370c089407127c3e285d32920888c7ca
PE Executable | MD5: 370c089407127c3e285d32920888c7ca | Size: 10.18 MB | application/x-dosexec
|
Hash | Hash Value |
|---|---|
| MD5 | 370c089407127c3e285d32920888c7ca
|
| Sha1 | 89220eeaca601df9b3fbe7c57dec8f94a6df7229
|
| Sha256 | 90e4da6d22fab412d9b77d1733d09ba4063bcf83838400a62b9584f963272dee
|
| Sha384 | ee19265f9ea14925120d026428b02b7a4b783c1d14890f4d65da919e3e114b382c239a9a0760d84440b1913ff6e3e093
|
| Sha512 | 453941e81e3cf1d356e975da59a4a00c369a5f16dd9e9cfaf10832e6d73e309733db46ce98d2c1739b6b109ae0a1ea683b9bbebde1105c0583c6c487c1c8ddb1
|
| SSDeep | 196608:SaBqkSIIlY1iP9a5NcINcgjq3GdCnMK2rICJjJA4cv0GZBl/JbP:SrkSbY139coq3ZMHtFCtBZV
|
| TLSH | 94A6331BF35FCF66E406243D2949D3724E333D2E6DE6E30E308C3DA599766AA1D80A45
|
PeID
|
Name0 | Value |
|---|---|
| PDB Path | ? |
| Embedded Resources | 34 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | /_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | /_/artifacts/obj/System.Text.Encodings.Web/Release/net462/System.Text.Encodings.Web.pdb |
| Embedded Resources | 2 |
| Suspicious Type Names (1-2 chars) | 2 |
| PDB Path | E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 2 |
| PDB Path | E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 2 |
| PDB Path | C:\CI_WS\Ws\274459\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 2 |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 3 |
| PDB Path | /_/artifacts/obj/Microsoft.AspNetCore.SystemWebAdapters/Release/net472/Microsoft.AspNetCore.SystemWebAdapters.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | C:\PowerShellStandard\src\5\obj\Release\net452\System.Management.Automation.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | /_/artifacts/obj/System.CodeDom/Release/net462/System.CodeDom.pdb |
| Embedded Resources | 2 |
| Suspicious Type Names (1-2 chars) | 2 |
| Embedded Resources | 9 |
| Suspicious Type Names (1-2 chars) | 0 |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 0 |
| Embedded Resources | 223 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\Release\net462\System.Runtime.CompilerServices.Unsafe.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | C:\Users\Aybe\Documents\GitHub\Windows-API-Code-Pack-1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdb |
| Embedded Resources | 2 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | C:\projects\wpfanimatedgif\WpfAnimatedGif\obj\Release\net40\WpfAnimatedGif.pdb |
| Embedded Resources | 0 |
| Suspicious Type Names (1-2 chars) | 0 |
| Embedded Resources | 2 |
| Suspicious Type Names (1-2 chars) | 1 |
| Embedded Resources | 5 |
| Suspicious Type Names (1-2 chars) | 12 |
| Embedded Resources | 21 |
| Suspicious Type Names (1-2 chars) | 0 |
| Embedded Resources | 8 |
| Suspicious Type Names (1-2 chars) | 1 |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 0 |
| PDB Path | D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 2 |
| Embedded Resources | 1 |
| Suspicious Type Names (1-2 chars) | 1 |
| PDB Path | /_/artifacts/obj/System.Text.Json/Release/net462/System.Text.Json.pdb |
| Embedded Resources | 2 |
| Suspicious Type Names (1-2 chars) | 2 |
|
Name0 | Value | Location |
|---|---|---|
| PDB Path | ? |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 |
| Embedded Resources | 34 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 |
| PDB Path | /_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.bcl.asyncinterfaces.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.bcl.asyncinterfaces.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.bcl.asyncinterfaces.dll |
| PDB Path | E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.threading.tasks.extensions.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.threading.tasks.extensions.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.threading.tasks.extensions.dll |
| PDB Path | /_/artifacts/obj/System.Text.Encodings.Web/Release/net462/System.Text.Encodings.Web.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.text.encodings.web.dll |
| Embedded Resources | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.text.encodings.web.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.text.encodings.web.dll |
| PDB Path | E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.valuetuple.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.valuetuple.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.valuetuple.dll |
| PDB Path | E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.buffers.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.buffers.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.buffers.dll |
| PDB Path | C:\CI_WS\Ws\274459\Source\Costura_Fody\src\Costura\obj\Release\netstandard2.0\Costura.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.costura.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.costura.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.costura.dll |
| PDB Path | E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.numerics.vectors.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.numerics.vectors.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.numerics.vectors.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.windowsbase.dll |
