TheExecutor.zip
- SHA256 9230dc547285af2af891ce0d8fc6b899f4c3d56b78593570d056e45e1e0cb44c
Overview
overview
3Static
static
1System.Com...es.dll
windows10-ltsc_2021-x64
3System.Console.dll
windows10-ltsc_2021-x64
3System.Dia...ss.dll
windows10-ltsc_2021-x64
3System.Pri...ib.dll
windows10-ltsc_2021-x64
3System.Runtime.dll
windows10-ltsc_2021-x64
1System.Tex...ns.dll
windows10-ltsc_2021-x64
1System.Thr...ad.dll
windows10-ltsc_2021-x64
1System.Threading.dll
windows10-ltsc_2021-x64
3TheExecutor.exe
windows10-ltsc_2021-x64
3WinUpdateHelper.exe
windows10-ltsc_2021-x64
3clrjit.dll
windows10-ltsc_2021-x64
3coreclr.dll
windows10-ltsc_2021-x64
3hostfxr.dll
windows10-ltsc_2021-x64
3hostpolicy.dll
windows10-ltsc_2021-x64
3Static task
static1
Behavioral task
behavioral1
Sample
System.ComponentModel.Primitives.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
System.Console.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
System.Diagnostics.Process.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
System.Private.CoreLib.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
System.Runtime.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
System.Text.Encoding.Extensions.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
System.Threading.Thread.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
System.Threading.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
TheExecutor.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
WinUpdateHelper.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
clrjit.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
coreclr.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
hostfxr.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
hostpolicy.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
General
- Target TheExecutor.zip
- Size 7.4MB
- Sample260522-rb7evac19k
- SHA256 9230dc547285af2af891ce0d8fc6b899f4c3d56b78593570d056e45e1e0cb44c
- MD5 5addb81d05d37fc0a6d482a841a475e7
- SHA1 8229fb135095bc22bccec80a19a056c4dafdee49
- SHA512 27213749b714e63284fc6042f1df21a8fb7db0f63c31087bb044c442ae3925e3d8bedce9b0b2079f933f8d43c8a2dda752591fa58a8e8d5d8a6b74376a299373
- SSDEEP 196608:ie4Ri8fFuxSV0cn4w1jSb/n4D+q0tHwVCY1YS:x4HcAnnl1je/ni0dwIY1/
- TLSH T16A7633201FF6D9E8D12C562D0172AF6CDB9E8AAC05E5BB15BB90CD728631FEB3360514
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
TheExecutor.zip.zip 7.4MB
-
README.txt994B
-
System.ComponentModel.Primitives.dll.dll 68KB
-
System.Console.dll.dll 141KB
-
System.Diagnostics.Process.dll.dll 257KB
-
System.Private.CoreLib.dll.dll 9.5MB
-
System.Runtime.dll.dll 41KB
-
System.Text.Encoding.Extensions.dll.dll 15KB
-
System.Threading.Thread.dll.dll 15KB
-
System.Threading.dll.dll 75KB
-
TheExecutor.exe.exe 135KB
-
WinUpdateHelper.deps.json646B
-
WinUpdateHelper.dll.exe 93KB
-
clrjit.dll.dll 1.2MB
-
coreclr.dll.dll 4.1MB
-
hostfxr.dll.dll 303KB
-
hostpolicy.dll.dll 319KB
README.txt
- SHA256 2753efd57e93464431cc683e4e550b2c4241d1180c924da9bcc6ef5501412065
- MD5 6da67bf44c7bcd450b7e247bf2c69adc
- SHA1 3efa1ec832ce9a47521c9a9379f6f7ee5a25d6b8
- SHA512 0521f4228727f5dec490e736168253c8a73eff3bff7e3784787e8690dcad16a7090656620a3c6b6ece3214e4fbbd80400b50ade533d44f50bfb9a7f75ced8626
- TLSH T12411024FDB51E977197013C89A1C7185B6178A072B04C985E868C01D733F795E3345DF
- MD5 SHA1 SHA512 TLSH
System.ComponentModel.Primitives.dll
- SHA256 7b235d877f3ea1d8c9e4fe05ffd6d3e50dd3f0fad7d1f176c97fa74837bdf956
- MD5 891787a87f8b747a4b1cbc7b6949af89
- SHA1 17d7af5353aad66082638de3f01ae28e09dd0744
