dbd.zip
- SHA256 bd4204db4c58bc6f354c7badb6809cab3d4813e6b3447b0f02c9d14cb88eb222
Overview
overview
8Static
static
3DBDCheat/Launcher.exe
windows11-21h2-x64
8DBDCheat/S...er.exe
windows11-21h2-x64
1DBDCheat/S...es.dll
windows11-21h2-x64
1DBDCheat/S...le.dll
windows11-21h2-x64
1DBDCheat/S...ss.dll
windows11-21h2-x64
1DBDCheat/S...ry.dll
windows11-21h2-x64
1DBDCheat/S...ib.dll
windows11-21h2-x64
1DBDCheat/S...es.dll
windows11-21h2-x64
1DBDCheat/S...me.dll
windows11-21h2-x64
1DBDCheat/S...ns.dll
windows11-21h2-x64
6DBDCheat/S...ad.dll
windows11-21h2-x64
1DBDCheat/S...ng.dll
windows11-21h2-x64
1DBDCheat/clrjit.dll
windows11-21h2-x64
1DBDCheat/coreclr.dll
windows11-21h2-x64
1DBDCheat/hostfxr.dll
windows11-21h2-x64
1DBDCheat/h...cy.dll
windows11-21h2-x64
1DBDCheat/mscorrc.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DBDCheat/Launcher.exe
Resource
win11-20260513-en
windows11-21h2-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
DBDCheat/StoreAppHelper.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
DBDCheat/System.ComponentModel.Primitives.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
DBDCheat/System.Console.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
DBDCheat/System.Diagnostics.Process.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
DBDCheat/System.Memory.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
DBDCheat/System.Private.CoreLib.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
DBDCheat/System.Runtime.InteropServices.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
DBDCheat/System.Runtime.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
DBDCheat/System.Text.Encoding.Extensions.dll
Resource
win11-20260513-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral11
Sample
DBDCheat/System.Threading.Thread.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
DBDCheat/System.Threading.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
DBDCheat/clrjit.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
DBDCheat/coreclr.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
DBDCheat/hostfxr.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
DBDCheat/hostpolicy.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
DBDCheat/mscorrc.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target dbd.zip
- Size 8.6MB
- Sample260807-zshrtaaa68
- SHA256 bd4204db4c58bc6f354c7badb6809cab3d4813e6b3447b0f02c9d14cb88eb222
- MD5 7a2cda087395dde1e6d3971d5cb6102d
- SHA1 cb882b1d8d6d4a4bc52c2670ebfa1fce1bcbe84c
- SHA512 b27e9b6f8c1fbea71c691efd2c0ac31942555e85b0462fd98c4b06c974005fbde44d4b2e702c23d810716d7cb3335eba55e8b5ae8dd020aff8ee2ae0b3a241ff
- SSDEEP 196608:VZVAWdPBeglSr0397FfDqbWwRvnIayIEmIhA0CXZks:V3JAhr0NJEWYfIHInd0SZks
- TLSH T19D963308F7CDD3876E8992A5BE146E57711400C9BD0743C62BF2AF648688BD5A0EF4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DBDCheat/StoreAppHelper.dll
File Explorer
-
dbd.zip.zip 8.6MB
-
DBDCheat/Launcher.exe.exe 171KB
-
DBDCheat/StoreAppHelper.deps.json33KB
-
DBDCheat/StoreAppHelper.dll.exe 33KB
-
DBDCheat/StoreAppHelper.runtimeconfig.json285B
-
DBDCheat/System.ComponentModel.Primitives.dll.dll 73KB
-
DBDCheat/System.Console.dll.dll 153KB
-
DBDCheat/System.Diagnostics.Process.dll.dll 283KB
-
DBDCheat/System.Memory.dll.dll 169KB
-
DBDCheat/System.Private.CoreLib.dll.dll 10.1MB
-
DBDCheat/System.Runtime.InteropServices.dll.dll 50KB
-
DBDCheat/System.Runtime.dll.dll 41KB
-
DBDCheat/System.Text.Encoding.Extensions.dll.dll 15KB
-
DBDCheat/System.Threading.Thread.dll.dll 15KB
-
DBDCheat/System.Threading.dll.dll 78KB
-
DBDCheat/clrjit.dll.dll 1.4MB
-
DBDCheat/coreclr.dll.dll 4.9MB
-
DBDCheat/desktop.ini206B
-
DBDCheat/hostfxr.dll.dll 369KB
-
DBDCheat/hostpolicy.dll.dll 385KB
-
DBDCheat/mscorrc.dll.dll 143KB
DBDCheat/Launcher.exe
- IMPHASH a8308de57fce070f4cb88c7f43bf4b27
- SHA256 623c3cf78cc838f742863f0b644b2fbe81c07e11e4f0a20228a8d2936c830538
- MD5 ca1bb431fdf1693706349ff742797e13
- SHA1 b66e7dd2b7c35987782fdf6ae0cb27bef5ae277a
- SHA512 01046720b107e70fbd2609ab177adec161fb541148de3a41ae41d237314fa2dd7527a6f7e68c79c3dcdb2634689d8bedb3b67eff363f4632e76b27c5f279a88c
- SSDEEP 3072:T5vnr5Tbx829UOeKnn2LFzZBp13u36wKp4zULC3opO0n6XpfS6:TBKjK2LFzZNfIULap06ZX
