dd1a591fb487f5154d34df4c8e86a631b8eb275d414c375bbe5d85f2482210af01e2e6ca0c4fe5d99c7a19ffe69dc4f2929a364f41d511e523df00762
- SSDEEP 384:Zi8pRG3l4PvLQVE12S1Y4dEPZPBJMnlWSm5WQ1b/L0GftpBjAZgXFtAHRN7DluqI:ZLMG9dUDScHkiuZpcqI
- TLSH T172D24951D6ACC323DE960970B6E4D9832E3CD7C34D22A67F05A9E6891CD33D58B24B39
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
59:8a:e3:f9:54:9e:2b:d2:00:b3:19:15:86:ae:8f:34:9b:97:17:f4:a6:f8:6a:6e:65:ba:72:78:85:24:da:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
PE Signature issue
Digest
77:d9:48:80:6d:2e:10:ee:2f:b3:cb:1e:4e:79:17:d2:b8:fe:b1:34
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2012
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:19:cc:93:00:01:00:00:00:66
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 10, 2011 - Jan 10, 2013
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:02:92:4a:00:00:00:00:00:20
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 7, 2012 - Oct 7, 2013
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:f5:0c:00:00:00:00:00:11
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2012 - Apr 9, 2013
Minor OS version
0
Major OS version
4
Entry point
16654
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\binaries\Intermediate\mdf\t4interfaces.csproj__385162264\objr\x86\Microsoft.VisualStudio.TextTemplating.Interfaces.11.0.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Microsoft.VisualStudio.Utilities.Internal.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e003d6e7e00b59586ff2899f303a1a15db579a67c42a70761b94474af9c82024
- MD5 631ae3224b2d54238a3d63772550b6fa
- SHA1 0e15692d2993c0e9100fa3f0794cabc1368eb106
- SHA512 966219949bd5e152ffc1c7530bfb3206e952957afed023e53d12e6bc6da4fd54f8e0fbb94708783bb2afad842b7d13790c20e3963117367ec3f3aef5e6cadbfa
- SSDEEP 768:vkznybnGVVhVVmVVvUVVQnAbrtDdgLYfsAoQ1qkiMai8:vkznoARyYkAfqiaX
- TLSH T1AA132B09AB95C313D5FE4F7888E185871F39DAC77D02EB5B498CD5A42C833D58920A7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:83:07:eb:ad:ea:13:9e:75:8b:21:7d:1b:a0:62:b8:66:27:57:0d:15:1e:9a:47:0a:6e:89:ef:70:3b:a5:ac
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 16, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:897A-E356-1701,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:60:07:20:f0:92:48:da:be:eb:00:00:00:00:01:60
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 14, 2021 - Apr 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
35378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\obj\Microsoft.VisualStudio.Utilities.Internal\Release\net45\Microsoft.VisualStudio.Utilities.Internal.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
675KB
Virtual Size
675KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/System.Collections.Immutable.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 69e57ac412200e47fe7b5f933a30c594e1fc1517498c88920aabc702f5ea00a7