- SHA512 31dc7195d219754659c4eeb3c4c1961e87b13e3f8722d89f386f4962975d82c0db2eb2e222367ecd275c1931c5960dcf7557dec931e2245c803876a391deb078
- SSDEEP 1536:X9v7P/RGGjnj4n5pnd2sbnVGXXsGko0wrral5AC2oKQXgyKs9jeqg2L7S:XRD/8GSkXXsGH0+GlH2o3XgO9aqZfS
- TLSH T1B2632A117BA4133AFA854A7C79F7EE1107B6AB862722DCCB4C56D48D06523C266312FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ea:29:f6:8e:a6:91:c9:8f:df:75:a0:0b:fc:1d:1b:7a:e5:98:b8:0a:b3:af:3c:5f:b7:3a:8a:a6:9e:f9:d2:b0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Primitives\net6.0-Release\System.ComponentModel.Primitives.pdb
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
System.Console.dll
- SHA256 d42c3432273df74d4d446d338926c3eb4da6fb8c423f1c59c38dab6261719b1c
- MD5 d6c0fba44102e9b9818985808ad37324
- SHA1 b7ca3a94efccd0d3445a26a4f235a3d97e3a310a
- SHA512 460c255ee2ef374b9b9009f54974d24201a5b1798528fcd93d57e7b6de2e14c72a2165d430aec34838d0d33dc3f920ed224bada485e38b58f4989804e983c124
- SSDEEP 1536:/umZmkFQRf8+ZzEgWIFIqFJ+7VDFPfespWhKgr1gCuToGcjqPrQ+99kcZwg2L7S:/dAIiyea0ybKKUyX6IrQdcZwZfS
- TLSH T12BE36C2B7BDC5822F67B09B68CE3DB904236BC72031AD7CB9556EAC41C45FE94A305D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
eb:f5:b4:b5:54:b2:37:e6:75:34:71:0d:0d:be:79:08:32:53:86:2c:7e:f8:9a:a9:d0:0e:cc:42:df:80:86:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Console.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Console\net6.0-windows-Release\System.Console.pdb
Name
.text
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
System.Diagnostics.Process.dll
- SHA256 f471fb86db2fced1c33040a42d71dc6338d5d5bb51d2fa333af46a0d1ee9a04c
- MD5 8427b8e10e2576d369a8bf59b3a4a1d3
- SHA1 ed142990aa982275923ce22ece408de9c7b54093
- SHA512 a2443ab57ed87335b60014eeb31926ce621a8716b9a265086556947884e8e23da49ac21f98ff1776b02f7700491988824ed3d6adae9c5835d0a68df0197f8e74
- SSDEEP 6144:DJmMzsAHUIj35mswWkajuUFXxs9b3NX1Pkx3q1vmhPDPyYQj:w/of35mONjuURjJQvSTyp
- TLSH T16B448E326B9C4D29F6D69F7A405596838E7AD7D11F2AD7C700A4FDEC28623C28C31267
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6c:30:3d:15:58:4a:1c:c2:4d:6b:fd:24:1d:17:b7:0a:0a:02:cd:3a:23:6e:b6:f7:bf:1e:6e:bb:ea:ca:2b:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Process.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Process\net6.0-windows-Release\System.Diagnostics.Process.pdb
Name
.text
Size
224KB
Virtual Size
223KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
System.Private.CoreLib.dll
- SHA256 b7aebbe8ea1993d48688e5541ebede63012021b27e633e783900d7998aaff9af
- MD5 c60219cc8a4b526e23b7e5e1e9eb6da4
- SHA1 73c81595aafaa78990c6c0196c071f4994505394
- SHA512 c4b1abafb3f8c02f9228a6e0ceb8cac9586cfc27d2a719cad59c3becb6b0133e761f1e39583dc0f1a9ca565df638bc7c3a5032d93fe06b6b597199f4ef24bb80
- SSDEEP 196608:W0QzMnkcbfKqhaaKAU+OigSxdINaNtp5s3zPmP:W0QzOrvNtp63bC
- TLSH T1D7A6AE12E7CDDF2BED89067381ABEB1992FDDA451326EBC72118D99D14227C88C712D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
92:b5:60:2a:e8:ea:0c:08:da:59:17:44:a2:4d:39:79:73:cf:bf:fc:17:f8:77:01:ae:58:eb:e9:7f:88:ca:ae
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Private.CoreLib.ni.pdb
D:\a\_work\1\s\artifacts\obj\coreclr\System.Private.CoreLib\x86\Release\System.Private.CoreLib.pdb
Name
.text
Size
9.0MB
Virtual Size
9.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
293KB
Virtual Size
293KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
274KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
System.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1cb7640be0cd2f0f97d3b76e89de44f06e6ffaef1940c639e8734bb8e5a59399