- TLSH T1ED04F70662AB31A8D177B23889BF8522F7763C15473186DF13904A7B2FE66D0AE77311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ef:2f:7f:49:9e:3d:dd:e2:87:54:77:0a:c9:b5:41:69:12:b9:7e:12:fc:77:98:a3:70:eb:bc:2b:0d:de:2f:32
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
6
Entry point
82000
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___wargv
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_errno
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_c_exit
exit
_cexit
_register_thread_local_exe_atexit_callback
_crt_atexit
_exit
_initterm_e
abort
_register_onexit_function
_initialize_onexit_table
terminate
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf_s
setvbuf
_wfopen
_set_fmode
__stdio_common_vswprintf
__acrt_iob_func
fputwc
fputws
__stdio_common_vfwprintf
fflush
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
__pctype_func
_unlock_locales
localeconv
_lock_locales
___lc_codepage_func
___mb_cur_max_func
_configthreadlocale
setlocale
___lc_locale_name_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
frexp
api-ms-win-crt-time-l1-1-0
_gmtime64_s
wcsftime
_time64
Name
.text
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=83, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=205, id=1, productName=Unmarked objects,
count=10, id=265, version=30154,
count=1, id=258, version=30154,
DBDCheat/StoreAppHelper.deps.json
- SHA256 e43724bc47f1833ee708fd0698e4c7ff260ef10895120482025557143b168e76
- MD5 8366b618c036bf4083d227af3426070b
- SHA1 273832e107e53b357430ad2fd11ccd10675a1264
- SHA512 b21819c18237469500a79f191a07f3796b89e9a3bd7fef614ecb26ba4a8ff73f0b3991ba2487ed9e0e97635613808193541273dee215fb623dea43a4b77ce157
- SSDEEP 768:+R69VEsIhKPMEPrT3XCGjDyiEc6BHa21Fe8kFN92uwtEeCJyw:Z9VEsIhKPMEPrT3XCGjDyiEc6BHa21FC
- TLSH T1A5E2E616D9804DBB05761BD2693886D8FA75032F3181A82AB87C641DDF3FBBB1059F78
- MD5 SHA1 SHA512 SSDEEP TLSH
DBDCheat/StoreAppHelper.dll
- SHA256 8478a6638377e9f05ce39295b03cbc6767cbe222e83f9dc5dbf65c39cca09860
- MD5 7b8188e01ece44836df41025dca570a2
- SHA1 714d2f752a74cd07288381c43a4dd752f8cdd0cd
- SHA512 e4fe173017bb696aca0d2d02a0ac497327e40d991913944d7bd85e8e8fce0a5cf67abbd57c9de00b8c69528bc258df9941ec1c9a56aaefdf1d59c103a6a3a1d6
- SSDEEP 384:04wJ5hywLkB3ACUua7KnPbEqKKCFeMARpqJjiPodXG2nfJU5nZz1OCzYcHe2v5:0PowLkmCU9ObwX5nfJCPzYcHe05
- TLSH T1CAE2A34023EBB225C9753635683FC171463EAE415D318F7A3DC86C7B7FE66008923A66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DBDCheat/StoreAppHelper.runtimeconfig.json
- SHA256 044c5caff98a01411aa8f0d8d61322710925f8e24516b207ae71f8b6b569eb2e
- MD5 d416497945be34b80ee3dab6669b6b5c
- SHA1 eb02b8fb959809938829b230e33fd2c6e8338668
- SHA512 7deedc455c20863cfb9cee61e21147c9db8ff5c5298fa3af211c98e43290f769d489f4082d53552be744dacd27beef1092f505acc45f08d07e7fe21677aa4f50
- TLSH T1E8D02E3BCA156C7322F12774D466C0C3FE20232300080C8079FE180C2F3B5A64003F52
- MD5 SHA1 SHA512 TLSH
DBDCheat/System.ComponentModel.Primitives.dll
- SHA256 96789fbde342be57152e83b20e833bcc33f12cf30a7b5c9c0790990cf5886d48
- MD5 c735bd356e654447d20b566d06e9eb40
- SHA1 ba0a395ca66fbb3d9c2ffa7d2d4da5401847e64e
- SHA512 a5a5e334919d101b992ace420d59764e75317828b6a1b5b4c77d065e7718c88e2d83308a011c9dd7eea16dc64b0d1daebc20e5ee3647dcf92f5b566f1f04b576
- SSDEEP 768:PxI98FwPKQAtTKNI6T1mb1yF0YDC2oKQ15h498Q8a7QhDGE0nXBNEuLSoQuSmC:pITuP6kYFlC2oKQ6y8QRGvXBpL7SF
- TLSH T16F7339197BD80322FAAE863E91BB5851C276F5872723C8DF4901E5CE1F93BC26630579
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:bb:a4:3c:4b:05:97:39:77:2b:8e:6f:9d:67:45:8c:74:e8:07:b5:f6:36:45:da:9f:ac:72:86:6c:4e:5c:ec
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.ComponentModel.Primitives.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.ComponentModel.Primitives\net6.0-Release\System.ComponentModel.Primitives.pdb
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/System.Console.dll
- SHA256 ff3e09ec8ef8dc096bad8e1e9dcdcaf2367f63509179dcb3e5bc4c6de102b59b
- MD5 71138847373d2be68fd4da8e56552bef
- SHA1 fa9d9f20101f231c20e4d5cc5e05457ceebc2b2a
- SHA512 44a10b1babaff18db7a0cef316badcaeaa8e6f22aa0ecf1bb6a0570e19e4c1b697ccaa8c3cd3b315dbd072e4cad7041375c91c4aab922d67909833074ef6e202