- MD5 d96470eec1462cdc385bfcd024a5d91b
- SHA1 9adeafc9c76e29c275f2070cde10e6f7597cace0
- SHA512 99737518ea853669e06691bce59fd6bd12668a07949ac8c77a2b062c3dc4077c3ff47c3a621b117e0fa7d0426aef5e5b663f1db7991381f9b1ad178946e39eec
- SSDEEP 3072:1kp/Ua6cZb8uX1SLlcYK/fcWKKzqfjWSbjEQsHdwGuQTyovdk/vR:1kiapb8uX1SiJ/EWpzEzjYmWkh
- TLSH T171141905738CAB36DEBF4D73B561949A4A32C153E096B79E52DDFAF650E33208CD8098
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8e:ba:e7:d9:17:49:bd:71:4c:2c:14:a4:a1:84:e3:5d:00:98:82:aa:9a:d6:ad:9f:70:dd:5a:cd:c5:f7:72:c3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:23:19:d6:5e:de:95:24:31:00:00:00:00:01:40
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 15, 2020 - Jan 12, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
187278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Collections.Immutable/net461-Release/System.Collections.Immutable.pdb
mscoree
_CorDllMain
Name
.text
Size
175KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/System.Runtime.CompilerServices.Unsafe.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
- MD5 c610e828b54001574d86dd2ed730e392
- SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
- SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
- SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
- TLSH T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:48:a2:88:45:56:bc:2f:80:bf:00:00:00:00:01:48
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 12, 2020 - Feb 11, 2022
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
14030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb
mscoree
_CorDllMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/System.Threading.Tasks.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- TLSH T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Feb 11, 2021
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
22234
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/fr/Microsoft.VisualStudio.GraphModel.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5d8bd096b41a16e5a69d723e29c1382f0dfb70cf12207be784efbf4e9e9b1a16
- MD5 83e641f946b39dadc9163fcc07aeed69
- SHA1 b6fda72acd8b4041031f3723f9527d67d3dfe264
- SHA512 69eae7ed769cace38c6d5e5b9f8327afb61890de609e7d294852ec5355b38355ca88b3e1f8638659c64744787b0e8c6cfe73a110385a5cb56afde3e29a1a3622
- SSDEEP 384:3z4pWz0S2q0bDTiK2k9SNnNn8r0nTWSlk1SG/NONy9v/UWaVEWGyHRN7U8inRmu/:OWb2qNNN8oyTslNiv/wUuULRmuU9z
- TLSH T1E3F2D4516BFC6A65F0F30F70AB7EE5464E3ABDDA2901C42D0098554E0AB6BC49B60F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
35:65:33:12:ff:6a:ab:09:a4:e6:b4:a8:27:45:67:98:0e:3e:41:15:f7:b7:b4:ab:af:89:29:37:f3:7e:d1:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ac:66:bc:87:22:5d:de:3d:7b:00:01:00:00:01:ac
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
