Suspicious
Suspect
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
 Hash Value
MD5
281d2ca40691bfa0debcfb96c81b6cd8
Sha1
c590a1e8ed1e884f18aabcee9546ae6171035242
Sha256
7945f9ccf7c2261a5741b5d4102b8909d48976f047e673190914127faa21092d
Sha384
a4d04d8a903803ad235aee34ee9a418ee220af55636fb85e8992c59ef6490ffdebdd8b9af1c73383280581db0748bf4a
Sha512
a2c0ecaddbbbd135c5ed03cd12389e18143a75bca22c61cb3842780171bb9d6f5cdf34323946769f75262b430bd11762e314a0168850c51f56a0c7efc48b4608
SSDeep
196608:BPxdtVBFUcwti7TQlyVN8iNISRTRmW5QD:NZHwtQQlyXOOQ
TLSH
CAA6F102F3E48A61E9FB467991B216129772B4268331D7CF339C85691F33BD19A36327

PeID

Microsoft Visual C++ 6.0 DLL (Debug)
Microsoft Visual C++ 7.0 - 8.0
Microsoft Visual C++ DLL
Microsoft Visual C++ v6.0
Microsoft Visual C++ v6.0 DLL
Pe123 v2006.4.4-4.12
File Structure
281d2ca40691bfa0debcfb96c81b6cd8
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
winPEAS._3rdParty.AlphaFS.Resources.resources
winPEAS.Properties.Resources.resources
winPEAS.regexes.yaml
winPEAS.sensitive_files.yaml
costura32.sqlite.interop.dll
[Authenticode]_24f0f691.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
costura64.sqlite.interop.dll
[Authenticode]_1a5e19a8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
costura.bouncycastle.crypto.dll.compressed
costura.bouncycastle.crypto.dll
[Authenticode]_f0ba58a2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.costura.dll.compressed
costura.costura.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.entityframework.dll.compressed
costura.entityframework.dll
[Authenticode]_0a9d005b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.Entity.Properties.Resources.resources
System.Data.Resources.AnnotationSchema.xsd
System.Data.Resources.CodeGenerationSchema.xsd
System.Data.Resources.CSDLSchema_1.xsd
System.Data.Resources.CSDLSchema_1_1.xsd
System.Data.Resources.CSDLSchema_2.xsd
System.Data.Resources.CSDLSchema_3.xsd
System.Data.Resources.EntityStoreSchemaGenerator.xsd
System.Data.Resources.SSDLSchema.xsd
System.Data.Resources.SSDLSchema_2.xsd
System.Data.Resources.SSDLSchema_3.xsd
System.Data.Resources.CSMSL_1.xsd
System.Data.Resources.CSMSL_2.xsd
System.Data.Resources.CSMSL_3.xsd
System.Data.Resources.ProviderServices.ProviderManifest.xsd
System.Data.Resources.DbProviderServices.ConceptualSchemaDefinition.csdl
System.Data.Resources.DbProviderServices.ConceptualSchemaDefinitionVersion3.csdl
costura.entityframework.sqlserver.dll.compressed
costura.entityframework.sqlserver.dll
[Authenticode]_ab81b63c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.Entity.SqlServer.Properties.Resources.SqlServer.resources
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinition.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinitionVersion3.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinitionVersion3_Sql8.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinition_Sql8.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaMapping.msl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaMappingVersion3.msl
System.Data.Resources.SqlClient.SqlProviderServices.ProviderManifest.xml
costura.microsoft.bcl.asyncinterfaces.dll.compressed
costura.microsoft.bcl.asyncinterfaces.dll
[Authenticode]_9f4b3d37.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
costura.system.buffers.dll
[Authenticode]_8c38879e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.data.sqlite.dll.compressed
costura.system.data.sqlite.dll
[Authenticode]_6d6ec88d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.SQLite.SR.resources
sds-see-ekm.eeagle
sds-see-ekm.eeagle.b64sig
System.Data.SQLite.Resources.SQLiteCommand.bmp
System.Data.SQLite.Resources.SQLiteConnection.bmp
System.Data.SQLite.Resources.SQLiteDataAdapter.bmp
costura.system.data.sqlite.ef6.dll.compressed
costura.system.data.sqlite.ef6.dll
[Authenticode]_035ebd5a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.SQLite.Properties.resources
System.Data.SQLite.SQLiteProviderServices.StoreSchemaDefinition.ssdl
System.Data.SQLite.Common.ConceptualSchemaDefinition.csdl
System.Data.SQLite.SQLiteProviderServices.ProviderManifest.xml
System.Data.SQLite.SQLiteProviderServices.StoreSchemaMapping.msl
costura.system.data.sqlite.linq.dll.compressed
costura.system.data.sqlite.linq.dll
[Authenticode]_69a27640.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.SQLite.SQLiteProviderServices.StoreSchemaDefinition.ssdl
costura.system.diagnostics.diagnosticsource.dll.compressed
costura.system.diagnostics.diagnosticsource.dll
[Authenticode]_50c89911.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.pipelines.dll.compressed
costura.system.io.pipelines.dll
[Authenticode]_3c25a0a9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
costura.system.memory.dll
[Authenticode]_15ab3250.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
costura.system.numerics.vectors.dll
[Authenticode]_ae030d4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.runtime.compilerservices.unsafe.dll.compressed
costura.system.runtime.compilerservices.unsafe.dll
[Authenticode]_81de04f4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
costura.system.text.encodings.web.dll
[Authenticode]_376fa2f3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
costura.system.text.json.dll
[Authenticode]_752d6344.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
costura.system.threading.tasks.extensions.dll
[Authenticode]_7121b905.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_5e4e41f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.metadata
Informations
Name
 Value
Info