- SSDEEP 3072:f9SMiIGbCwq+p14axXwbK80tmOaYMGr65pfSw:fQj9Rcclmzp
- TLSH T15BE36B26A7C00557EFAB86F990E32701C237E8A60B0293CB2545D6B82F47BC77F35595
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e7:78:3d:19:fa:bf:8c:50:b6:e2:d2:f0:0a:6f:c9:91:0a:14:fb:4b:dc:61:74:0b:6e:ec:4c:96:58:46:33:4b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Console.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Console\net6.0-windows-Release\System.Console.pdb
Name
.text
Size
133KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/System.Diagnostics.Process.dll
- SHA256 8ab493c640c85b298553d27db03244c4e76044c2a724fc896bd5085ce4046563
- MD5 6aef81c8bf5378baa131e86f5f340a11
- SHA1 0bb730b547bcd6025996d1a43d8717b8999d7044
- SHA512 f2e7c42990a746f0a8e3878a26a909ef1e58ad50917a928d0f946fd03a1ea0946ddbb7475496373451e53bcc25086501de8c8c79e91a0550528cbd8dbfe6e710
- SSDEEP 6144:W4vmEeveJQADJujgkju83yxs9b3NX1PkxEqCS7s03Y1KRRMB:W4etveJQAdSvju8CjWb03Y18qB
- TLSH T126548C1A738C5615FEAA9679C067C022D07DA1971707D7CB0364E6893FABBD79B30223
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:02:38:94:3b:ad:8c:e9:ac:b9:1f:a5:80:e3:5e:0d:14:b9:1e:78:fe:5f:b6:39:c2:d8:25:57:ab:45:8b:6d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Diagnostics.Process.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Diagnostics.Process\net6.0-windows-Release\System.Diagnostics.Process.pdb
Name
.text
Size
253KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/System.Memory.dll
- SHA256 71590855c91416c5c0eb0b3eae631ac0869de17242435ca82e0b4e85ec5d0200
- MD5 c3aa1f663b6051e8ca14af1c00fee134
- SHA1 f143236c74a32dfe3208be3f679c36a5b42c9e97
- SHA512 323b91fafa6d846321513d5205dac5b9945bdfd6d4758c7820043b5d47410e7a1e384020f933c78fa8e827469b797a3fece3402e27a779eedb95e59d215a026d
- SSDEEP 3072:O0RPN4ab6HEuCKvSwOy6fM/vfovpPh/h/tmlIYrA6S1mUgMF6EpfSL:Ft+GKjtGPh/hwlU6EUka
- TLSH T145046C1AE7CC4727D82FD6BA85A68662C733204BB701A6CB45C4E5D80F63BD0BE77065
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
80:a0:a0:2e:30:44:a6:c3:e6:8e:4e:9c:2e:22:41:9d:78:be:b3:44:92:4a:c7:ee:e9:8b:84:87:cd:ab:a0:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Memory.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Memory\net6.0-Release\System.Memory.pdb
Name
.text
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/System.Private.CoreLib.dll
- SHA256 c173a4a6030b6f0b32416623cf798eab45abf2d7dd38565aefa2fe78965452ca
- MD5 762482bd3d55ca4e4e5296a64ecb7d0c
- SHA1 c95b20296bd8004422f655c2bd85eed436d410aa
- SHA512 bbd71857c3140bc0c5d34ea6a44c57bf73c47786229a83cf5aa098ec790719c4ab8457098fcb52b7c8570ae9b7ed5cfa39f535edddae8485b60b8a2b772e94e8
- SSDEEP 98304:pKd1eeIoZQsU+fRIwvUVvJS63bXYPrLAU4n/0v4/PyGvjb:UCoSsU+fRI/VvJSyXcOyGv3
- TLSH T14DB69E25E7D85B1BD01EC6BDC463C226C671E8A62313D6DB0018D7982F53BD6A27F263
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dc:d9:f5:a1:9f:f2:26:74:8d:6d:0a:b8:56:f0:f1:3e:3a:fc:04:d7:b5:61:ff:b0:aa:4a:f1:e1:60:05:2d:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Private.CoreLib.ni.pdb
D:\a\_work\1\s\artifacts\obj\coreclr\System.Private.CoreLib\x64\Release\System.Private.CoreLib.pdb
Name
.text
Size
9.7MB
Virtual Size
9.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
372KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/System.Runtime.InteropServices.dll
- SHA256 cab4e96d3ddf225acfb610a53ef299fb9e7deb74ab374e3976d799c77dfa8770
- MD5 8a6c9b36376252c6e6051e8a8c102a15
- SHA1 9a26de4bc0309dcfb301445132ec2de1721cc02e
- SHA512 97a3cb9cf801da36b75b92a00c6236d8aaaf9d819fcc8b8f3cca57b77426ccef692a17569c35ff6d59a631ea71735aa7d0265889bfb69f6ae2259e36d3e9be09
- SSDEEP 1536:34oWJIP8z2r1GqhwF3FMjyPPkmW9Iz0meJB:34oWikmgqhwNFMjyP9J9eP
- TLSH T1CD335A216B989326DEE707385677EA910DB6F6C613239BDF90A0D94D1D9BBC80331335
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
41:8e:5b:c7:10:66:fb:1e:8b:87:3b:9f:75:05:49:be:e3:82:12:77:0b:3b:8a:81:87:00:12:dd:c7:f4:6c:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 26, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 22, 2024 - Feb 19, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ef:89:3f:56:a1:58:cc:a8:da:00:01:00:00:01:ef