30238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/fr/Microsoft.VisualStudio.Shell.15.0.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e53a5bb92d0ea6908a74271e27752302f9bae916e174848b33aee5c352a8b01f
- MD5 0bf749b6e31f5329adcba1b2bafd5e57
- SHA1 67f18172797edbe55cccf3a8089efccc64fdf5fb
- SHA512 582cf1880c612e4142a4c412d196f790588197acdfebd078e36ec5f3a6ab93084ca242668b030109164d7d7e339c7e7fe736f014d4b97d21244e639e2bf1617b
- SSDEEP 3072:lZvJ86OfoLKdHSYxTW38mNip4JCGLTQyvXV:vvBKdBFbLy9
- TLSH T1A724095AE2BC4415E2776B3B68932C44E93D768706F1C76C4449082EB5F37C88A2DBE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fc:6c:fe:7d:08:7c:c5:62:bd:49:64:5c:18:03:63:a8:97:c1:78:0c:cd:d8:30:c0:2e:ec:fc:05:36:02:d9:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 4, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:42:16:66:04:5c:f3:f4:8d:00:01:00:00:01:87
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
212846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
200KB
Virtual Size
199KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/fr/Microsoft.VisualStudio.Shell.Design.resources.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a58c5681a5b6e9ec207aef317f62cc47e9b3e49ff31878b81d081c361c26382d
- MD5 c81d6297b269a90b3cc2d73b770eba0f
- SHA1 3be4c7d4480e8c1dcbf3ee40f278ac573192d3bb
- SHA512 2cf686143e892b2787f497db98596636aac519d900731e17db71d05a68ba2ebf829a3f04838f107ecaf00b4a4b0edf330fb0364a748d02044e3acc4fe46db387
- SSDEEP 768:3q301xTN7nMnM0tnJiuC9Vu8xLVNe9zpTWu:3I01xTN7CLC9Vu8nNazpTWu
- TLSH T1C6E2F742A7F8210AF5F31BB87A76DA075C3EBD9A2A11D41C0484918E19F1B84DB34B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
96:4f:eb:0a:0e:4c:d8:6b:ed:dd:23:c7:a3:90:3d:af:6a:99:46:96:a5:57:43:e0:a2:28:d7:a9:40:8e:0c:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 14, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
28526
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/hotel1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d96c5a6b0bdf61370e8273d0362a367920d4fd941d955618ddff92caaa19e8cb
- MD5 1a89df26e0543ae7406093398c8c1d90
- SHA1 8c1d3cae0d1c4240cdef46441a0ab8b1673e8357
- SHA512 3cfa3658a55f6a787d15bcbaeb6796933771b94b26aa54be2b19438446e08c79aa4365129e3748e546976aff5236976bd2d7345f65addcb92310ff027ccbec06
- SSDEEP 768:xcR5rUwalrJspb6XHVG4tuV9a181ZXnJevlrUIwJhxcqeyl7jTkc0pgIaYy:C5/uXHVypktTweypjTRIaYy
- TLSH T1C853289237BC9B63D97A57F91935604043F4612B9172E29E8DC232EB5EA6F100F11F8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\StevenStart\source\repos\hotel1\hotel1\obj\Debug\hotel1.pdb
mscoree
_CorExeMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/bin/Debug/hotel1.exe.config
- SHA256 a0e398414724334836272c057f5f4909fcf9253dc267455f401d948fac88b693
- MD5 b6c18e54dec4fbab47b9b5ab1b952750
- SHA1 4000e09376c92a0a2efb80962f1285ede9d2db1c
- SHA512 bc94dbc865a2ac4db66eb7cd2ba7324cb2a79771c543d505aec478c68827f71e08833316e08f8ed6aba089a0fa8dcf8e6155a079af58aea09e1f1dd3a0144f6e