PE Detect: PeReader OK (file layout)
Info

PDB Path: D:\a\PEASS-ng\PEASS-ng\winPEAS\winPEASexe\winPEAS\obj\x64\Release\winPEAS.pdb
Module Name

winPEAS.exe
Full Name

winPEAS.exe
EntryPoint

System.Void winPEAS.Program::Main(System.String[])
Scope Name

winPEAS.exe
Scope Type

ModuleDef
Kind

Console
Runtime Version

v4.0.30319
Tables Header Version

512
WinMD Version

<null>
Assembly Name

winPEAS
Assembly Version

1.0.0.0
Assembly Culture

<null>
Has PublicKey

False
PublicKey Token

<null>
Target Framework

.NETFramework,Version=v4.8
Total Strings

10157
Main Method

System.Void winPEAS.Program::Main(System.String[])
Main IL Instruction Count

3
Main IL

ldarg.0 <null> call System.Void winPEAS.Checks.Checks::Run(System.String[]) ret <null>
Artefacts
Name
 Value
URLs in VB Code - #1

http://go.microsoft.com/fwlink/?LinkId=260882
URLs in VB Code - #2

http://go.microsoft.com/fwlink/?LinkId=260883
URLs in VB Code - #3

http://www.w3.org/2001/XMLSchema:long
URLs in VB Code - #4

http://go.microsoft.com/fwlink/?LinkId=313468
URLs in VB Code - #5

http://go.microsoft.com/fwlink/?LinkId=238269
URLs in VB Code - #6

http://go.microsoft.com/fwlink/?LinkID=237468
URLs in VB Code - #7

http://go.microsoft.com/fwlink/?LinkId=389592
URLs in VB Code - #8

http://go.microsoft.com/fwlink/?LinkId=309381
URLs in VB Code - #9

http://go.microsoft.com/fwlink/?LinkId=386386
URLs in VB Code - #10

http://go.microsoft.com/fwlink/?LinkId=287068
URLs in VB Code - #11

http://go.microsoft.com/fwlink/?LinkId=386388
URLs in VB Code - #12

http://go.microsoft.com/fwlink/?LinkId=386387
URLs in VB Code - #13

http://go.microsoft.com/fwlink/?LinkId=287183
URLs in VB Code - #14

http://go.microsoft.com/fwlink/?LinkId=394715
URLs in VB Code - #15

http://go.microsoft.com/fwlink/?LinkId=472540
URLs in VB Code - #16

http://go.microsoft.com/fwlink/?LinkId=318050
URLs in VB Code - #17

http://schemas.microsoft.com/ado/2009/02/edm/annotation
URLs in VB Code - #18

http://www.w3.org/2001/XMLSchema
URLs in VB Code - #19

http://schemas.microsoft.com/ado/2006/04/codegeneration
URLs in VB Code - #20

http://schemas.microsoft.com/ado/2006/04/edm
URLs in VB Code - #21

http://schemas.microsoft.com/ado/2007/05/edm
URLs in VB Code - #22

http://schemas.microsoft.com/ado/2008/09/edm
URLs in VB Code - #23

http://schemas.microsoft.com/ado/2009/11/edm
URLs in VB Code - #24

http://schemas.microsoft.com/ado/2007/12/edm/EntityStoreSchemaGenerator
URLs in VB Code - #25

