| File Path | Type and Hashes |
|---|
| Match Rules |
|---|
| File Name: | ShareX_NativeMessagingHost.exe |
| File Type: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| SHA1: | a837a13d3970418932158fbcc6b3e1626a50b53c |
| MD5: | deb3c9b791986a397d8c57a93c658169 |
| First Seen Date: | 2017-04-17 14:13:53.063209 ( ) |
| Number of Clients Seen: | 2 |
| Last Analysis Date: | 2017-04-17 14:13:53.063209 ( ) |
| Human Expert Analysis Result: | No human expert analysis verdict given to this sample yet. |
| Property | Value |
|---|---|
| number of sections | 3 |
| compilation time stamp | 0x58EFF610 [Thu Apr 13 22:05:04 2017 UTC] |
| Translation | 0x0000 0x04b0 |
| LegalCopyright | Copyright (c) 2007-2017 ShareX Team |
| Assembly Version | 1.0.0.0 |
| InternalName | ShareX_NativeMessagingHost.exe |
| FileVersion | 1.0.0.0 |
| CompanyName | ShareX Team |
| LegalTrademarks | |
| Comments | |
| ProductName | ShareX |
| ProductVersion | 1.0.0.0 |
| FileDescription | ShareX NativeMessagingHost |
| OriginalFilename | ShareX_NativeMessagingHost.exe |
| entry point | 0x402df2 (.text) |
| machine type | Intel 386 or later - 32Bit |
| file size | 6656 |
| sha256 | 8d1bbce4b602aaacbf7e2153c83793ed67a2bf121e5eea2e57bb783b9b023dc7 |
| mime type | application/x-dosexec |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
|---|---|---|---|---|---|
| .text | 0x2000 | 0xdf8 | 0xe00 | 5.334402 | - |
| .rsrc | 0x4000 | 0x64c | 0x800 | 3.525980 | - |
| .reloc | 0x6000 | 0xc | 0x200 | 0.081539[SUSPICIOUS] | - |
-
mscoree.dll
- _CorExeMain
RT_VERSION
RT_MANIFEST