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Runtime.InteropServices.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Runtime.InteropServices\net6.0-Release\System.Runtime.InteropServices.pdb
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/System.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 82fa676a897296ac6265e63bb582d03bf7df54e59c83e6bcd08f6f99a3249ba9
- MD5 79d8b0685cf2d323c7cadbd276e435bd
- SHA1 ac74c0958d691b4009f8c8657639e4115a03729c
- SHA512 eeafe9cc578da300dbaa4190a866dfcd3d65ebfeaa0484f6595225d28cd713fab347f7b3f00af1f1ddd02adc83f83a2d03087a77ab374dfc905f1a88b3f74c6f
- SSDEEP 768:U0BV0jdpFKYl5f4bGRi2xVbcVT4pftdhDGE0nkpaNEuLSoQuSivU:UIedGYl5f4bGR3G0BtdRGvkwpL7SP
- TLSH T11B130660AE4B5273CE8E9772C8B3A08109F633CF64B7CDBA541E8546298F244D3B3759
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9e:80:cb:65:9a:e2:24:8a:80:62:6d:cd:94:a2:96:84:8e:90:4e:2e:00:b4:52:08:f3:c7:85:8b:21:d0:f6:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
37470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Runtime\net6.0-Release\System.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DBDCheat/System.Text.Encoding.Extensions.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 30ac13bd317d364b3fe4ad42bc45ed418fbe4acac9aa8f376a8a5fcea964bd54
- MD5 2e2fb3d8fb17d2b9f858cddd8cafa12f
- SHA1 4d4c81e30bb1c91dbce44c2a6950ed47bab7c938
- SHA512 fc1b6f58c966fccd78024edb2add0edd8d37dbdf919e2ec1e1396d0a431b52fc0bae1d80755ca06a441b0192341afc7047325858585eddeb9babd00d69606d47
- SSDEEP 384:7Iv0XhW6YJWa2mNDE2GdC0nWQgmHdpNEx0LSofousWu4BkCw8+:zUnhDGE0nSmHTNEuLSoQuS4f3+
- TLSH T114725C798F6496A2FE669F31D8EAC611ADB5B6C0AC42DD0B204805CD1F037A86F7073D
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2b:b7:08:a8:a3:bc:7f:db:ab:04:5d:da:f3:1e:46:15:14:da:47:32:c5:a2:c7:2c:8e:ec:fd:b0:76:e2:c9:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
10862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Text.Encoding.Extensions\net6.0-Release\System.Text.Encoding.Extensions.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DBDCheat/System.Threading.Thread.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 047dbd73dc9a8e7a4d7e516b323877d2a538fd525cab04d1d42fb5b2a7f474b3
- MD5 749294770b03a880e845c9b205369654
- SHA1 ec4b53c4c59fee60079e329d1c323652d99faec8
- SHA512 b02c8b58acd4c059abaeaabb674cfe1e67785612db8397952d4b73e65007d113a9794bf3f2400febc5e371ee61bde3299a8213e09cc0de4eb3163b70ba2bbb5c
- SSDEEP 384:Jz2EXZVPD2Wc+7WJ2mNDE2GdC0nWKYpNEx0LSofousWu4TOMk:NPFWhDGE0nmNEuLSoQuS2M
- TLSH T1BA725A654F6486E3FD22AF3094EA96566DB3B7C1E852C90B205984CD6F033686F70B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d5:65:75:c9:a2:c5:1b:30:57:ba:0c:e3:3a:12:08:12:68:ac:78:fc:f1:fb:11:6f:60:06:87:f3:1e:5c:8b:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
11070
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Threading.Thread\net6.0-Release\System.Threading.Thread.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
DBDCheat/System.Threading.dll
- SHA256 6e646460ac549ca63883e78e739590f4a400f8d2e00bd9e99b0f02102dbb812e
- MD5 08c6efbb7c22876c4b43dc64c6764a1e
- SHA1 d7845408d8e700df1a78421c3872dd451a1d9a41
- SHA512 6f2f37d0876263a68e957961a92a668fae0ee0d6fb1a9e6d64732c6fec80c8305630ab966fe5d1c8cac2cb96e38a179fe544afebac46fba53ad6a9edc4439b33
- SSDEEP 1536:2k5RkjKu+ydo98uGxdzJERH7AveyRGv6pL7SBd:2k5Rkdo9wxdzGKvey66pfSBd
- TLSH T167735A11B3E88666FAAF8BB9D9B22911C071F5DA1B13D3CF1058818D1E97FC19A71273
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:ae:d7:67:be:fe:f5:be:19:7f:31:4f:51:ce:5a:60:b9:8b:60:0c:98:38:59:51:fb:5b:52:02:a6:0c:bd:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Threading.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Threading\net6.0-Release\System.Threading.pdb
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
292B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
DBDCheat/clrjit.dll
- IMPHASH 49de661d6e15395302bd76ca71f37164
- SHA256 cc9c853642c185b17d18f189c5e80928963bf485b0eeef7714e94339c5858e88
- MD5 c83270c072e51d37928ab8d4d42be464
- SHA1 4c0431bfb73e070180efa4d302e2cba57ba42ff5
- SHA512 37c5addc0583e1afd612fe375057f2ef07be4fc434b25b8eba79c3e10442e4ff1c0957b48cc0dc204f9eaaad13cd017ba6ee110b4f18d0e3ad752a32c8e7ed1b
