ItroublveTSC-master.zip
- SHA256 8d6cb8b53bb014815990250638364db29445ef2d2db6eab813933f8f12e60ff4
Overview
overview
10Static
static
3ItroublveT...SC.exe
windows7-x64
10ItroublveT...SC.exe
windows10-2004-x64
10ItroublveT...rv.exe
windows7-x64
10ItroublveT...rv.exe
windows10-2004-x64
9ItroublveT...ram.js
windows7-x64
1ItroublveT...ram.js
windows10-2004-x64
1ItroublveT...er.vbs
windows7-x64
1ItroublveT...er.vbs
windows10-2004-x64
1ItroublveT...es.vbs
windows7-x64
1ItroublveT...es.vbs
windows10-2004-x64
1ItroublveT...LI.exe
windows7-x64
1ItroublveT...LI.exe
windows10-2004-x64
1ItroublveT...re.dll
windows7-x64
1ItroublveT...re.dll
windows10-2004-x64
1ItroublveT...er.dll
windows7-x64
1ItroublveT...er.dll
windows10-2004-x64
1ItroublveT...ns.dll
windows7-x64
1ItroublveT...ns.dll
windows10-2004-x64
1ItroublveT...er.dll
windows7-x64
1ItroublveT...er.dll
windows10-2004-x64
1ItroublveT...me.dll
windows7-x64
1ItroublveT...me.dll
windows10-2004-x64
ItroublveT...en.dll
windows7-x64
1ItroublveT...en.dll
windows10-2004-x64
1ItroublveT...ib.dll
windows7-x64
1ItroublveT...ib.dll
windows10-2004-x64
1ItroublveT...le.dll
windows7-x64
1ItroublveT...le.dll
windows10-2004-x64
1ItroublveT...le.dll
windows7-x64
1ItroublveT...le.dll
windows10-2004-x64
1ItroublveT...le.dll
windows7-x64
1ItroublveT...le.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ItroublveTSC-master/ItroublveTSC.exe
Resource
win7-20240221-en
windows7-x64
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
ItroublveTSC-master/ItroublveTSC.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
20 signatures
150 seconds
Behavioral task
behavioral3
Sample
ItroublveTSC-master/bin/Binaries/RtkBtManServ.exe
Resource
win7-20240221-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
ItroublveTSC-master/bin/Binaries/RtkBtManServ.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
ItroublveTSC-master/bin/Program.js
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
ItroublveTSC-master/bin/Program.js
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
ItroublveTSC-master/bin/Properties/Resources.Designer.vbs
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
ItroublveTSC-master/bin/Properties/Resources.Designer.vbs
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
ItroublveTSC-master/bin/Properties/Resources.vbs
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
ItroublveTSC-master/bin/Properties/Resources.vbs
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
ItroublveTSC-master/bin/obf/CLI.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
ItroublveTSC-master/bin/obf/CLI.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
ItroublveTSC-master/bin/obf/Confuser.Core.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
ItroublveTSC-master/bin/obf/Confuser.Core.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
ItroublveTSC-master/bin/obf/Confuser.DynCipher.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
ItroublveTSC-master/bin/obf/Confuser.DynCipher.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
ItroublveTSC-master/bin/obf/Confuser.Protections.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
ItroublveTSC-master/bin/obf/Confuser.Protections.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
ItroublveTSC-master/bin/obf/Confuser.Renamer.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
ItroublveTSC-master/bin/obf/Confuser.Renamer.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
ItroublveTSC-master/bin/obf/Confuser.Runtime.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
ItroublveTSC-master/bin/obf/Confuser.Runtime.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
ItroublveTSC-master/bin/obf/Teen.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
ItroublveTSC-master/bin/obf/Teen.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
ItroublveTSC-master/bin/obf/dnlib.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
ItroublveTSC-master/bin/obf/dnlib.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/net46/System.IO.Compression.ZipFile.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/net46/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/netstandard1.3/System.IO.Compression.ZipFile.dll