| Suspicious Type Names (1-2 chars) | 3 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.windowsbase.dll |
| PDB Path | /_/artifacts/obj/Microsoft.AspNetCore.SystemWebAdapters/Release/net472/Microsoft.AspNetCore.SystemWebAdapters.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.aspnetcore.systemwebadapters.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.aspnetcore.systemwebadapters.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.aspnetcore.systemwebadapters.dll |
| PDB Path | /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.newtonsoft.json.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.newtonsoft.json.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.newtonsoft.json.dll |
| PDB Path | C:\PowerShellStandard\src\5\obj\Release\net452\System.Management.Automation.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.management.automation.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.management.automation.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.management.automation.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.xml.linq.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.xml.linq.dll |
| PDB Path | /_/artifacts/obj/System.CodeDom/Release/net462/System.CodeDom.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.codedom.dll |
| Embedded Resources | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.codedom.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.codedom.dll |
| Embedded Resources | 9 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.xml.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.xml.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.xaml.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.xaml.dll |
| Embedded Resources | 223 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.windows.forms.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.windows.forms.dll |
| PDB Path | D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\Release\net462\System.Runtime.CompilerServices.Unsafe.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.runtime.compilerservices.unsafe.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.runtime.compilerservices.unsafe.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.runtime.compilerservices.unsafe.dll |
| PDB Path | C:\Users\Aybe\Documents\GitHub\Windows-API-Code-Pack-1.1\source\WindowsAPICodePack\Core\obj\Release\Microsoft.WindowsAPICodePack.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.windowsapicodepack.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.windowsapicodepack.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.windowsapicodepack.dll |
| PDB Path | c:\Users\Aybe\Documents\GitHub\Windows API Code Pack 1.1\source\WindowsAPICodePack\Shell\obj\Release\Microsoft.WindowsAPICodePack.Shell.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.windowsapicodepack.shell.dll |
| Embedded Resources | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.windowsapicodepack.shell.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.microsoft.windowsapicodepack.shell.dll |
| PDB Path | C:\projects\wpfanimatedgif\WpfAnimatedGif\obj\Release\net40\WpfAnimatedGif.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.wpfanimatedgif.dll |
| Embedded Resources | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.wpfanimatedgif.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.wpfanimatedgif.dll |
| Embedded Resources | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.presentationcore.dll |
| Suspicious Type Names (1-2 chars) | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.presentationcore.dll |
| Embedded Resources | 5 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.presentationframework.dll |
| Suspicious Type Names (1-2 chars) | 12 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.presentationframework.dll |
| Embedded Resources | 21 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.data.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.data.dll |
| Embedded Resources | 8 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.dll |
| Suspicious Type Names (1-2 chars) | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.io.compression.filesystem.dll |
| Suspicious Type Names (1-2 chars) | 0 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.io.compression.filesystem.dll |
| PDB Path | D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.memory.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.memory.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.memory.dll |
| Embedded Resources | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.net.http.dll |
| Suspicious Type Names (1-2 chars) | 1 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.net.http.dll |
| PDB Path | /_/artifacts/obj/System.Text.Json/Release/net462/System.Text.Json.pdb |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.text.json.dll |
| Embedded Resources | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.text.json.dll |
| Suspicious Type Names (1-2 chars) | 2 |
370c089407127c3e285d32920888c7ca > Resources > RT_RCDATA > ID:0000 > ID:0 > .Net Resources > costura.system.text.json.dll |