- TLSH T139219E2190C4BFA58F7219E33E7B6428CB6903732C8C005C70AE6D4B8F219965207173
- MD5 SHA1 SHA512 TLSH
hotel1/bin/Debug/hotel1.pdb
- SHA256 503ed0d74ef6c877b134001dc0d0c8ad49fa347804984d856154d77a1ae8f225
- MD5 5c3ed37a6ea670c4680d88dd7d2c1811
- SHA1 1b0c8219e9e2b2ca75e29742f4338f5a5f7f5bdc
- SHA512 536351254f3f364d9021863404ec3949003dbd09b7df843981c07e6cc1f6fa9167118ab4770b729ff0e09fab21f58d4ef82531e85b532ccbc9e58b1f690d6cdb
- SSDEEP 768:a/xXkMxXDp9fkW2HYzuZxOnY21zZ8h9Ly2uDdbLO2FjhgeneC9xtkhO6bp9fkW2D:VxSzZ8TEDdb62lhgeL9Hkhno4zZu9d
- TLSH T15E83F913BB08C5B3D85806F42BD74FB81738EE448B8683CB2395B56CBEF579A1E91254
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/hotel.cs
- SHA256 10d97ebf4c74a5a1dcd3262ecd58826b24d47656f1b0930055ac30f95f6f62b7
- MD5 4a760c084a42cf661042b052c2f6a96d
- SHA1 0f42234272a2d5ace89bf7acbfdc02f20929a5b3
- SHA512 aa5671352f30e3bbce1293812e303f6bb48e030c9bda03f152bc088a24c4096b1b1d4feb4bdf9fe9e70ce0ab678079727ada361b91c94985d3499e3b912a2dfe
- TLSH T19911F15D3B079B2C08701B24DE41E085DB3B439B079B69657EEC01A0CF330289AB4D69
- MD5 SHA1 SHA512 TLSH
hotel1/hotel1.csproj
- SHA256 be0b2f1fa03c035a9cf4e20f6e46d227d6f330170b9fc6973411eec6fe7ce736
- MD5 15dcd39646c4a79e0903de3067084be1
- SHA1 ffdc3278063bcc61f463fad5e36a0d31e62a0e94
- SHA512 fb4432355e9f810a5079e8315aecece9664361d1512266bda209a40ea5ab529205255efc47c14235f12f58c7d220172f72cc8b12cfcf1c263c6686ab7ebae898
- SSDEEP 96:7YWnpu5VLRMlzcsxxa4GH7E5v7Vx3BCHMOdsHVSj9qc8oQWjs:7WRRMl/bNcF/Qj
- TLSH T167D1C234E2DC7DAD437560B65793EE05EE1873D384641029FA8DA28B8FF294C1157E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/image/edit.png
- SHA256 3a3e31a7eeeb1f52f1c1c216c59a3f4808da4274a81de2c12dda2debaa43b328
- MD5 655b9cb2b85b9f7fce6d14a0c492ec8a
- SHA1 dcf1e6994550816882732aa7156afed1e3e0ec48
- SHA512 20d3abe0cd1e2d69448a60f731869d50cb4847023fe85425d03b3c6249ef25e3a9422c21bc6f4e5b92d068348b2867a9c7b550071af29728b72fd3eb1ffb64d0
- TLSH T1AA11C852F1C49AB4829DE33184559605D5478AE15823199057A9ACEF8733140E0E4CD8
- MD5 SHA1 SHA512 TLSH
hotel1/image/filter.png
- SHA256 2640ae817298fc0234be964866e314245c7356408393f1d1319d88a3ca2dc16e
- MD5 c3a0bb9150b983fabc4e29c7d6c833b9
- SHA1 a802a8947a870f78726559a35594ed352a5d5ffe
- SHA512 33914c5a86f4e922315214a320c43387ad64cd95adc4c79ba9e728a69ee3db19ed860aa24cc31e6c33bcaff76c1b1289c9f5b904e45ed8159db90975fd318574
- SSDEEP 192:ncLznjP1vjOeLQo9QGDtKnEnJcw5pJvi9a/Ua7nChWWNH63FdV89WZ+DRfZZ91:ncj1vjLQoiGRKnkD5mCeBUCoZ+DR791
- TLSH T1F332BF914D82E997B7626F0CC33609E1344DA2B5DF162EEEAC1CD9800FCB94A210F4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/image/imgdefault.png
- SHA256 d4d86a697b4c4a0386df1404e02c1d9c5330a5b0a3a043695e2ee4e3911adced
- MD5 a36832a1e392634b93b1f2e54dc81960
- SHA1 b32a1485bf7885154e525b8ec498a1b3369e6a1e
- SHA512 e4158e60b940377a885cd1dad7bda615a9dcd781b609b8b361568ffd7cc4140f9cd4ad45bf5e32e26fc18767efab879e8ef573f6686ac45f124d867b54fd1d05