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/netstandard1.3/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/net46/System.IO.Compression.ZipFile.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/net46/System.IO.Compression.ZipFile.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target ItroublveTSC-master.zip
- Size 5.4MB
- Sample240426-a3z2eage79
- SHA256 8d6cb8b53bb014815990250638364db29445ef2d2db6eab813933f8f12e60ff4
- MD5 db80af2964e34f8a0e2408a1f7acdcc6
- SHA1 7cb7e4f60942fd3e0320fcc43a8ec5e60f6c3652
- SHA512 7316349e856ba84abca676fc79649495701251cd51f01e6cd508cbc6f7ba61c1b705dd38e4b89ef26bafc134d0e1a02f463823071fd4f3679b1c4f926ac033c2
- SSDEEP 98304:8vb6B9+Hnroi7e0eceeP4dpsuFuaNzbsKSJm3kL7lyeI54hlIhHDs0GCHC2Pd45E:kb6B9+Hroi7e0eccOuFumvs9c3ggx2he
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/ItroublveTSC-master/ItroublveTSC.exe unpack001/ItroublveTSC-master/bin/Binaries/RtkBtManServ.exe unpack001/ItroublveTSC-master/bin/obf/CLI.exe unpack001/ItroublveTSC-master/bin/obf/Confuser.Core.dll unpack001/ItroublveTSC-master/bin/obf/Confuser.DynCipher.dll unpack001/ItroublveTSC-master/bin/obf/Confuser.Protections.dll unpack001/ItroublveTSC-master/bin/obf/Confuser.Renamer.dll unpack001/ItroublveTSC-master/bin/obf/Confuser.Runtime.dll unpack001/ItroublveTSC-master/bin/obf/Teen.dll unpack001/ItroublveTSC-master/bin/obf/dnlib.dll
File Explorer
-
ItroublveTSC-master.zip.zip 5.4MB
-
ItroublveTSC-master/ItroublveTSC.exe.exe 2.0MB
-
ItroublveTSC-master/README.md198B
-
ItroublveTSC-master/bin/App.config.xml 178B
-
ItroublveTSC-master/bin/Binaries/RtkBtManServ.exe.exe 2.8MB
-
ItroublveTSC-master/bin/Binaries/config102B
-
ItroublveTSC-master/bin/Binaries/whysosad3KB
-
ItroublveTSC-master/bin/Digitallity.cs482B
-
ItroublveTSC-master/bin/Program.cs.js 6KB
-
ItroublveTSC-master/bin/Properties/AssemblyInfo.cs1KB
-
ItroublveTSC-master/bin/Properties/Resources.Designer.cs.vbs 2KB
-
ItroublveTSC-master/bin/Properties/Resources.resx.vbs 5KB
-
ItroublveTSC-master/bin/Properties/Settings.Designer.cs1KB
-
ItroublveTSC-master/bin/Properties/Settings.settings242B
-
ItroublveTSC-master/bin/TOKEN STEALER CREATOR.csproj4KB
-
ItroublveTSC-master/bin/TSC.sln1KB
-
ItroublveTSC-master/bin/frmMain.cs283B
-
ItroublveTSC-master/bin/o.crproj470B
-
ItroublveTSC-master/bin/obf/CLI.exe.exe 30KB
-
ItroublveTSC-master/bin/obf/Confuser.Core.dll.dll 186KB
-
ItroublveTSC-master/bin/obf/Confuser.DynCipher.dll.dll 48KB
-
ItroublveTSC-master/bin/obf/Confuser.Protections.dll.dll 205KB
-
ItroublveTSC-master/bin/obf/Confuser.Renamer.dll.dll 310KB
-
ItroublveTSC-master/bin/obf/Confuser.Runtime.dll.dll 49KB
-
ItroublveTSC-master/bin/obf/Teen.dll.dll 45KB
-
ItroublveTSC-master/bin/obf/dnlib.dll.dll 1.1MB
-
ItroublveTSC-master/bin/packages.config153B
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/.signature.p7s9KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/System.IO.Compression.ZipFile.4.3.0.nupkg.nupkg 111KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ThirdPartyNotices.txt1KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/dotnet_library_license.txt9KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/net46/System.IO.Compression.ZipFile.dll.dll 24KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/netstandard1.3/System.IO.Compression.ZipFile.dll.dll 28KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/net46/System.IO.Compression.ZipFile.dll.dll 24KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/System.IO.Compression.ZipFile.dll.dll 21KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/System.IO.Compression.ZipFile.xml36KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/de/System.IO.Compression.ZipFile.xml37KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/es/System.IO.Compression.ZipFile.xml38KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/fr/System.IO.Compression.ZipFile.xml38KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/it/System.IO.Compression.ZipFile.xml37KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/ja/System.IO.Compression.ZipFile.xml40KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/ko/System.IO.Compression.ZipFile.xml38KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/ru/System.IO.Compression.ZipFile.xml45KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/zh-hans/System.IO.Compression.ZipFile.xml34KB