- MD5 1e4df2bbee0eb38eead003d87e0e0862
- SHA1 9b6af9918f1c754f6dc82eed6ed64624d7a5e546
- SHA512 501ae7f6dc7096e8972efff545ac00e383dd6e55ea9708b6144f55f7d343b236cb4b4776b38764437ab9485ed9c105926568acc829cec2ea30960be84fabab47
- SSDEEP 768:KBV0jdpFKYl5f4bGRi2xVbcVT4pphNyPhX6Lm5rR8vSoQuSOI:OedGYl5f4bGR3G0bhNMwLg2L7S
- TLSH T1F813F570AE4A1273CD8A877288B3A4C109F633CF64B6CDBA541E8596298F355D3B3359
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0f:69:e3:9f:a4:a5:cf:01:c5:4b:d7:3d:b8:f2:2c:36:50:c6:1d:98:03:f4:07:1c:d9:c1:40:d3:82:a6:40:cf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
37470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime\net6.0-Release\System.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Text.Encoding.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e64b14c9531b94db14be07a1e4424a136467d3f71ab635cbf09cca803f86d42a
- MD5 6add0aca4c3c3510d59f1f97d9df6a64
- SHA1 39efd3a8cd5d0f3b00de700eeeec07cadcf47acb
- SHA512 cac84cf1701722675f7edaff251a054fbaf353cccd49162523b7e6472f7e293b33781f1d9560f46bcc9fc292a96d5a10e21c3b864af77cf1fe4881ddc55efc15
- SSDEEP 384:4zvwX2BfW6UJWaGV35O02mNDG7I/cj5rR8vSofousWu43ai:PuyNyrh80/m5rR8vSoQuS/
- TLSH T1FC723A7A8F5486B7FE26CF31E9DD86559E71AAC0AC429A4B308D01C92E433956F3073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:7a:23:7d:be:e5:93:c6:63:54:84:51:6d:dc:ca:0f:99:9d:e1:07:62:32:82:b7:aa:b5:b7:36:e5:54:76:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
10862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.Extensions\net6.0-Release\System.Text.Encoding.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.Thread.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8f8d7cf2fa067c16e957fb1ef14b6f9a4d742bd81c2d839d1f2a747e8245e0a
- MD5 6ccc7c69fa23ccbbadca8e2a31599343
- SHA1 079628db65eb69c6c4d99e293e0e8a7f2086fd17
- SHA512 9613553160a14b1aa9d4591e6152a87049718bf216eaba1bcaf450fa4eaca9a3bfc58d3570cd69fad1545375314f4b5a0f7bedf26d18d987ad96179969459dea
- SSDEEP 384:Zz2EuZV2dDKWca7WaGVEIO02mNDimwcj5rR8vSofousWu4M:9mcfyphJwm5rR8vSoQuS
- TLSH T16B723A754F2946F3FD178F7098E986959DB2B6D09C51CA0F205984CA2E03798AF3077D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0f:28:74:6c:69:70:cf:08:6b:99:4c:69:09:37:09:03:c6:f8:93:79:99:61:59:f1:1b:65:97:09:4e:c7:55:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
11070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Thread\net6.0-Release\System.Threading.Thread.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
System.Threading.dll
- SHA256 0a490e32c228d12005fbffa3e9b4239d3e5576c1ac95841a5e8ed97ee2804f4b
- MD5 78bf90d7f501058ec6bc69b9174f8319
- SHA1 67c7c79d30a92ca34c0cef09b1b3292bfc90082d
- SHA512 db8c28ebd0500fdac1ed13d0cd1e97b061550cc06c776618b415b58d2ee110de573359cf8e8c9b2b7bd22a364d71f1f60914b44b1a182d3756c792aa33cc5611
- SSDEEP 1536:oXbM79S1nflDZeA9DwubEGxdhJC/aV0sqfAg2L7S:o4YflDZeA9DwAVxdhMaqfAZfS
- TLSH T197736B42F7E94235F69E07B6A8F5E66441BABAB03721D9DF104FC08D146A7C09A713B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bf:60:7e:a3:99:be:66:4b:c9:08:b5:b6:07:ad:3e:2a:90:16:bd:1b:c6:39:08:54:80:19:ce:ed:16:45:aa:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
System.Threading.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Threading\net6.0-Release\System.Threading.pdb
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
TheExecutor.exe
- IMPHASH ffff45487d1e51fa972c8409931457df
- SHA256 2b3f8e41e6c75111089e122ede703a998a133bb0191d64179dc4d1fa561ac213
- MD5 d4aed0886c8541a40000b13772917814