- SSDEEP 96:vJqpim7WMJKKKQaB81qxqwGAyz4dklxFu0VVVhI1PRhRPKKceUz9r:vJAtCMJXaB+V0dMFu0VVzxD9r
- TLSH T186C13C15C28CE457CEBF9F3CA8F32620E23A74D1868A1C03E661B4D7567CE1D1AC4584
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/index.Designer.cs
- SHA256 c50dbcf394133f04e9c7bca146b487a6cc4bff304a0551e8fb7c4609593a6d9f
- MD5 5f27737fcb1d46473ce3b96247dbef6f
- SHA1 6bea98044764aeb347c9652fcc8c2b81bbb841b6
- SHA512 f3920283c3515a127e55e25321eb138c189e96ade4c0726dd5ad2452579c70d1e187a066786e1d18cdfc4454c1b2d21dd728c57f80c9b2ed0cef7cd277f2a239
- SSDEEP 96:NDh2atwZQiZGlD+U/GYiAe5pw5lxuHEw5jBzRiO18yZUPWK2U44Sn:xwa+WlD+UuYiAe5pwP8kw9tRVWyZUPW5
- TLSH T1E5B15F68436E8285CAB660485F1696C0FF79012F7D779A29798F8AC0CFB3115137CAB6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/index.cs
- SHA256 8bbbfb16d52ba501926079c98821db733d2e8c20e257d0de6f0d814a2cebd80a
- MD5 52e78e0da22a534306558304e6eafbbb
- SHA1 25699afe449e75bf4737397d11e71844fc57f0fd
- SHA512 73c45ab1cc43083b2f730b2233fed186a0609bb532e2f86bfb9d84d7b3790f7cd190b276414818b1b241a3b6919c0babafca53019d028c03eb1fa402b3778b66
- TLSH T16E31272D320B832D4072921ADF16495DDF66266F1A5B59247AEE9880CF310155AB8F3D
- MD5 SHA1 SHA512 TLSH
hotel1/index.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
- SHA256 621199557e90fb1661e401cc9a973163c850b4b7e65bbc8d100f67f6699eef70
- MD5 896ab120ac6b6af2895fdb71c452b9d3
- SHA1 eb545ccd7a1bafcdf31ad0f32c09ac505744aa39
- SHA512 834f53444444cee5c348da44674a2b8e6ce51f21a7565a23629001a5c535533c78a4dff8663176d982bab24f0dd272868cfc5c2fadeccc9b97a14f6946766dee
- TLSH T1F6D0233C72455B39453111C7DC1190D917F9A340BE65C87878BD940FF5AED154134767
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/DesignTimeResolveAssemblyReferences.cache
- SHA256 8732e459607a286d71eb25d6f7ec8242143c21b87e9b0f6347fffa1638225bbd
- MD5 cfe86382d82550934e3896a02c5cb9c6
- SHA1 eded29b73a433d41a320b157b5a22ca8d2d65c1b
- SHA512 aa731f22d144773114251e61d4c739e3d48345a7e62a65ecb0d3205a3b02bb1bf136b7599ce5b383d7ea7acac8cdabe681189decf5e0d8cab0798822544ce686
- TLSH T1E9717CB88F26C12CD113B872BE1637B023ED824775755F037284161AFCB39D89F6A622
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
- SHA256 624b6ea7cf946fcb797ecd256d1d6cd154c9cf291c966617ad62f5f96dfa2654
- MD5 82469c1b4d9df80c45853a829f37210a
- SHA1 f20402acabb3b2a35a6230188806ff941c25e9d1
- SHA512 d143959c678a036248c67f30b329ebf13dea1df76d1c9132e28c8ea88e580ca5b97abfe60af78795ea4d71b43b0600740632a79890d35641edccbe2e7bdb1178
- SSDEEP 192:/ig1EA1E6mrFmrFmrFi1EA1E6mrFmrFmrFM1EA1E6mrFmrFmrFCOjBuECmjt1mi5:/ig1EA1E6eFeFeFi1EA1E6eFeFeFM1Er
- TLSH T1C502DF30210CD3FA45132E81B9953A8113FE534BBE6C6A9CE9A01B1DC972E6F4736797
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 813c145b9218bc6adfffb2aee0473d8b40449a4778016f60714a5276a743feca
- MD5 d20c212183e37d47bf0479d800073d05
- SHA1 78b41f4e11c10cd13ed281a34b3780712ce7e23f