- SSDEEP 24576:pLtbu58TIu2rlMBDr0PZYRhVj95f1L7Zr5/z/5ccUYXIBXzkTVsHgWolUZbGyqfs:pLtHAcX0PZuhVDh7ZN7/6YXIBjkBsHg2
- TLSH T110658C06A3E805F8D4BB9234C5934B1BDBB3B8161371CFDF57A04A56EF237922A1A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a0:a1:cd:2a:37:fd:4c:e9:1f:49:78:74:b2:33:31:58:f1:b4:ba:d8:01:fb:4c:59:e7:1f:d1:b6:66:08:00:e0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
914304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\jit\clrjit.pdb
kernel32
RaiseException
DebugBreak
OutputDebugStringA
WideCharToMultiByte
QueryPerformanceFrequency
QueryPerformanceCounter
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
QueryThreadCycleTime
GetCurrentThread
GetLastError
CloseHandle
UnmapViewOfFile
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
SetLastError
LoadLibraryExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlPcToFileHeader
api-ms-win-crt-math-l1-1-0
sinhf
sinh
sinf
sin
powf
pow
tanhf
_fdopen
logf
log10f
log10
log
fmodf
fmod
floorf
floor
expf
exp
coshf
cosh
_copysign
sqrtf
_isnanf
acosh
asinh
atanh
cbrt
log2
acoshf
asinhf
atanhf
cbrtf
log2f
ilogb
ilogbf
_finite
cosf
tan
tanf
cos
ceilf
ceil
atanf
atan2f
atan2
atan
asinf
asin
acosf
acos
sqrt
tanh
_isnan
_copysignf
api-ms-win-crt-stdio-l1-1-0
_wfopen
fclose
fseek
ftell
fflush
_fileno
__acrt_iob_func
_dup
setvbuf
__stdio_common_vfprintf
_setmode
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-runtime-l1-1-0
_cexit
terminate
abort
_execute_onexit_table
_register_onexit_function
_crt_atexit
_errno
_initialize_onexit_table
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
api-ms-win-crt-string-l1-1-0
strcpy_s
_stricmp
strcat_s
strcmp
wcsncmp
strncmp
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
getJit
getLikelyClass
jitStartup
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=257, version=29395,
count=186, id=1, productName=Unmarked objects,
count=33, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=107, id=270, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
DBDCheat/coreclr.dll
- IMPHASH 65c5b20007a0f8b5548613247a846600
- SHA256 58d91f3c88293ac3b9761362c53af32520ca42f8be14244c0bd7a8e6d1c95564
- MD5 6f84d00e152bc64261ac7a0f6d4dc3f5
- SHA1 3f130aee6c3b5684d9d601c55b76f85a1576cc92
- SHA512 29f87baac29aeb092cab368b4c7903d6fdaf36c521efb960535f98c97124aacb4a39bd41304cbb382f1bd8d2ebd368aa144e5dd8d7106cfe264d8d5ae277fa13
- SSDEEP 49152:rRRteSC8CjfXq6EoB/SEsRfoSakEd9c6oWUqCJ0OTVRepih8IdCdTWOVxJYaHmnX:1RqXB/SEAKJspr8wKQXl
- TLSH T107369E56B2FD00A8D4BAC078CAD74917FAB178491738EBEF02644A552F27BE1A73D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d2:c6:f5:04:a7:17:6d:71:c3:2c:03:13:1e:29:3d:7b:82:8c:c2:08:05:b5:7c:e1:b3:71:2f:3b:b7:a9:7d:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
1434848
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscoree\coreclr\coreclr.pdb
kernel32
RemoveVectoredExceptionHandler
MultiByteToWideChar
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
FlushInstructionCache
RtlLookupFunctionEntry
RtlDeleteFunctionTable
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
GetTickCount64
DuplicateHandle
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
GetThreadPriority
ResumeThread
GetCurrentThreadId
Sleep
TlsAlloc
GetCurrentThread
CreateThread
WaitForMultipleObjectsEx
SignalObjectAndWait
RtlCaptureContext
SetThreadStackGuarantee
VirtualQuery
GetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
MapViewOfFileEx
UnmapViewOfFile
GetStringTypeExW
SetEvent
GetCurrentProcessorNumber
GlobalMemoryStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
SleepEx
GetQueuedCompletionStatus
InterlockedPopEntrySList
GetCurrentProcessorNumberEx
ExitProcess
CreateMemoryResourceNotification
GetProcessAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
GetLargePageMinimum
VirtualUnlock
GetLogicalProcessorInformation
SetThreadGroupAffinity
SetThreadAffinityMask
IsProcessInJob
QueryInformationJobObject
K32GetProcessMemoryInfo
VirtualAlloc
VirtualFree
VirtualProtect
SwitchToThread
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
GetFileSize
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
ResetEvent