http://schemas.microsoft.com/ado/2006/04/edm/ssdl
URLs in VB Code - #26

http://schemas.microsoft.com/ado/2009/02/edm/ssdl
URLs in VB Code - #27

http://schemas.microsoft.com/ado/2009/11/edm/ssdl
URLs in VB Code - #28

http://schemas.microsoft.com/ado/2008/09/mapping/cs
URLs in VB Code - #29

http://schemas.microsoft.com/ado/2009/11/mapping/cs
URLs in VB Code - #30

http://schemas.microsoft.com/ado/2006/04/edm/providermanifest
URLs in VB Code - #31

http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
URLs in VB Code - #32

http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
URLs in VB Code - #33

http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0
URLs in VB Code - #34

http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
URLs in VB Code - #35

http://www.microsoft.com/pkiops/docs/primarycps.htm0@
URLs in VB Code - #36

http://www.microsoft.com0
URLs in VB Code - #37

http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
URLs in VB Code - #38

http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
URLs in VB Code - #39

http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
URLs in VB Code - #40

http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
URLs in VB Code - #41

http://www.microsoft.com/PKI/docs/CPS/default.htm0@
281d2ca40691bfa0debcfb96c81b6cd8 (10.17 MB)
File Structure
281d2ca40691bfa0debcfb96c81b6cd8
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
winPEAS._3rdParty.AlphaFS.Resources.resources
winPEAS.Properties.Resources.resources
winPEAS.regexes.yaml
winPEAS.sensitive_files.yaml
costura32.sqlite.interop.dll
[Authenticode]_24f0f691.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
costura64.sqlite.interop.dll
[Authenticode]_1a5e19a8.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
costura.bouncycastle.crypto.dll.compressed
costura.bouncycastle.crypto.dll
[Authenticode]_f0ba58a2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.costura.dll.compressed
costura.costura.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.entityframework.dll.compressed
costura.entityframework.dll
[Authenticode]_0a9d005b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.Entity.Properties.Resources.resources
System.Data.Resources.AnnotationSchema.xsd
System.Data.Resources.CodeGenerationSchema.xsd
System.Data.Resources.CSDLSchema_1.xsd
System.Data.Resources.CSDLSchema_1_1.xsd
System.Data.Resources.CSDLSchema_2.xsd
System.Data.Resources.CSDLSchema_3.xsd
System.Data.Resources.EntityStoreSchemaGenerator.xsd
System.Data.Resources.SSDLSchema.xsd
System.Data.Resources.SSDLSchema_2.xsd
System.Data.Resources.SSDLSchema_3.xsd
System.Data.Resources.CSMSL_1.xsd
System.Data.Resources.CSMSL_2.xsd
System.Data.Resources.CSMSL_3.xsd
System.Data.Resources.ProviderServices.ProviderManifest.xsd
System.Data.Resources.DbProviderServices.ConceptualSchemaDefinition.csdl
System.Data.Resources.DbProviderServices.ConceptualSchemaDefinitionVersion3.csdl
costura.entityframework.sqlserver.dll.compressed
costura.entityframework.sqlserver.dll
[Authenticode]_ab81b63c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.Entity.SqlServer.Properties.Resources.SqlServer.resources
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinition.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinitionVersion3.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinitionVersion3_Sql8.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaDefinition_Sql8.ssdl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaMapping.msl
System.Data.Resources.SqlClient.SqlProviderServices.StoreSchemaMappingVersion3.msl
System.Data.Resources.SqlClient.SqlProviderServices.ProviderManifest.xml
costura.microsoft.bcl.asyncinterfaces.dll.compressed
costura.microsoft.bcl.asyncinterfaces.dll
[Authenticode]_9f4b3d37.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
costura.system.buffers.dll
[Authenticode]_8c38879e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.data.sqlite.dll.compressed
costura.system.data.sqlite.dll
[Authenticode]_6d6ec88d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.SQLite.SR.resources
sds-see-ekm.eeagle
sds-see-ekm.eeagle.b64sig
System.Data.SQLite.Resources.SQLiteCommand.bmp
System.Data.SQLite.Resources.SQLiteConnection.bmp
System.Data.SQLite.Resources.SQLiteDataAdapter.bmp
costura.system.data.sqlite.ef6.dll.compressed
costura.system.data.sqlite.ef6.dll
[Authenticode]_035ebd5a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.SQLite.Properties.resources
System.Data.SQLite.SQLiteProviderServices.StoreSchemaDefinition.ssdl
System.Data.SQLite.Common.ConceptualSchemaDefinition.csdl
System.Data.SQLite.SQLiteProviderServices.ProviderManifest.xml
System.Data.SQLite.SQLiteProviderServices.StoreSchemaMapping.msl
costura.system.data.sqlite.linq.dll.compressed
costura.system.data.sqlite.linq.dll
[Authenticode]_69a27640.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
System.Data.SQLite.SQLiteProviderServices.StoreSchemaDefinition.ssdl
costura.system.diagnostics.diagnosticsource.dll.compressed
costura.system.diagnostics.diagnosticsource.dll
[Authenticode]_50c89911.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.pipelines.dll.compressed
costura.system.io.pipelines.dll
[Authenticode]_3c25a0a9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
costura.system.memory.dll
[Authenticode]_15ab3250.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
costura.system.numerics.vectors.dll
[Authenticode]_ae030d4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.runtime.compilerservices.unsafe.dll.compressed
costura.system.runtime.compilerservices.unsafe.dll
[Authenticode]_81de04f4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
costura.system.text.encodings.web.dll
[Authenticode]_376fa2f3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
costura.system.text.json.dll
[Authenticode]_752d6344.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
costura.system.threading.tasks.extensions.dll
[Authenticode]_7121b905.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_5e4e41f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.metadata
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
URLs in VB Code - #1