- SHA512 fa442f669270d090b20d6a9466f41b43c8bfadd226f827f9ad41d569c54cd35fa1992e2c3cda4026513d7d341fd542b7412aeb02e3ad2e1c61df2f076ce82d1a
- TLSH T15A71A533ABF48A75C86E0B3269A350500B70D3445B27BB7B69C82016DD633990FA1F75
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/obj/Debug/hotel1.Home.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.Parametrer.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.Properties.Resources.resources
- SHA256 2e64e09c63d987fe7a49cc4628360833ce3d95ad41b222405bd5b75b946affff
- MD5 fa4253f24be53f8bf31e39ebe11e5250
- SHA1 29a8d25635761f1f94f8e79b163820d98722e36f
- SHA512 7961fdc1053c6de4f1fbe8e74b1140d60759391ec5410cc140622e8ebe3d8b2c766566ccca8f020ecef8f9f146ee1b9c59a5177c924ba1c288c62a36446823c5
- SSDEEP 384:ruokw0wApEQ2IJJzxNOqeQhrxxBL55UmUdFFZEV+KFFFXlx2DHJlULIefYK:1wJhxcqeyl7jTkc0pgIaYK
- TLSH T13FB26C23DC09015423354E77322F2909AAF05253EA75CDEC8E73B7B1EE168A14F28B47
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/obj/Debug/hotel1.Reserve.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.addho.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.ajchamber.resources
- SHA256 ab5fa26724eda0e68473c25cb0399d1d447c44b7baac4cbac196e5fd7562c28b
- MD5 8c62a372bf1d58a020cb25aa8addb7bd
- SHA1 61ccb44d891f0d180816b1883f6838635e1e66b8
- SHA512 30351ad90d61a2dedb1cef2d32ebfa60cf8ff1d99747bc4eeb6134836585484ba61214da383ecd088d09a0240c4cd4bca9b851c9df6b63a5ee4f6f568cd6b5e8
- TLSH T15331B620258F187E8A5D4BA21D26E0C27737AF1C6465871CA696061C5E3530F5B1795B
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.csproj.AssemblyReference.cache
- SHA256 efba4545c1c03b94d63cf77b43a36e8fab8215574fc58e73763f7c760a9b8477
- MD5 b99d12583354fa5dad268a87df6d5031
- SHA1 66e37813b3ded07e8d261e0199dde35c52d7881f
- SHA512 8a3a05081f2335824822278ac08feed859aa2c17f5e0e33691ef23cb29366559f4b4fc87ccbc40ca053625e958d7a99905f9534ea2a2ed929cf9a9a686126540
- SSDEEP 768:QztwwlU0pYHgrw9mDxzqqEFwPNOwyxH5PLaPq90x42GPXaywhh+wGHLUfGfwLh3c:Y5tz5EqOwaZTKM+42oKyAh/WLwcGFBSz
- TLSH T10B13FF98CF16C51DC216E875AA1A277023ECD2437B366F273244521AEDA37C4DF3D9A2
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/obj/Debug/hotel1.csproj.CoreCompileInputs.cache
- SHA256 88b71192436264a62aa0304e596c2541d8f28e362beac4f01da0b84f211f82d3
- MD5 71d4b135c6eeafce7001b19690617ff8
- SHA1 fd899839dbb2a97b8c49d9f2857e4ca1bc5cfa63
- SHA512 312a0d4600dc29d68dff0a471918bd113e85813e3e2430a07c2776603c8b0e9df7f09af67a025ef3f8d6877f024637e1d41174fc6bc48a3e713bfc4c1f94acd2
- MD5 SHA1 SHA512
hotel1/obj/Debug/hotel1.csproj.FileListAbsolute.txt
- SHA256 5cf1b0a3da9c0e4462bec686632219b841bfca84f8364c1ee7e156928438fa46
- MD5 590294dfe5df8cb06fa0159a6cce4d2d
- SHA1 832fa1cf97a99181c04ec00343b1cee270e97cb9
- SHA512 b2a00368b3c91b96f88b029194b0e0cb7b5394ffcb9e552ef229e2d0994e5fdf176f0fb6aa1c1f25023024b8d0780a80933e78af271e3337d692efd25aa83b8c