-
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/zh-hant/System.IO.Compression.ZipFile.xml34KB
-
ItroublveTSC-master/bin/vCk_resource.cs2KB
ItroublveTSC-master/ItroublveTSC.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c6820f426b28b93295ca3b768780e8b372424fb72e94b5d0c094b030f53d4721
- MD5 7c2da2ae36228b8b66ec5e5029e90d08
- SHA1 d636baf89fd305a1f694611097ac6e7bcb1f244c
- SHA512 93cbc698211b0ab0f96ab3f0eb8d393bcd04580418e08fc6df9b935a7cdd091b619a0edab4771b4c887264b0eef6846e6e08a7be24a8681848a1885206a29960
- SSDEEP 49152:DL+qgtiXBVLcHD/QmJqRsVEzCeePMAnUD:OzcBVYHDjcyVMukAUD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1695838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
363KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/README.md
- SHA256 af6a4de82b34a1c9ec561a2e6960f35204272be70bffa9a3afbc90d524d856a0
- MD5 14547bf360658df0f8157ea3332e2c66
- SHA1 d4b1898ad4dc806614dfbfcbd07a1c84db36ccca
- SHA512 750f240c92074a82799f4c1af7c6fbcb5c22372b7a1eb32b4d75bc61dfb5e749e0e31a553f41c9d6012c00db22b7388c3e19d3c2d7382d221409cc7fe46159cc
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/App.config
- SHA256 2ef673c54b8bdfc29635f88c7fe7f5437399790583b823dfafb667392ecf78e0
- MD5 69a865985cbae6ef2cc93c1a892d3975
- SHA1 1e7092a434323c021409e5da902320770c2b01dc
- SHA512 bc71f531231c1caae2bd8bc3d494f6a9a1534c21badfecc04cb66025c5e28a03532f31cc03698ea40cf99755e3ed87d71a08477a118f0bf3fc56c3f4c721d438
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Binaries/RtkBtManServ.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 f4fb42c8312a6002a8783e2a1ab4571eb89e92cd192b1a21e8c4582205c37312
- MD5 88ab0bb59b0b20816a833ba91c1606d3
- SHA1 72c09b7789a4bac8fee41227d101daed8437edeb
- SHA512 05cff2ca00ba940d9371c469bce6ffb4795c845d77525b8a1d4919f708296e66c0a6f3143c5964f5e963955e4f527a70624651113e72dc977f5ef40fa0276857
- SSDEEP 49152:AsmhnqAs9pJc0dnKh+Q0N1rs+vIUSg+6+8ohnRh1Na1OKM6nYAKhFQpSH3Oh5gxr:6qXpy05Q0N1rsYSZ6BoXh1kkypSH3Ohs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2965822
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/Binaries/config
- SHA256 3a5ce61c4df0054c96751e7a3e079332f4c768534e52ded1c4eb2cd29112f72b
- MD5 2c8c54e91ac07aeb066396337620d1c9
- SHA1 7d6f95444d9c5841e4e62e4d46d2db99c83fc283
- SHA512 2930042a64167b27db5282c5220dd6c50233f8bc31696290e5f138d650ea53c6dba3cf11e2a66c04ab346bb09396ace2c6641993df2398292e9fce1d9f1baee7
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Binaries/whysosad
- SHA256 a9e9175b9c944ef18251a47d099e11ce8de005cba971c4313fc2d30267dd9be3
- MD5 b3ba028897339618faa23889839a579a
- SHA1 f074ab28f6a3e0cbf140bf04b83f3a3b60c866e2
- SHA512 85a52d1af1163d88620f04375577028acb07ee7914219ce66f2869f7451ae6b4e574a1c1910fe693068d0545bced28448a2ce52fffb43627682d9100fca44431
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Digitallity.cs
- SHA256 d469c1f2bffbe829a512985d7ebd9a6c3c046e86ce40e085951ce8dea554e1a5
- MD5 19edaf1ded0e2d0caed5777886e50864
- SHA1 7a02b0ecbf200fb1344990a734c127eaca68c59c
- SHA512 b9c83ee4ba459ff003267b4049970f5039b37cc2137e2aa5c08ebc1ad2cf26a528bbb278c90a6fff8f989f752f819c882e5517de8a4ad00a6ae1b9b1e49c47b0
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Program.cs
- SHA256 b8b4e6b631cb1aac7f20c3a9f0c4f1869096756a9a30159504b62804bfa14ac6
- MD5 fd4749e21c4ff9db9fa7ec5505aac83e
- SHA1 1ec11f0c7704c738dbf25c12e8a0a0093acde36f
- SHA512 e8c69f6b71d1e82623d147a77d15327b93ae45820082220ba06487820bb12cfffb97ae9af75c7e4d59c049832e0dcdcf7fce1cd55af89799f84f40fe24bb99dd
- SSDEEP 192:CaS0ztOu1JSKM1DC+KCqbVNS+SgG2KJKimZ9r9qqlJ6nykFwwj+wdyb:CaSkQ1Deb2+Sg8Mnl1
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/Properties/AssemblyInfo.cs