- SHA1 27678d3a924b6d19509bea05b7614cea9d6619fd
- SHA512 434bb99cc0358722a7d6624191fd3a5eb374297f908c8063def5dcb1dac48065c3b7895c63736e1cd4526f62d34782b5040b113b092de798c53c66874ca25c86
- SSDEEP 3072:45KS66wPh5FXLbHoBqgzCMQ94W5jZS9UH0oQa8NZfS:4s6wP5q7zNmBo9e0oQaE
- TLSH T1DFD307207AD7B670E5613670497FEAB68169EC294F7102DB23884D3B2DE06D31A33B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a2:9a:01:13:66:5f:55:be:2e:6c:ce:f9:ba:19:98:dd:43:ef:3d:28:19:da:a1:1d:5e:2d:67:a5:99:8c:de:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
6
Entry point
65536
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x86.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_seh_filter_exe
terminate
_set_app_type
_controlfp_s
_invalid_parameter_noinfo_noreturn
_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
exit
__p___argc
__p___wargv
_errno
_c_exit
_cexit
abort
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_register_onexit_function
api-ms-win-crt-stdio-l1-1-0
__p__commode
__acrt_iob_func
fputwc
fputws
__stdio_common_vsprintf_s
fflush
__stdio_common_vfwprintf
__stdio_common_vswprintf
_wfopen
setvbuf
_set_fmode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
strcpy_s
strcspn
wcsncmp
toupper
wcsnlen
_wcsdup
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_lock_locales
___lc_locale_name_func
___mb_cur_max_func
___lc_codepage_func
__pctype_func
setlocale
_unlock_locales
localeconv
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=260, version=30034,
count=14, id=259, version=30034,
count=76, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=158, id=1, productName=Unmarked objects,
count=10, id=265, version=30151,
count=1, id=258, version=30151,
WinUpdateHelper.deps.json
- SHA256 b5b88416018406da2baca5cf5f359755478652789a9da70644e65d2278c4af00
- MD5 4e4104f3bed035f2182adbbeb55d81fd
- SHA1 43299fb8c0806a16d8f579b345e60a881e920c33
- SHA512 3ddb9abce4027b1e0317ec530ca5a7462a70a51fab6353f6cf9b1ce5ce9c98673663722892663d087962c5e15f7c42cf497e83abd64964bb44b28ec48a7dc355
- TLSH T11BF0A961DEA48DC3017916B2B939CB86E927073320095C467AFD592CEF3798115B1F67
- MD5 SHA1 SHA512 TLSH
WinUpdateHelper.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fd519d2a5feeb123fad20068cc1bda70dcfea7bde3d98e7adbcc1bada0d08af7
- MD5 c43a142bee928a400ebcb37bef163c32
- SHA1 6a45f7ff7b0ea224b9378955a267d4daae68fbb3
- SHA512 4242d591342df2242603bb49407ca8ae2f73a323bf2354fe555f0480b979036a731028576a0dc2b9acb4a19a69d8963952e0d54dc21f6daf547a0a0bbc58302e
- SSDEEP 1536:S/0e3ME4yVhTRTewBeEyKsqFSSWWpK1iyyg0Bc5g2L7S:SD3ME4CRRTenD2Myg0B+ZfS
- TLSH T10193654126FBB215F6B73B705EBFD5644A3A7CD5A87AC61D1280047F1EE1A008EA3736
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4a:e9:73:c8:d3:96:26:3b:44:9e:28:70:ee:c9:e0:45:f2:9b:a8:a9:47:06:d6:02:8d:7b:31:fc:65:a7:6a:a1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
76990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\SVN_SFW\BulkCrapUninstaller\source\WinUpdateHelper\obj\x86\Release\net6.0-windows10.0.18362.0\win-x86\WinUpdateHelper.pdb
mscoree
_CorExeMain
Name
.text
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
clrjit.dll
- IMPHASH 548c91713a58b402bcb54fa5f1bd6650
- SHA256 bbb9a5c39bde4d2f331ad462ab7b97b082dcf09050d2eaed29fa0220f8246265
- MD5 5398edd2e5aaafebaaeb972a7ae85660
- SHA1 5e57b6ec392dc118b24ddfe9272b7c52c9f3f7bc
- SHA512 8542aa897f51906e81fb9257c46c3c167570c6c4f06fe0e9a18fc1a6f27d046d046ee0f66e86e2a80f2e26d4b2085ef3dd697e7f0a6169f53dc2660a77854bfd
- SSDEEP 24576:6LahvSnoliMCnn5EaWc2rywumsTIw8ULc7n0SW6F+X/GP8:8bolen5enmwumL7QPGP