CreateSemaphoreExW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
GetThreadContext
SuspendThread
SetThreadContext
GetEnabledXStateFeatures
InitializeContext
RtlRestoreContext
SetXStateFeaturesMask
SetUnhandledExceptionFilter
RtlInstallFunctionTableCallback
GetSystemDefaultLCID
GetUserDefaultLCID
RtlUnwind
LoadLibraryExW
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
FormatMessageW
GetACP
LCMapStringEx
LocalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleFileNameW
VirtualAllocExNuma
GetNumaProcessorNodeEx
GetNumaHighestNodeNumber
GetLogicalProcessorInformationEx
GetThreadGroupAffinity
GetSystemTimes
GetSystemTimeAsFileTime
CreateFileMappingW
CreateProcessW
GetCPInfo
CreateFileW
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
OpenProcess
LoadLibraryExA
OpenEventW
ExitThread
HeapReAlloc
CreateNamedPipeA
WaitForMultipleObjects
DisconnectNamedPipe
CreateFileA
CancelIoEx
GetOverlappedResult
ConnectNamedPipe
FlushFileBuffers
MapViewOfFile
GetActiveProcessorGroupCount
GetSystemTime
SetConsoleCtrlHandler
GetLocaleInfoEx
GetUserDefaultLocaleName
RtlAddFunctionTable
CreateFileMappingA
InitializeCriticalSectionAndSpinCount
RtlVirtualUnwind
IsProcessorFeaturePresent
RtlUnwindEx
EncodePointer
TlsFree
RtlPcToFileHeader
AddVectoredExceptionHandler
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
RaiseFailFastException
FreeLibrary
RaiseException
WaitForSingleObject
TlsSetValue
TlsGetValue
GetSystemInfo
IsDebuggerPresent
LeaveCriticalSection
DebugBreak
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WriteFile
GetProcessTimes
GetCommandLineW
ReadFile
SetFilePointer
GetProcAddress
GetModuleHandleExW
SetErrorMode
CloseHandle
GetCurrentProcess
FlushProcessWriteBuffers
SetLastError
GetLastError
OutputDebugStringW
advapi32
RegisterEventSourceW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
DeregisterEventSource
ReportEventW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
SetThreadToken
RevertToSelf
OpenThreadToken
EventWriteTransfer
EventWrite
SetKernelObjectSecurity
ole32
CoCreateFreeThreadedMarshaler
CoGetClassObject
StringFromGUID2
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetContextToken
CreateStreamOnHGlobal
CLSIDFromProgID
IIDFromString
CoReleaseMarshalData
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoRevokeInitializeSpy
CoGetMarshalSizeMax
oleaut32
CreateErrorInfo
LoadRegTypeLi
SafeArrayPutElement
SafeArrayCreateVector
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetElemsize
SafeArrayAllocData
SafeArraySetRecordInfo
GetRecordInfoFromTypeInfo
SafeArrayAllocDescriptorEx
VarCyFromDec
VariantInit
VariantClear
VariantChangeTypeEx
VariantChangeType
SafeArrayGetVartype
LoadTypeLibEx
QueryPathOfRegTypeLi
SafeArrayDestroy
SysFreeString
GetErrorInfo
SetErrorInfo
SysAllocString
SysStringLen
SysAllocStringLen
SafeArrayGetDim
SafeArrayGetLBound
user32
LoadStringW
api-ms-win-crt-string-l1-1-0
isspace
strtok_s
wcsncat_s
strcpy_s
strncmp
strncat_s
wcscmp
wcscat_s
towupper
iswascii
strnlen
wcsncmp
wcstok_s
isdigit
strlen
_strdup
_strnicmp
wcscpy_s
strncpy_s
strcmp
isalpha
_stricmp
strcat_s
_wcsicmp
wcsncpy_s
_wcsnicmp
wcsnlen
iswupper
iswspace
towlower
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
_putws
_flushall
__stdio_common_vfprintf
fopen
fflush
fputs
__stdio_common_vsnwprintf_s
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__acrt_iob_func
fwrite
__stdio_common_vsscanf
fgets
fclose
_wfopen
api-ms-win-crt-runtime-l1-1-0
_errno
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
abort
_invalid_parameter_noinfo
_controlfp_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_itow_s
atol
_atoi64
_ltow_s
_wcstoui64
strtoul
strtoull
_wtoi
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
sinhf
tan
tanf
tanh
logf
log10f
log10
cosh
cosf
cos
ceilf
ceil
atanf
atan2f
log
atan
asinf
sinf
acosf
fmodf
acos
sinh
sin
fmod
fmaf
log2f
acoshf
cbrtf
atanhf
ilogbf
powf
asinhf
asinh
cbrt
fma
ilogb
acosh
atanh
log2
asin
pow
floor
expf
exp
atan2
_copysign
_isnan
coshf
modff
modf
_finite
tanhf
api-ms-win-crt-time-l1-1-0
_time64
CLRJitAttachState
GetCLRRuntimeHost
MetaDataGetDispenser
coreclr_create_delegate
coreclr_execute_assembly
coreclr_initialize
coreclr_shutdown