- SHA256 cfde1a4a385687b2ab47b929438122d01d7946b227caaafb403027430d1abc99
- MD5 cff9a8b9c9220fa15366697cf6601bed
- SHA1 2c39b593f2d9132197d458f9c97df6932c398d77
- SHA512 344e95b18a8f278fbff110811054a18e0fa4bdd3d60e86e3a345ac53bcbc57d15e659bfa2577b331d16cac7155337a3af00b4abd86c7d180376c367a1cec62a8
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Properties/Resources.Designer.cs
- SHA256 7aba223f119c8e4526831561c70d9ea7dd5260027f4e74fcba01392756619caf
- MD5 ceb385ce0911f282181e5d6405d17cd8
- SHA1 f7cafcd051d60de46138b39ecc637f2b3d559630
- SHA512 68552c19c59a13dae3e4095b4ae629d1c470ee1c1a05228454a86caa1dd4732ae96dc18c71eb63182c6bec7d5632b0a3f8db450a798301a90d0a938169c955c4
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Properties/Resources.resx
- SHA256 4e124f5a7694ffe813c60601b1b73c53e47536b1f1c0e798d4d55bfc2ca3774f
- MD5 c07716633f086d91759ae32a18996a1a
- SHA1 bf3383c20acf6e64ce49f120938456161e5f6cb9
- SHA512 c6ad0ec603ff69d2d1b787db9426f29d44ea1ba45cf1d2b7ec41cc2bd6d5c93af8d2299139cc1c5d10d56718f36daa37d544f8d5411fad91a72efc2e70454cdf
- SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFE3qxdRMvDTursrbLAy202W:Zf+tLPfYnLvFVOiFQaUR6
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/Properties/Settings.Designer.cs
- SHA256 b81e21ae04d3ec03608c9d61cd7325ee8c60d6db0c1de118957166ce0f450c9a
- MD5 417a864adb377f3a376734174f4fb99c
- SHA1 5953a708f11418f28aa7b1682075816d9c56788e
- SHA512 8c5fd2f309234f513cc70121d6ffb722de22555a886fbc6c6180bd7fd9ab72f5a25fa31bdc54f021d4d11e98fd5bbdb479da02afa67f13877ef80bd1be665f89
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/Properties/Settings.settings
- SHA256 baba99193fc1787141063b135424b476ff4151beb833883fcb594631f17c0147
- MD5 29a2bb6bd6f85ff04804c473e895de92
- SHA1 48d8aedc9ac54affd627fd9737a0af3ba713f6e4
- SHA512 e2126226fde15a2cbf850824ae9bd2a04910aed905d3f6df366c629890f4ce07404c9fcf30bd41c61c73fb589ff254b8ab328bbddced7640e734098e542bdce2
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/TOKEN STEALER CREATOR.csproj
- SHA256 cc9deec58c717cfa079da9ff97ac85972279e1fc6d6df48062789602d6bcb1fd
- MD5 53002a3abbfb561ad28e9bbe1e9dc14c
- SHA1 d6eee9a5aed55a67d16880a37dae25b18d3804b0
- SHA512 bd078bbd6514c972236b042a146fcbd57e20ad27032cef37285bf3d43d238ee602778cacbd0e000222958941b4812ff0c1298fcdebcb1f1991e5e4252772ca89
- SSDEEP 96:UYPnpjWmrecFb9qBx5+SxatuTA0xHHNws2ohjN5p:U9mektuLt/
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/TSC.sln
- SHA256 dc3b95d8776a27853b39410280b101dd4a0932fdb4eb7d375fdb34ec94b52d01
- MD5 c4820f1aafbcfbe1ba68fd23d7b19e16
- SHA1 8d315ac737a3cb69c23de82135ffb82fe4c3333c
- SHA512 a3980d9b0c399364d54c2ad3069e4d81f7d8ae3f7e02f8ce244b464959697aef793bf20dd944271a1e2490a84c20262e00f45a97407837bf14a578d40807ef37
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/frmMain.cs
- SHA256 8fb6146fee4ac798c543d6c375e3f63fd2b2786df1e11e20b4e2164e6fa96926
- MD5 cc6cb5103e644ec7b8dc9424463c2bdd
- SHA1 98d0972c281f3a3afc9483b7e9007734b89a5526
- SHA512 8efde3770236f62f9a7d39379809c6f8cb55a4fb93afd843b4cd15818e3d21e0424a5deedde3d24ef3eddc21dfb39bd976290521496491f7ad37b4d785bce721
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/o.crproj
- SHA256 c27d408f05172a229ff2ee822f1d922e086c212c3c89147521880f5fd4f433ee
- MD5 db166385e31c36535a4ef0da473b100b
- SHA1 c0879f453e4a04c3a5719b9ceb017156916084aa
- SHA512 a85fb1c3b3d8faed060269b806795d93205e24c662fbd4f3b54df675a6ba5889762105cb231b7bd6d762aaadb79f61928b3ca11c2ac36552213788ee81ff4d2a
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/obf/CLI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0b997165e348b17658bef1e869881c37c79c2a9bb26e132ac4141eefd5912652
- MD5 a6f83da2bfe041d92ff79b9c238ed72e
- SHA1 ac12c6e8973f0f64d1395523fdcfcd0d73856128
- SHA512 9ce5c2825848d360a07c9555bd940ceaf9c598dbf55f99fa783bbc47ca55dc375f562f29dc94e767ccd0f94120e37be90ad055ea22d353c283b0d3992df36e84
- SSDEEP 384:AtQiJWE1r0K0vYzZBgB1P5AkWFq7UQweltaJVuTlVKMwW7nj8VtDVth7WAl9MWod:biJWE1QzvYz/K1yXqYQ8VuAwbfVogxq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35994