- TLSH T14045A0A2E98240FBDC8A0230446F77566B7C963117768FC763F41969FA706C22719BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:f4:cb:6e:c8:0a:09:64:60:77:cb:13:bf:3d:f9:78:5c:a2:dc:ee:b0:59:9c:31:06:2d:ff:ee:1c:28:b6:27
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
802832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x86.Release\jit\clrjit.pdb
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
QueryThreadCycleTime
GetCurrentThread
GetLastError
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
SetLastError
LoadLibraryExW
OutputDebugStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WideCharToMultiByte
DebugBreak
RaiseException
api-ms-win-crt-math-l1-1-0
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
_fdopen
_libm_sse2_asin_precise
_libm_sse2_acos_precise
_CItanh
_CIsinh
_libm_sse2_tan_precise
_CIcosh
_CIatan2
_libm_sse2_sqrt_precise
ceil
floor
_copysign
acosh
asinh
atanh
cbrt
log2
acoshf
asinhf
atanhf
cbrtf
log2f
ilogb
ilogbf
_finite
_isnan
_CIfmod
api-ms-win-crt-stdio-l1-1-0
_wfopen
fclose
fseek
fflush
_setmode
__stdio_common_vfprintf
_fileno
__acrt_iob_func
ftell
_dup
setvbuf
api-ms-win-crt-runtime-l1-1-0
abort
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_errno
api-ms-win-crt-string-l1-1-0
strcpy_s
strcat_s
strncmp
_stricmp
wcsncmp
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
getJit
getLikelyClass
jitStartup
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
98KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=161, id=1, productName=Unmarked objects,
count=31, id=261, version=30034,
count=16, id=260, version=30034,
count=23, id=259, version=30034,
count=105, id=270, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
coreclr.dll
- IMPHASH 1917c7c710b69b18c4223f84e2cc5599
- SHA256 40888f1299596b2c7ea2e4a6b669a4292ea59977a8231cf2172d184017a458c5
- MD5 5525e1d348f1fb563261accb1cf464df
- SHA1 5297c15274d58fb22f20b4fcac5f2197b5aac918
- SHA512 ab03e95fd9001aad5fc895ce32764f8c26f7b88338402ade656a9969c76ce6d7fa5dc3ddfbf713ef6235e9b6334671a20cbd8a23aab312d5b68e9a56087b6114
- SSDEEP 98304:I7zXEtznDMYWgBYAC8sJNlKHGRJaTM6a7lPB+II7l/MUwNnW:YzXEzwY5Yb8qv+AJSMtlPUBh/MUz
- TLSH T11816AE32B6168836DA1E0234551EBBDA85BDA771477200C7B7B47BCD6EB04D223B6723
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
78:26:aa:ed:83:87:39:34:51:48:82:9d:6f:d9:b3:9b:d3:94:30:bb:1e:98:83:82:1f:b0:4c:a5:a5:a5:24:1d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
1170512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x86.Release\dlls\mscoree\coreclr\coreclr.pdb
kernel32
RemoveVectoredExceptionHandler
MultiByteToWideChar
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
FlushInstructionCache
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
GetTickCount64
DuplicateHandle
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
GetThreadPriority
ResumeThread
GetCurrentThreadId
Sleep
TlsAlloc
GetCurrentThread
CreateThread
WaitForMultipleObjectsEx
SignalObjectAndWait
SetThreadStackGuarantee
VirtualQuery
GetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
MapViewOfFileEx
UnmapViewOfFile
GetStringTypeExW
SetEvent
GetCurrentProcessorNumber
GlobalMemoryStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
SleepEx
GetQueuedCompletionStatus
InterlockedPopEntrySList
GetCurrentProcessorNumberEx
ExitProcess
CreateMemoryResourceNotification
GetProcessAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
GetLargePageMinimum
VirtualUnlock
ResetWriteWatch
GetWriteWatch
GetLogicalProcessorInformation
SetThreadGroupAffinity
SetThreadAffinityMask
IsProcessInJob