- SSDEEP 96:oZt35gxaXtJySy58Gf+ozob9gw6lKNbzlitARDrfjM1P:oD3OxaQkBBhrMh
- TLSH T13891A41D9B1CC493E604252BBFDD0EE45BF05A00CBA9A68981C15C80BA3F9DF7D79987
- MD5 SHA1 SHA512 SSDEEP TLSH
hotel1/obj/Debug/hotel1.csproj.GenerateResource.cache
- SHA256 d066e03dc3c142e21d26e6e7caf948f43ae7110c495a2e85b3df66759b393b39
- MD5 bc12209506e908158a5372e9a8135cc0
- SHA1 2d0df1b56bf6a1874b68c0329f6c8ff8a0744184
- SHA512 dd7d17b511bfd46a5cb459d2b35ebcf6265848178f7a391f8ed09952b09d457d9355b27f9b0f81cb61a0c76ef0ada480c2ea63af8364c3166e7ca93889240e87
- TLSH T143E0A9C886A068F880F102376608A1313F3A612CC43A23AB6B443FED5C969A82CB5A05
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.csproj.SuggestedBindingRedirects.cache
- SHA256 9db7055db0e3ecb6fe147e5b9b3a081a52806c80882477057c4fecd44f6af5f3
- MD5 1762740571861ae70526ca72af0e0fab
- SHA1 a0b0e5b985af957ee3392655af72ebe0081952c8
- SHA512 0e46551d20961395150df040c9e748b96f82e4bbb4af096d5dde4bb26e5f50b7f271347d84a1bb17afcb6fd8d6e6f3e4e91349e280dcda41e7ab36b45d9a27d6
- MD5 SHA1 SHA512
hotel1/obj/Debug/hotel1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d96c5a6b0bdf61370e8273d0362a367920d4fd941d955618ddff92caaa19e8cb
- MD5 1a89df26e0543ae7406093398c8c1d90
- SHA1 8c1d3cae0d1c4240cdef46441a0ab8b1673e8357
- SHA512 3cfa3658a55f6a787d15bcbaeb6796933771b94b26aa54be2b19438446e08c79aa4365129e3748e546976aff5236976bd2d7345f65addcb92310ff027ccbec06
- SSDEEP 768:xcR5rUwalrJspb6XHVG4tuV9a181ZXnJevlrUIwJhxcqeyl7jTkc0pgIaYy:C5/uXHVypktTweypjTRIaYy
- TLSH T1C853289237BC9B63D97A57F91935604043F4612B9172E29E8DC232EB5EA6F100F11F8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
68226
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\StevenStart\source\repos\hotel1\hotel1\obj\Debug\hotel1.pdb
mscoree
_CorExeMain
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
hotel1/obj/Debug/hotel1.exe.config
- SHA256 a0e398414724334836272c057f5f4909fcf9253dc267455f401d948fac88b693
- MD5 b6c18e54dec4fbab47b9b5ab1b952750
- SHA1 4000e09376c92a0a2efb80962f1285ede9d2db1c
- SHA512 bc94dbc865a2ac4db66eb7cd2ba7324cb2a79771c543d505aec478c68827f71e08833316e08f8ed6aba089a0fa8dcf8e6155a079af58aea09e1f1dd3a0144f6e
- TLSH T139219E2190C4BFA58F7219E33E7B6428CB6903732C8C005C70AE6D4B8F219965207173
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.index.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
hotel1/obj/Debug/hotel1.pdb
- SHA256 503ed0d74ef6c877b134001dc0d0c8ad49fa347804984d856154d77a1ae8f225
- MD5 5c3ed37a6ea670c4680d88dd7d2c1811
- SHA1 1b0c8219e9e2b2ca75e29742f4338f5a5f7f5bdc
- SHA512 536351254f3f364d9021863404ec3949003dbd09b7df843981c07e6cc1f6fa9167118ab4770b729ff0e09fab21f58d4ef82531e85b532ccbc9e58b1f690d6cdb
- SSDEEP 768:a/xXkMxXDp9fkW2HYzuZxOnY21zZ8h9Ly2uDdbLO2FjhgeneC9xtkhO6bp9fkW2D:VxSzZ8TEDdb62lhgeL9Hkhno4zZu9d
- TLSH T15E83F913BB08C5B3D85806F42BD74FB81738EE448B8683CB2395B56CBEF579A1E91254
- MD5 SHA1 SHA512 SSDEEP TLSH