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\Confuser.CLI\obj\Debug\Confuser.CLI.pdb
mscoree
_CorExeMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/Confuser.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4742104d8e47541ed998d22321717d288cd62682b56f56f4a69dc9bd99c9a6fb
- MD5 6f3e120baa644b4dc085a3dd3e183bcf
- SHA1 3f7dbdd082447910be5b31cc80ca5cb64f6339c7
- SHA512 b42cc08f9e32f0e5ac760bc0af517d2b0e7bf469421faead3d33e7e07d24d538046ea912badc196f83badb5b1dc07b4f0141b8a09723dedf7c16628075963812
- SSDEEP 3072:GZ9cy/5Jxj5XhlgUmSae1DxMRqXYjKO02cDTi+P1sR+Fna1R1RjYdfc:GZ9cyhJ95XhlgUmSaevwj1pcDH/uL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
196566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\Confuser.Core\obj\Debug\Confuser.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
184KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/Confuser.DynCipher.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cdad0a76f0d3f3e73fcdc6e5e6d98b0e88adcc2353c54344375b80197a86fcf6
- MD5 6ebc90e77623826e71ded623a296660b
- SHA1 4fa7b0dc7582e03a7af6f41cba70b41f3aa5df15
- SHA512 a40dea9f56ce29c6d7c3022d6b09b164dfbc2c294b5ebf7869504cf9010d2dc844a371c6d753afe8851b1eb82e7373736bd68a1430a826ded3b74ca3628ccab2
- SSDEEP 1536:yV4R9J9YnzpSx6dZV0c+NQJOwEhy8bb30aatJILhopNfmxr:yLnzpSx4ZV0c+NQJOwEhy8bb30rJuhoI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
54826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\Confuser.DynCipher\obj\Debug\Confuser.DynCipher.pdb
mscoree
_CorDllMain
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/Confuser.Protections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a5b10ee104e225fbcdfa9f8024701674d9a4556f4e59b90a90a972724ba15bb9
- MD5 a23e80a09e14a6c1ffa3c89cd7af7229
- SHA1 b1d45de9673e85b255096ec54e513a06212e4f15
- SHA512 0ba96fce7702829d44e7da9b9df3da0b0655098f719c0c25f683f7760ab4b819d079a2fff04fdb7cd5d8dfb7a571689b070a2a5358d9eee930a56c4c9605db44
- SSDEEP 6144:xAF9fU+KCm9QQmNBCrCmnTH3/JopinC5:xS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
215294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\Confuser.Protections\obj\Debug\Confuser.Protections.pdb
mscoree
_CorDllMain
Name
.text
Size
202KB
Virtual Size
202KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/Confuser.Renamer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ce9a9f15724b17da414c4aad7b7bfbba0fd1b80e3d0b8452551d5f79fd32b50
- MD5 e1656b7bfd3b7c9634f72c4f9085d226
- SHA1 46977837049a8009e18f096d2531ae2fed02ab42
- SHA512 f8c4aa1cbfb9bb78eaa35608815079216f88c7d74185112d76e0125946cf39d32ff7cd60796223764daca624b03d79febd90ac342dfc315579a1d57eea5d3687
- SSDEEP 3072:89nS3lQOaZ1rk8g6t8ZSv05Wa59XVGcxnLa3+qnOw9n/La9pwtgSfHxE1thSv3Vk:89SijrhZLg1r12BOw9n/zJvNjL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
323262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\Confuser.Renamer\obj\Debug\Confuser.Renamer.pdb
mscoree
_CorDllMain
Name
.text
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/Confuser.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c8bcbe8c706659824ed001caf0be23b8470a99c0391a23c419884ad93df3cce0
- MD5 42e45fa8bb26246ed3b3c2760e782912
- SHA1 fa49baf5f55cc5af7eed27b9547305780a7e4ddc
- SHA512 f89c328bff75a25a636d0567f9dd0df00494c3156b24fe029677368a349367bea9b3bd0571a79eae94112e694161c1658fc8e8e25076a8b9cb7c4e539944fd21
- SSDEEP 1536:E/XNRvuA5rTGZcIDEG3mmmmH/flJDnJod:YXDZYSGfLrJQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55930
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\Confuser.Runtime\obj\Release\Confuser.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/Teen.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 68eac14ca256f9871cc85ffc77c86b1d6378e6c900dff34f8b697be07b77446a
- MD5 fb9d14387b89b30606d094ae8cd93ea0
- SHA1 8f21ac1b24fe1072a9d9ad17eabc738bac23ef58
- SHA512 17e9af55a1967884645e5b30abed374b51c28e173160e369b422ef385a1de9bdb76ef38c740e905629932481421d213ac90589d1bc1c1901c312c3271c75a63e