QueryInformationJobObject
K32GetProcessMemoryInfo
VirtualAlloc
VirtualFree
VirtualProtect
SwitchToThread
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetFileSize
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
ResetEvent
CreateSemaphoreExW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
GetThreadContext
SuspendThread
SetThreadContext
GetEnabledXStateFeatures
InitializeContext
CopyContext
SetXStateFeaturesMask
SetUnhandledExceptionFilter
GetSystemDefaultLCID
GetUserDefaultLCID
OutputDebugStringA
RtlUnwind
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
FormatMessageW
GetACP
LCMapStringEx
LocalFree
VerSetConditionMask
VerifyVersionInfoW
IsWow64Process
GetModuleFileNameW
VirtualAllocExNuma
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
GetSystemTimes
GetSystemTimeAsFileTime
CreateProcessW
GetCPInfo
LoadLibraryExW
CreateFileW
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
OpenProcess
LoadLibraryExA
OpenEventW
ExitThread
HeapReAlloc
CreateNamedPipeA
WaitForMultipleObjects
DisconnectNamedPipe
CreateFileA
CancelIoEx
GetOverlappedResult
ConnectNamedPipe
FlushFileBuffers
CreateFileMappingW
MapViewOfFile
GetActiveProcessorGroupCount
GetSystemTime
SetConsoleCtrlHandler
GetLocaleInfoEx
GetUserDefaultLocaleName
CreateFileMappingA
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
EncodePointer
TlsFree
AddVectoredExceptionHandler
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
RaiseFailFastException
FreeLibrary
RaiseException
WaitForSingleObject
TlsSetValue
TlsGetValue
GetSystemInfo
ReadProcessMemory
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
DebugBreak
DeleteCriticalSection
InitializeCriticalSection
WriteFile
GetProcessTimes
GetCommandLineW
ReadFile
SetFilePointer
GetProcAddress
GetModuleHandleExW
SetErrorMode
CloseHandle
GetCurrentProcess
FlushProcessWriteBuffers
SetLastError
GetLastError
OutputDebugStringW
advapi32
ReportEventW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
DeregisterEventSource
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
SetThreadToken
RevertToSelf
OpenThreadToken
EventWriteTransfer
EventWrite
SetKernelObjectSecurity
ole32
CoTaskMemFree
CoRegisterInitializeSpy
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
CoRevokeInitializeSpy
CoWaitForMultipleHandles
StringFromGUID2
CoCreateGuid
CoReleaseMarshalData
IIDFromString
CLSIDFromProgID
CoGetMarshalSizeMax
CoMarshalInterface
CoUnmarshalInterface
CoGetObjectContext
CoGetContextToken
CoGetClassObject
CoCreateFreeThreadedMarshaler
CreateStreamOnHGlobal
oleaut32
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
VariantChangeTypeEx
VariantChangeType
SafeArrayGetVartype
LoadTypeLibEx
QueryPathOfRegTypeLi
SafeArrayDestroy
SafeArrayGetLBound
CreateErrorInfo
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
SysFreeString
GetErrorInfo
SetErrorInfo
SysAllocString
SysStringLen
SysAllocStringLen
SafeArrayGetDim
GetRecordInfoFromTypeInfo
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
wcsnlen
iswspace
_strdup
strcpy_s
isspace
strtok_s
strncat_s
wcsncat_s
strlen
wcscat_s
towupper
iswascii
strnlen
strcmp
wcstok_s
isdigit
isalpha
_wcsnicmp
wcsncpy_s
towlower
iswupper
_wcsicmp
strcat_s
strncpy_s
wcsncmp
strncmp
_stricmp
_strnicmp
wcscpy_s
api-ms-win-crt-stdio-l1-1-0
fwrite
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
_putws
_flushall
__stdio_common_vsscanf
fgets
fclose
_wfopen
__stdio_common_vfwprintf
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fputs
__acrt_iob_func
fflush
fopen
api-ms-win-crt-runtime-l1-1-0
abort
_errno