coreclr_shutdown_2
g_CLREngineMetrics
Name
.text
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
817KB
Virtual Size
816KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Section
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=29395,
count=11, id=257, version=29395,
count=417, id=1, productName=Unmarked objects,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=20, id=259, version=30034,
count=20, id=259, version=30154,
count=469, id=270, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
DBDCheat/desktop.ini
- SHA256 580820459ac9464c1865f007658f1f7de32c1d9414391597f74469e7fc92a1bd
- MD5 9a12c8d20625fd6fe7f972ae54a6c094
- SHA1 0058f8b38e1583c0b8878feae5c0742348d47bfd
- SHA512 67c39ce3495deef57c1585e661c1fde7188089e2720aee3364f54afb9487f4129f7c2232174bbf927a8eec427282894ab19d0c13424438fbac6747c55bcc9c59
- TLSH T122D012744B388754514E35909320CCDA16E8AB2328478C2DF0D052DDE74F46D037507E
- MD5 SHA1 SHA512 TLSH
DBDCheat/hostfxr.dll
- IMPHASH 865ad5dbb854b19f260b2101a8b4fef3
- SHA256 e2486fc6dd58db5a55db18547459c0b160ba1b2e824193ae0dee0e9a0673d8d7
- MD5 155e4d45f02a4f7a2a228b44fa4791ef
- SHA1 14cb85f0d506b87bdad63dbec75f5e3206552592
- SHA512 25dfa7fdd5f3508ebe642c55330f81f7ad83d3d7bb20f4a3179e8d49805ce0dcb56f20820319a073a23d582b9b72e3ae2e646b92744d667717ee4d43bfdf6480
- SSDEEP 6144:CGr5uLf+w7dEtiODC3+Gr4iAOs2dEAh2gcmgrW09jcg:Zmf+qdEzD/iAOsVVH97
- TLSH T156844B16E2ED056CF1BBE23896B79905E6763C494770D6CF0390456A1F33BE09E79322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:8d:86:1d:ed:5a:ba:25:0e:0a:e6:31:4f:fe:48:bc:63:69:ba:c1:cf:dc:3c:e3:0d:b8:11:be:fe:8a:9f:d4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
235408
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\fxr\standalone\hostfxr.pdb
kernel32
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
CreateFileW
MultiByteToWideChar
FindFirstFileExW
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
FreeLibrary
GetFileSizeEx
GetLastError
OutputDebugStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
SwitchToThread
GetStringTypeW
QueryPerformanceCounter
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-heap-l1-1-0
free
_callnewh
realloc
malloc
calloc
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm_e
_initterm
_errno
_cexit
_crt_atexit
_configure_narrow_argv
_wcserror
_initialize_narrow_environment
terminate
abort
_initialize_onexit_table
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
api-ms-win-crt-string-l1-1-0
__strncnt
strcpy_s
wcsncmp
_wcsnicmp
tolower
_wcsicmp
isupper
wcsnlen
_wcsdup
islower
strcspn
api-ms-win-crt-stdio-l1-1-0
fputc
fflush
fputwc
fputws
__stdio_common_vfwprintf
fclose
fgetc
fwrite
fgetpos
__stdio_common_vswprintf
_wfopen
ungetc
setvbuf
fsetpos
_wfsopen
fseek
__stdio_common_vsprintf_s
fread
_fseeki64
_get_stream_buffer_pointers
__acrt_iob_func
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-locale-l1-1-0
setlocale
___mb_cur_max_func
localeconv
_unlock_locales
__pctype_func
___lc_codepage_func
_lock_locales
___lc_locale_name_func
api-ms-win-crt-math-l1-1-0
frexp
ceilf
api-ms-win-crt-time-l1-1-0
_time64
wcsftime
_gmtime64_s
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
hostfxr_close
hostfxr_get_available_sdks
hostfxr_get_dotnet_environment_info
hostfxr_get_native_search_directories
hostfxr_get_runtime_delegate
hostfxr_get_runtime_properties
hostfxr_get_runtime_property_value
hostfxr_initialize_for_dotnet_command_line
hostfxr_initialize_for_runtime_config
hostfxr_main
hostfxr_main_bundle_startupinfo
hostfxr_main_startupinfo
hostfxr_resolve_sdk
hostfxr_resolve_sdk2
hostfxr_run_app
hostfxr_set_error_writer
hostfxr_set_runtime_property_value
Name
.text
Size
255KB
Virtual Size
254KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=30034,
count=10, id=259, version=30034,
count=81, id=261, version=30034,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=29395,
count=204, id=1, productName=Unmarked objects,
count=28, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
DBDCheat/hostpolicy.dll
- IMPHASH 1e5a74a5130436a0712fd9e07de6e661
- SHA256 def634e856fc681088c8833fc43962772d59b47384fe73d5fbfe689245974146
- MD5 12098df5d600e8d952fd43f07fac71e0