- SSDEEP 384:6bcg3oHfkx4rxym37Bg4X0HuViEIXPdzJQKDckw6NhU0Pe4oannzXgvijJFWMHJs:lLSDDzgvijTlHJxKbBCxPULcBVDDQ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\users\azez\documents\visual studio 2013\Projects\Teen\Teen\obj\Debug\Teen.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/obf/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d8fc78217493febe82670c5a93feb85ab86fc6a0387abcb6e9165e0c0bb97000
- MD5 e61bad0331819ed63ca3b0d537f7e1a1
- SHA1 30c2b5c5e0a1564b88349fe952abdaf19f500c7d
- SHA512 fba44931b1af1f23bb0bf011b73378a1a76cacecf53e6d48de5e027742961f5e76add9d5a11410a203b8ec6026cfaacab0dbd5f1bb91f58bb3447dacf6a24661
- SSDEEP 12288:sUHb3PIKxNNhFNxxq6iNq3JaxOCDmuGnjlHesWnuRyKh0ZUvz/sPv7fIFZ:lKzkuWhHDWKMA/sPv7fI/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1156558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\buett\Documents\repo\ConfuserEx-Mod-By-Bed\dnlib\src\obj\Debug\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/packages.config
- SHA256 84f45368f51d9d49dad9fa19c8c44793ca501c4f1a1603de83bb6859b502d3f8
- MD5 27ac26602120e4a7a769ad6ebdd2979f
- SHA1 3d10b93ce61ed91ef400e67e77a7afd0c92c669d
- SHA512 7c5056d1ca0e486357cc8302d941d0d5b00ab7db942a69b9cf454ab513094f99642e236202634c843dbfd8f147ae01044436a44ce52200c850200797a05e1e95
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/.signature.p7s
- SHA256 517116ca9bb57682da5460ce0bc3ae6bb35d6b0b2a6b70e6e18aabb409b05992
- MD5 1caf0e5ae358804c975d33c8381e7506
- SHA1 74f5e5e0191652de3b36c0b3288d45492b10c8dd
- SHA512 3605ea4aa96ebfdfde63ef25d7718a0d23090d4a4d2a1466ab440805b2a48dda206ecd181379500ee780f0d69a63951055c80d4efc1a7d331319dfcc1b7af04e
- SSDEEP 192:tdc2S7x0KDWpHhXZCVzV07RrSscGDH0JOqsmVgz28WhBqMl:v6vDGGVphscGoJN77hhRl
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/System.IO.Compression.ZipFile.4.3.0.nupkg
- SHA256 59097e2605acf8669131e89a8531546eb8655c81daa737294c55db46f02dbefb
- MD5 8b83753e6a992e1b798e74b27cd71592
- SHA1 54cbe7d35abc806ef2faa5e5b8f9be09975fc673
- SHA512 1860634672767f818f0192ec2b2750693f0d39390f3b7d400cc6fd4f6e74a5cbed27bf49e5980ec85ff3e161c30f6190f700e339a1040c1699b87eb4aa7b6792
- SSDEEP 3072:mx6A4vAKvsXypL1GqMvAKvnTxu/M0okSMKGARY95xGogV:mU3vAKv1pL1G7vAKvnTc/KG0Y9pq
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ThirdPartyNotices.txt
- SHA256 fd880d29a522f238c178452b38cbf196bb5c0dab7ebfdc590b02b8e5019ebc71
- MD5 f568e5b41f007b34c83f08e1e6954989
- SHA1 e2063e65f86fb5f45d275e1ab2ae104050aff7cd
- SHA512 b53e7afce0abcb1363c0c0e2c0a80a0f25c76ec96f8c738c6e8be0b333a3a0a02c4b78c6c9b2fd9b6cc4c87a1abdf50cd671cfe8b2c452e5472c366fba607a23
- MD5 SHA1 SHA512
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/dotnet_library_license.txt
- SHA256 b7d43d08f59637129c482c63dcd4811077101ac41cc763b3b58490137f741977
- MD5 af9a0b9f4274a6ca6b6df534ed30b330
- SHA1 57f53111009c1ca36daecdf95132adbb3e9adb51
- SHA512 127cae8bd035bd9203738603135ca2643494b945e4964ec5e93e76db22258e96fb2147c78d56cc2034e46a60a9071c6798aa59936cc7336e3f90b49ff5252253
- SSDEEP 192:udCH5oCHeQbXSjBBvUgS1V+eZlVix6s4S6bQGDwqBTF5rhmq:BHLHeQbXcBv2TlVix19HswqBTF5rYq
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/net46/System.IO.Compression.ZipFile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
- MD5 dcda916372128f13ada8b07026c1b3e7
- SHA1 99d6c187de8510206a93d2eed9c65e65e0c86e72
- SHA512 d66de5d61cf7090ce2e11ca8064723a44c2fdbd7ed937f1cf4198ebe13083037941b816ad9022d332bbb853666785600fa8b1faca94c498d2f82de73fe1e42f9
- SSDEEP 384:dK8Y54xRiW3mWeW+mWE3rq0GftpBj52ERHRN7dldBopPI:dKfemqiuEBHoa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 23, 2024
PE Signature issue
Digest
14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
12806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.Compression.ZipFile/net46\System.IO.Compression.ZipFile.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/lib/netstandard1.3/System.IO.Compression.ZipFile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db7cb3cf25d563e85a287a77d0c9addf6dbc1907475330a173f4cccc1ca0e6ed
- MD5 65306815825ea8652d0ee2163d123d14
- SHA1 e8eaee6e9ae5fcdbd19b056856ba0d8424243e28
- SHA512 cd649101439099ce741d4c1a1334ce8bd9283d6531585047b64138b533e742808d1097e9419a3936e4939e1d4193488e0451291f4d56d70931e2d87a04239646