_invalid_parameter_noinfo
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_controlfp_s
terminate
_seh_filter_dll
api-ms-win-crt-convert-l1-1-0
wcstoul
atol
atoi
strtoul
_ltow_s
_wtoi
_itow_s
strtoull
_wcstoui64
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
_libm_sse2_tan_precise
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
_libm_sse2_asin_precise
_libm_sse2_acos_precise
ilogbf
asinhf
asinh
cbrt
__libm_sse2_tan
ilogb
__libm_sse2_sin
ceil
__libm_sse2_log10
__libm_sse2_log
__libm_sse2_exp
acosh
__libm_sse2_cos
__libm_sse2_atan2
atanh
log2
floor
cbrtf
__libm_sse2_atan
fma
acoshf
__libm_sse2_asin
log2f
__libm_sse2_acos
_CItanh
_copysign
modf
_CIsinh
fmaf
__libm_sse2_pow
_CIfmod
_CIcosh
_CIatan2
atanhf
api-ms-win-crt-time-l1-1-0
_time64
CLRJitAttachState
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
71B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
627KB
Virtual Size
626KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
207KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=29395,
count=11, id=257, version=29395,
count=404, id=1, productName=Unmarked objects,
count=37, id=261, version=30034,
count=18, id=260, version=30034,
count=29, id=259, version=30034,
count=6, id=259, version=30151,
count=463, id=270, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
hostfxr.dll
- IMPHASH 842e74f1e5bcf2b7dbff6c5965847d3a
- SHA256 0cde7a5e20c92c31b1b9e6c40704efb67c7b13a4c78cb5b792605c43bf39cfc7
- MD5 53250ff4dd4cb579be655e9e27a8460f
- SHA1 ec5e263aec9ab805ee2108f5de3fbb5977a8c0cf
- SHA512 916114baa49f8cb95a5f8e073edb2ca3ac7643b02f46e269bdf1d5805bbd62fa06a51298c79cdfe42b9fbf1c497591df31edc6d84c14be7db5c4c6748fc7f077
- SSDEEP 6144:wUrFIqYA5rCxCmgStCYEnOqQP3waqDJRCh6Gmq65STK3dvaidPym:wUZfYA5uxCmgSMYEnOqQPgaq+mqOhRa3
- TLSH T1C6643B21B69E8239F5B6577069786FB690BE7C189FF0C1CF5340492E59226C26B30F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ac:83:38:64:b2:3c:e5:81:6b:95:e8:87:24:4e:c8:33:b9:1a:0c:e3:c8:b6:6d:a8:68:8d:97:32:69:dc:7e:c0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
194624
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x86.Release\corehost\fxr\standalone\hostfxr.pdb
kernel32
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
CreateFileW
MultiByteToWideChar
FindFirstFileExW
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
FreeLibrary
GetFileSizeEx
GetLastError
OutputDebugStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
GetStringTypeW
QueryPerformanceCounter
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-heap-l1-1-0
calloc
malloc
_callnewh
realloc
free
api-ms-win-crt-runtime-l1-1-0
_wcserror
_seh_filter_dll
_initterm_e
_errno
_initterm
_cexit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
terminate
abort
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_crt_atexit
api-ms-win-crt-string-l1-1-0
wcsncmp
strcpy_s
_wcsnicmp
tolower
_wcsicmp
__strncnt
wcsnlen
islower
_wcsdup
isupper
strcspn
api-ms-win-crt-stdio-l1-1-0
fputwc
fputws
__stdio_common_vfwprintf
fflush
__acrt_iob_func
__stdio_common_vswprintf
_wfopen
fputc
setvbuf
fclose
fgetc
_fseeki64
fwrite
_wfsopen
_get_stream_buffer_pointers
fread
fgetpos
__stdio_common_vsprintf_s
fseek
ungetc
fsetpos
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
localeconv
___lc_codepage_func
setlocale
_lock_locales
___lc_locale_name_func
__pctype_func
_unlock_locales
api-ms-win-crt-math-l1-1-0
frexp
ceil
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
hostfxr_close
hostfxr_get_available_sdks
hostfxr_get_dotnet_environment_info