- SHA1 0a55613ecef2fdffcd55066400372f25430d8287
- SHA512 31ed39da9c9074f585d6586dd71137083375f2ebdedf91ae33d28374dc9dfc02b766b7456f4735f83c19ab01613441873c43ff15ec159383fe1c986d539d838b
- SSDEEP 6144:ZBGjtN9JhCdJeD1QL3sQy8XyV0l0gzPI37VPzBz3BU89GhOfBE/XodO:ZBGjtNlU/rsQy8XyxzNCOeXn
- TLSH T158844B16E2ED056CF1B7F2389AB79902E676384E477096CF03A0516A1F77BD09E79320
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f8:e8:87:05:02:f5:05:14:b1:73:c2:a0:ab:aa:fe:5c:2b:b9:d7:c2:16:93:f5:04:0d:55:32:aa:e2:9c:7f:ce
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
254912
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\hostpolicy\standalone\hostpolicy.pdb
kernel32
OutputDebugStringW
GetFileSizeEx
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetTempPathW
FindClose
CreateFileW
GetCurrentProcessId
GetLastError
GetFileAttributesExW
LoadLibraryA
CloseHandle
GetCurrentDirectoryW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
IsWow64Process
LoadLibraryExW
UnmapViewOfFile
FreeLibrary
Sleep
RemoveDirectoryW
MultiByteToWideChar
CreateDirectoryW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
QueryPerformanceCounter
advapi32
RegOpenKeyExW
RegGetValueW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_wcserror
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initialize_narrow_environment
abort
_cexit
_errno
_initterm
_configure_narrow_argv
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_beginthreadex
terminate
api-ms-win-crt-string-l1-1-0
__strncnt
wcsnlen
strcpy_s
wcsncmp
_wcsnicmp
tolower
islower
_wcsdup
isupper
strcspn
_wcsicmp
api-ms-win-crt-heap-l1-1-0
free
calloc
realloc
_callnewh
malloc
api-ms-win-crt-stdio-l1-1-0
fgetc
__stdio_common_vsprintf_s
fclose
fwrite
__stdio_common_vswprintf
_wfopen
__acrt_iob_func
fflush
fgetpos
fputwc
fputws
ungetc
__stdio_common_vfwprintf
_wfsopen
fseek
fsetpos
fputc
fread
_fseeki64
_get_stream_buffer_pointers
setvbuf
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
__pctype_func
_unlock_locales
_lock_locales
localeconv
___lc_locale_name_func
___lc_codepage_func
setlocale
api-ms-win-crt-math-l1-1-0
frexp
ceilf
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wremove
_wrename
_lock_file
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
corehost_initialize
corehost_load
corehost_main
corehost_main_with_output_buffer
corehost_resolve_component_dependencies
corehost_set_error_writer
corehost_unload
Name
.text
Size
273KB
Virtual Size
272KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=30034,
count=10, id=259, version=30034,
count=81, id=261, version=30034,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=29395,
count=207, id=1, productName=Unmarked objects,
count=29, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
DBDCheat/mscorrc.dll
- SHA256 a231d44280d7044fda539b85288fbbadaba4830da421f0f28fd0444a05c2f107
- MD5 5f50c1cf588dd6f882ff5a329390fcd4
- SHA1 99ef8b69d4a299d87f373d24fe4523e4a81954dc
- SHA512 0279acda155406e371997dd7840a23f055097442b08dd666dc93739a1af7041fae7f889e782b119196b6409cd40d55e1556cd9aa2bfea676ab6ffbf1efa4a0a8
- SSDEEP 1536:7ODZms10iHvh7x8SKJlZ4vCCk7nw55IvZ4MgSZctpoEXX1RGvcpL7Sw:7ODZ/aSKlZ4ZGnwmUS4Sc16cpfSw
- TLSH T158E37791A7F95218F6F73B74ADB95AA00E7ABC96FCB9C21D1240805E5D71E408DB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c0:3b:8e:ac:2b:95:60:07:06:9c:9c:11:0d:d2:b2:33:07:65:19:27:e5:61:90:f5:44:8d:40:1a:a4:2f:42:7e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Chains
Feb 20, 2025
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Open Source Developer\, Marcin Szeniak,O=Open Source Developer,L=Siennica Nadolna,ST=lubelskie,C=PL
Serial Number
6a:f8:97:e1:32:47:59:5d:26:ab:6d:cd:79:41:05:44
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 10, 2024 - May 10, 2025
Subject
CN=Certum Timestamp 2025,O=Asseco Data Systems S.A.,C=PL
Serial Number
9e:9c:04:f6:55:a8:b4:a7:02:6d:49:8c:6c:78:8d:aa
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 9, 2025 - Jan 7, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
1
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\dlls\mscorrc\mscorrc.pdb
Name
.rdata
Size
512B
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30154,
count=1, id=258, version=30154,