- SSDEEP 384:Our1AxpitMy7y4eCgW3mWoQ7q0GftpBj3zDvERHRN7lX1l78oWCmtPa:xr183CziprEBRzek
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
07:f0:f7:17:12:fb:26:4b:0a:0a:53:77:fb:fe:b3:98:25:d7:61:73:e0:aa:e6:b0:a3:79:a7:f1:00:d5:27:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 23, 2024
PE Signature issue
Digest
8a:04:22:59:8f:94:d8:af:bd:b6:23:d5:0c:d1:92:c7:5d:40:b7:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
18470
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin\obj\AnyOS.AnyCPU.Release\System.IO.Compression.ZipFile\System.IO.Compression.ZipFile.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/net46/System.IO.Compression.ZipFile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
- MD5 dcda916372128f13ada8b07026c1b3e7
- SHA1 99d6c187de8510206a93d2eed9c65e65e0c86e72
- SHA512 d66de5d61cf7090ce2e11ca8064723a44c2fdbd7ed937f1cf4198ebe13083037941b816ad9022d332bbb853666785600fa8b1faca94c498d2f82de73fe1e42f9
- SSDEEP 384:dK8Y54xRiW3mWeW+mWE3rq0GftpBj52ERHRN7dldBopPI:dKfemqiuEBHoa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 23, 2024
PE Signature issue
Digest
14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 5, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2016 - Nov 2, 2017
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
12806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.Compression.ZipFile/net46\System.IO.Compression.ZipFile.pdb
mscoree
_CorDllMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/System.IO.Compression.ZipFile.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21abf0c8a5c93fbc1b662e6a4ddb825fa9b3c5cae83c7f6913f5c1e89cee8906
- MD5 05678aa09e0cdd844db58484d633d49a
- SHA1 fac955a640f73930fd2228489079e4acda64d944
- SHA512 451e7eadcf7993fa9ecb04c6810cbec171f902c1c52b25d8244068452fe718d45d5911e09beeb9ae64d9cf20593b18e0a8a3069c1679b441a4b1119df2b7574e
- SSDEEP 384:U6CYDzoEWPmWCMIA0GftpBj9VoERHRN7YlraGOl:Lc5qiBoEBCul
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
01:6c:de:6d:ce:ca:f3:95:a4:01:5d:86:3c:9b:d9:13:60:ee:9a:91:0c:5d:2e:3f:80:99:b1:f8:69:d3:d1:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 23, 2024
PE Signature issue
Digest
f3:4b:c7:12:0d:f5:22:85:f3:cc:a9:ae:ca:e9:37:69:a4:3c:d9:76
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 12, 2016
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:9c:ee:fe:14:55:a9:5d:35:50:00:00:00:00:00:9c
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 30, 2016 - Jun 30, 2017
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2015 - Sep 4, 2016
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 28, 2015 - Jan 28, 2017
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
11638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\A\_work\21\s\bin\obj\ref\System.IO.Compression.ZipFile\4.0.1.0\System.IO.Compression.ZipFile.pdb
mscoree
_CorDllMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/System.IO.Compression.ZipFile.xml
- SHA256 2f0913880c2946f74b46468b269a4d28de39c7b0a4981261f5b2589253e45c05
- MD5 264e5cb283f81fe21b9f74ba3e89ac6d
- SHA1 04bc3af0520f9478f4881fddc938db01cbd1d761
- SHA512 34d6d8b019c1aa377072e62a491578651ff1a84d41a9a0c5c2b58d0a2cb5c4248b3618f9586257653322d15c742ba6a00029149d84db4204c496ceede69eebeb
- SSDEEP 384:RPVWSfYOKbWSfN7KfWSfaqFacuMFaf8wLw6w2NTlBNtVPoP9b+:R++uvn
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/de/System.IO.Compression.ZipFile.xml
- SHA256 aec0fb3feefa369581bc6056673b955648d7005ea256777429c24c4540690d97
- MD5 30efbfcad69675f4f72b6e4a25340d85
- SHA1 90f9da757806ef57f993cdb992a750d3af50eb30
- SHA512 91f3023db1982e93f969b2c6a2440244d3eb225199bf2df5fac1c4b82d89633e749c9c0c824e96a800ab1584083bcc979513791dcbab89d9325b1264359b7fe5
- SSDEEP 384:R5o/uKAzuKf+kG5uyG64Ty0WxQhOsmgBDgvmEd6:R1yLJurAxOOsmGEmEd6
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/es/System.IO.Compression.ZipFile.xml
- SHA256 20c13a0496bbd5a6002fdb114bdf6a8bc20557ca47f6441bc2c58284ea5ab0df
- MD5 af316261f132b8dd81b08a6a8fbf9d68
- SHA1 3405649f5f138cadbc3e27733e3487358ebff091