http://go.microsoft.com/fwlink/?LinkId=260882

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #2

http://go.microsoft.com/fwlink/?LinkId=260883

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #3

http://www.w3.org/2001/XMLSchema:long

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #4

http://go.microsoft.com/fwlink/?LinkId=313468

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #5

http://go.microsoft.com/fwlink/?LinkId=238269

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #6

http://go.microsoft.com/fwlink/?LinkID=237468

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #7

http://go.microsoft.com/fwlink/?LinkId=389592

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #8

http://go.microsoft.com/fwlink/?LinkId=309381

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #9

http://go.microsoft.com/fwlink/?LinkId=386386

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #10

http://go.microsoft.com/fwlink/?LinkId=287068

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #11

http://go.microsoft.com/fwlink/?LinkId=386388

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #12

http://go.microsoft.com/fwlink/?LinkId=386387

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #13

http://go.microsoft.com/fwlink/?LinkId=287183

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #14

http://go.microsoft.com/fwlink/?LinkId=394715

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #15

http://go.microsoft.com/fwlink/?LinkId=472540

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #16

http://go.microsoft.com/fwlink/?LinkId=318050

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #17

http://schemas.microsoft.com/ado/2009/02/edm/annotation

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #18

http://www.w3.org/2001/XMLSchema

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #19

http://schemas.microsoft.com/ado/2006/04/codegeneration

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #20

http://schemas.microsoft.com/ado/2006/04/edm

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #21

http://schemas.microsoft.com/ado/2007/05/edm

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #22

http://schemas.microsoft.com/ado/2008/09/edm

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #23

http://schemas.microsoft.com/ado/2009/11/edm

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #24

http://schemas.microsoft.com/ado/2007/12/edm/EntityStoreSchemaGenerator

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #25

http://schemas.microsoft.com/ado/2006/04/edm/ssdl

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #26

http://schemas.microsoft.com/ado/2009/02/edm/ssdl

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #27

http://schemas.microsoft.com/ado/2009/11/edm/ssdl

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #28

http://schemas.microsoft.com/ado/2008/09/mapping/cs

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #29

http://schemas.microsoft.com/ado/2009/11/mapping/cs

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #30

http://schemas.microsoft.com/ado/2006/04/edm/providermanifest

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #31

http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #32

http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #33

http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #34

http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #35

http://www.microsoft.com/pkiops/docs/primarycps.htm0@

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #36

http://www.microsoft.com0

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #37

http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #38

http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #39

http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #40

http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
URLs in VB Code - #41

http://www.microsoft.com/PKI/docs/CPS/default.htm0@

281d2ca40691bfa0debcfb96c81b6cd8 > .Net Resources > costura.entityframework.dll
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