hostfxr_get_native_search_directories
hostfxr_get_runtime_delegate
hostfxr_get_runtime_properties
hostfxr_get_runtime_property_value
hostfxr_initialize_for_dotnet_command_line
hostfxr_initialize_for_runtime_config
hostfxr_main
hostfxr_main_bundle_startupinfo
hostfxr_main_startupinfo
hostfxr_resolve_sdk
hostfxr_resolve_sdk2
hostfxr_run_app
hostfxr_set_error_writer
hostfxr_set_runtime_property_value
Name
.text
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=260, version=30034,
count=18, id=259, version=30034,
count=77, id=261, version=30034,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=29395,
count=194, id=1, productName=Unmarked objects,
count=28, id=265, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
hostpolicy.dll
- IMPHASH 761c2f542982eb2d9490fff2d186431a
- SHA256 5596a6b909f75fc76ec793389a030d5d4cacbb2165b634e4b2fb7f88bf7b584b
- MD5 1d68f37254a7bc3b2c522cb7d2d4dae1
- SHA1 f0aed3b194dcf76ea410a84b2f56c720a0403d1b
- SHA512 a6e0ae0dd7f8b4d6c9221dec303f11419a1a47d98a357dd6a564884edfb80f8f5dc57079a940e15f126a3d4a792eaa20ed2b25fe12a2a7fcf1638c49ef1a962d
- SSDEEP 6144:tRwrkfcXu6zMcLLP/BxDQf7FCX8+MKujdE7t/JN+mvYsm:srKmMWTZxEDFCWGtOmAs
- TLSH T1CC646D21B6AEC231E5B55670597D6FA694BD7C289FF081CF63804D2E58226C36E30F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3b:39:4e:85:dd:6c:25:b8:04:67:6a:3e:95:94:74:3f:04:01:5a:64:0e:5c:df:8a:a2:c5:77:9e:8e:e7:66:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Chains
Sep 28, 2023
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,ST=lubelskie,C=PL,1.2.840.113549.1.9.1=#0c146d61726332303033333340676d61696c2e636f6d
Serial Number
1d:b3:a7:8e:25:f5:87:90:72:9c:9b:21:bc:cc:61:70
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2023 - May 18, 2024
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
213760
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x86.Release\corehost\hostpolicy\standalone\hostpolicy.pdb
kernel32
OutputDebugStringW
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
GetCurrentProcessId
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
FreeLibrary
Sleep
RemoveDirectoryW
MultiByteToWideChar
CreateDirectoryW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_initterm
_cexit
_crt_atexit
_seh_filter_dll
abort
_configure_narrow_argv
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_wcserror
_invalid_parameter_noinfo_noreturn
_initterm_e
_register_onexit_function
_beginthreadex
terminate
api-ms-win-crt-string-l1-1-0
_wcsicmp
strcpy_s
wcsnlen
_wcsnicmp
tolower
islower
wcsncmp
_wcsdup
isupper
strcspn
__strncnt
api-ms-win-crt-heap-l1-1-0
calloc
realloc
free
_callnewh
malloc
api-ms-win-crt-stdio-l1-1-0
fgetc
__stdio_common_vsprintf_s
fclose
fwrite
__stdio_common_vswprintf
_wfopen
__acrt_iob_func
fflush
fgetpos
fputwc
fputws
ungetc
__stdio_common_vfwprintf
_wfsopen
fseek
fsetpos
fputc
fread
_fseeki64
_get_stream_buffer_pointers
setvbuf
api-ms-win-crt-locale-l1-1-0
localeconv
__pctype_func
___lc_locale_name_func
___lc_codepage_func
_lock_locales
_unlock_locales
setlocale
___mb_cur_max_func
api-ms-win-crt-math-l1-1-0
frexp
ceil
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_wremove
_wrename
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
Name
.text
Size
231KB
Virtual Size
230KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=260, version=30034,
count=18, id=259, version=30034,
count=79, id=261, version=30034,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=29395,
count=203, id=1, productName=Unmarked objects,
count=29, id=265, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,