- SHA512 3a095287587e8712a63aada138cc5bdce6c96e20120d332a1cb6ecfb291d0f7d3660007312988ac9be26344d0fd998df7c90fb2abee9cf6b1c203a4062fa1816
- SSDEEP 384:RIZZ75ZZKJZZtzkhbtu+hb2537X7OI7FkRIRaRfYc3AJ7:RIpo1khhu+hg377Zke0VYyS
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/fr/System.IO.Compression.ZipFile.xml
- SHA256 b674f3d14c145c8e14098f729f34e51089796e5f6d326fa3835e41e4cce5d0b9
- MD5 942a906093e3fdd433a0f6722432d099
- SHA1 719bea7fec452c5542e238a79991865d436a7aea
- SHA512 de6f860f65ba73263dd30286a80ba9c9fe094e5b896aee640edb8d70bbfa0ca5216f4cf19c15da5cd706b90918b5662f3d9afbb11272a4469850545e6f616328
- SSDEEP 192:R9sva8cVAyvavcZ4AcrvgSZI4fJ8/ZI4Su5G5ZV5BU5ZIF6ZuWvBKhEZnkF3cC1l:R9F8ZvQ1uJzQ5o5FYvBQEZkVX1XbXaXS
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/it/System.IO.Compression.ZipFile.xml
- SHA256 a66f8745ce976d7ef446a2d7311cdb25dfd98cb3c8971b947d0c19511b0c1311
- MD5 755a42d841c47465976e2f86b0e6dec8
- SHA1 2b2bcca1e58caac589025cc87578d68d7ed516b5
- SHA512 f8a5204f3519e761b1753784f0066be033dec936062ad29076556a56aacdbf54a3b3ce3e03021d70571c308d901ac9e3127fcfb7b414623df70d317eba1e2418
- SSDEEP 768:RSOuecPkPFJe9PkPvEPkPo+ru99PkPo+rD299PkPo+re9:KuGumuNquNPWuNS9
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/ja/System.IO.Compression.ZipFile.xml
- SHA256 acb6df615c2c188c38a94e2061690bab3c5e27e5c1d85d51562146c1707c5cc2
- MD5 5b4797b3637d40dd618e51e0b65f6a90
- SHA1 335922722f19bfbdcaa79feccd94f7d324339db3
- SHA512 803da5b7187a11496ef2af25a10fdbc42790144fd2a52ea94a448aef5a7e3a265abc0c4cee34133e93bc12b23bf13d3ac91ee510d8813457587ce6b9872e4958
- SSDEEP 192:RfvaAtavaUt/G/vg2ZI4fNGDZI4SzD5Z1xGo5Zoq6NJN+VjJXtiz3ppVzrSU+K:Ra843ZuNt92TNOlI77VPSlK
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/ko/System.IO.Compression.ZipFile.xml
- SHA256 75c294bc942d085c31be4549d42ed50dda816e04982e7ff210d7ba955354b2d0
- MD5 e4f30bdcefd1d84bd184974ef9d3b336
- SHA1 f6d0a7105e0123c0d9014568e34b00ab80bd5c84
- SHA512 6aec594e28515067a3fc3dfacf5eea53fa9c8d7c8adf77722326526d3a57d3dba7d3eddbaf8412dcb1d1cd62585396853957ed2414e828371cbb5fd09726cb5c
- SSDEEP 192:RKHFu1va2u2Bhva/u2BSvgdBZI4fWKZI4S2ndl5ZsY+5ZvC61W/zj5o2LzHjnGTM:Relm+ld+uwyiSzj5VHj4LLTOz0qaLY1
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/ru/System.IO.Compression.ZipFile.xml
- SHA256 de535b934fadf6e32a9192b081a8127b8cfde33f5a112ede774a5d3e0cd85cd9
- MD5 f77e3fee34a33a3aabcc0546a88dfd4f
- SHA1 255dbbb65a73dc7f46430689be42d3cb15c46da0
- SHA512 e3b2f4416d117ced75c457122c93a9113c038f2aa6b5b59ef450eb50eb388a591eaadfd47af6c24d55a80f1d831d869c2d69f25a8b69ee116106b783bc7c3815
- SSDEEP 192:RQv8vaQSyq1vaUXSyqXg6vg2ZI4fmmgGZI4Sj5ZAWgd5ZA6cCQfqNdZKKbpn/xnw:R0QfqgUXfqXgDZummgJ6WgkfqRxasvm
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/zh-hans/System.IO.Compression.ZipFile.xml
- SHA256 eb576f601ab5c1cbb6076a2d1633b9a81513270aea87a07921e3cdd5761803e6
- MD5 b76b2950e4a51a9de8ff8c2cd300bcf6
- SHA1 f4f03f58432f672bce50c304fdc70b3a0b385b17
- SHA512 1755c7b0f85f19756972c0f6e734cae56acbbc2b26d44df30e72f92ef540007a5634bb81da8e3f74ea0af82ab104b40bfb526ad9057316d4960ef6861d56bf67
- SSDEEP 192:RFxmZva8pxm0Cvaf4pxm0cFvgQY1ZI4fpYttZI4SPyn5ZRyuq5ZTyW6T8koKg/ov:R98RmYu6AGOkoKg/oMoK7ofos
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/packages/System.IO.Compression.ZipFile.4.3.0/ref/netstandard1.3/zh-hant/System.IO.Compression.ZipFile.xml
- SHA256 18229e29c02dfa68f2a91d6a87d81e2fbbe1a9f851f5f66eb594c52a6941be85
- MD5 5f31bebc7ac7527986b22d77719af18e
- SHA1 3693c30f86f4ed6332a4a693f33f884f26c60800
- SHA512 67f176452c377353f3252b90ce1731142b0641cd8e8801b1b4db6553977715387a0718896a84f4560f9c5ad7a70443631d55e3bbcf700f193e2867ee51fce5e9
- SSDEEP 192:R1vacTvaFmhvgfZI4fO5ZI4Sw5ZZW5Z4e6jpugIJCgIR:Rgc+FTauBkj
- MD5 SHA1 SHA512 SSDEEP
ItroublveTSC-master/bin/vCk_resource.cs
- SHA256 4b06dfbafa818dea637972eb873d536c12c2d9ae9cac0a374b6669952d4ac635
- MD5 3e89eede89fd7b2587b0b1cde57096c8
- SHA1 f9b47d787a238a699e92f1d0b7ee7ce468b7c464
- SHA512 c24010b3a37ab632d9c3d12da82a39eb7465e8cc3ac80d5b7915908d15acd85bb57d9fce56e3baa8abab2e0e0c0f956e3a847ef40d65921bbf60a302b486974d
- MD5 SHA1 SHA512